last executing test programs:

4m58.715021503s ago: executing program 1 (id=685):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)

4m58.380033325s ago: executing program 1 (id=687):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x835)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080)

4m56.746789865s ago: executing program 1 (id=691):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)

4m49.525320935s ago: executing program 1 (id=704):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid={'resuid', 0x3d, 0xee01}}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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")
open(0x0, 0x14927e, 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14907e, 0x3)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
write(r0, &(0x7f0000000540)="953820a61a166fd5", 0x8)

4m47.853083008s ago: executing program 1 (id=708):
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x0, 0x0)

4m46.930893589s ago: executing program 1 (id=711):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0xe, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000280))
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000800)='ufs\x00', 0x0)
setresgid(0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = dup(r3)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
pwrite64(r3, 0x0, 0x0, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

4m46.389778016s ago: executing program 32 (id=711):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0xe, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000280))
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000800)='ufs\x00', 0x0)
setresgid(0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = dup(r3)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
pwrite64(r3, 0x0, 0x0, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

4m23.824505541s ago: executing program 2 (id=753):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2})

4m21.679942743s ago: executing program 2 (id=756):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x1669e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
clock_adjtime(0x7, &(0x7f0000000240)={0x8, 0xa, 0x4, 0x0, 0xffffffffffffff46, 0x7ff, 0x2, 0x4, 0x1, 0x6, 0xd1, 0x6, 0x4, 0x7fffffffffffffff, 0x4, 0x73, 0x10001, 0x1, 0x80000000, 0x4, 0x3, 0x8000, 0x4, 0xffffffffffffffff, 0xcde, 0x4})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x107)
rmdir(&(0x7f0000000000)='./file0\x00')

4m20.660953537s ago: executing program 2 (id=759):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)

4m18.999692532s ago: executing program 2 (id=760):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$video4linux(&(0x7f0000000040), 0x47ffe, 0x7c9d03)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
close(r1)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)

4m18.670917096s ago: executing program 2 (id=764):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20, 0x0, 0x8, 0x0, &(0x7f0000000040))
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0xa)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m15.850573632s ago: executing program 2 (id=771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}], {0x14}}, 0x6c}}, 0x800)

4m0.467429919s ago: executing program 33 (id=771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}], {0x14}}, 0x6c}}, 0x800)

14.724359689s ago: executing program 3 (id=1322):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)

14.623052412s ago: executing program 4 (id=1323):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x2, 0x2002)

14.583960925s ago: executing program 3 (id=1325):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='C\a', 0x2}], 0x2}, 0x4)

14.566614312s ago: executing program 5 (id=1326):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x100001)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4000002e, 0x0, @thr={0x0, 0x0}})
r6 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d", 0x7, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000007af2f1b0b5c10000f02262607852b1902640c89d427455f15ff11ec2aa902548d9356bc6d8ecca861c6f360bc65dc9662d77b655fdbc913db37d5a4a501f5cfb97723a9f3a421623e444275701ef5e1adfa24d105e3d11064c6e1bcdd690b7e6e8468ec6d1bca7bb01a7ddf8d26bfb8744dd16730c15fbb2bf5fb342cdadead1fc10db21e1464c5b8482a6782fb246e9cf8e3b0067512e2b0e0ea82ccb0e809cdd8e318beb68cd27bd4cd11a223923"], 0x18}], 0x1}, 0x0)
r7 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r7, &(0x7f0000000500)={0x18, &(0x7f0000000100)={0x0, 0x69, 0x2e, {0x2e, 0x23, "6bebe1e0e819bc887c8ccd7887884e4b7d0090d3ba6933a6881e417588cc17392acaca1a78c4dbfcb18a6113"}}, &(0x7f0000000380)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}, &(0x7f00000001c0)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x7, 0xf79e, 0x7, [0xff]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x60, 0x2, 0x9, "2eb14826", "db9bdb8c"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x2, 0x69, 0x2, 0x9, 0x7fff}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000600)={0x0, 0x8, 0xff, "d2102526272c6581cb9d0353b417ef43f315ebc3fdc367e20bffa1f2187d1abaddda86bbd44b79ed1ad7579590f4c723bcf85683e9d0a9f6877461746c03e59efc8777051927c1c28466714b5e4006d294983313cca6b340a62bc03ed4903a5bda341cdd86ee83c7b0dc0d27ac98139e1cf8e10dd590f7f2788dbdf6e9cfb8f354dc227e1154abb7b9c10f59388967459f3e217a1dc33a417d81853791a3d5e173a5f06820346a9313e1e662fd1dcc196f3d54c1261e152d8957cafc97459e9aba8bac76aee6b9510dbed9d989f1b2db2d27050d12332a63d388c36b214b172ffc376696cb03ad02ec2db1636fd22ffca83d403c54bc901d182f961e3b025a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x200, 0x2, [0xff00]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0xb, 0x2, "895b"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0xd9}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "1620"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x29}})

12.844302646s ago: executing program 0 (id=1329):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100"], 0xf8}}, 0x0)

12.837877345s ago: executing program 4 (id=1330):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2})

12.025562526s ago: executing program 6 (id=1331):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x3}]}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r5, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0xdc, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0x400b, 0x6, 0x0, 0x6, 0x1, 0x6, 0x2000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x1, 0x7, 0x8000, 0x0, r7, r8, 0x1, 0x3}}, {0x3, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0})
getdents64(r9, 0x0, 0x0)
sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

11.910680456s ago: executing program 4 (id=1332):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040081)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0), 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

11.339066498s ago: executing program 0 (id=1333):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})

10.299382649s ago: executing program 6 (id=1334):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x3f, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='H\x80'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

9.978925924s ago: executing program 6 (id=1335):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_FUNCS(r0, 0x705, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000000100)=[{0x3, 0x8800, 0x4f, &(0x7f0000000080)="132bcf444ef7b8ffb5d2831e173baceec474d397488fbe621a647fa9b74e7320e6d0b2e263515874a4359e81b1f07633468ec7fcee6004045e00ff1ca104dd919aa0b0f520612d015d5c4b444de327"}], 0x1})

9.8425252s ago: executing program 6 (id=1336):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x84}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff})
ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000002c0)={0x2, 0x0, 0x2, 0xa, 0x8, 0xf1, 0x3, 0x6, 0x7, 0x0, 0x40, "aadf5c6775c2a83ae013912de06ed19205b91b32904fe5e7543f0cdd0808d402"})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="306984c49ae12dd0538500000000000000df000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x3}, 0x8)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.752461725s ago: executing program 5 (id=1337):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4)
epoll_create1(0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, 0x0, 0x8006)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0xc000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1514)

8.603333678s ago: executing program 5 (id=1338):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0)
connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
syz_open_dev$sndmidi(0x0, 0x2, 0x80080)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @loopback, 0x7}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
keyctl$clear(0x3, 0xfffffffffffffffc)
request_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='@\x00', 0x0)

7.541824565s ago: executing program 5 (id=1339):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000d80)={{0x12, 0x1, 0x100, 0x85, 0xf1, 0xd8, 0x10, 0xbfd, 0x126, 0xbde4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xbd, 0x80, 0x3, "", [{{0x9, 0x4, 0x3a, 0x6, 0x1, 0xd1, 0xd5, 0xb2, 0x13, [], [{{0x9, 0x5, 0xb, 0x2, 0x40, 0x7, 0x6}}]}}]}}]}}, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0)

6.016183523s ago: executing program 5 (id=1340):
gettid()
clock_nanosleep(0x1, 0x1, 0x0, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
read$FUSE(r5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

5.754040198s ago: executing program 4 (id=1341):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[])
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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")
close(r3)
write$FUSE_WRITE(r3, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x4}}, 0x18)

5.70663785s ago: executing program 0 (id=1342):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2})

5.70603403s ago: executing program 3 (id=1343):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x8, {{0xa, 0x4e21, 0x5, @loopback, 0x1bd62b42}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0xdb6}}]}, 0x190)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000003c0)='%/,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\bE\xd15ec>:D+\xb7+\xe7Ia\b\t\x86\xad&\x9a\x82PP\xd8\xac#<\x02\xfd\x94I\x93\xab\xc1T\f\xd0T\xc8\xb0\xf938\x12\xee_v\xebL\xb1A1\xf1i\xe3\x8a\xc2\x14\x97P$\xa6\x11\xdc\x99\xa2>\xeeFNZui\x9emWt\x8c\xadH\xd1<\x05[\x9c\x87H\xdes\xf7\xdf\xe9y\xd7\xb1\xc5\rh\xa5\xe3\xaf\xa1\x95\x1b\xdb\xa3\xf5\xdc\x18$\xf0\x93w', 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x32a}, {0x28, 0x7f, 0x4, 0x38c5741b}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

5.678431136s ago: executing program 6 (id=1344):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80442, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000005000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, r0}, 0x68)

4.719076301s ago: executing program 0 (id=1345):
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x26, 0x34b, &(0x7f0000000700)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)

3.928700375s ago: executing program 3 (id=1346):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\bw'], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.826728998s ago: executing program 6 (id=1347):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x100001)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4000002e, 0x0, @thr={0x0, 0x0}})
r6 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d", 0x7, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000007af2f1b0b5c10000f02262607852b1902640c89d427455f15ff11ec2aa902548d9356bc6d8ecca861c6f360bc65dc9662d77b655fdbc913db37d5a4a501f5cfb97723a9f3a421623e444275701ef5e1adfa24d105e3d11064c6e1bcdd690b7e6e8468ec6d1bca7bb01a7ddf8d26bfb8744dd16730c15fbb2bf5fb342cdadead1fc10db21e1464c5b8482a6782fb246e9cf8e3b0067512e2b0e0ea82ccb0e809cdd8e318beb68cd27bd4cd11a223923"], 0x18}], 0x1}, 0x0)
r7 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r7, &(0x7f0000000500)={0x18, &(0x7f0000000100)={0x0, 0x69, 0x2e, {0x2e, 0x23, "6bebe1e0e819bc887c8ccd7887884e4b7d0090d3ba6933a6881e417588cc17392acaca1a78c4dbfcb18a6113"}}, &(0x7f0000000380)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}, &(0x7f00000001c0)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x7, 0xf79e, 0x7, [0xff]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x60, 0x2, 0x9, "2eb14826", "db9bdb8c"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x2, 0x69, 0x2, 0x9, 0x7fff}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000600)={0x0, 0x8, 0xff, "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"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x200, 0x2, [0xff00]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0xb, 0x2, "895b"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0xd9}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "1620"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x29}})

2.122695985s ago: executing program 4 (id=1348):
syz_emit_ethernet(0x83, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6a000000004d1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970000f02b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

2.03358066s ago: executing program 0 (id=1349):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0)
connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
syz_open_dev$sndmidi(0x0, 0x2, 0x80080)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @loopback, 0x7}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
keyctl$clear(0x3, 0xfffffffffffffffc)
request_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='@\x00', 0x0)

1.897681396s ago: executing program 3 (id=1350):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f00000011c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @loopback, {0x5, 0x4, 0x1, 0x0, 0x1, 0x66, 0x6, 0x3, 0x6c, 0x0, @broadcast, @local}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x1, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x3, 0x6, 0x6}, 0x3c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket(0xa, 0x3, 0xff)
sendfile(r0, r1, 0x0, 0x20fffe85)
ftruncate(r0, 0x4)

869.217739ms ago: executing program 0 (id=1351):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040081)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0), 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

868.96601ms ago: executing program 4 (id=1352):
unshare(0x6020400)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
io_submit(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

380.371736ms ago: executing program 5 (id=1353):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1)
openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x12140, 0xb)
epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r1 = syz_open_pts(0xffffffffffffffff, 0x80)
r2 = dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$sock_SIOCINQ(r2, 0x541b, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getuid()
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90}}]}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)

0s ago: executing program 3 (id=1354):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x84}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff})
ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000002c0)={0x2, 0x0, 0x2, 0xa, 0x8, 0xf1, 0x3, 0x6, 0x7, 0x0, 0x40, "aadf5c6775c2a83ae013912de06ed19205b91b32904fe5e7543f0cdd0808d402"})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="306984c49ae12dd0538500000000000000df000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x3}, 0x8)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

[  329.761231][ T4616] usb 5-1: Product: syz
[  329.807029][ T4616] usb 5-1: Manufacturer: syz
[  329.841002][ T4616] usb 5-1: SerialNumber: syz
[  329.904037][ T6724] device syzkaller0 entered promiscuous mode
[  329.926014][ T6722] loop1: detected capacity change from 0 to 8192
[  331.245471][ T4616] rtl8150 5-1:1.0: couldn't reset the device
[  331.258291][ T4616] rtl8150: probe of 5-1:1.0 failed with error -5
[  331.273304][ T6734] loop0: detected capacity change from 0 to 8
[  331.332430][ T6734] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  331.357680][ T4395] udevd[4395]: incorrect cramfs checksum on /dev/loop0
[  331.442741][ T4373] udevd[4373]: incorrect cramfs checksum on /dev/loop0
[  331.993905][ T6739] /dev/loop0: Can't open blockdev
[  332.964262][ T6740] cramfs: Error -3 while decompressing!
[  332.971722][ T6740] cramfs: ffffffff96d89178(16)->ffff88807223c000(4096)
[  332.980089][ T6740] cramfs: Error -3 while decompressing!
[  332.985894][ T6740] cramfs: ffffffff96d89178(16)->ffff88807223c000(4096)
[  333.002651][   T26] audit: type=1800 audit(1772584008.072:6): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.556" name="file0" dev="loop0" ino=244 res=0 errno=0
[  334.332435][ T2179] usb 5-1: USB disconnect, device number 27
[  338.499831][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'.
[  339.792133][ T6791] loop4: detected capacity change from 0 to 32768
[  339.844834][ T6791] (syz.4.573,6791,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  339.858902][ T6791] (syz.4.573,6791,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  339.899681][ T6791] JBD2: Ignoring recovery information on journal
[  339.957517][ T6791] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  340.098321][ T4276] ocfs2: Unmounting device (7,4) on (node local)
[  347.344067][ T6848] loop4: detected capacity change from 0 to 128
[  347.513621][ T6851] loop0: detected capacity change from 0 to 32768
[  347.549389][ T6851] (syz.0.589,6851,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  347.564779][ T6851] (syz.0.589,6851,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  347.625073][ T6851] JBD2: Ignoring recovery information on journal
[  347.729063][ T6851] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  347.814467][ T6855] syz.4.593: attempt to access beyond end of device
[  347.814467][ T6855] loop4: rw=2049, sector=145, nr_sectors = 336 limit=128
[  347.919193][ T4267] ocfs2: Unmounting device (7,0) on (node local)
[  348.062778][ T6858] loop2: detected capacity change from 0 to 1024
[  348.311100][ T6858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  350.607502][ T6873] overlayfs: filesystem on './file0' not supported as upperdir
[  351.421346][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  351.712004][ T6885] loop3: detected capacity change from 0 to 32768
[  351.727769][ T6885] (syz.3.604,6885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  351.743524][ T6885] (syz.3.604,6885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  351.819441][ T6885] JBD2: Ignoring recovery information on journal
[  352.698031][ T6885] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  352.883319][ T4280] ocfs2: Unmounting device (7,3) on (node local)
[  356.317322][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'.
[  357.604614][ T6933] loop2: detected capacity change from 0 to 128
[  357.667324][ T4616] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  357.789452][ T6933] syz.2.606: attempt to access beyond end of device
[  357.789452][ T6933] loop2: rw=2049, sector=145, nr_sectors = 536 limit=128
[  357.866717][ T4616] usb 4-1: Using ep0 maxpacket: 8
[  357.882902][ T4616] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  357.913091][ T4616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.942385][ T4616] pvrusb2: Hardware description: Terratec Grabster AV400
[  358.012720][ T4616] pvrusb2: **********
[  358.044016][ T4616] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  358.109664][ T4616] pvrusb2: Important functionality might not be entirely working.
[  358.138531][ T4616] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  358.301743][ T6938] loop2: detected capacity change from 0 to 32768
[  358.318051][ T4616] pvrusb2: **********
[  358.336821][ T2309] pvrusb2: Invalid write control endpoint
[  358.347367][ T6938] (syz.2.619,6938,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  358.361530][ T6938] (syz.2.619,6938,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  358.452391][ T6938] JBD2: Ignoring recovery information on journal
[  358.516279][ T6946] pvrusb2: Invalid write control endpoint
[  358.556697][ T6938] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  358.748162][ T6949] loop0: detected capacity change from 0 to 32768
[  358.849503][ T6949] (syz.0.617,6949,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  358.865673][ T6949] (syz.0.617,6949,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  358.926980][ T6949] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present!
[  358.944541][ T6949] JBD2: Ignoring recovery information on journal
[  359.073672][ T2179] usb 4-1: USB disconnect, device number 20
[  359.151721][ T2309] pvrusb2: Invalid write control endpoint
[  359.159390][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  359.178082][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  359.317732][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  359.463313][ T6949] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  359.479793][ T2309] pvrusb2: Device being rendered inoperable
[  359.486542][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  359.496861][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  359.581266][ T2309] pvrusb2: Attached sub-driver cx25840
[  359.631365][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  359.666646][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  360.193052][ T4267] ocfs2: Unmounting device (7,0) on (node local)
[  360.200345][ T4266] ocfs2: Unmounting device (7,2) on (node local)
[  362.249045][ T6981] loop2: detected capacity change from 0 to 128
[  362.341978][ T6981] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  362.374359][ T6981] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.666545][ T6988] loop0: detected capacity change from 0 to 32768
[  363.706323][ T6988] (syz.0.632,6988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  363.723184][ T6988] (syz.0.632,6988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  363.840496][ T6988] JBD2: Ignoring recovery information on journal
[  363.871986][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  363.980379][ T6988] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  364.113320][ T6988] ocfs2: Unmounting device (7,0) on (node local)
[  365.665231][ T6741] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  365.828261][ T6998] tipc: Failed to remove unknown binding: 66,1,1/0:1481438684/1481438686
[  365.906656][ T6741] usb 3-1: Using ep0 maxpacket: 8
[  365.913763][ T6741] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  365.971770][ T6741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.051078][ T6741] pvrusb2: Hardware description: Terratec Grabster AV400
[  366.082638][ T6741] pvrusb2: **********
[  366.087782][ T6741] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  366.116531][ T6741] pvrusb2: Important functionality might not be entirely working.
[  366.136850][ T6741] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  366.167103][ T6741] pvrusb2: **********
[  367.289934][ T6741] usb 3-1: USB disconnect, device number 27
[  367.297977][ T6741] pvrusb2: Device being rendered inoperable
[  367.690573][ T7015] xt_hashlimit: max too large, truncated to 1048576
[  368.159088][ T7024] loop3: detected capacity change from 0 to 512
[  368.316395][ T7024] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.643: bg 0: block 5: invalid block bitmap
[  368.433688][ T7024] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  369.747539][ T7024] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.643: invalid indirect mapped block 3 (level 2)
[  369.879995][ T7024] EXT4-fs (loop3): 1 orphan inode deleted
[  369.932862][ T7024] EXT4-fs (loop3): 1 truncate cleaned up
[  369.969776][ T7024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  370.761721][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  372.082536][ T7047] loop0: detected capacity change from 0 to 4096
[  372.182557][ T7047] ntfs3: loop0: ino=3, Correct links count -> 2.
[  373.606748][ T4614] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  373.671456][ T7067] loop4: detected capacity change from 0 to 512
[  373.773579][ T7067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  373.796929][ T7067] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.816914][ T4614] usb 1-1: Using ep0 maxpacket: 8
[  373.823926][ T4614] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  373.878990][ T4614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.895349][ T7067] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 97 vs 96 free clusters
[  374.016936][ T4614] pvrusb2: Hardware description: Terratec Grabster AV400
[  374.017047][ T7067] Quota error (device loop4): write_blk: dquota write failed
[  374.064652][ T4614] pvrusb2: **********
[  374.095089][ T7067] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  374.240204][ T4614] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  374.259760][ T4614] pvrusb2: Important functionality might not be entirely working.
[  374.276616][ T4614] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  374.300543][ T4614] pvrusb2: **********
[  374.389507][ T7067] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  374.404651][ T2309] pvrusb2: Invalid write control endpoint
[  374.751145][ T6741] usb 1-1: USB disconnect, device number 21
[  374.787357][ T7067] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.653: Failed to acquire dquot type 1
[  374.887522][ T2309] pvrusb2: Invalid write control endpoint
[  374.910117][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  374.928675][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  374.961263][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  374.982883][ T2309] pvrusb2: Device being rendered inoperable
[  375.006395][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  375.027903][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  375.038112][ T2309] pvrusb2: Attached sub-driver cx25840
[  375.044267][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  375.086529][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  375.128608][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  375.286585][ T2179] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  375.309202][ T7083] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma?
[  376.722990][ T2179] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  378.051539][ T2179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.060437][ T2179] usb 4-1: Product: syz
[  378.064857][ T2179] usb 4-1: Manufacturer: syz
[  378.069679][ T2179] usb 4-1: SerialNumber: syz
[  379.342821][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  379.349485][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  380.138111][ T7101] loop2: detected capacity change from 0 to 8
[  380.362344][ T7101] SQUASHFS error: Unable to read inode 0xa7
[  381.004857][ T7103] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96
[  381.307571][ T2179] usb 4-1: can't set config #1, error -71
[  381.381387][ T2179] usb 4-1: USB disconnect, device number 21
[  382.519644][ T7118] loop0: detected capacity change from 0 to 32768
[  382.563524][ T7118] (syz.0.667,7118,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  382.577479][ T7118] (syz.0.667,7118,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  382.724601][ T7118] JBD2: Ignoring recovery information on journal
[  382.785738][ T7118] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  382.841979][ T7118] ocfs2: Unmounting device (7,0) on (node local)
[  385.847079][ T7156] device syzkaller0 entered promiscuous mode
[  386.883022][ T6741] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  387.151395][ T6741] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  387.176682][ T6741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.196583][ T6741] usb 4-1: Product: syz
[  387.216685][ T6741] usb 4-1: Manufacturer: syz
[  387.221711][ T6741] usb 4-1: SerialNumber: syz
[  388.051080][ T7167] loop2: detected capacity change from 0 to 128
[  388.750594][ T6741] rtl8150 4-1:1.0: couldn't reset the device
[  388.774656][ T6741] rtl8150: probe of 4-1:1.0 failed with error -5
[  391.744080][ T4614] usb 4-1: USB disconnect, device number 22
[  398.799602][ T7225] loop2: detected capacity change from 0 to 32768
[  398.846966][ T7225] (syz.2.695,7225,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  398.900686][ T7225] (syz.2.695,7225,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  398.990662][ T7225] JBD2: Ignoring recovery information on journal
[  399.167425][ T4616] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  399.182046][ T7225] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  399.334657][ T4266] ocfs2: Unmounting device (7,2) on (node local)
[  399.382585][ T4616] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  399.398682][ T4616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.420123][ T4616] usb 4-1: Product: syz
[  399.424557][ T4616] usb 4-1: Manufacturer: syz
[  399.447648][ T4616] usb 4-1: SerialNumber: syz
[  400.579214][ T7250] loop1: detected capacity change from 0 to 1024
[  400.607191][ T7250] EXT4-fs: Ignoring removed nomblk_io_submit option
[  400.706087][ T7250] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  400.803953][ T4616] rtl8150 4-1:1.0: couldn't reset the device
[  400.815870][ T4616] rtl8150: probe of 4-1:1.0 failed with error -5
[  401.997635][ T7250] loop1: detected capacity change from 1024 to 0
[  402.054716][ T7253] binder: 7251:7253 ioctl c0306201 200000000540 returned -14
[  402.182067][    C0] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  402.218237][    C0] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  402.228868][    C0] I/O error, dev loop1, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  402.239066][    C0] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  402.253043][ T4268] EXT4-fs error (device loop1): ext4_get_inode_loc:4651: inode #2: block 5: comm syz-executor: unable to read itable block
[  402.290422][ T4343] loop: Write error at byte offset 9223372036854776831, length 1024.
[  402.306755][    C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  402.316550][    C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  402.327055][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  402.338635][ T4268] EXT4-fs (loop1): I/O error while writing superblock
[  402.345683][ T4268] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: IO failure
[  402.356633][ T4343] loop: Write error at byte offset 9223372036854776831, length 1024.
[  402.366047][    C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  402.376439][    C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  402.386715][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  402.401054][ T4268] EXT4-fs (loop1): I/O error while writing superblock
[  402.408511][ T4268] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz-executor: mark_inode_dirty error
[  402.414081][ T7268] loop0: detected capacity change from 0 to 128
[  402.423718][   T11] loop: Write error at byte offset 9223372036854776831, length 1024.
[  402.446678][    C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  402.456497][    C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  402.465959][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  402.474735][ T4268] EXT4-fs (loop1): I/O error while writing superblock
[  402.545837][   T11] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4636: inode #2: block 5: comm kworker/u4:1: unable to read itable block
[  402.571235][ T4872] loop: Write error at byte offset 9223372036854776831, length 1024.
[  402.604279][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  402.613235][   T11] EXT4-fs (loop1): I/O error while writing superblock
[  402.627172][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  402.644287][   T11] loop: Write error at byte offset 9223372036854776831, length 1024.
[  402.688156][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  402.696572][ T4268] EXT4-fs (loop1): I/O error while writing superblock
[  402.704673][   T11] loop: Write error at byte offset 9223372036854841343, length 1024.
[  402.722345][    C0] Buffer I/O error on dev loop1, logical block 64, lost sync page write
[  402.741168][ T7269] syz.0.707: attempt to access beyond end of device
[  402.741168][ T7269] loop0: rw=2049, sector=145, nr_sectors = 160 limit=128
[  402.798669][ T4616] usb 4-1: USB disconnect, device number 23
[  402.889376][ T7268] syz.0.707: attempt to access beyond end of device
[  402.889376][ T7268] loop0: rw=524288, sector=145, nr_sectors = 160 limit=128
[  402.975323][ T7268] syz.0.707: attempt to access beyond end of device
[  402.975323][ T7268] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  403.010565][ T7268] syz.0.707: attempt to access beyond end of device
[  403.010565][ T7268] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  403.093215][ T7268] syz.0.707: attempt to access beyond end of device
[  403.093215][ T7268] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  403.154586][ T4343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.176970][ T7268] syz.0.707: attempt to access beyond end of device
[  403.176970][ T7268] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  403.369772][ T4343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.587960][ T4343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.721782][ T7278] binder: 7275:7278 unknown command 1074553619
[  403.756618][ T7278] binder: 7275:7278 ioctl c0306201 200000000540 returned -22
[  403.812349][ T7273] loop3: detected capacity change from 0 to 32768
[  403.828564][ T4343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.872948][ T7273] (syz.3.710,7273,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  403.950094][ T7273] (syz.3.710,7273,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  404.027402][ T7280] device syzkaller0 entered promiscuous mode
[  404.062259][ T7273] JBD2: Ignoring recovery information on journal
[  404.183096][ T7273] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  404.401348][ T4280] ocfs2: Unmounting device (7,3) on (node local)
[  404.662026][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  404.697185][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  404.707291][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  405.657528][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  405.668298][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  405.670259][ T7294] loop2: detected capacity change from 0 to 32768
[  405.675620][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  405.719073][ T7294] (syz.2.717,7294,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  405.746737][ T7294] (syz.2.717,7294,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  405.761042][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  405.799705][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  405.809515][ T7294] JBD2: Ignoring recovery information on journal
[  405.833223][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  405.842285][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  405.852122][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  405.860422][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  405.869816][ T7294] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  405.902316][ T7294] ocfs2: Unmounting device (7,2) on (node local)
[  407.968696][ T4278] Bluetooth: hci2: command 0x0409 tx timeout
[  408.889548][ T4618] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  409.134801][ T4618] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  409.182177][ T4618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.226519][ T4618] usb 5-1: Product: syz
[  409.230913][ T4618] usb 5-1: Manufacturer: syz
[  409.252677][ T4618] usb 5-1: SerialNumber: syz
[  409.436633][ T4316] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  409.626572][ T4316] usb 4-1: Using ep0 maxpacket: 8
[  409.656591][ T4316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  409.681131][ T4316] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  409.710719][ T4316] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  409.721359][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.730625][ T4316] usb 4-1: Product: syz
[  409.735019][ T4316] usb 4-1: Manufacturer: syz
[  409.740518][ T4316] usb 4-1: SerialNumber: syz
[  409.770545][ T4316] cdc_ether 4-1:1.0: skipping garbage
[  409.794088][ T4316] usb 4-1: bad CDC descriptors
[  409.812812][ T4316] usbtest 4-1:1.0: couldn't get endpoints, -22
[  409.842549][ T4316] usbtest: probe of 4-1:1.0 failed with error -22
[  410.043739][ T4278] Bluetooth: hci2: command 0x041b tx timeout
[  410.169768][ T4316] usb 4-1: USB disconnect, device number 24
[  410.571063][ T4618] rtl8150 5-1:1.0: couldn't reset the device
[  410.619778][ T4618] rtl8150: probe of 5-1:1.0 failed with error -5
[  411.806068][ T4616] usb 5-1: USB disconnect, device number 28
[  412.023310][ T7341] loop4: detected capacity change from 0 to 128
[  412.100180][ T7341] syz.4.727: attempt to access beyond end of device
[  412.100180][ T7341] loop4: rw=1, sector=145, nr_sectors = 65 limit=128
[  412.116936][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[  413.146726][ T4616] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  413.356575][ T4616] usb 5-1: Using ep0 maxpacket: 8
[  413.363518][ T4616] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  413.374613][ T4616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.463456][ T4616] pvrusb2: Hardware description: Terratec Grabster AV400
[  413.473942][ T4616] pvrusb2: **********
[  413.478412][ T4616] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  413.489073][ T4616] pvrusb2: Important functionality might not be entirely working.
[  413.500001][ T4616] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  413.533491][ T4616] pvrusb2: **********
[  413.670870][ T2309] pvrusb2: Invalid write control endpoint
[  413.907509][ T7343] pvrusb2: Invalid write control endpoint
[  413.914970][  T124] usb 5-1: USB disconnect, device number 29
[  414.072849][ T2309] pvrusb2: Invalid write control endpoint
[  414.079763][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  414.093337][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  414.105348][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  414.119970][ T2309] pvrusb2: Device being rendered inoperable
[  414.126203][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  414.134183][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  414.168450][ T2309] pvrusb2: Attached sub-driver cx25840
[  414.174213][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  414.202484][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[  414.205738][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  418.725922][ T7291] chnl_net:caif_netlink_parms(): no params data found
[  418.856741][  T124] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  418.864920][ T6741] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  419.005498][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.062447][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.076771][  T124] usb 3-1: Using ep0 maxpacket: 8
[  419.085080][  T124] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  419.096619][  T124] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  419.110485][ T6741] usb 5-1: Using ep0 maxpacket: 8
[  419.111337][ T7291] device bridge_slave_0 entered promiscuous mode
[  419.118165][ T6741] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  419.873279][ T6741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.899526][  T124] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  419.914487][ T6741] pvrusb2: Hardware description: Terratec Grabster AV400
[  419.922354][  T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.951339][ T6741] pvrusb2: **********
[  419.965801][  T124] usb 3-1: Product: syz
[  419.982398][ T6741] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  420.001753][  T124] usb 3-1: Manufacturer: syz
[  420.010757][  T124] usb 3-1: SerialNumber: syz
[  420.015979][ T6741] pvrusb2: Important functionality might not be entirely working.
[  420.041784][ T6741] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  420.055012][  T124] cdc_ether 3-1:1.0: skipping garbage
[  420.061218][  T124] usb 3-1: bad CDC descriptors
[  420.070839][  T124] usbtest 3-1:1.0: couldn't get endpoints, -22
[  420.077493][ T6741] pvrusb2: **********
[  420.088348][  T124] usbtest: probe of 3-1:1.0 failed with error -22
[  420.114665][ T2309] pvrusb2: Invalid write control endpoint
[  420.327553][ T7397] pvrusb2: Invalid write control endpoint
[  420.372061][ T4431] usb 5-1: USB disconnect, device number 30
[  420.419587][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.453534][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.507162][ T2309] pvrusb2: Invalid write control endpoint
[  420.514793][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  420.527408][ T7291] device bridge_slave_1 entered promiscuous mode
[  420.564756][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  420.614298][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  420.662180][ T2309] pvrusb2: Device being rendered inoperable
[  420.663917][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.717769][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  420.752666][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  420.777761][ T6741] usb 3-1: USB disconnect, device number 28
[  420.792035][ T2309] pvrusb2: Attached sub-driver cx25840
[  420.803786][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  420.885460][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  420.984310][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.139451][ T7421] device syzkaller0 entered promiscuous mode
[  421.514203][ T7291] team0: Port device team_slave_0 added
[  424.898775][ T7291] team0: Port device team_slave_1 added
[  425.024309][ T4343] device hsr_slave_0 left promiscuous mode
[  425.072306][ T4343] device hsr_slave_1 left promiscuous mode
[  425.431386][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.549115][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.691612][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.721676][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.745149][ T4343] device bridge_slave_1 left promiscuous mode
[  425.777039][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.944109][ T4343] device bridge_slave_0 left promiscuous mode
[  426.004973][ T7463] loop3: detected capacity change from 0 to 4096
[  426.035139][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.089701][ T7463] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  426.238960][ T7470] syz.0.751 uses obsolete (PF_INET,SOCK_PACKET)
[  426.317219][ T4343] device veth1_macvtap left promiscuous mode
[  426.355523][ T4343] device veth0_macvtap left promiscuous mode
[  426.414189][ T4343] device veth1_vlan left promiscuous mode
[  426.470622][ T4343] device veth0_vlan left promiscuous mode
[  426.886568][ T4616] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  426.895457][   T26] audit: type=1800 audit(1772584101.972:7): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.749" name="file2" dev="loop3" ino=31 res=0 errno=0
[  427.127128][ T4616] usb 5-1: Using ep0 maxpacket: 8
[  427.144625][ T4616] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  427.154470][ T4616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.246112][ T4616] pvrusb2: Hardware description: Terratec Grabster AV400
[  427.255143][ T4616] pvrusb2: **********
[  427.266746][ T4616] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  427.280160][ T4616] pvrusb2: Important functionality might not be entirely working.
[  427.315807][ T4616] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  427.360666][ T4616] pvrusb2: **********
[  427.488587][ T2309] pvrusb2: Invalid write control endpoint
[  427.699814][ T2309] pvrusb2: Invalid write control endpoint
[  427.705802][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  427.730853][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  427.744339][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  427.755205][ T2309] pvrusb2: Device being rendered inoperable
[  427.768532][ T7476] pvrusb2: Attempted to execute control transfer when device not ok
[  427.788062][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  427.798424][ T4431] usb 5-1: USB disconnect, device number 31
[  427.802803][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  427.825124][ T2309] pvrusb2: Attached sub-driver cx25840
[  427.832273][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  427.845929][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  427.852431][   T26] audit: type=1326 audit(1772584102.922:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.3.755" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f348d99c799 code=0x0
[  429.715372][ T4343] team0 (unregistering): Port device team_slave_1 removed
[  429.962476][ T4343] team0 (unregistering): Port device team_slave_0 removed
[  430.070523][ T4343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  430.153207][ T4343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  430.750504][ T4343] bond0 (unregistering): Released all slaves
[  430.952051][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.978543][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.006914][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.072830][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.127876][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.210184][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.403505][ T7291] device hsr_slave_0 entered promiscuous mode
[  432.230809][ T7291] device hsr_slave_1 entered promiscuous mode
[  432.338496][ T7291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  432.356318][ T7291] Cannot create hsr debugfs directory
[  432.495508][ T7528] loop2: detected capacity change from 0 to 1024
[  432.570190][ T7528] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  433.637993][ T7528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  434.067039][ T7291] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  434.205703][ T7291] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  434.232496][ T7291] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  434.272187][ T7291] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  434.327044][ T4266] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  434.481635][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  434.546166][ T7549] device syzkaller0 entered promiscuous mode
[  434.636454][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  434.734623][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.814013][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  434.842813][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  434.911296][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  434.911760][ T7291] 8021q: adding VLAN 0 to HW filter on device team0
[  434.966869][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  435.011587][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  435.029482][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  435.063604][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.070893][ T4872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.081549][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  435.127128][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  435.142376][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  435.146051][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  435.180711][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  435.204377][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.213070][ T4872] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.301145][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  435.314578][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  435.373949][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  435.410268][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  435.436135][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  435.455171][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  435.506053][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  435.552839][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  435.584271][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  435.592135][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  435.629885][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  435.633249][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  435.676168][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  435.694804][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  435.759627][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  435.781975][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  435.872183][ T7291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  435.920032][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  435.934779][ T7291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  435.978585][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  435.997674][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  436.005464][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  436.059317][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  436.096525][ T4616] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  436.149993][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  436.199816][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  436.251772][ T7554] loop4: detected capacity change from 0 to 32768
[  436.289070][ T4616] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  436.295408][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  436.327263][ T4616] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  436.352097][ T7554] (syz.4.767,7554,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  436.398875][ T4616] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  436.418177][ T7554] (syz.4.767,7554,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  436.443454][ T4616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  436.477491][ T4616] usb 1-1: SerialNumber: syz
[  436.504917][ T7554] JBD2: Ignoring recovery information on journal
[  436.541377][ T4616] cdc_ether: probe of 1-1:1.0 failed with error -22
[  436.606709][ T4616] usb-storage 1-1:1.0: USB Mass Storage device detected
[  436.667412][ T4616] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  436.684001][ T7554] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  436.767237][ T4616] usb 1-1: USB disconnect, device number 22
[  436.908528][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  436.927242][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  436.954196][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.954722][ T4276] ocfs2: Unmounting device (7,4) on (node local)
[  438.682823][ T4266] EXT4-fs: 14 callbacks suppressed
[  438.682841][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  439.182676][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  440.530361][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  440.556854][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  440.661189][ T4266] EXT4-fs error: 15 callbacks suppressed
[  440.661207][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  440.732811][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  440.759200][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  440.889968][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  441.051073][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  441.106190][ T7616] loop0: detected capacity change from 0 to 40427
[  441.130889][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  441.150569][ T7616] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  441.189388][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  441.214855][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  441.217437][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  441.271991][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  441.316159][ T7291] device veth0_vlan entered promiscuous mode
[  441.358258][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  441.378440][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  441.393585][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  441.428210][ T7291] device veth1_vlan entered promiscuous mode
[  441.444422][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  441.519774][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  441.538612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  441.575114][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  441.606933][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  441.633333][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  441.665674][ T7291] device veth0_macvtap entered promiscuous mode
[  441.678840][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  441.713375][ T7291] device veth1_macvtap entered promiscuous mode
[  441.758964][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  441.775584][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  441.824716][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  441.847745][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.896476][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.896859][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  441.928895][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.976587][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.017937][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.050148][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  442.082979][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  442.114969][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  442.133554][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  442.154908][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.954340][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  442.956451][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.982969][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  443.091162][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.151172][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  443.165758][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  443.170820][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  444.129484][ T7291] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.159367][ T7291] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.228916][ T7291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.238286][ T7291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.245221][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  444.382814][ T4266] EXT4-fs: 1 callbacks suppressed
[  444.382828][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  444.507477][ T4884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.515899][ T4884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.556621][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  444.567042][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  444.650938][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.663049][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.691812][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  444.726011][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  444.876205][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  445.012828][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  445.164683][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  445.356480][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  446.021390][ T4266] EXT4-fs error: 6 callbacks suppressed
[  446.021411][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  446.315459][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  446.361671][ T7665] loop3: detected capacity change from 0 to 128
[  446.409585][ T7666] netlink: 'syz.5.789': attribute type 1 has an invalid length.
[  446.809636][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  446.836309][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  446.866032][ T7666] loop5: detected capacity change from 0 to 164
[  447.012220][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  447.073439][ T7666] iso9660: Corrupted directory entry in block 2 of inode 1792
[  447.082194][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  447.116997][ T7670] netlink: 'syz.3.790': attribute type 12 has an invalid length.
[  447.144570][ T7670] netlink: 'syz.3.790': attribute type 29 has an invalid length.
[  447.156736][ T7667] iso9660: Corrupted directory entry in block 2 of inode 1792
[  447.180273][ T7670] netlink: 148 bytes leftover after parsing attributes in process `syz.3.790'.
[  447.185976][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  447.227478][ T7670] netlink: 31 bytes leftover after parsing attributes in process `syz.3.790'.
[  447.563073][ T7666] iso9660: Corrupted directory entry in block 2 of inode 1792
[  448.118193][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  448.427459][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  448.539881][ T7686] loop4: detected capacity change from 0 to 1024
[  448.652834][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  449.514524][ T4266] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  449.546163][ T4266] EXT4-fs: 4 callbacks suppressed
[  449.546181][ T4266] EXT4-fs (loop2): Remounting filesystem read-only
[  449.797317][ T7686] hfsplus: xattr searching failed
[  452.058357][ T4884] hfsplus: b-tree write err: -5, ino 4
[  452.356344][ T7712] loop4: detected capacity change from 0 to 128
[  453.546570][ T4317] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  453.762155][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.851522][ T4317] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  453.976244][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.190108][ T4317] usb 1-1: config 0 descriptor??
[  454.335789][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  454.350783][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  454.364112][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  454.410843][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  454.426709][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  454.438815][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  454.446243][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  454.505572][ T4317] usbhid 1-1:0.0: can't add hid device: -71
[  454.516746][ T4317] usbhid: probe of 1-1:0.0 failed with error -71
[  454.526856][ T4317] usb 1-1: USB disconnect, device number 23
[  454.745262][ T7734] loop3: detected capacity change from 0 to 128
[  454.764982][ T4884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.928872][ T7737] syz.3.800: attempt to access beyond end of device
[  454.928872][ T7737] loop3: rw=2049, sector=145, nr_sectors = 184 limit=128
[  454.985878][ T4884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.100227][ T4317] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  455.156090][ T4884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.316547][ T4317] usb 1-1: Using ep0 maxpacket: 32
[  455.325095][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.348426][ T4317] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  455.376577][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.395851][ T4884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.400169][ T4317] usb 1-1: config 0 descriptor??
[  455.440192][ T4317] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  455.482754][ T4317] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  455.776869][ T7725] chnl_net:caif_netlink_parms(): no params data found
[  455.908625][ T4343] kworker/u4:7: attempt to access beyond end of device
[  455.908625][ T4343] loop3: rw=1, sector=329, nr_sectors = 712 limit=128
[  455.929288][ T4618] usb 1-1: USB disconnect, device number 24
[  455.961855][ T4618] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  456.260128][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.267833][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.277231][ T7725] device bridge_slave_0 entered promiscuous mode
[  456.307577][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.315353][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.338246][ T7725] device bridge_slave_1 entered promiscuous mode
[  456.516532][ T4282] Bluetooth: hci1: command 0x0409 tx timeout
[  456.586011][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.629767][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.321061][ T7758] loop3: detected capacity change from 0 to 4096
[  457.361358][ T7725] team0: Port device team_slave_0 added
[  457.449759][ T7725] team0: Port device team_slave_1 added
[  457.567628][ T7758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  457.931736][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.994567][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.202216][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  458.266200][ T7725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.708370][ T4282] Bluetooth: hci1: command 0x041b tx timeout
[  459.777406][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.784510][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.910295][ T7725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.074927][ T7789] loop3: detected capacity change from 0 to 128
[  460.140456][ T7725] device hsr_slave_0 entered promiscuous mode
[  460.211952][ T7792] syz.3.818: attempt to access beyond end of device
[  460.211952][ T7792] loop3: rw=2049, sector=145, nr_sectors = 848 limit=128
[  460.227686][ T7725] device hsr_slave_1 entered promiscuous mode
[  460.239472][ T7725] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  460.268977][ T7725] Cannot create hsr debugfs directory
[  460.451882][  T124] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  460.626746][  T124] usb 1-1: device descriptor read/64, error -71
[  460.891447][   T46] kworker/u4:3: attempt to access beyond end of device
[  460.891447][   T46] loop3: rw=1, sector=993, nr_sectors = 48 limit=128
[  460.912381][  T124] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  461.062589][ T4884] device hsr_slave_0 left promiscuous mode
[  461.082505][ T4884] device hsr_slave_1 left promiscuous mode
[  461.086676][  T124] usb 1-1: device descriptor read/64, error -71
[  461.137405][ T4884] device bridge_slave_1 left promiscuous mode
[  461.157084][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.175198][ T4884] device bridge_slave_0 left promiscuous mode
[  461.186806][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.366751][ T4616] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  461.615300][ T4616] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  461.718002][ T4282] Bluetooth: hci1: command 0x040f tx timeout
[  461.732990][ T4616] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  461.833068][ T4616] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  461.883363][ T4616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  461.934367][ T4616] usb 5-1: SerialNumber: syz
[  462.027383][ T4884] device veth1_macvtap left promiscuous mode
[  462.034035][ T4884] device veth0_macvtap left promiscuous mode
[  462.055460][ T4616] cdc_ether: probe of 5-1:1.0 failed with error -22
[  462.082399][ T4884] device veth1_vlan left promiscuous mode
[  462.109128][ T4616] usb-storage 5-1:1.0: USB Mass Storage device detected
[  462.127229][ T4884] device veth0_vlan left promiscuous mode
[  462.172577][ T4616] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  462.330298][ T4616] usb 5-1: USB disconnect, device number 32
[  462.793528][  T124] usb usb1-port1: attempt power cycle
[  463.206671][  T124] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  463.249093][  T124] usb 1-1: device descriptor read/8, error -71
[  464.579894][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[  465.384247][ T4884] team0 (unregistering): Port device team_slave_1 removed
[  465.472203][ T4884] team0 (unregistering): Port device team_slave_0 removed
[  465.564562][ T4884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.584901][ T7841] loop0: detected capacity change from 0 to 32768
[  465.670764][ T4884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.417798][ T4884] bond0 (unregistering): Released all slaves
[  466.519732][ T7817] netlink: 'syz.3.822': attribute type 12 has an invalid length.
[  466.615127][ T7725] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  466.698771][ T7725] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  466.743614][ T7725] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  466.798773][ T7847] loop4: detected capacity change from 0 to 128
[  467.452456][ T7853] syz.4.830: attempt to access beyond end of device
[  467.452456][ T7853] loop4: rw=2049, sector=145, nr_sectors = 328 limit=128
[  467.598541][ T7852] loop5: detected capacity change from 0 to 4096
[  467.768150][ T7852] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  467.996571][ T4431] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  468.213103][ T4431] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  468.253355][ T4431] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  468.304346][ T4431] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  468.354097][ T4431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  468.380043][ T4431] usb 4-1: SerialNumber: syz
[  468.427684][ T4864] kworker/u4:15: attempt to access beyond end of device
[  468.427684][ T4864] loop4: rw=1, sector=473, nr_sectors = 488 limit=128
[  468.465257][ T7291] EXT4-fs (loop5): unmounting filesystem.
[  468.468091][ T4431] cdc_ether: probe of 4-1:1.0 failed with error -22
[  468.504653][ T4431] usb-storage 4-1:1.0: USB Mass Storage device detected
[  468.582083][ T4431] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  468.652509][ T4431] usb 4-1: USB disconnect, device number 25
[  468.894279][ T7725] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  471.291255][ T7725] 8021q: adding VLAN 0 to HW filter on device bond0
[  471.616052][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  471.640374][ T7896] loop3: detected capacity change from 0 to 512
[  471.658708][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  471.796209][ T7725] 8021q: adding VLAN 0 to HW filter on device team0
[  471.867913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  471.877752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  471.913836][ T7896] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  471.924576][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.932050][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.971389][ T7896] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.038823][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  472.058467][ T7896] EXT4-fs (loop3): shut down requested (2)
[  472.087539][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  472.141736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  472.177370][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.184641][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.206864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  472.231581][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  472.248762][ T7904] netlink: 'syz.4.840': attribute type 12 has an invalid length.
[  472.257852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  472.268711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  472.334386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  472.354156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  472.383158][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  472.423942][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  472.444613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  472.472399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  472.504615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  472.531825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  472.564045][ T7725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  472.705681][ T7914] loop0: detected capacity change from 0 to 512
[  472.770343][ T7914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  472.804797][ T7914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  472.923406][ T7914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  472.942410][ T7914] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.053235][ T7914] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.837: corrupted inode contents
[  473.074318][ T7914] EXT4-fs (loop0): Remounting filesystem read-only
[  473.082536][ T7914] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.837: mark_inode_dirty error
[  473.105977][ T7914] EXT4-fs (loop0): Remounting filesystem read-only
[  473.114104][ T7914] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.837: corrupted inode contents
[  473.141300][ T7914] EXT4-fs (loop0): Remounting filesystem read-only
[  473.156234][ T7914] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.837: mark_inode_dirty error
[  473.201999][ T7914] EXT4-fs (loop0): Remounting filesystem read-only
[  473.305420][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  473.483067][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  473.494988][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  473.543068][ T7725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.664262][ T7936] device syzkaller0 entered promiscuous mode
[  473.960108][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.843'.
[  474.436668][ T4431] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  475.918219][ T4431] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.951152][ T4431] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  476.032794][ T4431] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  476.063093][ T4431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.104614][ T4431] usb 6-1: config 0 descriptor??
[  476.139944][ T4431] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  476.252891][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  476.282962][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  476.354861][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  476.378813][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  476.432293][ T7725] device veth0_vlan entered promiscuous mode
[  476.464790][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  476.483590][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  476.514438][ T7725] device veth1_vlan entered promiscuous mode
[  476.602402][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  476.615931][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  476.627909][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  476.639628][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  476.656136][ T7964] netlink: 'syz.3.848': attribute type 12 has an invalid length.
[  476.681705][ T7964] netlink: 'syz.3.848': attribute type 29 has an invalid length.
[  476.714238][ T7964] netlink: 148 bytes leftover after parsing attributes in process `syz.3.848'.
[  476.748562][ T7964] netlink: 23 bytes leftover after parsing attributes in process `syz.3.848'.
[  476.771636][ T7725] device veth0_macvtap entered promiscuous mode
[  476.829842][ T7725] device veth1_macvtap entered promiscuous mode
[  476.940338][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.006620][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.036311][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.064086][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.092680][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.129292][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.159313][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.191861][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  477.205290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  477.228480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  477.265361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  477.294203][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'.
[  477.309094][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  477.342102][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.395766][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  477.401348][ T4431] usb 6-1: USB disconnect, device number 2
[  477.452496][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.498346][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.530003][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  477.573124][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  477.598554][ T7725] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.622954][ T7725] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.745749][ T7725] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.757137][ T7725] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.770147][ T7982] netlink: 'syz.5.851': attribute type 12 has an invalid length.
[  478.747610][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.755644][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.852144][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  478.948491][ T4872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.970331][ T4872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.002768][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  479.038007][ T7995] device syzkaller0 entered promiscuous mode
[  480.142460][ T8014] loop5: detected capacity change from 0 to 1024
[  480.234857][ T8014] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  480.317335][ T8014] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  480.565086][ T7291] EXT4-fs (loop5): unmounting filesystem.
[  480.804815][ T8026] loop5: detected capacity change from 0 to 2048
[  480.903934][ T8026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  482.907942][ T8046] netlink: 'syz.6.863': attribute type 12 has an invalid length.
[  482.974276][ T8051] netlink: 64 bytes leftover after parsing attributes in process `syz.0.865'.
[  483.115341][ T8056] loop5: detected capacity change from 0 to 2048
[  483.232840][ T8056] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  484.361853][ T8070] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  484.674104][ T8056] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  484.725799][ T8056] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  484.879994][ T8056] Remounting filesystem read-only
[  484.911251][ T8077] NILFS (loop5): the device already has a read-only mount.
[  484.943741][ T8056] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  485.027119][ T8056] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16)
[  485.043719][ T8056] NILFS (loop5): error -5 truncating bmap (ino=16)
[  485.234639][ T7291] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  486.652162][ T8097] loop5: detected capacity change from 0 to 32768
[  486.686126][ T8097] (syz.5.873,8097,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  486.700074][ T8097] (syz.5.873,8097,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  487.636326][ T8097] JBD2: Ignoring recovery information on journal
[  487.814265][ T8097] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  487.865437][ T8097] ocfs2: Unmounting device (7,5) on (node local)
[  488.384258][ T8115] netlink: 'syz.3.879': attribute type 12 has an invalid length.
[  488.556505][ T4317] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  488.766885][ T4317] usb 6-1: Using ep0 maxpacket: 8
[  488.775093][ T4317] usb 6-1: unable to get BOS descriptor or descriptor too short
[  488.832394][ T4317] usb 6-1: config 4 interface 0 has no altsetting 0
[  488.869145][ T4317] usb 6-1: string descriptor 0 read error: -22
[  488.904591][ T4317] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  488.962859][ T4317] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  488.997528][ T4317] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  489.060825][ T4317] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  489.139491][ T4317] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  489.225847][ T4317] usb 6-1: media controller created
[  489.295465][ T8121] loop3: detected capacity change from 0 to 128
[  489.341204][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  489.889957][ T4317] zl10353_read_register: readreg error (reg=127, ret==0)
[  491.316757][ T4317] usb 6-1: USB disconnect, device number 3
[  494.345739][ T8162] binder: 8158:8162 ioctl c0306201 200000000540 returned -14
[  495.171576][ T8185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'.
[  496.146576][  T127] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  496.439940][  T127] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  496.460886][  T127] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  496.472830][  T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  496.483729][  T127] usb 6-1: SerialNumber: syz
[  497.483429][  T127] cdc_ether: probe of 6-1:1.0 failed with error -71
[  497.504082][  T127] usb-storage 6-1:1.0: USB Mass Storage device detected
[  497.597835][  T127] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  497.686204][  T127] usb 6-1: USB disconnect, device number 4
[  497.879742][ T8222] loop6: detected capacity change from 0 to 4096
[  497.917682][ T8222] ntfs3: loop6: ino=3, Correct links count -> 2.
[  498.515190][ T8228] loop5: detected capacity change from 0 to 4096
[  498.842834][ T8234] binder: 8232:8234 ioctl c0306201 200000000540 returned -14
[  498.908181][ T8235] loop4: detected capacity change from 0 to 1024
[  499.080997][ T8235] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256).
[  499.111241][ T8235] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  499.128733][ T8235] EXT4-fs (loop4): mount failed
[  501.107066][ T8259] loop5: detected capacity change from 0 to 2048
[  501.559752][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  501.569079][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  501.715815][ T8259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  501.796867][ T8259] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  502.068514][ T7291] EXT4-fs (loop5): unmounting filesystem.
[  502.616717][ T8287] loop0: detected capacity change from 0 to 1024
[  502.623294][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.913'.
[  502.667493][ T8287] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  502.788198][ T8287] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  503.061536][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  506.550386][ T8346] device syzkaller0 entered promiscuous mode
[  508.455114][ T8366] netlink: 'syz.4.928': attribute type 12 has an invalid length.
[  508.523474][ T8366] netlink: 'syz.4.928': attribute type 29 has an invalid length.
[  508.589555][ T8366] netlink: 148 bytes leftover after parsing attributes in process `syz.4.928'.
[  508.677236][ T8366] netlink: 51 bytes leftover after parsing attributes in process `syz.4.928'.
[  509.097275][ T8375] loop0: detected capacity change from 0 to 4096
[  509.204837][ T8375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  509.421658][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  510.499301][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.5.933'.
[  511.043665][ T8407] device syzkaller0 entered promiscuous mode
[  511.489186][ T8419] netlink: 'syz.0.939': attribute type 12 has an invalid length.
[  511.552643][ T8419] netlink: 'syz.0.939': attribute type 29 has an invalid length.
[  511.596575][ T8419] netlink: 148 bytes leftover after parsing attributes in process `syz.0.939'.
[  511.626478][ T8419] netlink: 51 bytes leftover after parsing attributes in process `syz.0.939'.
[  512.122638][ T8428] loop4: detected capacity change from 0 to 4096
[  512.316674][    T9] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  512.347387][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  512.609230][ T8428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  512.766101][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  514.276771][ T4278] Bluetooth: hci5: command 0x1003 tx timeout
[  514.285496][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  514.436754][ T8459] device syzkaller0 entered promiscuous mode
[  514.926941][ T8471] netlink: 'syz.0.952': attribute type 12 has an invalid length.
[  514.961197][ T8471] netlink: 'syz.0.952': attribute type 29 has an invalid length.
[  515.011001][ T8471] netlink: 148 bytes leftover after parsing attributes in process `syz.0.952'.
[  515.087584][ T8471] netlink: 51 bytes leftover after parsing attributes in process `syz.0.952'.
[  515.363837][ T8487] loop3: detected capacity change from 0 to 128
[  517.916697][ T4316] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  518.036630][ T4275] Bluetooth: hci5: command 0x1003 tx timeout
[  518.036718][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  518.160243][ T4316] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  518.172923][ T8527] loop3: detected capacity change from 0 to 512
[  518.179650][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.243521][ T4316] usb 6-1: Product: syz
[  518.265331][ T4316] usb 6-1: Manufacturer: syz
[  518.315793][ T4316] usb 6-1: SerialNumber: syz
[  518.322115][ T8531] device netdevsim0 entered promiscuous mode
[  518.832535][ T8539] netlink: 'syz.3.970': attribute type 12 has an invalid length.
[  518.868634][ T8539] netlink: 'syz.3.970': attribute type 29 has an invalid length.
[  518.903038][ T8539] netlink: 148 bytes leftover after parsing attributes in process `syz.3.970'.
[  518.934165][ T8539] netlink: 51 bytes leftover after parsing attributes in process `syz.3.970'.
[  520.156261][ T4316] rtl8150 6-1:1.0: couldn't reset the device
[  520.192754][ T4316] rtl8150: probe of 6-1:1.0 failed with error -5
[  522.556039][ T4618] usb 6-1: USB disconnect, device number 5
[  522.963480][ T4860] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  522.994068][ T4860] Bluetooth: hci5: Frame reassembly failed (-84)
[  524.998089][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  525.004797][ T4278] Bluetooth: hci5: command 0x1003 tx timeout
[  526.568750][ T8610] netlink: 'syz.4.982': attribute type 12 has an invalid length.
[  526.634043][ T8610] netlink: 'syz.4.982': attribute type 29 has an invalid length.
[  526.642572][ T8610] netlink: 148 bytes leftover after parsing attributes in process `syz.4.982'.
[  526.651814][ T8610] netlink: 51 bytes leftover after parsing attributes in process `syz.4.982'.
[  527.650866][ T8617] loop3: detected capacity change from 0 to 32768
[  528.503628][ T8617] (syz.3.973,8617,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  528.518561][ T8617] (syz.3.973,8617,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  528.599502][ T8617] JBD2: Ignoring recovery information on journal
[  528.713863][ T8617] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  528.742760][ T8617] ocfs2: Unmounting device (7,3) on (node local)
[  529.549003][ T8638] loop4: detected capacity change from 0 to 128
[  530.561122][ T8654] binder: BINDER_SET_CONTEXT_MGR already set
[  530.589253][ T8654] binder: 8652:8654 ioctl 4018620d 200000000040 returned -16
[  530.727132][ T4431] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  531.811257][ T4431] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  531.825943][ T4431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.834305][ T4431] usb 6-1: Product: syz
[  531.838762][ T4431] usb 6-1: Manufacturer: syz
[  531.843386][ T4431] usb 6-1: SerialNumber: syz
[  532.230179][ T4282] Bluetooth: hci5: sending frame failed (-49)
[  532.240743][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  532.529075][ T8671] netlink: 'syz.4.995': attribute type 12 has an invalid length.
[  532.551804][ T8671] netlink: 'syz.4.995': attribute type 29 has an invalid length.
[  532.575639][ T8671] netlink: 148 bytes leftover after parsing attributes in process `syz.4.995'.
[  532.615429][ T8671] netlink: 51 bytes leftover after parsing attributes in process `syz.4.995'.
[  533.870354][ T4431] rtl8150 6-1:1.0: couldn't reset the device
[  533.921129][ T4431] rtl8150: probe of 6-1:1.0 failed with error -5
[  534.285401][ T8692] loop0: detected capacity change from 0 to 128
[  534.796512][ T2179] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  534.832746][ T8703] binder: BINDER_SET_CONTEXT_MGR already set
[  534.865602][ T8703] binder: 8702:8703 ioctl 4018620d 200000000040 returned -16
[  534.999235][ T2179] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  535.033731][ T2179] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  535.064384][ T2179] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  535.090320][ T2179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.243330][ T4874] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  535.317778][ T2179] usb 5-1: config 0 descriptor??
[  535.348509][  T124] usb 6-1: USB disconnect, device number 6
[  535.388685][ T2179] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  535.395711][ T2179] dvb-usb: bulk message failed: -22 (3/0)
[  535.460653][ T2179] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  535.475623][ T2179] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  535.505000][ T2179] usb 5-1: media controller created
[  535.515611][ T2179] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  535.551756][ T2179] dvb-usb: bulk message failed: -22 (6/0)
[  535.570240][ T8698] dibusb: i2c wr: len=79 is too big!
[  535.570240][ T8698] 
[  535.587651][ T2179] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  535.623215][ T2179] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13
[  535.654201][ T2179] dvb-usb: schedule remote query interval to 150 msecs.
[  535.671749][ T2179] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  535.727808][ T2179] usb 5-1: USB disconnect, device number 33
[  535.767660][ T2179] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  537.447150][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  537.852299][ T8753] loop3: detected capacity change from 0 to 128
[  538.034025][   T26] audit: type=1800 audit(1772584213.112:9): pid=8753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1012" name="file2" dev="loop3" ino=1048622 res=0 errno=0
[  538.048825][ T8753] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  538.114938][ T8753] FAT-fs (loop3): Filesystem has been set read-only
[  538.160425][ T8758] loop6: detected capacity change from 0 to 128
[  538.178953][ T8753] syz.3.1012: attempt to access beyond end of device
[  538.178953][ T8753] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  538.227049][ T8753] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  538.243212][ T8753] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  538.299219][ T8753] syz.3.1012: attempt to access beyond end of device
[  538.299219][ T8753] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  538.514881][ T8753] syz.3.1012: attempt to access beyond end of device
[  538.514881][ T8753] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  538.536766][ T8753] syz.3.1012: attempt to access beyond end of device
[  538.536766][ T8753] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  538.620230][ T8753] syz.3.1012: attempt to access beyond end of device
[  538.620230][ T8753] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  538.914079][ T8767] tipc: Started in network mode
[  538.938271][ T8767] tipc: Node identity 0610cd6f63d2, cluster identity 4711
[  539.003504][ T8767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.075755][ T8769] device syzkaller0 entered promiscuous mode
[  539.303241][ T8767] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1017'.
[  539.395418][ T8769] tipc: Resetting bearer <eth:syzkaller0>
[  539.484892][ T8766] tipc: Resetting bearer <eth:syzkaller0>
[  539.570702][ T8766] tipc: Disabling bearer <eth:syzkaller0>
[  539.802499][ T8787] sg_write: process 653 (syz.4.1015) changed security contexts after opening file descriptor, this is not allowed.
[  541.997201][ T4614] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  542.398021][ T8821] loop6: detected capacity change from 0 to 4096
[  542.444096][ T8821] ntfs3: loop6: ino=3, Correct links count -> 2.
[  542.499623][ T4614] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  542.519065][ T4614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.537116][ T4614] usb 5-1: Product: syz
[  542.556517][ T4614] usb 5-1: Manufacturer: syz
[  542.603231][ T4614] usb 5-1: SerialNumber: syz
[  542.889069][ T8830] loop5: detected capacity change from 0 to 128
[  544.214852][ T4614] rtl8150 5-1:1.0: couldn't reset the device
[  544.227371][ T4614] rtl8150: probe of 5-1:1.0 failed with error -5
[  545.318857][ T8858] netlink: 'syz.0.1034': attribute type 12 has an invalid length.
[  545.375035][ T8858] netlink: 'syz.0.1034': attribute type 29 has an invalid length.
[  545.436548][ T8858] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1034'.
[  545.506651][ T8858] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1034'.
[  546.058272][ T2179] usb 5-1: USB disconnect, device number 34
[  547.616606][ T4616] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  547.849605][ T4616] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  547.920029][ T4616] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  547.969014][ T4616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  548.034178][ T4616] usb 5-1: Product: syz
[  548.063560][ T4616] usb 5-1: Manufacturer: syz
[  548.099861][ T4616] usb 5-1: SerialNumber: syz
[  548.360061][ T4616] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  549.118445][    C0] usblp0: nonzero write bulk status received: -71
[  549.126717][ T4616] usb 5-1: USB disconnect, device number 35
[  549.139056][ T4616] usblp0: removed
[  549.543857][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.713979][ T8912] loop0: detected capacity change from 0 to 4096
[  549.752665][ T8912] ntfs3: loop0: ino=3, Correct links count -> 2.
[  549.951298][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.286758][ T8925] device syzkaller0 entered promiscuous mode
[  551.677430][ T8938] loop5: detected capacity change from 0 to 32768
[  551.707522][ T8938] (syz.5.1048,8938,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  551.724011][ T8938] (syz.5.1048,8938,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  551.764454][ T8938] JBD2: Ignoring recovery information on journal
[  551.838372][ T8938] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  551.860690][ T8938] ocfs2: Unmounting device (7,5) on (node local)
[  552.259607][ T4614] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  552.470024][ T4614] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  552.504125][ T4614] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.615147][ T4614] usb 7-1: Product: syz
[  552.619869][ T4614] usb 7-1: Manufacturer: syz
[  552.624508][ T4614] usb 7-1: SerialNumber: syz
[  552.862391][ T4432] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  553.076249][ T4432] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.094325][ T4432] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  553.110773][ T4432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.140777][ T4432] usb 6-1: config 0 descriptor??
[  553.174833][ T4432] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  554.187435][ T4885] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  554.196042][ T4864] Bluetooth: hci5: Frame reassembly failed (-84)
[  554.281521][ T4614] rtl8150 7-1:1.0: couldn't reset the device
[  554.296673][ T4614] rtl8150: probe of 7-1:1.0 failed with error -5
[  555.051655][ T4316] usb 7-1: USB disconnect, device number 2
[  555.425783][ T4432] usb 6-1: USB disconnect, device number 7
[  556.204151][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  556.211154][ T4278] Bluetooth: hci5: command 0x1003 tx timeout
[  558.189984][ T9000] loop6: detected capacity change from 0 to 4096
[  558.343989][ T9001] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  558.477976][ T9000] syz.6.1061 (9000) used greatest stack depth: 19576 bytes left
[  559.616482][ T2179] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  559.863662][ T2179] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  559.950303][ T2179] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  559.976035][ T2179] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  560.007685][ T2179] usb 7-1: SerialNumber: syz
[  560.180651][ T4874] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[  560.846523][  T124] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  560.927919][ T2179] cdc_ether: probe of 7-1:1.0 failed with error -71
[  560.953269][ T2179] usb-storage 7-1:1.0: USB Mass Storage device detected
[  561.097643][ T2179] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  561.115956][  T124] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  561.125378][  T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.134076][  T124] usb 4-1: Product: syz
[  561.138650][  T124] usb 4-1: Manufacturer: syz
[  561.146607][  T124] usb 4-1: SerialNumber: syz
[  561.202428][ T2179] usb 7-1: USB disconnect, device number 3
[  562.196810][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  562.330220][ T9058] loop6: detected capacity change from 0 to 128
[  562.355536][ T9060] netlink: 'syz.5.1074': attribute type 12 has an invalid length.
[  562.376827][ T9060] netlink: 'syz.5.1074': attribute type 29 has an invalid length.
[  562.510931][  T124] rtl8150 4-1:1.0: couldn't reset the device
[  562.527480][  T124] rtl8150: probe of 4-1:1.0 failed with error -5
[  562.546566][ T9060] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1074'.
[  562.866567][ T9065] device syzkaller0 entered promiscuous mode
[  562.999627][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  563.006120][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  564.202005][ T9085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.376260][ T2179] usb 4-1: USB disconnect, device number 26
[  564.481561][ T9085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.996546][ T2179] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  565.070626][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1080'.
[  565.200342][ T2179] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  565.321153][ T2179] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  565.364599][ T2179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  565.385380][ T2179] usb 4-1: SerialNumber: syz
[  566.258976][ T2179] cdc_ether: probe of 4-1:1.0 failed with error -71
[  566.276908][ T2179] usb-storage 4-1:1.0: USB Mass Storage device detected
[  566.356250][ T2179] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  566.401404][ T2179] usb 4-1: USB disconnect, device number 27
[  567.051202][ T9120] loop3: detected capacity change from 0 to 128
[  568.436437][ T9133] netlink: 'syz.6.1087': attribute type 12 has an invalid length.
[  568.471246][ T9133] netlink: 'syz.6.1087': attribute type 29 has an invalid length.
[  568.506638][ T9133] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1087'.
[  568.567846][ T9135] device syzkaller0 entered promiscuous mode
[  569.526594][ T4616] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  569.744298][ T4616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.781964][ T4616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.813944][ T4616] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  569.829294][ T4616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.861450][ T4616] usb 4-1: config 0 descriptor??
[  570.284289][ T4616] usbhid 4-1:0.0: can't add hid device: -71
[  570.291757][ T4616] usbhid: probe of 4-1:0.0 failed with error -71
[  570.340440][ T4616] usb 4-1: USB disconnect, device number 28
[  570.526209][ T9183] loop4: detected capacity change from 0 to 4096
[  570.583838][ T9183] ntfs3: loop4: ino=3, Correct links count -> 2.
[  574.025191][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'.
[  575.316511][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  577.191742][   T11] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  577.223917][ T4860] Bluetooth: hci5: Frame reassembly failed (-84)
[  577.258622][ T9259] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1108'.
[  579.236712][ T4282] Bluetooth: hci5: command 0x1003 tx timeout
[  579.243224][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  580.436685][ T9283] Bluetooth: hci1: command 0x0406 tx timeout
[  580.476505][ T4616] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  580.575514][ T9302] netlink: 'syz.5.1114': attribute type 12 has an invalid length.
[  580.681778][ T4616] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  580.724895][ T4616] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  580.770285][ T4616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  580.811174][ T4616] usb 5-1: Product: syz
[  580.815591][ T4616] usb 5-1: Manufacturer: syz
[  580.852225][ T4616] usb 5-1: SerialNumber: syz
[  580.863921][ T9304] loop3: detected capacity change from 0 to 4096
[  580.914517][ T9304] ntfs3: loop3: ino=3, Correct links count -> 2.
[  581.090765][ T4616] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  581.181448][ T4616] usb 5-1: USB disconnect, device number 36
[  581.210133][ T4616] usblp0: removed
[  583.576571][ T4432] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  583.801551][ T4432] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  583.839421][ T4432] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  583.870800][ T4432] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  583.904529][ T4432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.954691][ T4432] usb 6-1: config 0 descriptor??
[  584.375883][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  584.383651][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  584.391572][ T4432] usbhid 6-1:0.0: can't add hid device: -71
[  584.398626][ T4432] usbhid: probe of 6-1:0.0 failed with error -71
[  584.427211][ T4432] usb 6-1: USB disconnect, device number 8
[  586.028530][ T4874] Bluetooth: hci5: Frame reassembly failed (-84)
[  586.041482][ T4874] Bluetooth: hci5: Frame reassembly failed (-84)
[  586.202995][ T9384] netlink: 'syz.5.1127': attribute type 12 has an invalid length.
[  588.036593][ T4275] Bluetooth: hci5: command 0x1003 tx timeout
[  588.045338][ T9283] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  590.616417][ T4432] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  590.646549][  T124] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  590.828481][ T4432] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  590.864972][ T4432] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  590.878864][  T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  590.881274][ T4432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  590.903574][ T4432] usb 7-1: SerialNumber: syz
[  590.916638][  T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  590.972548][  T124] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  591.011224][  T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.055433][  T124] usb 4-1: config 0 descriptor??
[  591.121842][ T4432] cdc_ether: probe of 7-1:1.0 failed with error -71
[  591.137001][ T4432] usb-storage 7-1:1.0: USB Mass Storage device detected
[  591.176633][ T4614] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  591.232593][ T4432] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  591.311129][ T4432] usb 7-1: USB disconnect, device number 4
[  591.383892][ T4614] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  591.430426][ T4614] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  591.440535][ T4614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  591.446190][ T9416] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1136'.
[  591.453707][ T4614] usb 5-1: Product: syz
[  591.467418][ T4614] usb 5-1: Manufacturer: syz
[  591.477995][ T4614] usb 5-1: SerialNumber: syz
[  591.484669][  T124] usbhid 4-1:0.0: can't add hid device: -71
[  591.731653][  T124] usbhid: probe of 4-1:0.0 failed with error -71
[  591.771605][ T4614] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  592.092294][  T124] usb 4-1: USB disconnect, device number 29
[  592.161958][ T4316] usb 5-1: USB disconnect, device number 37
[  592.179575][ T4316] usblp0: removed
[  595.757118][ T4614] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  596.630869][ T4614] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  596.670199][ T4614] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  596.746405][ T4614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  596.776115][ T4614] usb 6-1: SerialNumber: syz
[  597.032532][ T4614] cdc_ether: probe of 6-1:1.0 failed with error -71
[  597.049413][ T4614] usb-storage 6-1:1.0: USB Mass Storage device detected
[  597.096147][ T4614] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  597.163553][ T4614] usb 6-1: USB disconnect, device number 9
[  597.554440][ T9464] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1149'.
[  597.716642][ T9283] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  598.466490][ T4434] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  598.660514][ T4434] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  598.688899][ T4434] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  598.722636][ T4434] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  599.612562][ T4434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.651920][ T4434] usb 6-1: config 0 descriptor??
[  600.776469][  T127] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  600.895843][ T4434] usbhid 6-1:0.0: can't add hid device: -71
[  600.905936][ T4434] usbhid: probe of 6-1:0.0 failed with error -71
[  600.976718][ T4434] usb 6-1: USB disconnect, device number 10
[  601.090555][  T127] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  601.149301][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.271601][  T127] usb 5-1: Product: syz
[  601.275870][  T127] usb 5-1: Manufacturer: syz
[  601.368996][  T127] usb 5-1: SerialNumber: syz
[  602.429187][ T9497] loop6: detected capacity change from 0 to 32768
[  602.455669][ T9497] (syz.6.1157,9497,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  602.469471][ T9497] (syz.6.1157,9497,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  602.501033][ T9497] JBD2: Ignoring recovery information on journal
[  602.902178][ T9497] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  602.938608][ T9497] ocfs2: Unmounting device (7,6) on (node local)
[  604.071531][ T4874] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  604.366441][ T4432] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  604.588643][ T4432] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  604.648940][  T127] usb 5-1: can't set config #1, error -71
[  604.666654][  T127] usb 5-1: USB disconnect, device number 38
[  604.722632][ T4432] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  604.774142][ T4432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  604.810812][ T4432] usb 1-1: SerialNumber: syz
[  604.910818][ T9520] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1164'.
[  605.477956][ T9283] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  605.478026][ T4282] Bluetooth: hci5: command 0x1003 tx timeout
[  605.565965][ T4432] cdc_ether: probe of 1-1:1.0 failed with error -71
[  605.583386][ T4432] usb-storage 1-1:1.0: USB Mass Storage device detected
[  605.625837][ T4432] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  607.318348][ T4432] usb 1-1: USB disconnect, device number 29
[  607.526264][ T9536] loop6: detected capacity change from 0 to 4096
[  607.636142][ T9536] ntfs3: loop6: ino=3, Correct links count -> 2.
[  610.203098][ T9558] device syzkaller0 entered promiscuous mode
[  610.813659][ T4884] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[  610.906571][ T4430] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  611.762439][ T4430] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  611.814010][ T4430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.846179][ T4430] usb 5-1: Product: syz
[  611.851136][ T4430] usb 5-1: Manufacturer: syz
[  611.856001][ T4430] usb 5-1: SerialNumber: syz
[  612.987625][ T9283] Bluetooth: hci5: command 0x1003 tx timeout
[  613.016592][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  613.188166][ T4430] rtl8150 5-1:1.0: couldn't reset the device
[  613.215190][ T4430] rtl8150: probe of 5-1:1.0 failed with error -5
[  613.365414][ T9585] loop6: detected capacity change from 0 to 4096
[  613.413157][ T9585] ntfs3: loop6: ino=3, Correct links count -> 2.
[  613.546443][ T4430] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  614.237510][ T4430] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  614.589788][ T4430] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  614.700463][ T4430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  614.776431][ T4430] usb 4-1: SerialNumber: syz
[  614.950730][ T9600] netlink: 'syz.5.1185': attribute type 12 has an invalid length.
[  615.003237][ T4430] cdc_ether: probe of 4-1:1.0 failed with error -71
[  615.025415][ T4430] usb-storage 4-1:1.0: USB Mass Storage device detected
[  615.096113][ T4430] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  615.174544][ T4430] usb 4-1: USB disconnect, device number 30
[  615.197626][ T9604] device syzkaller0 entered promiscuous mode
[  615.587916][ T9608] loop0: detected capacity change from 0 to 32768
[  615.621920][ T9608] (syz.0.1188,9608,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  615.636060][ T9608] (syz.0.1188,9608,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  615.677784][ T9608] JBD2: Ignoring recovery information on journal
[  615.711218][ T9608] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  615.749818][ T9608] ocfs2: Unmounting device (7,0) on (node local)
[  618.414155][ T4430] usb 5-1: USB disconnect, device number 39
[  618.591031][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[  618.744815][ T4874] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[  620.597040][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  620.701252][ T9656] device syzkaller0 entered promiscuous mode
[  621.056669][ T4614] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  621.086653][ T9667] netlink: 'syz.5.1202': attribute type 12 has an invalid length.
[  621.248876][ T4614] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  621.279078][ T4614] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  621.305330][ T4614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  621.333993][ T4614] usb 7-1: SerialNumber: syz
[  621.572143][ T4614] cdc_ether: probe of 7-1:1.0 failed with error -71
[  621.585030][ T4614] usb-storage 7-1:1.0: USB Mass Storage device detected
[  621.850818][ T9673] loop4: detected capacity change from 0 to 32768
[  621.871424][ T9673] (syz.4.1204,9673,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  621.893652][ T9673] (syz.4.1204,9673,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  621.948600][ T9673] JBD2: Ignoring recovery information on journal
[  621.970097][ T4614] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  621.988714][ T9673] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  622.054054][ T4614] usb 7-1: USB disconnect, device number 5
[  623.292860][ T9673] ocfs2: Unmounting device (7,4) on (node local)
[  624.438524][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  624.447359][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  624.901711][ T9705] device syzkaller0 entered promiscuous mode
[  625.668616][ T4862] Bluetooth: hci5: Frame reassembly failed (-84)
[  626.626498][ T4614] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  626.838113][ T4614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.872126][ T4614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  626.939423][ T4614] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  626.969890][ T4614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.023043][ T4614] usb 6-1: config 0 descriptor??
[  627.096101][ T9729] netlink: 'syz.0.1216': attribute type 12 has an invalid length.
[  627.211379][ T9731] loop3: detected capacity change from 0 to 128
[  627.726562][ T9283] Bluetooth: hci5: command 0x1003 tx timeout
[  627.737310][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  627.753727][ T4614] usbhid 6-1:0.0: can't add hid device: -71
[  627.769421][ T4614] usbhid: probe of 6-1:0.0 failed with error -71
[  627.778697][ T4614] usb 6-1: USB disconnect, device number 11
[  628.064471][ T9737] loop3: detected capacity change from 0 to 32768
[  629.190084][ T9737] (syz.3.1218,9737,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  629.203997][ T9737] (syz.3.1218,9737,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  629.245411][ T9737] JBD2: Ignoring recovery information on journal
[  629.332093][ T9737] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  629.380418][ T9737] ocfs2: Unmounting device (7,3) on (node local)
[  631.026155][ T9753] loop4: detected capacity change from 0 to 4096
[  631.072263][ T9753] ntfs3: loop4: ino=3, Correct links count -> 2.
[  633.267490][ T9781] loop3: detected capacity change from 0 to 128
[  633.577951][ T9778] device syzkaller0 entered promiscuous mode
[  635.470964][ T9797] netlink: 'syz.3.1231': attribute type 12 has an invalid length.
[  636.618809][ T9808] loop0: detected capacity change from 0 to 32768
[  636.663109][ T9808] (syz.0.1235,9808,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  636.677260][ T9808] (syz.0.1235,9808,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  636.711944][ T9808] JBD2: Ignoring recovery information on journal
[  636.762549][ T9810] loop3: detected capacity change from 0 to 4096
[  636.799748][ T9810] ntfs3: loop3: ino=3, Correct links count -> 2.
[  636.829339][ T9808] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  636.906234][ T9808] ocfs2: Unmounting device (7,0) on (node local)
[  638.735490][ T9831] loop0: detected capacity change from 0 to 128
[  641.229798][ T9856] netlink: 'syz.3.1246': attribute type 12 has an invalid length.
[  644.390148][ T9879] loop5: detected capacity change from 0 to 256
[  644.467004][ T9858] loop6: detected capacity change from 0 to 32768
[  644.524852][ T9879] FAT-fs (loop5): Directory bread(block 64) failed
[  645.349005][ T9879] FAT-fs (loop5): Directory bread(block 65) failed
[  645.355827][ T9879] FAT-fs (loop5): Directory bread(block 66) failed
[  645.447720][ T9879] FAT-fs (loop5): Directory bread(block 67) failed
[  645.478691][ T9879] FAT-fs (loop5): Directory bread(block 68) failed
[  645.511559][ T9879] FAT-fs (loop5): Directory bread(block 69) failed
[  645.519701][ T9879] FAT-fs (loop5): Directory bread(block 70) failed
[  645.564917][ T9879] FAT-fs (loop5): Directory bread(block 71) failed
[  645.614165][ T9879] FAT-fs (loop5): Directory bread(block 72) failed
[  645.689431][ T9879] FAT-fs (loop5): Directory bread(block 73) failed
[  647.611721][ T9900] loop5: detected capacity change from 0 to 32768
[  647.670046][ T9900] (syz.5.1260,9900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  647.684215][ T9900] (syz.5.1260,9900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  647.720632][ T9900] JBD2: Ignoring recovery information on journal
[  647.771971][ T9900] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  647.813666][ T9900] ocfs2: Unmounting device (7,5) on (node local)
[  649.098521][ T9915] device syzkaller0 entered promiscuous mode
[  650.678405][ T9283] Bluetooth: hci5: command 0x1003 tx timeout
[  650.685115][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  651.453341][ T9941] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1268'.
[  651.521521][ T9939] loop0: detected capacity change from 0 to 2048
[  651.591481][ T9939] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c118, mo2=0103]
[  651.611030][ T9939] System zones: 0-7
[  651.626219][ T9939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  651.692483][ T9939] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.1270: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  651.975615][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  652.105622][ T9955] device syzkaller0 entered promiscuous mode
[  653.184406][ T4885] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  653.193286][ T4885] Bluetooth: hci5: Frame reassembly failed (-84)
[  655.236523][ T4275] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  655.243253][ T9283] Bluetooth: hci5: command 0x1003 tx timeout
[  657.206865][ T4432] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  657.246069][ T9998] loop0: detected capacity change from 0 to 1024
[  657.282453][ T9998] EXT4-fs: inline encryption not supported
[  657.307686][ T9998] EXT4-fs: Ignoring removed i_version option
[  657.336159][ T9998] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  657.408407][ T4432] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  657.468942][ T4432] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  657.489740][ T9998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  657.543942][ T4432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  657.598660][ T4432] usb 5-1: Product: syz
[  657.615664][ T4432] usb 5-1: Manufacturer: syz
[  657.646094][ T4432] usb 5-1: SerialNumber: syz
[  657.727483][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  657.897033][ T4432] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  657.910734][T10000] loop3: detected capacity change from 0 to 32768
[  658.095122][T10013] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1289'.
[  658.506447][ T4432] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  658.539344][    C1] usblp0: nonzero write bulk status received: -71
[  658.550265][ T4434] usb 5-1: USB disconnect, device number 40
[  658.569545][ T4434] usblp0: removed
[  658.699991][ T4432] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  658.752999][ T4432] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  658.793014][ T4432] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  658.954641][T10023] loop3: detected capacity change from 0 to 32768
[  658.974114][T10023] (syz.3.1291,10023,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  658.988251][ T4432] usb 7-1: Product: syz
[  658.992564][T10023] (syz.3.1291,10023,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  659.006951][ T4432] usb 7-1: Manufacturer: syz
[  659.011851][ T4432] usb 7-1: SerialNumber: syz
[  659.060764][T10023] JBD2: Ignoring recovery information on journal
[  659.101007][T10023] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  659.167164][T10023] ocfs2: Unmounting device (7,3) on (node local)
[  659.292254][ T4432] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  659.515710][T10031] loop0: detected capacity change from 0 to 128
[  659.524108][    C1] usblp0: nonzero write bulk status received: -71
[  659.535066][ T9992] usb 7-1: USB disconnect, device number 6
[  659.555844][ T9992] usblp0: removed
[  663.049240][T10056] loop5: detected capacity change from 0 to 32768
[  663.983822][T10068] loop4: detected capacity change from 0 to 128
[  664.156558][ T4434] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  664.778831][ T4434] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.826692][ T4434] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  664.874626][ T4434] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  665.223077][ T4434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.265976][ T4434] usb 6-1: config 0 descriptor??
[  666.271751][T10081] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1308'.
[  666.341667][ T4434] sony 0003:054C:0BA0.0003: unknown main item tag 0x0
[  666.348993][ T4434] sony 0003:054C:0BA0.0003: unknown main item tag 0x0
[  666.357069][ T4434] sony 0003:054C:0BA0.0003: unknown main item tag 0x0
[  666.364323][ T4434] sony 0003:054C:0BA0.0003: unknown main item tag 0x0
[  666.375866][ T4434] sony 0003:054C:0BA0.0003: unknown main item tag 0x0
[  666.383310][ T4434] sony 0003:054C:0BA0.0003: unknown main item tag 0x0
[  666.393267][ T4434] sony 0003:054C:0BA0.0003: unknown main item tag 0x0
[  666.423346][ T4434] sony 0003:054C:0BA0.0003: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0
[  666.437377][ T4434] sony 0003:054C:0BA0.0003: failed to claim input
[  666.554262][ T4434] usb 6-1: USB disconnect, device number 12
[  666.915212][T10082] fido_id[10082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  667.005392][ T4275] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  667.012214][ T9283] Bluetooth: hci5: command 0x1003 tx timeout
[  670.355028][T10105] loop5: detected capacity change from 0 to 128
[  671.117403][T10108] loop5: detected capacity change from 0 to 256
[  671.282995][   T26] audit: type=1804 audit(1772584346.362:10): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1317" name="/newroot/116/file1/file1" dev="loop5" ino=1048626 res=1 errno=0
[  671.286995][T10110] process 'syz.5.1317' launched './file1' with NULL argv: empty string added
[  674.206038][ T4884] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  674.221175][ T4884] Bluetooth: hci5: Frame reassembly failed (-84)
[  676.276526][ T9283] Bluetooth: hci5: command 0x1003 tx timeout
[  676.285943][ T4275] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  676.404193][T10141] device syzkaller0 entered promiscuous mode
[  676.507585][T10153] loop0: detected capacity change from 0 to 128
[  676.976542][ T4432] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  678.115906][ T4432] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  678.149438][ T4432] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.298259][T10162] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1329'.
[  678.341780][ T4432] usb 6-1: Product: syz
[  678.346205][ T4432] usb 6-1: Manufacturer: syz
[  678.553385][ T4432] usb 6-1: SerialNumber: syz
[  679.802269][ T4432] rtl8150 6-1:1.0: couldn't reset the device
[  679.821212][ T4432] rtl8150: probe of 6-1:1.0 failed with error -5
[  679.856029][T10173] netlink: 'syz.6.1334': attribute type 1 has an invalid length.
[  680.252034][   T14] usb 6-1: USB disconnect, device number 13
[  682.796466][ T9992] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  682.995409][ T9992] usb 6-1: Using ep0 maxpacket: 8
[  683.034390][ T9992] usb 6-1: config 0 has an invalid interface number: 33 but max is 1
[  683.042795][ T9992] usb 6-1: config 0 has no interface number 1
[  683.053803][ T9992] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  683.069952][ T9992] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247
[  683.084938][ T9992] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  683.104513][ T9992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.113287][ T9992] usb 6-1: Product: syz
[  683.118431][ T9992] usb 6-1: Manufacturer: syz
[  683.123537][ T9992] usb 6-1: SerialNumber: syz
[  683.141345][ T9992] usb 6-1: config 0 descriptor??
[  683.153297][ T9992] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  683.364753][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.378435][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.393228][ T9992] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  683.404626][ T2309] pvrusb2: Invalid read control endpoint
[  683.451126][ T9992] usb 6-1: USB disconnect, device number 14
[  683.530734][ T2309] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  683.540216][ T2309] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  685.878643][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  685.885103][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  686.396432][ T4316] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  686.597963][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.619861][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  686.662946][ T4316] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  686.853511][T10220] loop4: detected capacity change from 0 to 32768
[  686.861920][T10220] (syz.4.1341,10220,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  686.875969][T10220] (syz.4.1341,10220,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  686.891816][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.908436][ T4316] usb 4-1: config 0 descriptor??
[  686.941992][T10220] JBD2: Ignoring recovery information on journal
[  687.054844][T10220] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  687.077719][T10220] ocfs2: Unmounting device (7,4) on (node local)
[  687.166554][   T14] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  687.309304][T10225] loop0: detected capacity change from 0 to 256
[  687.325470][ T4316] sony 0003:054C:0BA0.0004: unknown main item tag 0x0
[  687.371529][   T14] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  687.392003][ T4316] sony 0003:054C:0BA0.0004: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0
[  687.409603][   T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.429829][T10225] FAT-fs (loop0): Directory bread(block 64) failed
[  687.446519][   T14] usb 7-1: Product: syz
[  687.451119][T10225] FAT-fs (loop0): Directory bread(block 65) failed
[  687.458450][ T4316] sony 0003:054C:0BA0.0004: failed to claim input
[  687.465147][   T14] usb 7-1: Manufacturer: syz
[  687.475410][T10225] FAT-fs (loop0): Directory bread(block 66) failed
[  687.485646][   T14] usb 7-1: SerialNumber: syz
[  687.517490][T10225] FAT-fs (loop0): Directory bread(block 67) failed
[  687.541887][ T4316] usb 4-1: USB disconnect, device number 31
[  687.577674][T10225] FAT-fs (loop0): Directory bread(block 68) failed
[  687.606426][T10225] FAT-fs (loop0): Directory bread(block 69) failed
[  687.635852][T10225] FAT-fs (loop0): Directory bread(block 70) failed
[  687.665878][T10225] FAT-fs (loop0): Directory bread(block 71) failed
[  687.696719][T10225] FAT-fs (loop0): Directory bread(block 72) failed
[  687.706818][T10225] FAT-fs (loop0): Directory bread(block 73) failed
[  687.856752][T10226] fido_id[10226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  688.994123][   T14] rtl8150 7-1:1.0: couldn't reset the device
[  689.002045][   T14] rtl8150: probe of 7-1:1.0 failed with error -5
[  689.373046][T10236] loop3: detected capacity change from 0 to 32768
[  689.862422][T10236] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  689.862422][T10236] 
[  689.875268][T10236] ERROR: (device loop3): remounting filesystem as read-only
[  690.048541][ T4280] ------------[ cut here ]------------
[  690.054691][ T4280] kernel BUG at fs/jfs/inode.c:175!
[  690.066432][ T4280] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  690.072568][ T4280] CPU: 1 PID: 4280 Comm: syz-executor Not tainted syzkaller #0
[  690.080151][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  690.090275][ T4280] RIP: 0010:jfs_evict_inode+0x42d/0x430
[  690.095963][ T4280] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 0d b8 e6 fe e9 16 fe ff ff e8 43 cc 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff
[  690.115954][ T4280] RSP: 0018:ffffc900042a7ac0 EFLAGS: 00010293
[  690.122055][ T4280] RAX: ffffffff82eca8dd RBX: ffff8880704f3bb0 RCX: ffff888073098000
[  690.130151][ T4280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880704f3bb0
[  690.138415][ T4280] RBP: 0000000000000001 R08: ffffffff90af53af R09: 1ffffffff215ea75
[  690.146527][ T4280] R10: dffffc0000000000 R11: fffffbfff215ea76 R12: dffffc0000000000
[  690.154795][ T4280] R13: dffffc0000000000 R14: ffff8880704f3838 R15: ffff8880704f3bd8
[  690.162843][ T4280] FS:  0000555588507500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  690.171976][ T4280] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  690.178939][ T4280] CR2: 000020000018b030 CR3: 000000005b85f000 CR4: 00000000003506e0
[  690.186939][ T4280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  690.194933][ T4280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  690.203012][ T4280] Call Trace:
[  690.206312][ T4280]  <TASK>
[  690.209351][ T4280]  ? evict+0x4c3/0x8d0
[  690.213534][ T4280]  ? jfs_write_inode+0x220/0x220
[  690.218688][ T4280]  evict+0x4c9/0x8d0
[  690.222612][ T4280]  ? proc_nr_inodes+0x2f0/0x2f0
[  690.227580][ T4280]  ? do_raw_spin_unlock+0x11d/0x230
[  690.232816][ T4280]  ? do_raw_spin_unlock+0x11d/0x230
[  690.238127][ T4280]  evict_inodes+0x60c/0x6a0
[  690.242658][ T4280]  ? clear_inode+0x150/0x150
[  690.247273][ T4280]  generic_shutdown_super+0x93/0x340
[  690.252586][ T4280]  kill_block_super+0x7c/0xe0
[  690.257287][ T4280]  deactivate_locked_super+0x93/0xf0
[  690.262681][ T4280]  cleanup_mnt+0x42c/0x4b0
[  690.267122][ T4280]  ? lockdep_hardirqs_on+0x94/0x140
[  690.272346][ T4280]  task_work_run+0x1d0/0x260
[  690.276973][ T4280]  ? task_work_cancel+0x220/0x220
[  690.282021][ T4280]  ? exit_to_user_mode_loop+0x3b/0x110
[  690.287514][ T4280]  exit_to_user_mode_loop+0xe6/0x110
[  690.292919][ T4280]  exit_to_user_mode_prepare+0xee/0x180
[  690.298587][ T4280]  syscall_exit_to_user_mode+0x16/0x40
[  690.304249][ T4280]  do_syscall_64+0x58/0xa0
[  690.308694][ T4280]  ? clear_bhb_loop+0x60/0xb0
[  690.313573][ T4280]  ? clear_bhb_loop+0x60/0xb0
[  690.318273][ T4280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  690.324300][ T4280] RIP: 0033:0x7f348d99d9d7
[  690.328827][ T4280] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  690.348719][ T4280] RSP: 002b:00007ffe879a4548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  690.357343][ T4280] RAX: 0000000000000000 RBX: 00007f348da31f90 RCX: 00007f348d99d9d7
[  690.365340][ T4280] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe879a4600
[  690.373523][ T4280] RBP: 00007ffe879a4600 R08: 00007ffe879a5600 R09: 00000000ffffffff
[  690.381617][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe879a5690
[  690.389626][ T4280] R13: 00007f348da31f90 R14: 00000000000a870a R15: 00007ffe879a56d0
[  690.397735][ T4280]  </TASK>
[  690.400793][ T4280] Modules linked in:
[  690.411017][ T4280] ---[ end trace 0000000000000000 ]---
[  690.416795][ T4280] RIP: 0010:jfs_evict_inode+0x42d/0x430
[  690.425389][ T4280] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 0d b8 e6 fe e9 16 fe ff ff e8 43 cc 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff
[  690.447761][ T4280] RSP: 0018:ffffc900042a7ac0 EFLAGS: 00010293
[  690.457360][ T4280] RAX: ffffffff82eca8dd RBX: ffff8880704f3bb0 RCX: ffff888073098000
[  690.473821][ T4280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880704f3bb0
[  690.496055][ T4280] RBP: 0000000000000001 R08: ffffffff90af53af R09: 1ffffffff215ea75
[  690.525552][ T4280] R10: dffffc0000000000 R11: fffffbfff215ea76 R12: dffffc0000000000
[  690.536529][ T4280] R13: dffffc0000000000 R14: ffff8880704f3838 R15: ffff8880704f3bd8
[  690.545667][ T4280] FS:  0000555588507500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  690.556568][ T4280] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  690.563912][ T4280] CR2: 00002000000bd000 CR3: 000000005b85f000 CR4: 00000000003506e0
[  690.574953][ T4280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  690.584836][ T4280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  690.595256][ T4280] Kernel panic - not syncing: Fatal exception
[  690.601977][ T4280] Kernel Offset: disabled
[  690.606308][ T4280] Rebooting in 86400 seconds..