last executing test programs:

6m26.313205598s ago: executing program 32 (id=381):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioprio_set$pid(0x2, 0x0, 0x4005c78255ef3767)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0})

6m15.966168753s ago: executing program 33 (id=423):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x4d6, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

5m55.589261076s ago: executing program 34 (id=507):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x6}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000)
recvfrom(r1, 0x0, 0x0, 0x102, 0x0, 0x0)

5m17.997844494s ago: executing program 0 (id=725):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1)
pwritev2(r0, &(0x7f0000003600)=[{&(0x7f0000000140)="2aaa448b8c46a1265b7e0e47f83bf88ebe16441cdb6a1521a017d1b4ee375565953bf7480764bf6f6fad72b9d2cddd08", 0x30}, {&(0x7f0000000180)="a60b173945c949cd150a261e046a1459135488efc5872d5ba45a2a8c9f52fa7ab5fb957e1b2cfa8c6cc61dbe2e6e1abe88a5f71bb65730eb9fda2cdf3ccfb6eb59566fce79bb195357cbcfba1bd0d2bc62cb2f410336fe3b80944bf8effde8a87d30a3f6", 0x64}], 0x2, 0x8, 0x4, 0x12)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20)
write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7)

5m15.609626848s ago: executing program 0 (id=740):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000})
r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0})
io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

5m14.321848663s ago: executing program 0 (id=747):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0)
recvmmsg$unix(r1, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4086, 0xff6}, {&(0x7f0000000340)=""/106, 0x6a}], 0x2}}], 0x1, 0x0, 0x0)

5m14.106416743s ago: executing program 0 (id=749):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x7}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844)
sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14)

5m13.302020865s ago: executing program 0 (id=752):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

5m12.677998071s ago: executing program 35 (id=752):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

5m7.480492297s ago: executing program 6 (id=777):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xffff)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}})

5m7.043039337s ago: executing program 6 (id=780):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x0, 0x6, 0x7, 0xd, 0x56be]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6}, 0xfffffffd, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x7], [0xfffffffd, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)

5m6.614904695s ago: executing program 6 (id=783):
getpid()
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x864, 0xa, 0x93, 0x369e}]}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000100), 0x6)

5m6.306031963s ago: executing program 6 (id=785):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]})
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000002c0)='.\x00', 0x132a020, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x0, 0x0)

5m5.654826041s ago: executing program 6 (id=786):
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980903, 0x18, {0x400d, 0x1, 0xc}})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

5m4.625075134s ago: executing program 6 (id=789):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x6011, r0, 0x0)
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)

5m4.009323479s ago: executing program 36 (id=789):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x6011, r0, 0x0)
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)

5m2.208722561s ago: executing program 1 (id=803):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000540)='W', 0x1}], 0x2}}], 0x1, 0x0)

5m1.958119563s ago: executing program 1 (id=806):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800)
io_setup(0x1, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
signalfd4(r0, &(0x7f0000000000), 0x8, 0x0)

5m1.534128471s ago: executing program 1 (id=809):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x106)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x189800, 0x9b)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000880)='./file1\x00', 0x16000f57)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000002c0))

5m1.050148195s ago: executing program 1 (id=812):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20a0039, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
acct(&(0x7f0000000140)='./file0/file2\x00')

5m0.808642776s ago: executing program 1 (id=815):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nomblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_io_uring_setup(0x1feb, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x1d5}, 0x0, 0x0)

5m0.273861874s ago: executing program 1 (id=818):
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d0000", 0xf}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

4m59.520879652s ago: executing program 37 (id=818):
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d0000", 0xf}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2m21.280809397s ago: executing program 2 (id=1731):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@multicast, @broadcast, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@generic={0x88f7}}}}, 0x12)

2m20.822285868s ago: executing program 2 (id=1733):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000073"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

2m20.365844959s ago: executing program 2 (id=1735):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0, 0x8}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)

2m19.252786149s ago: executing program 2 (id=1740):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')

2m18.977142604s ago: executing program 2 (id=1742):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000})
r0 = syz_io_uring_setup(0x14ef, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0})
io_uring_enter(r0, 0x13ef, 0x4, 0x8, 0x0, 0x0)

2m18.138113119s ago: executing program 2 (id=1748):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @random="049b9c185240", @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "cd8a60e6c2b31ecb"}}}}, 0x0)

2m17.769189832s ago: executing program 38 (id=1748):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @random="049b9c185240", @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "cd8a60e6c2b31ecb"}}}}, 0x0)

40.87955772s ago: executing program 8 (id=2376):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x80, {[@fastopen={0x1e, 0x4, ' U'}]}}}}}}}}, 0x0)

40.668727029s ago: executing program 8 (id=2377):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

40.350869218s ago: executing program 8 (id=2380):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4}, 0xc)

39.921976366s ago: executing program 8 (id=2384):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

38.866236231s ago: executing program 8 (id=2389):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffffff, 0x7}]}}}}}}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000000, 0xfbc}, @nop, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1, 0x8a}, @exp_fastopen={0xfe, 0x13, 0xf989, "444e38caa511b9096239c28c183b3f"}, @exp_fastopen={0xfe, 0x9, 0xf989, "00fcc69177"}, @md5sig={0x13, 0x12, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0)

37.880660989s ago: executing program 8 (id=2396):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x0, 0x1120c60b, 0x0, 0x0, 0x1, 0xa15, 0x0, 0x0, 0x4, 0x56f00000}}, 0x50)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

37.434595549s ago: executing program 39 (id=2396):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x0, 0x1120c60b, 0x0, 0x0, 0x1, 0xa15, 0x0, 0x0, 0x4, 0x56f00000}}, 0x50)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

22.558806364s ago: executing program 9 (id=2476):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f0000000140)=""/127, 0x7f)

20.730123809s ago: executing program 9 (id=2479):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xe7, @local, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

20.407655948s ago: executing program 9 (id=2480):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x6, @rand_addr=' \x01\x00', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x4000001)
shutdown(r0, 0x1)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r2, 0x3}, 0x8)

20.145052672s ago: executing program 9 (id=2481):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrKpupOkcdvgQ1UQfSqoFZ+ENSaTEDLJLMmk3YTFpvgqCCJa8EWffBH8AwTpi+8iFOq7qChSs/qg0PbKnbnTTWZnkhRncpfk94Oz9557Zu73ncnOybkzN/cGcGE9GRHTETEWEc9ExFSxPS1K7HdK/rh7B3eX8pJElr30dhJJsa27r8vF8lrxtImI+MZXI76bPBh3e3dvfbHRqG8V9ZnWRvJOlu3dWNtYXK2v1jfn5+eeW3h+4ebC7FD6WY2IF77815/88JdfeeG3n33lT7f+Pv29PK3/Ztmr0dOPYep0vdJ+LbrGI2JrFMFKMt7uYcfNknMBAOB4+Xz/wxHxyfb8fyrG2rM5AAAA4DzJvjAZ7yQRGQAAAHBupRExGUlaK873nSzOWL0WER+Nq2mjud36zEpzZ3M5b4uoRiVdWWvUZ2Oife5ANSpJXp8rzrHt1p/tqc9HxKMR8eOpK+16banZWC77ww8AAAC4IK71HP//eypNa7Wicb/k5AAAAIDhqZadAAAAADByjv8BAADg/Ktmfe7Q9aB09JkAAAAAI/C1F1/MS9a9//Xyy7s7682XbyzXt9drGztLtaXm1u3aarO52r5m38ZJ+2s0m7c/F5s7d2Za9e3WzPbu3q2N5s5m69bakVtgAwAAAGfo0U+88cckIvY/f6VdcpeKtkpENnb4weNlZAiMygc6p+cvo8sDOHuHf79fKTEP4OyZ0sPFVSk7AaB0J/0B0MCTd34//FwAAIDRuP6xwd//v71SamrAiBXf/yenugAIcK6MlZ0AUJrO93/vZR1lZwOcpcpxMwAHBXDupcP5/v+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSVbWGvXZiPhQRLw1Vbmc1+faz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3s8HLiX/mWovI+KVn7300zuLrdbWXL79n+9vb71ebH+2jE8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNO9g7tL97Isyw7uLp1l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjh56XRMTYEOLvvxYRj/WLn+RpRbXI4kj8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK0+/uavZwbGfy3i8fH+4083fpLvr0/8p07Zx+98c29vUFv2i4jr/ca/5GismdbG7Znt3b0baxuLq/XV+ub8/NxzC88v3FyYnVlZa9SLf/vG+NHHf/Pe/dq7D/T/6jHjb7v/A17/p0/Z/3ffvHPwkc5qz08mKvHzLJt+qv/P/7F88en+8fP/E58qfg/k7flrmL7+rb7xn/jVH54YlFve/+UB/Z/o6f/lnv5Pn7L/z3z9+38+5UMBgDOwvbu3vtho1LesHF6J6kORxsO7ks87S08jiSTylbeONC2Wn1hn5dXiPbbY6L7bhrTn3xUHR6NMvqTxCAAAGJ37k/7elqSchAAAAAAAAAAAAAAAAAAAAOACOvEyYIOa0oi4v+XbPzjmamS9MffL6SoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLH+FwAA//8tudaU")
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x10fff9, 0x10fff9)

19.102075375s ago: executing program 9 (id=2485):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x7ff, 0x0, 0x0, 'queue1\x00', 0x5})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

17.105640175s ago: executing program 9 (id=2496):
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2)
semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))

16.563480403s ago: executing program 40 (id=2496):
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2)
semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))

5.865569374s ago: executing program 5 (id=2553):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000d9728140b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000440)={0x40, 0x10, 0x3, "0e10e8"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20140f000000d1"], 0x0, 0x0, 0x0, 0x0, 0x0})

3.828687046s ago: executing program 4 (id=2563):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0)

3.695153268s ago: executing program 7 (id=2565):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0)
mlockall(0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

3.624638945s ago: executing program 5 (id=2566):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, {0xa, 0xa0, 0x9, 0x19, "8a7a7fcba97da07e8a8fc0e39436ff83236f924405ae382c63"}}, 0x25)
bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0)

3.386053516s ago: executing program 4 (id=2567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./bus\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x1213, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103242, 0x32)
ftruncate(r0, 0x6000000)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x0)

3.374112847s ago: executing program 3 (id=2568):
r0 = socket$inet6(0xa, 0x3, 0xff)
listen(r0, 0x20201f)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unshare(0x2040600)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @private1, 0x5}, 0x1c)

3.325752892s ago: executing program 5 (id=2569):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]})

3.129559309s ago: executing program 7 (id=2571):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
close(0x3)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
write$cgroup_devices(r0, 0x0, 0xffdd)

3.019988759s ago: executing program 3 (id=2572):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)

2.618266325s ago: executing program 7 (id=2573):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0xfb)

2.462712539s ago: executing program 3 (id=2574):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x92, &(0x7f0000000600)=ANY=[], 0x2, 0x150b, &(0x7f0000003180)="$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")
truncate(&(0x7f0000000340)='./file0/file0\x00', 0x20000)
chdir(&(0x7f0000000400)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x4)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

2.323573642s ago: executing program 7 (id=2575):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.201127852s ago: executing program 5 (id=2576):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = syz_io_uring_setup(0x80d, &(0x7f00000000c0)={0x0, 0x1614, 0x80, 0xfff7ffdf, 0x1f4}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r1, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="b4", 0x1}], 0x1, 0x2)

2.182979054s ago: executing program 4 (id=2577):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1.77889937s ago: executing program 7 (id=2578):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b00)={r0, &(0x7f0000000a00)="c1", &(0x7f0000000ac0)=""/43}, 0x20)

1.687468808s ago: executing program 5 (id=2579):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
fallocate(r0, 0x8, 0x0, 0x4000)

1.662344751s ago: executing program 3 (id=2580):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
shutdown(r0, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.33507489s ago: executing program 3 (id=2581):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
accept(r0, 0x0, 0x0)

1.33500077s ago: executing program 7 (id=2582):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
wait4(r0, 0x0, 0x2, 0x0)
ptrace$poke(0x4, r0, 0x0, 0x7f)

1.017117249s ago: executing program 5 (id=2583):
r0 = syz_io_uring_setup(0xea8, &(0x7f0000000480)={0x0, 0x32ba, 0x0, 0x0, 0x304}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x235c, 0x3, 0x0, 0x0)
syz_io_uring_complete(r1)
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)

754.272723ms ago: executing program 4 (id=2584):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
setrlimit(0x9, &(0x7f00000000c0)={0x4, 0x8})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

431.919701ms ago: executing program 4 (id=2585):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = dup3(r1, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})

372.869687ms ago: executing program 0 (id=2497):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[], 0x8b, 0x2cb, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000002c0)='./bus\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0)

31.038887ms ago: executing program 3 (id=2586):
r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d042308483901020301090252000100000000090440", @ANYRESOCT=0x0], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x200880, &(0x7f00000001c0)=ANY=[], 0x3, 0x1509, &(0x7f00000024c0)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

0s ago: executing program 4 (id=2587):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003fd000000ec0331"]}, 0x0)

kernel console output (not intermixed with test programs):

d solve the problem.
[  401.087106][T11307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.122957][T11307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.133690][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.176804][T11307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.363445][T11307] device hsr_slave_0 entered promiscuous mode
[  401.449032][T11307] device hsr_slave_1 entered promiscuous mode
[  401.476873][T11307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  401.491974][T11307] Cannot create hsr debugfs directory
[  401.498919][T11445] input: syz1 as /devices/virtual/input/input46
[  401.521507][T11448] Bluetooth: MGMT ver 1.22
[  402.061456][ T5348] kernel read not supported for file /input/event0 (pid: 5348 comm: kworker/1:14)
[  402.422234][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1797'.
[  402.452024][T11467] netlink: 'syz.7.1797': attribute type 7 has an invalid length.
[  402.483744][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1797'.
[  402.513777][T11467] netlink: 'syz.7.1797': attribute type 7 has an invalid length.
[  403.038712][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1803'.
[  403.432716][T11494] loop8: detected capacity change from 0 to 164
[  404.143615][T11307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  404.156700][T11307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  404.174449][T11307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  404.214707][T11307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  404.472657][T11307] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.504056][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  404.521900][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  404.546538][T11307] 8021q: adding VLAN 0 to HW filter on device team0
[  404.571389][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  404.594362][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  404.628202][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.635444][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.684055][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  404.718877][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  404.732089][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  404.751055][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.758300][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.797621][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  404.828772][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  404.885438][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  404.909855][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  404.970246][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  405.010476][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  405.050228][T11522] loop4: detected capacity change from 0 to 512
[  405.057421][T11522] EXT4-fs: Ignoring removed bh option
[  405.062543][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  405.092682][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  405.150209][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  405.207580][T11522] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  405.214406][T11307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  405.260992][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  405.279251][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  405.288448][T11522] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  405.302602][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  405.351353][T11522] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  405.428703][T11522] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006]
[  405.437116][T11522] System zones: 0-2, 18-18, 34-35
[  405.491075][T11522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  405.729960][T11517] loop9: detected capacity change from 0 to 32768
[  405.756556][T11517] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10
[  405.815707][ T7578] EXT4-fs (loop4): unmounting filesystem.
[  405.848260][T10264] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  406.070506][T10264] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  406.109678][T10264] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  406.158016][T10264] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  406.180784][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  406.205129][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  406.212944][T10264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.217182][ T4608] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10
[  406.240045][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1819'.
[  406.286517][T11536] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  406.291174][T11307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.459107][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  406.488796][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  406.560234][T10266] usb 8-1: USB disconnect, device number 14
[  406.617877][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  406.627574][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  406.665064][T11557] loop9: detected capacity change from 0 to 256
[  406.692105][T11307] device veth0_vlan entered promiscuous mode
[  406.704372][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  406.729140][T11557] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  406.763590][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  406.811403][T11557] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  406.831946][T11307] device veth1_vlan entered promiscuous mode
[  406.957579][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  406.977277][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  407.012476][T11307] device veth0_macvtap entered promiscuous mode
[  407.052803][T11307] device veth1_macvtap entered promiscuous mode
[  407.127736][T11564] loop9: detected capacity change from 0 to 128
[  407.194953][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.215255][T11564] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  407.237968][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.272078][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.282804][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.293073][T11564] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  407.293430][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.314155][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.325250][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.336117][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.349345][T11307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.363039][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.374182][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.394806][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.444990][T11564] syz.9.1824 (pid 11564) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  407.450253][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.494381][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.544637][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.576975][T11307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.648376][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  407.677001][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  407.713188][ T7471] EXT4-fs (loop9): unmounting filesystem.
[  407.719359][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  407.741623][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  407.781945][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  407.801008][T11569] loop7: detected capacity change from 0 to 4096
[  407.816416][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  407.881762][T11307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.923363][T11307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.957884][T11307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.019349][T11307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.356920][ T5305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.392258][ T5305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.460442][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  408.461038][T11579] loop9: detected capacity change from 0 to 256
[  408.522530][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.563298][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.627593][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  408.829762][T11592] loop7: detected capacity change from 0 to 128
[  408.965185][ T4629] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  409.443985][T11612] loop7: detected capacity change from 0 to 164
[  410.904234][ T4334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  411.150517][T11645] use of bytesused == 0 is deprecated and will be removed in the future,
[  411.223011][T11645] use the actual size instead.
[  411.268197][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  411.614577][T11660] loop9: detected capacity change from 0 to 128
[  411.658868][T11660] FAT-fs (loop9): Unrecognized mount option "dos_xfloºìÇàG>ppy" or missing value
[  411.674227][T11664] netlink: 1243 bytes leftover after parsing attributes in process `syz.3.1855'.
[  412.228551][ T4256] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  412.417932][ T4256] usb 8-1: Using ep0 maxpacket: 32
[  412.425016][ T4256] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  412.455023][ T4256] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.496651][ T4256] usb 8-1: config 0 descriptor??
[  412.521683][ T4256] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  412.557500][T10260] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  412.703120][T11688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3806821123 (243636551872 ns) > initial count (170280388736 ns). Using initial count to start timer.
[  412.758036][T10260] usb 4-1: Using ep0 maxpacket: 8
[  412.783303][T10260] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  412.813315][T10260] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  412.853896][T10260] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  412.910320][T10260] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  412.952279][T10260] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  412.987997][T10260] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  412.997217][T10260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.056349][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1863'.
[  413.131559][T11692] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1863'.
[  413.289957][T10260] usb 4-1: GET_CAPABILITIES returned 0
[  413.295547][T10260] usbtmc 4-1:16.0: can't read capabilities
[  413.366292][T11699] loop4: detected capacity change from 0 to 256
[  413.609538][T10260] usb 4-1: USB disconnect, device number 7
[  413.616791][T11680] usbtmc 4-1:16.0: usb_control_msg returned -71
[  413.746636][ T4256] gspca_vc032x: reg_w err -71
[  413.756136][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.772063][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.792372][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.797742][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.824087][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.844454][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.850878][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.858404][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.863750][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.894568][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.900345][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.905949][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.911927][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.917545][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.923661][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.929831][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.935286][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.941228][ T4256] gspca_vc032x: I2c Bus Busy Wait 00
[  413.946668][ T4256] gspca_vc032x: Unknown sensor...
[  413.962243][ T4256] vc032x: probe of 8-1:0.0 failed with error -22
[  413.993441][ T4256] usb 8-1: USB disconnect, device number 15
[  414.032969][T11704] netlink: 212892 bytes leftover after parsing attributes in process `syz.8.1866'.
[  414.172042][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'.
[  414.194472][T11711] netlink: 'syz.4.1867': attribute type 14 has an invalid length.
[  414.214974][T11711] netlink: 'syz.4.1867': attribute type 13 has an invalid length.
[  414.269680][T11711] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  414.279354][T11711] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  414.288973][T11711] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  414.298042][T11711] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  414.341001][T11711] device vxlan0 entered promiscuous mode
[  415.164986][T11732] netlink: 1243 bytes leftover after parsing attributes in process `syz.4.1878'.
[  415.589414][T11743] device syzkaller1 entered promiscuous mode
[  415.632788][T11743] syzkaller1: tun_chr_ioctl cmd 1074025677
[  415.644443][T11743] syzkaller1: Linktype set failed because interface is up
[  415.947144][T11755] loop8: detected capacity change from 0 to 8
[  415.972260][ T4608] Dev loop8: unable to read RDB block 8
[  415.989573][ T4608]  loop8: unable to read partition table
[  416.018199][ T4608] loop8: partition table beyond EOD, truncated
[  416.068577][T11755] Dev loop8: unable to read RDB block 8
[  416.107999][T11755]  loop8: unable to read partition table
[  416.122641][T11755] loop8: partition table beyond EOD, truncated
[  416.139730][T11755] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  416.511320][T10264] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  416.698127][T10264] usb 10-1: Using ep0 maxpacket: 8
[  416.708932][T10264] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  416.733224][T11779] netlink: 1243 bytes leftover after parsing attributes in process `syz.7.1893'.
[  416.751126][T10264] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.779786][T10264] usb 10-1: Product: syz
[  416.784127][T10264] usb 10-1: Manufacturer: syz
[  416.810128][T10264] usb 10-1: SerialNumber: syz
[  416.841891][T10264] usb 10-1: config 0 descriptor??
[  416.864508][T10264] gspca_main: se401-2.14.0 probing 047d:5003
[  417.001348][T11785] KVM: debugfs: duplicate directory 11785-4
[  417.256745][T10264] gspca_se401: Frame size: 0x2 bayer
[  417.262791][T10264] gspca_se401: Frame size: 0x127 bayer
[  417.293153][T10264] gspca_se401: Frame size: 256x0 bayer
[  417.313387][T10264] gspca_se401: Frame size: 0x0 1/16th janggu
[  417.404841][T11801] netlink: 'syz.3.1899': attribute type 14 has an invalid length.
[  417.424811][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'.
[  417.461230][T10264] input: se401 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input47
[  417.499438][T11801] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  417.508510][T11801] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  417.517263][T11801] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  417.526160][T11801] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  417.585542][T10264] usb 10-1: USB disconnect, device number 11
[  417.609699][T11801] netlink: 'syz.3.1899': attribute type 14 has an invalid length.
[  417.629696][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'.
[  417.908304][T11813] loop3: detected capacity change from 0 to 128
[  418.103665][T11813] syz.3.1902: attempt to access beyond end of device
[  418.103665][T11813] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  418.241074][T11823] syz.3.1902: attempt to access beyond end of device
[  418.241074][T11823] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128
[  418.813717][T11842] device syzkaller1 entered promiscuous mode
[  418.828138][ T4256] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[  418.850759][T11842] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  419.036543][ T4256] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  419.059505][ T4256] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  419.085250][ T4256] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  419.113066][ T4256] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.199002][ T4792] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  419.385806][ T4256] usb 10-1: usb_control_msg returned -32
[  419.393175][ T4256] usbtmc 10-1:16.0: can't read capabilities
[  419.398460][ T4792] usb 8-1: Using ep0 maxpacket: 8
[  419.417105][ T4792] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  419.442835][ T4792] usb 8-1: config 179 has no interface number 0
[  419.472056][ T4792] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  419.515593][ T4792] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  419.543738][ T4792] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  419.575064][ T4792] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  419.609839][ T4792] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  419.638458][ T4792] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  419.657586][ T4792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.698476][T11844] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  419.963182][ T4792] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input48
[  419.975722][ T5353] usb 10-1: USB disconnect, device number 12
[  420.179182][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.206630][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.478697][ T5353] usb 8-1: USB disconnect, device number 16
[  420.482550][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  420.493026][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  420.505535][T11882] loop4: detected capacity change from 0 to 128
[  420.613018][T11882] syz.4.1921: attempt to access beyond end of device
[  420.613018][T11882] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128
[  420.773200][T11882] syz.4.1921: attempt to access beyond end of device
[  420.773200][T11882] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128
[  420.784373][T11886] loop3: detected capacity change from 0 to 1024
[  420.832289][T11886] EXT4-fs: Ignoring removed nobh option
[  420.870755][T11886] EXT4-fs: inline encryption not supported
[  420.892770][T11886] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  420.924790][T11889] loop9: detected capacity change from 0 to 4096
[  420.976780][T11886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  421.072739][T11897] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  421.155048][T11886] overlayfs: conflicting lowerdir path
[  421.365618][T11905] KVM: debugfs: duplicate directory 11905-4
[  421.377450][T11307] EXT4-fs (loop3): unmounting filesystem.
[  421.448013][ T5353] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  421.650396][ T5353] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  421.673594][ T5353] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  421.735244][ T5353] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  421.792955][ T5353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.850499][T11900] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  422.129854][ T5353] usb 9-1: USB disconnect, device number 11
[  422.786941][T11933] loop7: detected capacity change from 0 to 2048
[  422.848890][T11933] /dev/loop7: Can't open blockdev
[  423.023202][T10260] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  423.165535][T11938] loop8: detected capacity change from 0 to 1024
[  423.209205][T11938] EXT4-fs: Ignoring removed bh option
[  423.247940][T10260] usb 10-1: Using ep0 maxpacket: 32
[  423.255362][T10260] usb 10-1: config 0 has an invalid interface number: 182 but max is 0
[  423.299353][T10260] usb 10-1: config 0 has no interface number 0
[  423.316469][T10260] usb 10-1: config 0 interface 182 has no altsetting 0
[  423.324314][T11938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  423.348151][T10260] usb 10-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db
[  423.418428][T10260] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.426632][T10260] usb 10-1: Product: syz
[  423.452223][T11938] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 2: comm syz.8.1936: lblock 2 mapped to illegal pblock 2 (length 1)
[  423.516896][T10260] usb 10-1: Manufacturer: syz
[  423.524705][T11921] loop3: detected capacity change from 0 to 32768
[  423.531492][T10260] usb 10-1: SerialNumber: syz
[  423.545949][T11938] __quota_error: 44 callbacks suppressed
[  423.545969][T11938] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  423.554741][T10260] usb 10-1: config 0 descriptor??
[  423.595815][T11938] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 48: comm syz.8.1936: lblock 0 mapped to illegal pblock 48 (length 1)
[  423.623939][T10260] hub 10-1:0.182: bad descriptor, ignoring hub
[  423.651555][T11938] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  423.659277][T10260] hub: probe of 10-1:0.182 failed with error -5
[  423.692142][T11938] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.1936: Failed to acquire dquot type 0
[  423.742352][T11938] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  423.777594][T11938] EXT4-fs error (device loop8): ext4_evict_inode:279: inode #11: comm syz.8.1936: mark_inode_dirty error
[  423.819255][T11938] EXT4-fs warning (device loop8): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  423.846572][T10260] kaweth 10-1:0.182: Firmware present in device.
[  423.885654][T11938] EXT4-fs (loop8): 1 orphan inode deleted
[  423.899811][ T5305] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:15: lblock 1 mapped to illegal pblock 1 (length 1)
[  423.935410][T11938] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  424.009843][ T5305] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  424.035996][T11938] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #2: block 16: comm syz.8.1936: lblock 0 mapped to illegal pblock 16 (length 1)
[  424.053641][ T5305] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:15: Failed to release dquot type 0
[  424.060690][T10260] kaweth 10-1:0.182: Statistics collection: 0
[  424.108149][T10260] kaweth 10-1:0.182: Multicast filter limit: 0
[  424.135412][T10260] kaweth 10-1:0.182: MTU: 0
[  424.155709][T10260] kaweth 10-1:0.182: Read MAC address 00:00:00:00:00:00
[  424.158189][ T4256] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  424.334355][ T7263] EXT4-fs (loop8): unmounting filesystem.
[  424.353363][ T7263] EXT4-fs error (device loop8): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0
[  424.397882][ T4256] usb 5-1: Using ep0 maxpacket: 16
[  424.409337][ T4256] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.457955][ T4256] usb 5-1: config 0 interface 0 has no altsetting 0
[  424.468370][ T7263] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  424.494049][ T4256] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  424.505134][ T7263] EXT4-fs error (device loop8): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error
[  424.532535][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.560381][ T4256] usb 5-1: config 0 descriptor??
[  424.671942][T10260] kaweth 10-1:0.182: kaweth interface created at eth5
[  424.848599][T11967] loop8: detected capacity change from 0 to 4096
[  424.921168][T11971] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  425.012656][ T4256] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  425.028125][T10260] usb 10-1: USB disconnect, device number 13
[  425.438170][T10260] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  425.480014][ T4256] usb 5-1: USB disconnect, device number 16
[  425.641528][T10260] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  425.663464][T10260] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  425.706523][T10260] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  425.738111][T10260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.767595][T11976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  426.025730][T10260] usb 4-1: USB disconnect, device number 8
[  426.788031][ T4274] Bluetooth: hci1: command 0x0406 tx timeout
[  427.125719][T12011] input: syz1 as /devices/virtual/input/input49
[  427.257819][    C0] sched: RT throttling activated
[  427.681604][T12017] Invalid argument reading file caps for ./file0
[  428.262362][T10264] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  428.306400][T11999] loop8: detected capacity change from 0 to 262144
[  428.322333][T11999] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop8 scanned by syz.8.1950 (11999)
[  428.364120][T11999] BTRFS info (device loop8): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  428.374643][T11999] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm
[  428.384044][T11999] BTRFS warning (device loop8): excessive commit interval 1657
[  428.391784][T11999] BTRFS info (device loop8): using free space tree
[  428.449882][T10264] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  428.471066][T10264] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  428.482784][T10264] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.491530][T10264] usb 10-1: Product: syz
[  428.496229][T10264] usb 10-1: Manufacturer: syz
[  428.501410][T10264] usb 10-1: SerialNumber: syz
[  428.517677][T10264] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  428.744405][T12045] loop3: detected capacity change from 0 to 8192
[  428.744736][T11999] BTRFS info (device loop8): enabling ssd optimizations
[  428.853514][T11999] BTRFS error (device loop8): balance: invalid convert system profile raid6
[  428.943919][T10264] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  428.986083][T10264] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  429.022905][T10264] usb 10-1: media controller created
[  429.085135][T10264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  429.151487][ T7263] BTRFS info (device loop8): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  429.877287][T12080] loop7: detected capacity change from 0 to 1024
[  430.418060][T10272] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  430.504930][T10265] usb 10-1: USB disconnect, device number 14
[  430.609782][T10272] usb 8-1: Using ep0 maxpacket: 16
[  430.611449][T10272] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.611485][T10272] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  430.611512][T10272] usb 8-1: config 0 interface 0 has no altsetting 0
[  430.611543][T10272] usb 8-1: New USB device found, idVendor=056a, idProduct=22b7, bcdDevice= 0.5d
[  430.611568][T10272] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.613686][T10272] usb 8-1: config 0 descriptor??
[  431.023460][T10272] wacom 0003:056A:22B7.001C: unknown main item tag 0x0
[  431.023494][T10272] wacom 0003:056A:22B7.001C: unknown main item tag 0x0
[  431.023517][T10272] wacom 0003:056A:22B7.001C: unknown main item tag 0x0
[  431.023540][T10272] wacom 0003:056A:22B7.001C: unknown main item tag 0x0
[  431.023563][T10272] wacom 0003:056A:22B7.001C: unknown main item tag 0x0
[  431.024527][T10272] wacom 0003:056A:22B7.001C: Unknown device_type for 'HID 056a:22b7'. Ignoring.
[  431.234232][T10272] usb 8-1: USB disconnect, device number 17
[  431.442736][T12103] loop4: detected capacity change from 0 to 64
[  431.977566][T12112] loop3: detected capacity change from 0 to 2048
[  432.109963][T12112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  432.126844][T12112] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  432.201187][T12115] loop7: detected capacity change from 0 to 4096
[  432.209547][T12115] /dev/loop7: Can't open blockdev
[  432.268100][ T5065] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  432.448543][T11307] EXT4-fs (loop3): unmounting filesystem.
[  432.862289][T12130] loop4: detected capacity change from 0 to 8192
[  434.286807][T12139] loop7: detected capacity change from 0 to 40427
[  434.438566][ T4608] I/O error, dev loop7, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  434.949225][   T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  435.147889][   T27] usb 4-1: Using ep0 maxpacket: 16
[  435.154916][   T27] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  435.167883][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.187898][   T27] usb 4-1: config 0 has no interface number 0
[  435.196800][   T27] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  435.227282][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.250129][   T27] usb 4-1: Product: syz
[  435.254436][   T27] usb 4-1: Manufacturer: syz
[  435.267957][   T27] usb 4-1: SerialNumber: syz
[  435.283847][   T27] usb 4-1: config 0 descriptor??
[  435.503163][   T27] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  435.517926][   T27] usb 4-1: No valid video chain found.
[  435.545339][   T27] usb 4-1: USB disconnect, device number 9
[  435.691484][ T5353] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  435.757520][ T5353] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  435.795724][T12199] loop7: detected capacity change from 0 to 4096
[  435.812068][T10265] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  435.844509][T12199] EXT4-fs: Ignoring removed mblk_io_submit option
[  435.867912][T12199] EXT4-fs: inline encryption not supported
[  435.903109][T12199] EXT4-fs: Ignoring removed orlov option
[  435.909648][T12199] ext4: Unknown parameter 'rootcontext'
[  436.025554][T10265] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  436.050065][T10265] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  436.087920][T10265] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  436.110736][T10265] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.167619][T12197] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  436.457313][T10265] usb 9-1: USB disconnect, device number 12
[  437.211613][T12228] loop4: detected capacity change from 0 to 8192
[  438.688597][T12264] loop4: detected capacity change from 0 to 764
[  438.730519][T12264] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  439.558263][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2031'.
[  439.654026][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2031'.
[  439.820730][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2032'.
[  439.869565][T12262] loop8: detected capacity change from 0 to 32768
[  439.908760][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2032'.
[  439.968254][T12262] XFS (loop8): Mounting V5 Filesystem
[  440.061563][T12262] XFS (loop8): Ending clean mount
[  440.072015][T10265] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  440.076440][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  440.086131][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  440.260166][T10265] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  440.278542][T10265] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  440.322330][T10265] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  440.348340][ T7263] XFS (loop8): Unmounting Filesystem
[  440.358219][T10265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  440.391199][T10265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  440.433498][T10265] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  440.454348][T10265] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  440.584118][T10265] usb 4-1: Product: syz
[  440.604097][T10265] usb 4-1: Manufacturer: syz
[  440.680320][T10265] cdc_wdm 4-1:1.0: skipping garbage
[  440.728765][T10265] cdc_wdm 4-1:1.0: skipping garbage
[  440.842041][T10265] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  440.854904][T10265] cdc_wdm 4-1:1.0: Unknown control protocol
[  441.138001][T10265] usb 4-1: USB disconnect, device number 10
[  441.839889][T12336] netlink: 'syz.4.2043': attribute type 1 has an invalid length.
[  441.847717][T12336] netlink: 15150 bytes leftover after parsing attributes in process `syz.4.2043'.
[  441.932461][ T5305] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  441.988065][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  442.150156][T12347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2046'.
[  442.159513][T10272] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  442.170005][T12347] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2046'.
[  442.350567][T10272] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  442.370622][T10272] usb 4-1: config 0 has no interface number 0
[  442.377194][T10272] usb 4-1: config 0 interface 41 has no altsetting 0
[  442.438249][T10272] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  442.496396][T10272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.515473][T10272] usb 4-1: Product: syz
[  442.525113][T12359] loop7: detected capacity change from 0 to 512
[  442.525786][T10272] usb 4-1: Manufacturer: syz
[  442.545725][T10272] usb 4-1: SerialNumber: syz
[  442.578182][T12359] EXT4-fs: Ignoring removed oldalloc option
[  442.578621][T10272] usb 4-1: config 0 descriptor??
[  442.602475][T12359] /dev/loop7: Can't open blockdev
[  443.194757][T12377] loop7: detected capacity change from 0 to 256
[  443.220467][T12377] /dev/loop7: Can't open blockdev
[  443.242225][T10272] CoreChips: probe of 4-1:0.41 failed with error -71
[  443.289361][T10272] usb 4-1: USB disconnect, device number 11
[  443.592483][T12384] loop9: detected capacity change from 0 to 512
[  443.679936][T12384] EXT4-fs: Ignoring removed nobh option
[  443.790935][T12384] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  443.806714][T12384] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.898127][ T5353] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  444.021967][ T7471] EXT4-fs (loop9): unmounting filesystem.
[  444.087982][ T5353] usb 8-1: Using ep0 maxpacket: 32
[  444.103792][ T5353] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  444.153926][T12395] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input53
[  444.175071][ T5353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.193546][   T26] audit: type=1326 audit(1771578402.712:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.8.2061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23f959c629 code=0x0
[  444.215722][    C1] vkms_vblank_simulate: vblank timer overrun
[  444.248750][ T5353] usb 8-1: config 0 descriptor??
[  444.272303][ T5353] gspca_main: sunplus-2.14.0 probing 041e:400b
[  444.497114][T12408] loop9: detected capacity change from 0 to 256
[  444.555628][T12408] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  444.623385][T12408] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  445.089757][T12418] device netdevsim0 entered promiscuous mode
[  445.150864][T12418] device netdevsim0 left promiscuous mode
[  445.289646][T12425] device batadv_slave_1 entered promiscuous mode
[  445.311644][T12422] device batadv_slave_1 left promiscuous mode
[  445.501698][ T5353] gspca_sunplus: reg_w_riv err -71
[  445.506984][ T5353] sunplus: probe of 8-1:0.0 failed with error -71
[  445.544441][ T5353] usb 8-1: USB disconnect, device number 18
[  446.186507][T12442] loop4: detected capacity change from 0 to 128
[  446.275183][   T26] audit: type=1800 audit(1771578404.792:348): pid=12442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2073" name="bus" dev="loop4" ino=1048718 res=0 errno=0
[  446.525071][ T7578] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  446.547679][T12423] loop3: detected capacity change from 0 to 40427
[  446.573799][T12423] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  446.590765][T12423] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  446.610443][ T7578] FAT-fs (loop4): Filesystem has been set read-only
[  446.648060][T12423] F2FS-fs (loop3): invalid crc value
[  446.747993][T12423] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  447.032534][T12423] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  447.087898][T12423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  447.457657][T11307] syz-executor: attempt to access beyond end of device
[  447.457657][T11307] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  447.623729][T12480] loop4: detected capacity change from 0 to 256
[  447.644492][T12480] exfat: Deprecated parameter 'namecase'
[  447.675336][T12480] exfat: Deprecated parameter 'namecase'
[  447.751419][T12480] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  448.278109][ T5353] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  448.469164][ T5353] usb 9-1: Using ep0 maxpacket: 32
[  448.487233][ T5353] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  448.535899][ T5353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.571477][ T5353] usb 9-1: Product: syz
[  448.587774][ T5353] usb 9-1: Manufacturer: syz
[  448.623116][ T5353] usb 9-1: SerialNumber: syz
[  448.650790][ T5353] usb 9-1: config 0 descriptor??
[  448.669459][ T5353] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  448.970279][T12505] device syz_tun entered promiscuous mode
[  448.976446][T12505] device macvtap1 entered promiscuous mode
[  449.003908][T12505] device syz_tun left promiscuous mode
[  449.798027][T10265] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  449.883235][ T5353] gspca_topro: reg_w err -71
[  449.927926][ T5353] gspca_topro: Sensor soi763a
[  449.963758][ T5353] usb 9-1: USB disconnect, device number 13
[  450.008105][T10265] usb 4-1: Using ep0 maxpacket: 16
[  450.021541][T10265] usb 4-1: config 4 has an invalid interface number: 51 but max is 0
[  450.063171][T10265] usb 4-1: config 4 has no interface number 0
[  450.095428][T10265] usb 4-1: config 4 interface 51 has no altsetting 0
[  450.116872][T10265] usb 4-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b
[  450.157267][T10265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.187686][T10265] usb 4-1: Product: syz
[  450.212909][T10265] usb 4-1: Manufacturer: syz
[  450.217609][T10265] usb 4-1: SerialNumber: syz
[  450.257968][T10263] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  450.279254][T10265] upd78f0730 4-1:4.51: upd78f0730 converter detected
[  450.322467][T10265] usb 4-1: upd78f0730 converter now attached to ttyUSB0
[  450.472939][T10263] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  450.524779][ T5353] usb 4-1: USB disconnect, device number 12
[  450.533706][T10263] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  450.562419][ T5353] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  450.585422][T10263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.589608][ T5353] upd78f0730 4-1:4.51: device disconnected
[  450.636277][T10263] usb 8-1: Product: syz
[  450.667858][T10263] usb 8-1: Manufacturer: syz
[  450.672548][T10263] usb 8-1: SerialNumber: syz
[  450.720554][T10263] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  451.131757][T10263] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  451.173100][T10263] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  451.207983][T10263] usb 8-1: media controller created
[  451.302581][T10263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  451.815609][T10263] usb 8-1: USB disconnect, device number 19
[  451.960688][ T5353] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  452.017426][T12569] loop4: detected capacity change from 0 to 512
[  452.066021][T12569] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  452.152459][T12569] EXT4-fs (loop4): 1 truncate cleaned up
[  452.160541][ T5353] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[  452.163190][T12569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  452.179437][ T5353] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  452.200050][ T5353] usb 4-1: config 0 has no interfaces?
[  452.205713][ T5353] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  452.235495][ T5353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.255523][ T5353] usb 4-1: config 0 descriptor??
[  452.436665][T12575] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  452.503983][ T5353] usb 4-1: USB disconnect, device number 13
[  452.590554][ T7578] EXT4-fs (loop4): unmounting filesystem.
[  452.792185][T12581] loop7: detected capacity change from 0 to 256
[  452.811570][T12581] exfat: Unknown parameter 'âÎa	Ú>f'
[  452.878112][ T4608] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  453.459565][T12600] loop9: detected capacity change from 0 to 128
[  453.521369][T12600] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  453.543248][T12600] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  453.650966][T12607] device syzkaller1 entered promiscuous mode
[  453.788690][ T7471] EXT4-fs (loop9): unmounting filesystem.
[  453.919623][T12614] loop8: detected capacity change from 0 to 256
[  453.990573][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2128'.
[  454.020695][T12614] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  454.045965][T12616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.355014][T12626] loop8: detected capacity change from 0 to 8
[  454.364338][T12616] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.088027][T10263] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  455.278273][T10263] usb 5-1: Using ep0 maxpacket: 16
[  455.294697][T10263] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  455.317316][T10263] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  455.330537][T10263] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  455.346878][T10263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.356817][T10263] usb 5-1: Product: syz
[  455.369257][T10263] usb 5-1: Manufacturer: syz
[  455.374091][T10263] usb 5-1: SerialNumber: syz
[  455.455800][T12661] loop3: detected capacity change from 0 to 1024
[  455.592159][T10263] usb 5-1: 0:2 : does not exist
[  455.610802][T10263] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  455.709133][T10263] usb 5-1: USB disconnect, device number 17
[  455.859823][ T5353] kernel write not supported for file bpf-prog (pid: 5353 comm: kworker/1:16)
[  455.995968][ T4608] udevd[4608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  456.133682][T12675] netem: change failed
[  456.454901][T12685] loop4: detected capacity change from 0 to 2048
[  456.525275][T12685] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=27485, location=27485
[  456.574938][T12685] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  456.668098][   T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  456.675817][   T26] audit: type=1800 audit(1771578415.192:349): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2147" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  456.897711][   T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  456.922874][   T27] usb 4-1: config 0 has no interface number 0
[  456.939861][   T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.973999][   T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.023867][   T27] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  457.043218][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.088675][   T27] usb 4-1: config 0 descriptor??
[  457.518104][   T27] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0
[  457.529152][   T27] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0
[  457.539748][   T27] prodikeys 0003:041E:2801.001E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[  457.559191][   T27] hid_prodikeys: hid-prodikeys: failed to find output report
[  457.559191][   T27] 
[  457.737509][T10263] usb 4-1: USB disconnect, device number 14
[  457.976777][T12718] fido_id[12718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  458.238687][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2167'.
[  458.408116][T10264] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  458.625264][T10264] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  458.648849][T10264] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.676040][T10264] usb 9-1: Product: syz
[  458.700580][T10264] usb 9-1: Manufacturer: syz
[  458.715681][T10264] usb 9-1: SerialNumber: syz
[  458.751340][T10264] usb 9-1: config 0 descriptor??
[  458.971341][T12761] netlink: 'syz.4.2174': attribute type 1 has an invalid length.
[  459.010510][T12758] loop7: detected capacity change from 0 to 8192
[  459.039338][T12761] 8021q: adding VLAN 0 to HW filter on device bond1
[  459.188939][T12767] bond1: (slave geneve2): making interface the new active one
[  459.271783][T12767] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  459.330437][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  459.822643][T10264] usb 9-1: non-Atmel transceiver xxxx00c4
[  460.024072][T10264] usb 9-1: Firmware version (0.0) predates our first public release.
[  460.063274][T10264] usb 9-1: Please update to version 0.2 or newer
[  460.124521][T10264] usb 9-1: atusb_probe: initialization failed, error = -19
[  460.165055][T12788] loop7: detected capacity change from 0 to 1024
[  460.204626][T10264] usb 9-1: USB disconnect, device number 14
[  460.246202][T12788] /dev/loop7: Can't open blockdev
[  460.425338][T12786] loop3: detected capacity change from 0 to 65536
[  460.614301][T12786] XFS (loop3): Mounting V5 Filesystem
[  460.718317][T12786] XFS (loop3): Ending clean mount
[  460.729648][T12786] XFS (loop3): Quotacheck needed: Please wait.
[  460.902690][T12786] XFS (loop3): Quotacheck: Done.
[  461.065730][  T127] libceph: connect (1)[c::]:6789 error -101
[  461.098715][  T127] libceph: mon0 (1)[c::]:6789 connect error
[  461.180370][T10272] libceph: connect (1)[c::]:6789 error -101
[  461.187220][T10272] libceph: mon0 (1)[c::]:6789 connect error
[  461.240187][T11307] XFS (loop3): Unmounting Filesystem
[  461.276528][T10272] libceph: connect (1)[c::]:6789 error -101
[  461.303162][T10272] libceph: mon0 (1)[c::]:6789 connect error
[  461.382801][  T127] libceph: connect (1)[c::]:6789 error -101
[  461.390194][  T127] libceph: mon0 (1)[c::]:6789 connect error
[  461.408697][T12826] device syzkaller1 entered promiscuous mode
[  461.536095][T12830] capability: warning: `syz.9.2195' uses 32-bit capabilities (legacy support in use)
[  461.608884][T10272] libceph: connect (1)[c::]:6789 error -101
[  461.615013][T10272] libceph: mon0 (1)[c::]:6789 connect error
[  461.647902][T12811] ceph: No mds server is up or the cluster is laggy
[  461.686919][T12799] loop4: detected capacity change from 0 to 40427
[  461.708218][T12816] ceph: No mds server is up or the cluster is laggy
[  461.767838][T12799] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff
[  461.792663][T12799] F2FS-fs (loop4): invalid crc value
[  461.823292][T12799] F2FS-fs (loop4): Found nat_bits in checkpoint
[  461.968672][  T127] libceph: connect (1)[c::]:6789 error -101
[  461.974865][  T127] libceph: mon0 (1)[c::]:6789 connect error
[  462.058152][T12799] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  462.336722][ T7578] syz-executor: attempt to access beyond end of device
[  462.336722][ T7578] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  462.935302][T12836] loop7: detected capacity change from 0 to 32768
[  463.389514][ T4608] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by udevd (4608)
[  463.768441][T12875] loop3: detected capacity change from 0 to 128
[  463.866876][T12875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  463.984688][T12875] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.252083][T11307] EXT4-fs (loop3): unmounting filesystem.
[  464.504072][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2213'.
[  466.465049][T12961] loop5: detected capacity change from 0 to 7
[  466.543226][T12961] Dev loop5: unable to read RDB block 7
[  466.603963][T12961]  loop5: unable to read partition table
[  466.635151][T12961] loop5: partition table beyond EOD, truncated
[  466.704300][T12961] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  466.877911][T10272] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  467.077906][T10272] usb 10-1: Using ep0 maxpacket: 16
[  467.090534][T10272] usb 10-1: config 0 has an invalid interface number: 240 but max is 0
[  467.125374][T10272] usb 10-1: config 0 has no interface number 0
[  467.156315][T10272] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  467.176542][T10272] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.195286][T10272] usb 10-1: Product: syz
[  467.205451][T10272] usb 10-1: Manufacturer: syz
[  467.214233][T10272] usb 10-1: SerialNumber: syz
[  467.239088][T10272] usb 10-1: config 0 descriptor??
[  467.267832][T10272] gspca_main: spca508-2.14.0 probing 041e:4018
[  467.482403][T10272] gspca_spca508: reg_read err -32
[  467.491299][T10272] gspca_spca508: reg_read err -32
[  467.521179][T10272] gspca_spca508: reg_read err -32
[  467.566458][T10272] gspca_spca508: reg_read err -32
[  467.777636][T10272] gspca_spca508: reg write: error -71
[  467.783607][T10272] spca508: probe of 10-1:0.240 failed with error -71
[  467.819438][T10272] usb 10-1: USB disconnect, device number 15
[  469.268093][T10272] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  469.451030][T13026] loop9: detected capacity change from 0 to 131072
[  469.463226][T13042] loop7: detected capacity change from 0 to 1024
[  469.508941][T13026] F2FS-fs (loop9): invalid crc value
[  469.509829][T10272] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  469.563191][T13042] EXT4-fs: Ignoring removed orlov option
[  469.573253][T13026] F2FS-fs (loop9): Found nat_bits in checkpoint
[  469.600962][T13042] /dev/loop7: Can't open blockdev
[  469.606489][T10272] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  469.643175][T13026] F2FS-fs (loop9): Cannot turn on quotas: -2 on 2
[  469.681671][T13026] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  469.703512][T10272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  469.755618][T10272] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  469.799749][T10272] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024
[  469.839537][ T4256] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  469.888914][T10272] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  469.931108][T10272] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  469.960482][T10272] usb 5-1: Product: syz
[  469.964758][T10272] usb 5-1: Manufacturer: syz
[  470.025203][T10272] cdc_wdm 5-1:1.0: skipping garbage
[  470.043207][T10272] cdc_wdm 5-1:1.0: skipping garbage
[  470.050089][ T4256] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.080429][ T4256] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  470.108805][T10272] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  470.118990][ T4256] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.135420][T10272] cdc_wdm 5-1:1.0: Unknown control protocol
[  470.191882][ T4256] usb 9-1: config 0 descriptor??
[  470.271364][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  470.278422][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  470.285392][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  470.292054][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  470.299509][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  470.306181][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  470.312839][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  470.319501][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  470.338348][T10272] usb 5-1: USB disconnect, device number 18
[  470.609820][ T4256] lg-g15 0003:046D:C222.001F: unbalanced delimiter at end of report description
[  470.643996][ T4256] lg-g15: probe of 0003:046D:C222.001F failed with error -22
[  470.828887][ T4256] usb 9-1: USB disconnect, device number 15
[  471.025965][T13055] loop3: detected capacity change from 0 to 32768
[  471.133000][T13055] XFS (loop3): Mounting V5 Filesystem
[  471.379770][T13055] XFS (loop3): Ending clean mount
[  471.485652][   T26] audit: type=1800 audit(1771578430.002:350): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2261" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  471.585688][   T26] audit: type=1800 audit(1771578430.032:351): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2261" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  471.647723][T13055] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 
[  471.720128][T13055] XFS (loop3): Unmount and run xfs_repair
[  471.751199][T13055] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  471.777950][T13055] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  471.807518][T13055] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  471.837984][T13055] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  471.846941][T13055] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  471.900267][T13055] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  471.936771][T13055] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  471.972024][T13055] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  472.010985][T13055] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  472.053282][T13055] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74
[  472.151749][T13055] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580).  Shutting down filesystem.
[  472.152181][T13093] loop9: detected capacity change from 0 to 128
[  472.224563][T13093] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1)
[  472.234083][T13055] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  472.445281][ T4334] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1)
[  472.457694][T11307] XFS (loop3): Unmounting Filesystem
[  472.619125][T13105] block nbd8: NBD_DISCONNECT
[  472.625443][T13101] block nbd8: Disconnected due to user request.
[  472.647985][T13101] block nbd8: shutting down sockets
[  472.855996][ T4319] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  473.268778][T13115] loop9: detected capacity change from 0 to 8192
[  473.304515][T13115] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  473.330531][T13115] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal
[  473.407975][T13115] REISERFS (device loop9): using ordered data mode
[  473.470234][T13115] reiserfs: using flush barriers
[  473.517067][T13115] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  473.595472][T13115] REISERFS (device loop9): checking transaction log (loop9)
[  473.766646][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'.
[  473.914753][T13115] REISERFS (device loop9): Using tea hash to sort names
[  473.942357][T13115] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage.
[  474.007948][ T5347] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  474.145912][T13115] REISERFS warning (device loop9): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  474.185083][T13140] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2283'.
[  474.208002][ T5347] usb 4-1: Using ep0 maxpacket: 32
[  474.215254][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.281598][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.335409][ T5347] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  474.385632][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.430527][ T5347] usb 4-1: config 0 descriptor??
[  474.499119][ T5347] hub 4-1:0.0: USB hub found
[  474.673283][ T5347] hub 4-1:0.0: 1 port detected
[  475.300715][ T5347] hub 4-1:0.0: activate --> -90
[  475.513004][T13169] device syzkaller1 entered promiscuous mode
[  475.693840][T13172] loop5: detected capacity change from 0 to 7
[  475.723041][  T127] usb 4-1: USB disconnect, device number 15
[  475.729381][ T4608] Dev loop5: unable to read RDB block 7
[  475.735172][ T4608]  loop5: unable to read partition table
[  475.768119][ T4608] loop5: partition table beyond EOD, truncated
[  475.826159][T13172] Dev loop5: unable to read RDB block 7
[  475.838073][T13172]  loop5: unable to read partition table
[  475.855913][T13172] loop5: partition table beyond EOD, truncated
[  475.885108][T13172] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  476.010555][T13159] loop7: detected capacity change from 0 to 32768
[  476.058502][T13175] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  476.059766][T13159] /dev/loop7: Can't open blockdev
[  476.150823][T13175] bond1: (slave lo): Enslaving as an active interface with an up link
[  476.195441][T13175] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  476.834001][T13193] loop8: detected capacity change from 0 to 512
[  476.935365][T13193] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  476.945906][T13195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  476.963342][T13193] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.2299: Unimplemented hash flags: 0x0001
[  477.045399][T13195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  477.054369][T13195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  477.065611][T13195] device bridge_slave_0 left promiscuous mode
[  477.073050][T13195] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.083208][T13193] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2299: Corrupt directory, running e2fsck is recommended
[  477.109922][T13195] device bridge_slave_1 left promiscuous mode
[  477.119998][T13203] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.2299: Unimplemented hash flags: 0x0001
[  477.158104][T13195] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.205486][T13203] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2299: Corrupt directory, running e2fsck is recommended
[  477.239430][T13193] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.2299: Unimplemented hash flags: 0x0001
[  477.275219][T13195] bond0: (slave bond_slave_0): Releasing backup interface
[  477.305853][T13193] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2299: Corrupt directory, running e2fsck is recommended
[  477.372543][T13195] bond0: (slave bond_slave_1): Releasing backup interface
[  477.388347][T13208] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.2299: Unimplemented hash flags: 0x0001
[  477.410436][T13208] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2299: Corrupt directory, running e2fsck is recommended
[  477.458083][T13203] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.2299: Unimplemented hash flags: 0x0001
[  477.524593][T13203] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2299: Corrupt directory, running e2fsck is recommended
[  477.643466][T10263] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  477.655830][T13195] team0: Port device team_slave_0 removed
[  477.779773][ T7263] EXT4-fs (loop8): unmounting filesystem.
[  477.876996][T10263] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.924720][T10263] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  477.935146][T13195] team0: Port device team_slave_1 removed
[  477.971274][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.998344][T13195] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.999557][T10263] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  478.047929][T10263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.072925][T10263] usb 5-1: Product: syz
[  478.084391][T10263] usb 5-1: Manufacturer: syz
[  478.089807][T10263] usb 5-1: SerialNumber: syz
[  478.221513][  T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  478.515351][T10263] usb 5-1: 0:2 : does not exist
[  478.758126][ T5347] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  478.798079][T10265] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  478.973840][ T5347] usb 5-1: USB disconnect, device number 19
[  478.998162][T10265] usb 8-1: Using ep0 maxpacket: 32
[  479.009776][T10265] usb 8-1: config 0 interface 0 has no altsetting 0
[  479.048213][T10265] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  479.082409][T10265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.133112][T10265] usb 8-1: config 0 descriptor??
[  479.561178][T10265] corsair-psu 0003:1B1C:1C0D.0020: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.7-1/input0
[  479.957241][T10265] corsair-psu 0003:1B1C:1C0D.0020: unable to initialize device (-95)
[  480.001561][T10265] corsair-psu: probe of 0003:1B1C:1C0D.0020 failed with error -95
[  480.047061][T10265] usb 8-1: USB disconnect, device number 20
[  480.076115][T13269] loop4: detected capacity change from 0 to 2048
[  480.228540][T13269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  480.404992][T13273] fido_id[13273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  481.324297][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2330'.
[  481.365828][T13300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  481.412667][T13300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  481.474910][T13300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  481.598407][  T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  481.998615][   T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  482.562014][ T5347] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  482.617901][T13332] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  482.636297][T13341] loop4: detected capacity change from 0 to 16
[  482.661202][T13341] erofs: (device loop4): mounted with root inode @ nid 36.
[  482.711760][ T5347] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  482.755973][T13332] bond1: (slave lo): Enslaving as an active interface with an up link
[  482.770646][T13341] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  482.837059][T13341] syz.4.2344: attempt to access beyond end of device
[  482.837059][T13341] loop4: rw=524288, sector=736, nr_sectors = 8 limit=16
[  482.863679][T13332] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  482.940640][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2343'.
[  482.955830][T13347] loop7: detected capacity change from 0 to 512
[  483.609109][  T127] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  483.679160][T13364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  483.717973][T10272] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  483.732291][T13364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  483.776303][T13364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  483.817909][  T127] usb 4-1: Using ep0 maxpacket: 32
[  483.826589][  T127] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  483.837372][T13364] device bridge_slave_0 left promiscuous mode
[  483.862229][  T127] usb 4-1: config 0 has no interface number 0
[  483.873893][T13364] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.886472][  T127] usb 4-1: config 0 interface 184 has no altsetting 0
[  483.909030][T10272] usb 9-1: Using ep0 maxpacket: 8
[  483.917510][T13364] device bridge_slave_1 left promiscuous mode
[  483.926280][  T127] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  483.930142][T10272] usb 9-1: config index 0 descriptor too short (expected 30768, got 18)
[  483.957048][  T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.970753][T13364] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.990744][  T127] usb 4-1: Product: syz
[  484.004962][  T127] usb 4-1: Manufacturer: syz
[  484.015692][T10272] usb 9-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  484.020822][  T127] usb 4-1: SerialNumber: syz
[  484.073112][  T127] usb 4-1: config 0 descriptor??
[  484.080657][T10272] usb 9-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  484.095160][T13364] bond0: (slave bond_slave_0): Releasing backup interface
[  484.112086][  T127] smsc75xx v1.0.0
[  484.136355][T10272] usb 9-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  484.183486][T13364] bond0: (slave bond_slave_1): Releasing backup interface
[  484.210086][T10272] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  484.257624][T10272] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.304610][T10272] usb 9-1: Product: syz
[  484.331376][T10272] usb 9-1: Manufacturer: syz
[  484.346060][T10272] usb 9-1: SerialNumber: syz
[  484.552079][T13364] team0: Port device team_slave_0 removed
[  484.700876][T13364] team0: Port device team_slave_1 removed
[  484.748519][T13364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.796747][T10272] usb 9-1: USB disconnect, device number 16
[  484.800390][T13364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.868291][T13364] bond1: (slave geneve2): Releasing active interface
[  485.125019][  T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  485.336793][  T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  485.366675][  T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  485.454088][  T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  485.479795][  T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  485.511952][  T127] smsc75xx: probe of 4-1:0.184 failed with error -71
[  485.559962][  T127] usb 4-1: USB disconnect, device number 16
[  485.816094][T13390] Bluetooth: hci0: unsupported parameter 178
[  485.845154][T13390] Bluetooth: hci0: unsupported parameter 65535
[  485.901258][T13390] Bluetooth: hci0: unsupported parameter 178
[  485.961132][T13390] Bluetooth: hci0: unsupported parameter 65535
[  486.294648][T13394] netlink: 'syz.3.2359': attribute type 2 has an invalid length.
[  486.549693][T13400] loop4: detected capacity change from 0 to 1024
[  486.567433][T13400] EXT4-fs: Ignoring removed nobh option
[  486.592874][T13400] EXT4-fs: Ignoring removed bh option
[  486.639815][T13400] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  486.791561][T13412] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  486.801090][T13400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  486.892438][T13400] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.2360: Allocating blocks 385-513 which overlap fs metadata
[  487.134242][T13418] EXT4-fs (loop4): pa ffff888052c9ec40: logic 16, phys. 129, len 24
[  487.143987][T13418] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 8
[  487.185686][T13422] bond1: (slave lo): Releasing backup interface
[  487.258813][T13422] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  487.303723][ T7578] EXT4-fs (loop4): unmounting filesystem.
[  487.366088][T13422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  487.406607][T13422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  487.433922][T13422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  487.461235][T13422] device bridge_slave_0 left promiscuous mode
[  487.469344][T13429] loop8: detected capacity change from 0 to 128
[  487.476026][T13422] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.530084][T13422] device bridge_slave_1 left promiscuous mode
[  487.561131][T13422] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.613233][T13422] bond0: (slave bond_slave_0): Releasing backup interface
[  487.711066][T13422] bond0: (slave bond_slave_1): Releasing backup interface
[  487.901280][T13422] team0: Port device team_slave_0 removed
[  487.955379][T13422] team0: Port device team_slave_1 removed
[  487.993102][T13422] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.031223][T13422] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.048867][T13422] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.056600][T13422] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.147527][T13427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  488.169815][T13427] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  488.258079][   T27] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  488.411192][T13453] loop7: detected capacity change from 0 to 512
[  488.438842][T13453] /dev/loop7: Can't open blockdev
[  488.453872][   T27] usb 4-1: config 4 has an invalid interface number: 28 but max is 0
[  488.477851][   T27] usb 4-1: config 4 has no interface number 0
[  488.487210][   T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a
[  488.538160][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.599421][   T27] usb 4-1: Product: syz
[  488.603667][   T27] usb 4-1: Manufacturer: syz
[  488.638894][   T27] usb 4-1: SerialNumber: syz
[  488.695843][   T27] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.28/input/input54
[  488.936116][T13465] loop9: detected capacity change from 0 to 512
[  488.950706][ T3622] bcm5974 4-1:4.28: could not read from device
[  488.987549][T13465] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  488.995265][   T27] bcm5974 4-1:4.28: could not read from device
[  489.022431][T13467] loop8: detected capacity change from 0 to 2048
[  489.061074][T13465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  489.074573][ T3622] bcm5974 4-1:4.28: could not read from device
[  489.082106][T13465] System zones: 1-12
[  489.087202][T13465] EXT4-fs (loop9): orphan cleanup on readonly fs
[  489.144665][T13467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.167574][T13465] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2383: bg 0: block 361: padding at end of block bitmap is not set
[  489.191603][   T27] input: failed to attach handler mousedev to device input54, error: -5
[  489.224381][ T3622] bcm5974 4-1:4.28: could not read from device
[  489.241683][T13465] EXT4-fs (loop9): Remounting filesystem read-only
[  489.253006][   T27] usb 4-1: USB disconnect, device number 17
[  489.292892][ T3622] bcm5974 4-1:4.28: could not read from device
[  489.309245][T13465] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  489.349084][T13465] EXT4-fs (loop9): Remounting filesystem read-only
[  489.355691][T13465] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2383: invalid indirect mapped block 12 (level 1)
[  489.437067][T13465] EXT4-fs (loop9): Remounting filesystem read-only
[  489.464919][T13465] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2383: invalid indirect mapped block 2 (level 2)
[  489.520931][T13465] EXT4-fs (loop9): Remounting filesystem read-only
[  489.545074][T13465] EXT4-fs (loop9): 1 truncate cleaned up
[  489.562210][T13465] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  489.845194][T13479] loop4: detected capacity change from 0 to 2048
[  489.872598][ T7471] EXT4-fs (loop9): unmounting filesystem.
[  489.993158][ T7263] UDF-fs: error (device loop8): udf_read_inode: (ino 1317) failed !bh
[  490.005740][T13479] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  490.049305][ T7263] UDF-fs: error (device loop8): udf_read_inode: (ino 1317) failed !bh
[  490.095141][T13479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  490.540344][T13471] loop7: detected capacity change from 0 to 32768
[  491.077015][   T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.240241][   T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.425694][   T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.518869][T13510] loop7: detected capacity change from 0 to 2048
[  491.637355][   T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.165634][T10263] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  492.377964][T10263] usb 8-1: Using ep0 maxpacket: 8
[  492.385063][T10263] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  492.423976][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  492.438149][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  492.457108][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  492.461307][T10263] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  492.476749][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  492.489430][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  492.499256][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  492.568083][T10263] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  492.592592][T10263] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  492.623158][T10263] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  492.642550][T10263] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.877204][T10263] usb 8-1: usb_control_msg returned -32
[  492.884440][T10263] usbtmc 8-1:16.0: can't read capabilities
[  493.168418][T10265] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  493.267509][    C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  493.277073][    C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  493.286407][    C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  493.369054][ T5353] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  493.418124][T10265] usb 4-1: Using ep0 maxpacket: 8
[  493.428353][T10265] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  493.446915][T10265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  493.467952][T10265] usb 4-1: Product: syz
[  493.472290][T10265] usb 4-1: Manufacturer: syz
[  493.477130][T10265] usb 4-1: SerialNumber: syz
[  493.484008][T10265] usb 4-1: config 0 descriptor??
[  493.499625][T10265] gspca_main: sq905-2.14.0 probing 2770:9120
[  493.562389][ T5353] usb 5-1: config 0 has an invalid interface number: 168 but max is 0
[  493.594674][ T5353] usb 5-1: config 0 has no interface number 0
[  493.620835][ T5353] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  493.650899][ T5353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.682721][ T5353] usb 5-1: config 0 descriptor??
[  493.742521][T13527] chnl_net:caif_netlink_parms(): no params data found
[  493.906317][   T48] Bluetooth: hci1: Unknown advertising packet type: 0x400
[  493.906479][   T48] Bluetooth: hci1: Unknown advertising packet type: 0xa00
[  493.914947][   T48] Bluetooth: hci1: Malformed LE Event: 0x0d
[  493.934318][ T5353] usb 5-1: string descriptor 0 read error: -71
[  493.944654][ T5353] usb-storage 5-1:0.168: USB Mass Storage device detected
[  493.986352][ T5353] usb-storage 5-1:0.168: Quirks match for vid 05ab pid 0060: 2
[  494.095740][ T5353] usb 5-1: USB disconnect, device number 20
[  494.216706][T13527] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.229089][T13527] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.239018][T13527] device bridge_slave_0 entered promiscuous mode
[  494.248584][T13527] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.255951][T13527] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.269399][T13527] device bridge_slave_1 entered promiscuous mode
[  494.455156][T13527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  494.516286][T10265] gspca_sq905: bulk read fail (-22) len 0/4
[  494.528550][T10265] sq905: probe of 4-1:0.0 failed with error -5
[  494.547909][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  494.560017][   T11] device hsr_slave_0 left promiscuous mode
[  494.575366][   T11] device hsr_slave_1 left promiscuous mode
[  494.600071][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.621007][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.646428][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.661191][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.670048][   T11] device bridge_slave_1 left promiscuous mode
[  494.676387][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.696105][   T11] device bridge_slave_0 left promiscuous mode
[  494.702868][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.720716][ T5347] usb 4-1: USB disconnect, device number 18
[  494.772700][   T11] device veth1_macvtap left promiscuous mode
[  494.783512][   T11] device veth0_macvtap left promiscuous mode
[  494.794171][   T11] device veth1_vlan left promiscuous mode
[  494.801062][   T11] device veth0_vlan left promiscuous mode
[  494.875673][ T5353] usb 8-1: USB disconnect, device number 21
[  494.998824][T13579] loop4: detected capacity change from 0 to 128
[  495.012838][T13578] loop9: detected capacity change from 0 to 1024
[  495.063438][T13579] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  495.102329][T13579] hpfs: filesystem error: improperly stopped
[  495.128030][T13579] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  495.136220][T13578] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  495.153054][T13579] hpfs: You really don't want any checks? You are crazy...
[  495.188819][T13579] hpfs: hpfs_map_sector(): read error
[  495.194533][T13579] hpfs: code page support is disabled
[  495.201466][T13579] hpfs: hpfs_map_4sectors(): unaligned read
[  495.207665][T13579] hpfs: hpfs_map_4sectors(): unaligned read
[  495.214656][T13579] hpfs: filesystem error: unable to find root dir
[  495.269357][T13579] hpfs: hpfs_map_4sectors(): unaligned read
[  495.306133][T13579] hpfs: hpfs_map_sector(): read error
[  495.313265][T13578] EXT4-fs warning (device loop9): ext4_rename_delete:3778: inode #12: comm syz.9.2413: Deleting old file: nlink 2, error=-2
[  495.475397][ T7471] EXT4-fs (loop9): unmounting filesystem.
[  495.661672][T13594] loop9: detected capacity change from 0 to 512
[  495.698145][T13594] EXT4-fs: Ignoring removed nobh option
[  495.766495][T13594] fscrypt (loop9, inode 2): Error -61 getting encryption context
[  495.801245][T13594] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61
[  495.824176][T13594] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #13: comm syz.9.2416: inode has both inline data and extents flags
[  495.867344][T13594] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2416: couldn't read orphan inode 13 (err -117)
[  495.880294][T13594] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  495.882254][ T5353] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  495.989992][T13594] EXT4-fs (loop9): shut down requested (1)
[  496.081344][ T5353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.116887][ T5353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.145667][ T7471] EXT4-fs (loop9): unmounting filesystem.
[  496.154506][ T5353] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  496.164349][ T5353] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  496.189647][ T5353] usb 4-1: Manufacturer: syz
[  496.223074][ T5353] usb 4-1: config 0 descriptor??
[  496.340952][   T26] audit: type=1326 audit(1771578454.862:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.9.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dd59c629 code=0x7ffc0000
[  496.428532][   T26] audit: type=1326 audit(1771578454.902:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.9.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dd59c629 code=0x7ffc0000
[  496.485416][   T26] audit: type=1326 audit(1771578454.902:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.9.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f23dd59c629 code=0x7ffc0000
[  496.508770][   T26] audit: type=1326 audit(1771578454.902:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.9.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dd59c629 code=0x7ffc0000
[  496.638340][   T48] Bluetooth: hci3: command 0x041b tx timeout
[  497.079664][ T5353] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0022/input/input55
[  497.249730][ T5353] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0022/input/input56
[  497.289332][T13617] loop9: detected capacity change from 0 to 1024
[  497.300055][T13609] loop4: detected capacity change from 0 to 32768
[  497.307373][ T5353] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0022/input/input57
[  497.343591][ T5353] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0022/input/input58
[  497.381451][T13617] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  497.392765][ T5353] uclogic 0003:256C:006D.0022: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0
[  497.409874][ T5353] usb 4-1: USB disconnect, device number 19
[  497.499495][T13617] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.2428: inode #647214379: comm syz.9.2428: iget: illegal inode #
[  497.571146][T13617] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2428: error while reading EA inode 647214379 err=-117
[  497.585122][T13609] XFS (loop4): Mounting V5 Filesystem
[  497.667203][T13609] XFS (loop4): Ending clean mount
[  497.702492][ T7471] EXT4-fs (loop9): unmounting filesystem.
[  497.848621][T13625] fido_id[13625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  498.136087][   T11] team0 (unregistering): Port device team_slave_1 removed
[  498.188217][ T7578] XFS (loop4): Unmounting Filesystem
[  498.267562][   T11] team0 (unregistering): Port device team_slave_0 removed
[  498.366476][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.458048][ T5353] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  498.522208][T13639] loop9: detected capacity change from 0 to 2048
[  498.591342][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.601919][T13639]  loop9: p1 < > p3 p4 < >
[  498.645771][T13639] loop9: p3 start 4284289 is beyond EOD, truncated
[  498.667888][ T5353] usb 4-1: Using ep0 maxpacket: 32
[  498.696554][ T5353] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  498.708107][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  498.749840][ T5353] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  498.786170][ T5353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.794910][ T5353] usb 4-1: Product: syz
[  498.806035][ T5353] usb 4-1: Manufacturer: syz
[  498.829057][ T5353] usb 4-1: SerialNumber: syz
[  498.865997][ T5353] usb 4-1: config 0 descriptor??
[  498.890405][ T5353] usb 4-1: bad CDC descriptors
[  498.915043][ T5353] usb 4-1: unsupported MDLM descriptors
[  499.137555][T10272] usb 4-1: USB disconnect, device number 20
[  499.188463][T10263] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  499.428762][T10263] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  499.441876][T10263] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  499.456983][T10263] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.465382][T10263] usb 10-1: Product: syz
[  499.469738][T10263] usb 10-1: Manufacturer: syz
[  499.474476][T10263] usb 10-1: SerialNumber: syz
[  499.488699][T10263] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  499.529893][T10264] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  499.634722][   T11] bond0 (unregistering): Released all slaves
[  499.737940][T10264] usb 5-1: Using ep0 maxpacket: 16
[  499.759904][T10264] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  499.793191][T10264] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  499.803339][T10264] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  499.816877][T10264] usb 5-1: config 0 interface 0 has no altsetting 0
[  499.824153][T10264] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  499.837603][T10264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.853631][T10264] usb 5-1: config 0 descriptor??
[  499.888381][T13527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.910075][T10263] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  499.941956][T10263] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  500.008167][T10263] usb 10-1: media controller created
[  500.050382][T13527] team0: Port device team_slave_0 added
[  500.092281][T10263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  500.097223][T13527] team0: Port device team_slave_1 added
[  500.205579][T13527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.231171][T13527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.273718][T10264] hid (null): nested delimiters
[  500.278995][T10264] hid (null): nested delimiters
[  500.312108][T10264] hid (null): global environment stack underflow
[  500.352081][T13527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.370686][T10264] hid (null): nested delimiters
[  500.385564][T13527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.392861][T13527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.472680][T13527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.525082][ T5353] usb 5-1: USB disconnect, device number 21
[  500.765824][T10263] usb 10-1: USB disconnect, device number 16
[  500.787999][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  500.840858][T13527] device hsr_slave_0 entered promiscuous mode
[  500.850032][T13527] device hsr_slave_1 entered promiscuous mode
[  500.912285][T13527] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  500.931046][T13527] Cannot create hsr debugfs directory
[  501.521216][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  501.527974][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  501.821288][ T5353] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  502.035797][ T5353] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.058069][ T5353] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  502.096194][ T5353] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  502.127995][ T5353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.138139][ T5353] usb 4-1: Product: syz
[  502.142899][ T5353] usb 4-1: Manufacturer: syz
[  502.157741][ T5353] usb 4-1: SerialNumber: syz
[  502.172774][ T5353] cdc_mbim 4-1:1.0: skipping garbage
[  502.378129][T13681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  502.557998][T10263] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  502.753485][T10263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.784306][T10263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  502.808175][T10263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  502.838148][T10263] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  502.857595][T10263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.886177][T10263] usb 5-1: config 0 descriptor??
[  503.013064][T13681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  503.035175][ T5353] cdc_mbim 4-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048
[  503.063647][ T5353] cdc_mbim 4-1:1.0: setting rx_max = 2048
[  503.248011][ T5353] cdc_mbim 4-1:1.0: setting tx_max = 184
[  503.273364][ T5353] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  503.334630][T10263] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving
[  503.349932][ T5353] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 2a:24:30:0b:b9:27
[  503.363635][T10263] plantronics 0003:047F:FFFF.0024: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  503.411173][T13527] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  503.443158][T13527] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  503.474468][T13527] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  503.518015][ T5353] usb 4-1: USB disconnect, device number 21
[  503.528775][ T5353] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  503.548921][T13527] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  503.787211][T13527] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.836623][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  503.855727][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  503.880881][T13527] 8021q: adding VLAN 0 to HW filter on device team0
[  503.885028][ T5317] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  503.912240][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  503.923677][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  503.933153][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.940588][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.955401][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  503.967116][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  503.986217][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  504.003936][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.011223][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.051895][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  504.079003][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  504.132953][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  504.170000][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  504.198332][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  504.224440][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  504.282389][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  504.292814][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  504.303873][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  504.314652][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  504.324669][ T5305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  504.343460][T13527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  504.962541][T13754] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.001264][T13754] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.118950][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  505.126767][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  505.173745][T13527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.239716][T13746] loop7: detected capacity change from 0 to 32768
[  505.258277][T13746] /dev/loop7: Can't open blockdev
[  505.456734][T10263] usb 5-1: USB disconnect, device number 22
[  506.190265][T10272] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  506.425183][T10272] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  506.448051][T10272] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  506.457150][T10272] usb 8-1: config 1 has no interface number 0
[  506.478493][T10272] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.525005][T10272] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  506.559524][T10272] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30
[  506.614617][T10272] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  506.690829][T10272] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  506.700329][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  506.742486][T10272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.760964][T10272] usb 8-1: Product: syz
[  506.775813][T10272] usb 8-1: Manufacturer: syz
[  506.782085][T10272] usb 8-1: SerialNumber: syz
[  506.865621][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  506.885300][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  506.976120][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  507.011756][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  507.058834][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  507.115234][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  507.178985][T13527] device veth0_vlan entered promiscuous mode
[  507.220959][T13527] device veth1_vlan entered promiscuous mode
[  507.309456][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  507.339268][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  507.389961][T13527] device veth0_macvtap entered promiscuous mode
[  507.431723][T13527] device veth1_macvtap entered promiscuous mode
[  507.519929][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.558324][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.591389][T13527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.598896][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  507.648933][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  507.688746][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  507.729770][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  507.758612][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.804651][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.863415][T13527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.865692][T10272] cdc_ncm 8-1:1.1: bind() failure
[  507.893346][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  507.913193][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  507.966263][T13803] loop4: detected capacity change from 0 to 32768
[  507.980292][T13527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.020342][T13527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.053764][T13527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.059044][T13803] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.2478 (13803)
[  508.088640][ T5347] usb 8-1: USB disconnect, device number 22
[  508.110570][T13527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.163740][T13803] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  508.205218][T13803] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  508.214733][T13803] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  508.312989][T13803] BTRFS info (device loop4): use lzo compression, level 0
[  508.380141][T13803] BTRFS info (device loop4): using free space tree
[  508.394427][ T5317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.423709][ T5317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.497400][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  508.561682][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.631292][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.714362][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  508.773189][T13832] loop9: detected capacity change from 0 to 512
[  508.797362][T13803] BTRFS info (device loop4): enabling ssd optimizations
[  508.892338][T13832] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  508.914636][T13832] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  508.966028][T13832] System zones: 0-1, 15-15, 18-18, 34-34
[  509.032630][T13832] EXT4-fs (loop9): orphan cleanup on readonly fs
[  509.067559][T13832] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0
[  509.139959][T13832] EXT4-fs warning (device loop9): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  509.263172][T13832] EXT4-fs (loop9): Cannot turn on quotas: error -22
[  509.309578][T13832] EXT4-fs (loop9): 1 truncate cleaned up
[  509.359384][T13832] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  510.038852][ T7578] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  510.821822][T13853] loop5: detected capacity change from 0 to 32768
[  511.064009][T13853] XFS (loop5): Mounting V5 Filesystem
[  511.133312][ T7964] EXT4-fs (loop9): unmounting filesystem.
[  511.164593][T13853] XFS (loop5): Ending clean mount
[  511.409170][ T4256] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  511.623673][ T4256] usb 5-1: Using ep0 maxpacket: 32
[  511.631108][ T4256] usb 5-1: config 0 has no interfaces?
[  511.657836][ T4256] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  511.691802][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.724572][ T4256] usb 5-1: Product: syz
[  511.743688][ T4256] usb 5-1: Manufacturer: syz
[  511.763344][ T4256] usb 5-1: SerialNumber: syz
[  511.799756][ T4256] usb 5-1: config 0 descriptor??
[  511.933596][T13527] XFS (loop5): Unmounting Filesystem
[  511.968457][ T4319] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.000762][ T4319] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.227406][ T4319] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.248385][ T4319] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.317654][T13879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.326392][T13879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.363350][T10256] usb 5-1: USB disconnect, device number 23
[  512.443530][ T4319] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.473474][ T4319] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.653010][ T4319] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.704878][ T4319] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.147999][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  513.175732][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  513.187407][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  513.197007][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  513.208469][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  513.216712][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  513.346018][ T4319] tipc: Disabling bearer <udp:s>
[  513.357587][ T4319] tipc: Left network mode
[  514.038258][T13946] loop7: detected capacity change from 0 to 4096
[  514.061686][T13946] /dev/loop7: Can't open blockdev
[  514.594842][T13926] chnl_net:caif_netlink_parms(): no params data found
[  515.133907][T13978] loop4: detected capacity change from 0 to 512
[  515.148525][T13978] EXT4-fs: Ignoring removed bh option
[  515.187284][T13926] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.194814][T13978] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  515.281007][ T4274] Bluetooth: hci4: command 0x0409 tx timeout
[  515.291456][T13926] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.331038][T13978] EXT4-fs (loop4): 1 truncate cleaned up
[  515.349148][T13926] device bridge_slave_0 entered promiscuous mode
[  515.384419][T13978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  515.469728][T13926] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.486558][T13926] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.543007][T13926] device bridge_slave_1 entered promiscuous mode
[  515.668028][T13926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.984769][T13926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.004914][ T7578] EXT4-fs (loop4): unmounting filesystem.
[  516.420008][T13926] team0: Port device team_slave_0 added
[  516.519527][ T4319] device hsr_slave_0 left promiscuous mode
[  516.535034][ T4319] device hsr_slave_1 left promiscuous mode
[  516.581883][ T4256] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  516.608840][ T4319] device veth1_macvtap left promiscuous mode
[  516.615910][ T4319] device veth0_macvtap left promiscuous mode
[  516.622448][ T4319] device veth1_vlan left promiscuous mode
[  516.628458][ T4319] device veth0_vlan left promiscuous mode
[  516.642259][ T5347] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  516.772928][ T4319] bond1 (unregistering): Released all slaves
[  516.779134][ T4256] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.800104][ T4256] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.811859][ T4256] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  516.835347][ T4256] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  516.847386][ T4256] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.856118][ T5347] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  516.867628][ T5347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  516.887368][ T4256] usb 8-1: config 0 descriptor??
[  516.892926][ T5347] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  516.910221][ T5347] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.927717][ T5347] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  516.940171][ T5347] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  516.957639][ T5347] usb 4-1: Product: syz
[  516.976095][ T5347] usb 4-1: Manufacturer: syz
[  517.003701][ T5347] cdc_wdm 4-1:1.0: skipping garbage
[  517.010163][ T5347] cdc_wdm 4-1:1.0: skipping garbage
[  517.039176][ T5347] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  517.045295][ T5347] cdc_wdm 4-1:1.0: Unknown control protocol
[  517.321832][ T4256] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving
[  517.365146][ T4256] plantronics 0003:047F:FFFF.0025: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  517.393391][ T4274] Bluetooth: hci4: command 0x041b tx timeout
[  517.557380][    C1] cdc_wdm 4-1:1.0: Unexpected error -71
[  517.566173][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  517.572866][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  517.580162][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  517.586851][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  517.598862][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  517.605559][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  517.616514][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  517.623216][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  517.629735][ T4256] usb 4-1: USB disconnect, device number 22
[  519.311456][ T4319] bond0 (unregistering): Released all slaves
[  519.418976][ T5347] usb 8-1: USB disconnect, device number 23
[  519.501755][ T4274] Bluetooth: hci4: command 0x040f tx timeout
[  519.605064][T14041] loop7: detected capacity change from 0 to 512
[  519.621809][T14041] /dev/loop7: Can't open blockdev
[  519.661206][T13926] team0: Port device team_slave_1 added
[  519.722427][T14018] netlink: 'syz.4.2530': attribute type 9 has an invalid length.
[  519.757805][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2530'.
[  519.812236][T13926] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.860378][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.900676][T13926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.965310][T14018] netlink: 'syz.4.2530': attribute type 9 has an invalid length.
[  519.981062][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2530'.
[  519.993586][T13926] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.023705][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.095650][T13926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.339042][T13926] device hsr_slave_0 entered promiscuous mode
[  520.377176][T13926] device hsr_slave_1 entered promiscuous mode
[  520.444092][T13926] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.451750][T13926] Cannot create hsr debugfs directory
[  521.606216][ T4274] Bluetooth: hci4: command 0x0419 tx timeout
[  522.292195][   T26] audit: type=1326 audit(1771578480.467:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.4.2551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff9039c629 code=0x0
[  522.865968][T13926] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  522.901694][T13926] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  522.959047][T13926] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  522.999392][T13926] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  523.208882][T14113] loop7: detected capacity change from 0 to 4096
[  523.233164][ T4256] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  523.340114][T13926] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.382704][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  523.416788][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  523.437308][T13926] 8021q: adding VLAN 0 to HW filter on device team0
[  523.461895][ T4256] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  523.483834][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.511180][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  523.526638][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  523.536158][ T4256] usb 6-1: Product: syz
[  523.540402][ T4256] usb 6-1: Manufacturer: syz
[  523.555000][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.562260][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  523.570049][ T4256] usb 6-1: SerialNumber: syz
[  523.587300][ T4256] usb 6-1: config 0 descriptor??
[  523.627909][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  523.656695][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  523.674398][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  523.696195][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.703454][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.735868][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  523.800912][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  523.826941][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  523.875010][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  523.934830][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  523.937159][T14125] loop3: detected capacity change from 0 to 128
[  523.961616][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  523.988240][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  524.015225][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  524.033097][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  524.049810][T14125] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  524.063110][ T4256] usb 6-1: Firmware: major: 14, minor: 16, hardware type: UNKNOWN (232)
[  524.087006][T13926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  524.103394][T13926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  524.109142][T14125] hpfs: filesystem error: improperly stopped
[  524.125506][T14125] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  524.139344][T14125] hpfs: You really don't want any checks? You are crazy...
[  524.140857][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  524.154772][T14125] hpfs: hpfs_map_sector(): read error
[  524.160504][T14125] hpfs: code page support is disabled
[  524.177838][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  524.186750][T14125] hpfs: hpfs_map_4sectors(): unaligned read
[  524.210034][T14125] hpfs: hpfs_map_4sectors(): unaligned read
[  524.242199][T14125] hpfs: filesystem error: unable to find root dir
[  524.281342][ T4256] usb 6-1: Read permanent extended address 00:00:00:00:00:00:00:d1 from device
[  524.318109][T14125] hpfs: hpfs_map_4sectors(): unaligned read
[  524.339408][ T4256] usb 6-1: atusb_probe: initialization failed, error = -524
[  524.366301][T14125] hpfs: hpfs_map_sector(): read error
[  524.380437][ T4256] atusb: probe of 6-1:0.0 failed with error -524
[  524.404063][T14125] hpfs: hpfs_map_4sectors(): unaligned read
[  524.427437][T14130] loop4: detected capacity change from 0 to 512
[  524.452925][T14125] hpfs: hpfs_map_sector(): read error
[  524.491612][ T4256] usb 6-1: USB disconnect, device number 2
[  524.538041][T14133] loop7: detected capacity change from 0 to 512
[  524.565132][T14130] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2570: invalid indirect mapped block 4294967295 (level 1)
[  524.598379][T14133] EXT4-fs: Ignoring removed bh option
[  524.604740][T14133] /dev/loop7: Can't open blockdev
[  524.640509][T14130] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2570: invalid indirect mapped block 4294967295 (level 1)
[  524.688235][T14130] EXT4-fs (loop4): 2 truncates cleaned up
[  524.694065][T14130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  524.805357][T14138] loop3: detected capacity change from 0 to 256
[  524.961707][ T7578] EXT4-fs (loop4): unmounting filesystem.
[  525.521081][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  525.603226][T14154] loop4: detected capacity change from 0 to 8192
[  525.610033][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  525.628582][T14154] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  525.674296][T13926] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.967327][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  525.996922][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  526.106312][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  526.159736][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  526.193497][T13926] device veth0_vlan entered promiscuous mode
[  526.244832][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  526.276723][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  526.326143][T13926] device veth1_vlan entered promiscuous mode
[  526.471959][T14174] loop3: detected capacity change from 0 to 256
[  526.479938][T14174] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  526.494716][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  526.520182][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  526.566543][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  526.580676][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  526.617391][T14174] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  526.657938][T13926] device veth0_macvtap entered promiscuous mode
[  526.662913][T14174] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xaaf53d22, utbl_chksum : 0xe619d30d)
[  526.715708][T13926] device veth1_macvtap entered promiscuous mode
[  526.853772][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.906956][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.969368][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.026623][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.062942][T13926] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.120121][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  527.157533][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  527.204898][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.226520][T14187] loop5: detected capacity change from 0 to 512
[  527.257966][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.283880][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.325354][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.356623][T14187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  527.405956][T13926] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.432087][T14187] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  527.454008][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  527.501083][   T26] audit: type=1800 audit(1771578485.630:357): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2579" name="file1" dev="loop5" ino=15 res=0 errno=0
[  527.503990][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  527.673291][T13926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.721247][T13926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.730640][T13926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.791812][T13926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.808860][T13527] EXT4-fs (loop5): unmounting filesystem.
[  528.096958][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.115545][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.141134][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  528.211526][ T5317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.242096][ T5317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.279983][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  528.563904][T14217] loop0: detected capacity change from 0 to 64
[  528.717326][T14217] hfs: hfs: Invalid key length: 94
[  528.915548][ T5317] ------------[ cut here ]------------
[  528.921408][ T5317] kernel BUG at fs/hfs/inode.c:449!
[  528.933367][ T5317] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  528.939531][ T5317] CPU: 0 PID: 5317 Comm: kworker/u4:21 Not tainted syzkaller #0
[  528.947233][ T5317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  528.957348][ T5317] Workqueue: writeback wb_workfn (flush-7:0)
[  528.963409][ T5317] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  528.969037][ T5317] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 05 87 ff e9 47 fe ff ff e8 96 19 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  528.988967][ T5317] RSP: 0018:ffffc900037173a0 EFLAGS: 00010293
[  528.995113][ T5317] RAX: ffffffff824c5b8a RBX: ffff88805fd01b98 RCX: ffff88802a7cbb80
[  529.003148][ T5317] RDX: 0000000000000000 RSI: ffffffff8cd252e0 RDI: 0000000000000000
[  529.011355][ T5317] RBP: ffffc90003717530 R08: ffff88802a7cbb80 R09: 0000000000000003
[  529.019372][ T5317] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  529.027568][ T5317] R13: 1ffff920006e2e78 R14: 0000000000000000 R15: ffff88805fd01b58
[  529.035598][ T5317] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  529.044690][ T5317] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  529.051425][ T5317] CR2: 00007fd5a2209000 CR3: 00000000611b5000 CR4: 00000000003506f0
[  529.059449][ T5317] Call Trace:
[  529.062797][ T5317]  <TASK>
[  529.065781][ T5317]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  529.071229][ T5317]  ? __writeback_single_inode+0x4ae/0x1160
[  529.077229][ T5317]  ? __rwlock_init+0x140/0x140
[  529.082060][ T5317]  __writeback_single_inode+0x75b/0x1160
[  529.087765][ T5317]  writeback_sb_inodes+0xb30/0x1850
[  529.093046][ T5317]  ? queue_io+0x5a0/0x5a0
[  529.097542][ T5317]  ? rcu_is_watching+0x11/0xa0
[  529.102426][ T5317]  wb_writeback+0x482/0xd50
[  529.107000][ T5317]  ? percpu_ref_tryget+0x250/0x250
[  529.112183][ T5317]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  529.118242][ T5317]  ? _raw_spin_unlock_irq+0x1f/0x40
[  529.123507][ T5317]  wb_workfn+0x423/0xee0
[  529.127816][ T5317]  ? inode_wait_for_writeback+0x220/0x220
[  529.133619][ T5317]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  529.139666][ T5317]  ? read_lock_is_recursive+0x10/0x10
[  529.145191][ T5317]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  529.151264][ T5317]  ? _raw_spin_unlock+0x40/0x40
[  529.151384][ T5353] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  529.156160][ T5317]  ? _raw_spin_unlock_irq+0x1f/0x40
[  529.156193][ T5317]  ? process_one_work+0x7b0/0x1160
[  529.156216][ T5317]  process_one_work+0x8a2/0x1160
[  529.156248][ T5317]  ? worker_detach_from_pool+0x240/0x240
[  529.156272][ T5317]  ? _raw_spin_lock_irq+0xb7/0xf0
[  529.190373][ T5317]  ? _raw_spin_lock_irqsave+0x100/0x100
[  529.196160][ T5317]  ? kthread_data+0x4b/0xc0
[  529.201252][ T5317]  worker_thread+0xaa2/0x1270
[  529.206114][ T5317]  kthread+0x29d/0x330
[  529.210233][ T5317]  ? worker_clr_flags+0x1a0/0x1a0
[  529.215396][ T5317]  ? kthread_blkcg+0xd0/0xd0
[  529.220035][ T5317]  ret_from_fork+0x1f/0x30
[  529.224520][ T5317]  </TASK>
[  529.227678][ T5317] Modules linked in:
[  529.245241][ T5317] ---[ end trace 0000000000000000 ]---
[  529.251001][ T5317] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  529.256936][ T5317] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 05 87 ff e9 47 fe ff ff e8 96 19 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  529.266503][T14229] loop5: detected capacity change from 0 to 128
[  529.281198][ T5317] RSP: 0018:ffffc900037173a0 EFLAGS: 00010293
[  529.290943][ T5317] RAX: ffffffff824c5b8a RBX: ffff88805fd01b98 RCX: ffff88802a7cbb80
[  529.321349][ T5317] RDX: 0000000000000000 RSI: ffffffff8cd252e0 RDI: 0000000000000000
[  529.332681][ T5317] RBP: ffffc90003717530 R08: ffff88802a7cbb80 R09: 0000000000000003
[  529.343682][T14229] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  529.354256][ T5353] usb 5-1: Using ep0 maxpacket: 16
[  529.355425][T14229] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  529.376657][ T5353] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  529.394117][T10256] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  529.401890][ T5317] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  529.429012][ T5353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  529.431778][ T5317] R13: 1ffff920006e2e78 R14: 0000000000000000 R15: ffff88805fd01b58
[  529.448430][ T5317] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  529.458131][ T5317] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  529.465516][ T5317] CR2: 00007f799d898000 CR3: 0000000043519000 CR4: 00000000003506f0
[  529.473684][ T5317] Kernel panic - not syncing: Fatal exception
[  529.479937][ T5317] Kernel Offset: disabled
[  529.484387][ T5317] Rebooting in 86400 seconds..