last executing test programs:

6m50.790854442s ago: executing program 0 (id=1068):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7fffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x5, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501eff", 0x0, 0x800004, 0x10030, 0x1, 0x0})
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4d000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x0, 0xc139, 0x4, 0x5, 0xad, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x7c, 0x3, 0x8, 0x4086, 0x0, 0x1]})
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)

6m49.634482079s ago: executing program 0 (id=1071):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140))
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x18, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x95}, 0x0)
syz_usbip_server_init(0x3)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r8, @ANYBLOB="f60012000a00020013"], 0x28}}, 0x10)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x88, 0xf8a2, 0x400, 0x9, 0x86040152, r8})
bind$tipc(r6, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

6m47.580503415s ago: executing program 0 (id=1075):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000280))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$rds(0x15, 0x5, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f00000009c0))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)="82"})
syz_emit_ethernet(0xc5, 0x0, &(0x7f0000000180)={0x1, 0x1, [0x929, 0x19e, 0x221, 0x66f]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000081196c00000000009500000000000000dc26b314eff309c4c01ca69ce5b054fd606cc5763137b4f49419e0aaee19d8ba3b6336d57c76adf61951038b05b9c50fb74290006f4149de6d1955b649e55f18350c26c7b29509c7abb5a1f1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

6m42.476565064s ago: executing program 0 (id=1089):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]})
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='i', 0x1, 0x8b}])

6m38.639011159s ago: executing program 0 (id=1095):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902"], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)

6m37.099407471s ago: executing program 0 (id=1102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0x100}]})

6m35.969917436s ago: executing program 32 (id=1102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0x100}]})

6m24.474616879s ago: executing program 4 (id=1103):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000006400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000f80)="$eJzs3U9sHNd5APDvjbjiUm4rJnYUJ42LTVuksmK5+hdRsQp3VdNsA8iyEIq5BeBKpNSFKZIgqUY20oJpDz30EKAoesiJQGsUSNHAaIqglwJM6wLJxYfCp56IFjaCoge2CJBTwGBm34pLirRpiZQo6/ezyW929nuz781bztAGv30BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83ssXTpxMD7sXAMCDdGn0qydOuf8DwGPliv/+BwAAAAAAAAAAAACA/S5FEU9GitlLq2m8etxRv9iu3bo9NjyydbOBVLU8UOWXX/WTp06f+dLZoXPdeLE9/QHtd9tn49XRKxcaL83cnJ2bnJ+fnGiMTbevzUxM7vgI99t+s2PVCWjcfO3WxPXr841Tz5/e8PTtwff7nzgyeH7o2ePPdHPHhkdGRtdT6r35fffckY7tKjwORhHHI8Vz3/tJakVEEfd/LuoPdu43G6gGcawaxNjwSDWQqXZreqF88nL3RBQRjZ5Gze452nouoq/2QMewvWbEYtn9ssPHyuGNzrbmWlenJhuXW3ML7YX2zPTl1OltOZ5GFHEuRSxFxEr/3YerRRF9keI7h1fT1Yg40D0PX6wKg7fvR7GHY9yBsp+NWsRS8QjM2T7WH0W8Eil++vbRuJavM9W15gsRr5TxBxFvlvHFiFS+Mc5EvLfF+4hHU18U8Rfl/J9fTRPV9aB7Xbn4tcZXpq/P9OR2rysf8f5w15XiId0fBjbFB2OfX5vqUUSruuKvpnv/ZQcAAAAAAAAAAAAAAACA3TYQRXwmUrz8H39U1RVHVZd++PzQ7w/+cm/N+NMfcpwy9/mIWCx2VpN7MBcGXk6XU3rItcSPs3oU8ce5/u9bD7szAAAAAAAAAAAAAAAAAAAAj7Ui3o0UL7xzNC1F75ri7ekbjSutq1OdVWG7a/9210xfW1tba6RObOY4nuNijks5Lue4kmMUuX0RUS/b58fjRUQ0G3eOv5T3L+e4kmMcyO1zbOY4nuNijks5Lue4kmP05fY5NnMcz3Exx6Ucl3NcyTH2ydq9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJ0UU8fNI8e1vrKZIEdGMGI9OXO5/2L0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYjvR4rGHzTv7OuLiFT923G0/HYmmgfL+MloDpXxxWheyLFVxb7mtx5C/7k/tVTEjyNFf/2tOxOe57/WeXTnbRBvfnP90Wf7OvFA98nB9/ufOHL4/NDIrz293XbaqgPHLranb91ujA2PjIz27O7Lr/7Jnn2D+XWL3Rk6ETH/+huvtaamJuc+8sbB7kb5Fvjozbff6IvdOc7ub6S+3R3pxo3yPO7Ccbo/HfvijD3iG9G3L7rxcMbOY6C8/78XKX77nf/s3vA79/96/FLn0Z07fPzsT9bv/y9sPtCO7v+z797VgXz/L69aW93/n+zZ90L+baTWF1FfuDlbOxJRn3/9jePtm60bkzcmp8+cOPHloaEvnz5ROxhRv96emuzZ2o2zBQAAAAAAAAAAAAAAAPAApSJ+N1K0fryaGhFxu6rXGjw/9OzxZw7EgareakPd9qujVy40Xpq5OTs3OT8/OdEYm25fm5mY3OnL1atyr7HhkT0ZzIca2OP+D9Rfmpl9fa594w8Xtnz+UP3C1fmFuda1rZ+OgSgimr17jlUdHhseqTo91W5NV00vb1lM/9HVUhH/FSmunWmkz+d9uf5/c4X/hvr/xc0H2qP6/0/07CtfM6UifhYpfusvn47PV/08FHeds5z3t5Hi2LnP5bw4WOZ1+9D5XIFOZWCZ+3+R4h9/vjG3Ww/55HruyR2f2EdEOf+HI8X3//y78et538bPf9h6/g9tPtAezf9TPfsObfi8gvseOnn+j0eKF598K34j7/ugz//ofrrA0Zx85/M5Bt/v/7M9mP9P9ewbzK/7m7szdAAAAAAAAAAAgEdaLRXxd5HihyN96WzEWmUHf/83sflAm/7mq7ZLf//16Z59E/e1XlHvxr98YM6unFgAAAAA2AdqqYh3I8WNhbfu1FBvrP/uqf/8nfX6z+G06dnq//P9SvW5AbtZ/9lrML/u+P0PGwAAAAAAAAAAAAAAAAAAAPaVlIo4m9dTH6/q+Se2XU99OVK8/D/P5bx0pMzrrgM/WH2vX5qZPn5hamrmWmuhdXVqsjE627o2WbZ9KlKs/s3nctuiWl+9u958Z4339bXY5yLFyN93cztrsXfXJn9qPfdkmfuJSPHf/7Axt7uO9afWc0+VuX8dKb7+z1vnHlnPPV3mfjdS/OjrjW7uoTL3bM799Hru89dmij2YFQAAAAAAAAAAAAAAAAAAAB43tVTEn0aK/725dKeWP6//X+t5WHnzmz3r/W9yu1rnf7Ba/3+77XtZ/7/6XIHF7V4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+nlIU8UakmL20mpb7y8cd9Yvt6Vu3x4ZHtm42kKqWB6r88qt+8tTpM186O3SuGz+4/W77TLw6euVC46WZm7Nzk/PzkxONsen2tZmJyYiBnR2hp32Rd3Xa36Nj1Qlo3Hzt1sT16/ONU8+f3vD07cH3+584Mnh+6Nnjz3Rzx4ZHRkZ7cvpq9/zqd0nb7D8YRfxVpHjuez9JP+yPqMa+7bncmQ957+y1gWoQx6pBjA2PVAOZaremF8onL3dPRBHR6GnU7J6jBzAX96UZsVh2v+zwsXJ4o7OtudbVqcnG5dbcQnuhPTN9OXV6W46nEUWcSxFLEbHSf/fhalHEa5HiO4dX07/2RxzonocvXhr96olT2/ej2MMx7kDZz0YtYql4BOZsH+uPIv4pUvz07aPxb/0RfdH5ii9EvFLGH0S8GZ35TuUb40zEe1u8j3g09UUR/1/O//nV9HZ/eT3oXlcufq3xlenrMz253evKI39/eJD2+bWpHkX8qLrir6Z/93MNAAAAAAAAAAAAAAAAsI8U8auR4oV3jqaqPvhOTXF7+kbjSuvqVKesr1v7162ZXltbW2ukTmzmOJ7jYo5LOS7nuJJjFLl9js0y1tfWxvPjxRyXclzOcSXHOJDb59jMcTzHxRyXclzOcSXH6Mvtc2zmOJ7jYo5LOS7nuJJj7JPaPQAAAAAAAAAAAAAAAAAA4OOlqP5J8e1vrKa1/s760uPRicvWA/3Y+0UAAAD//1Zv8js=")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

6m22.931096811s ago: executing program 4 (id=1137):
r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0)
fsmount(r0, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x1e00, &(0x7f0000000240)={[{@usrjquota}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@resgid}, {@block_validity}, {@quota}, {@noquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4})
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x1e0, 0x78, 0x0, 0x140, 0x7, 0x0, 0x8, 0x0, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfff, 0x3, 0x1ff, 0x3a, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7)
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)

6m22.186482661s ago: executing program 4 (id=1140):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000600)=""/265, 0x109}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40000100, 0x0)

6m21.652061046s ago: executing program 33 (id=1140):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000600)=""/265, 0x109}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40000100, 0x0)

6m21.638875037s ago: executing program 1 (id=1142):
r0 = socket(0x10, 0x803, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
sendmsg$tipc(r0, &(0x7f0000000440)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10, 0x0, 0x0, &(0x7f0000000a00)="facadc6e11f8931848e6a276dccafa7c10bf31ecd1903374cbd98fedcd6a5ad3fc6e1c2a09955739c7507530a2f30c7e24a750697a93d4826fce8c8c5c36c81cfc9a8416f73c7da5d81ac4c756f5fe31318aad5dfc2ce54718", 0x59, 0x240400d4}, 0x4000010)

6m21.299796539s ago: executing program 1 (id=1143):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
readv(r1, &(0x7f0000000300)=[{0x0}], 0x1)

6m21.062156175s ago: executing program 1 (id=1145):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7fffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x5, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501eff", 0x0, 0x800004, 0x10030, 0x1, 0x0})
connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4d000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}})
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x0, 0xc139, 0x4, 0x5, 0xad, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x7c, 0x3, 0x8, 0x4086, 0x0, 0x1]})
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)

6m19.878385664s ago: executing program 1 (id=1147):
socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc4, &(0x7f0000000380)=""/196, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

6m19.448797862s ago: executing program 1 (id=1149):
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, r0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x3ff, 0xfca5, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xa3, 0x78})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)

6m18.042118286s ago: executing program 1 (id=1153):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x3f, 0x100, 0x30, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x7800, 0xb9fa, 0x4}})

6m17.550961088s ago: executing program 34 (id=1153):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x3f, 0x100, 0x30, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x7800, 0xb9fa, 0x4}})

2m11.231597059s ago: executing program 5 (id=1896):
r0 = socket$inet6(0xa, 0x3, 0x81)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x804)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

2m9.457645737s ago: executing program 5 (id=1900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="4b003300509c0600080211000001080211000001fffffffffffff3ff080048419400000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000)

2m9.205452014s ago: executing program 5 (id=1902):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x6, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x8, 0x1004, 0x9, 0xc595, 0x9, 0x8, 0xfffffffffffffffe, 0x8, 0x80000004000000, 0x1c], 0x80a0000, 0x2010d3})
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m7.838607914s ago: executing program 5 (id=1907):
r0 = socket(0xa, 0x1, 0x0)
r1 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000780)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r0, @ANYBLOB=',discard,\x00', @ANYBLOB="3a8d75a267b001234a1e919d26dfdd0d8b316510e9c9cf606c6db6505304ee2649c88f03f9ef98bcebc5d721a7081b3509e543147eec5a0fa6d6eb57eed4197249efe6fa10323b6cf959897b3f1908c82c14974d31b0d080f8c86c196c0ee8eb707a73d201bbe15a02a37118aa1d4aaa4d2484b05dbb73e44387f620f46a3a2e06436e6296b05bd07717accf667e0331c0f323a7529f6b471ec30340347d3f405257c8bad57ddef290ea1d376a20", @ANYRESHEX=0x0, @ANYBLOB="d3d6d055f090bdc2587c11dcd402f29060", @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197bb9cceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e", @ANYRES64, @ANYRESDEC], 0x81, 0x152e, &(0x7f0000003fc0)="$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")
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
close_range(0xffffffffffffffff, r1, 0x2)
mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1001000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000001c0), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f0000003440)={0x2020}, 0x2020)

2m6.577816237s ago: executing program 5 (id=1911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="4b003300509c0600080211000001080211000001fffffffffffff3ff080048419400000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000)

2m6.007338386s ago: executing program 5 (id=1913):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7fffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x5, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501eff", 0x0, 0x800004, 0x10030, 0x1, 0x0})
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4d000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x0, 0xc139, 0x4, 0x5, 0xad, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x7c, 0x3, 0x8, 0x4086, 0x0, 0x1]})
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)

2m5.559609435s ago: executing program 35 (id=1913):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7fffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x5, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501eff", 0x0, 0x800004, 0x10030, 0x1, 0x0})
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4d000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x0, 0xc139, 0x4, 0x5, 0xad, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x7c, 0x3, 0x8, 0x4086, 0x0, 0x1]})
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)

7.929092653s ago: executing program 3 (id=2312):
getpid()
r0 = getpgrp(0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000000140))
r2 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r2, 0x0, &(0x7f0000000140)={0x0, 0x4, 0x7fffffff}, 0x0)
setresgid(0xee00, 0xee01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close_range(0xffffffffffffffff, r3, 0x2)
r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r5 = dup(r4)
r6 = fanotify_init(0x1, 0x101000)
fanotify_mark(r6, 0x1, 0x800103a, r5, 0x0)
ftruncate(0xffffffffffffffff, 0xdcb)
pread64(0xffffffffffffffff, &(0x7f00000009c0)=""/222, 0xb1, 0x5)

7.682104399s ago: executing program 7 (id=2313):
socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc4, &(0x7f0000000380)=""/196, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

7.551267838s ago: executing program 3 (id=2314):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7fffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x5, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501eff", 0x0, 0x800004, 0x10030, 0x1, 0x0})
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r3, 0x0, 0x0, 0x401eb94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4d000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x0, 0xc139, 0x4, 0x5, 0xad, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x7c, 0x3, 0x8, 0x4086, 0x0, 0x1]})
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)

7.52799432s ago: executing program 6 (id=2315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

6.835901816s ago: executing program 2 (id=2316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x38}}, 0x0)

6.488702709s ago: executing program 6 (id=2317):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x74e, 0x0, 0x0)

6.487893749s ago: executing program 7 (id=2318):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

6.407450455s ago: executing program 3 (id=2319):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.338584949s ago: executing program 2 (id=2320):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='ext4_request_inode\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x26, 0x1, 0x1, "3a8e07000034b52ba75088c27891ca55e21f0000000000b2b679d200", 0x41414770})
getrusage(0x1, &(0x7f0000000080))
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = creat(&(0x7f00000016c0)='./file0\x00', 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f000062d000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r5}, 0x68)
syz_open_dev$mouse(0x0, 0x0, 0x2042)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==")

5.307388757s ago: executing program 6 (id=2321):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8946, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$watch_queue(0x0, 0x80)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc491070000"], 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}})
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

5.174202776s ago: executing program 2 (id=2322):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{}, {@block_validity}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x6, 0x434, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x15a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setns(0xffffffffffffffff, 0x24020000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x484002, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX, @ANYRESDEC=r4, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="1b6a23ae80f655804a68a607093febe72845d86a04bd1ce2367ae74da1d0bf43c830e8924bb38fe70cc0d6a697a394390be8d9c175898efe5f32bd93bf1384aa8f5bfbf3f00d538fdd74815692cd23c8aa6bf1dcdfa37f7ab06a855ccdbb101ba2a8b640df66cbfd0d5c07d9279849850dced4f5060292ff703a4b1185057b480fa436d7161fe283a85be72eda734e23b95713c8ef62335304bfefbd3b6245d3c2d7b878dd06684c667c68f24874c19cad781a7d885e7c9d9ea18840c80b9936138e6f53886460e68a88293e6ef89ad251819fb41c6d289b3b78405813764f8d6a13"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = syz_open_pts(r3, 0x111400)
fcntl$setstatus(r5, 0x4, 0x102800)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12)

5.047659574s ago: executing program 7 (id=2323):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

3.816716916s ago: executing program 7 (id=2324):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000002780)=""/59, 0x3b, 0x55)

3.15619181s ago: executing program 2 (id=2325):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

3.114860243s ago: executing program 3 (id=2326):
getpid()
r0 = getpgrp(0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000000140))
r2 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r2, 0x0, &(0x7f0000000140)={0x0, 0x4, 0x7fffffff}, 0x0)
setresgid(0xee00, 0xee01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close_range(0xffffffffffffffff, r3, 0x2)
r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r5 = dup(r4)
r6 = fanotify_init(0x1, 0x101000)
fanotify_mark(r6, 0x1, 0x800103a, r5, 0x0)
ftruncate(0xffffffffffffffff, 0xdcb)
pread64(0xffffffffffffffff, &(0x7f00000009c0)=""/222, 0xb1, 0x5)

2.8553133s ago: executing program 3 (id=2327):
socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc4, &(0x7f0000000380)=""/196, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

2.788030585s ago: executing program 2 (id=2328):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7fffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x5, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501eff", 0x0, 0x800004, 0x10030, 0x1, 0x0})
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x0, 0x401eb94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4d000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x0, 0xc139, 0x4, 0x5, 0xad, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x7c, 0x3, 0x8, 0x4086, 0x0, 0x1]})
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)

2.779924525s ago: executing program 7 (id=2329):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7fffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x5, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501eff", 0x0, 0x800004, 0x10030, 0x1, 0x0})
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4d000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x0, 0xc139, 0x4, 0x5, 0xad, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x7c, 0x3, 0x8, 0x4086, 0x0, 0x1]})
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)

2.69778862s ago: executing program 6 (id=2330):
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pipe(&(0x7f0000000180))
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

2.627895585s ago: executing program 3 (id=2331):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r1 = open(&(0x7f00000013c0)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x8000, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a4573db0aae2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751d82f9c2fa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da", @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$eJzsVb/uEkEQ/uZu4UAtqG0lQqPA2fgG8gA+gAROJB7+4S5RCMVpQ2NhfAkSn8LCRHsLY0xssNBECyxJDGZ359YlasDkyO/3S/ZLyHzzzc7sDpedvZM8TAIAP9fzPmpQIFzARyIIAA3S2qas7Q+2W8YXof0O6y/ZfmabTGfvnmk6u9uL42iSTPcQImDfmh1y0KLDydunuwqhqMpFk9TX/+yfoec7SvC3NZyLE++iOOL/s52vRe9VwrHbAYxCB2R9eKE/52n5Fkci3n9lJeDxldx44uG7ct6v531JbvEUk9pA//IrodZI57W15qIAMoB8bE0doaYl0ADQSscPWsl0dmU07g2jYXQvDJG135znKxq1W7dHcdQm6xieJAIG8p5WrXgJwKff8QwWyDqaxDmA7Fw5f/Ph3LxkJVYBz8q1a+i6r0yNgDX5V9zEZVQAPMpkOGS1DllNQLXWBcFnpyOscwIbeKiowNX+/XiwAIHytCWEqdFZoSQdyoAoZEdFrl037S/Y1tl22S7Zrtjmb1f+JglV4Rt7zQwo43EvTSfq8dLMaKHRwprZ2eNd89eQ8pMEcHBwcHBwcHA4I/gVAAD//7B1VIM=")
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x40000000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x180)

327.704558ms ago: executing program 6 (id=2332):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000400)={[{@shortname_win95}, {@shortname_lower}, {@fat=@nfs}, {@numtail}, {@fat=@nfs_stale_rw}, {@shortname_win95}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@shortname_lower}, {@fat=@nfs_stale_rw}, {@fat=@usefree}, {@fat=@nfs_nostale_ro}, {@shortname_winnt}]}, 0x2a, 0x347, &(0x7f0000000880)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

316.518329ms ago: executing program 2 (id=2333):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x240, &(0x7f0000000780)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568ea034a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc57, &(0x7f0000000e00)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

156.951669ms ago: executing program 7 (id=2334):
r0 = socket$inet6(0xa, 0x3, 0x5)
socket$l2tp6(0xa, 0x2, 0x73)
add_key(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, 0x0, 0x60000726)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)

0s ago: executing program 6 (id=2335):
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x8000000004)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x5, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
fsopen(&(0x7f00000003c0)='bdev\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x40, 0x8, 0x3, 0x1a8, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x4000000000000004, 0xb, 0x1587, 0x1, 0x80, 0xffbffffffffffffc, 0xffffffffffffffff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

y change from 0 to 128
[  810.172555][T11393] af_packet: tpacket_rcv: packet too big, clamped from 176 to 4294967272. macoff=96
[  810.402475][T11398] loop2: detected capacity change from 0 to 128
[  810.415991][T11397] loop5: detected capacity change from 0 to 512
[  810.491518][   T58] kworker/u4:4: attempt to access beyond end of device
[  810.491518][   T58] loop3: rw=1, sector=129, nr_sectors = 1 limit=128
[  810.529815][   T58] Buffer I/O error on dev loop3, logical block 129, lost async page write
[  810.539327][T11397] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  810.558849][   T58] kworker/u4:4: attempt to access beyond end of device
[  810.558849][   T58] loop3: rw=1, sector=130, nr_sectors = 1 limit=128
[  810.609019][   T58] Buffer I/O error on dev loop3, logical block 130, lost async page write
[  810.629619][T11397] EXT4-fs (loop5): orphan cleanup on readonly fs
[  810.638871][   T58] kworker/u4:4: attempt to access beyond end of device
[  810.638871][   T58] loop3: rw=1, sector=131, nr_sectors = 1 limit=128
[  810.655974][   T58] Buffer I/O error on dev loop3, logical block 131, lost async page write
[  810.667365][   T58] kworker/u4:4: attempt to access beyond end of device
[  810.667365][   T58] loop3: rw=1, sector=132, nr_sectors = 1 limit=128
[  810.683641][   T58] Buffer I/O error on dev loop3, logical block 132, lost async page write
[  810.694007][   T58] kworker/u4:4: attempt to access beyond end of device
[  810.694007][   T58] loop3: rw=1, sector=133, nr_sectors = 1 limit=128
[  810.724534][T11397] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:512: comm syz.5.1394: Block bitmap for bg 0 marked uninitialized
[  810.766977][   T58] Buffer I/O error on dev loop3, logical block 133, lost async page write
[  811.131343][ T5872] usb 3-1: USB disconnect, device number 18
[  811.484386][   T58] kworker/u4:4: attempt to access beyond end of device
[  811.484386][   T58] loop3: rw=1, sector=134, nr_sectors = 1 limit=128
[  811.549242][   T58] Buffer I/O error on dev loop3, logical block 134, lost async page write
[  811.557955][   T58] kworker/u4:4: attempt to access beyond end of device
[  811.557955][   T58] loop3: rw=1, sector=135, nr_sectors = 1 limit=128
[  811.590531][T11397] EXT4-fs (loop5): Remounting filesystem read-only
[  811.597700][T11397] EXT4-fs (loop5): 1 orphan inode deleted
[  811.617347][   T58] Buffer I/O error on dev loop3, logical block 135, lost async page write
[  811.673129][T11397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  811.687028][   T58] kworker/u4:4: attempt to access beyond end of device
[  811.687028][   T58] loop3: rw=1, sector=136, nr_sectors = 24 limit=128
[  812.760473][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.982115][ T5848] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  813.856352][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.929321][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.972535][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  814.006684][ T5848] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  814.016176][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.044639][ T5848] usb 4-1: config 0 descriptor??
[  815.025119][ T5848] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  815.231191][ T5848] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  815.456513][T11446] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  815.463204][T11446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  815.471758][T11446] vhci_hcd vhci_hcd.0: Device attached
[  815.859458][ T5872] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  816.207412][T11448] vhci_hcd: connection reset by peer
[  816.310467][   T11] vhci_hcd: stop threads
[  816.380274][   T11] vhci_hcd: release socket
[  816.474339][   T11] vhci_hcd: disconnect device
[  816.549581][ T5971] usb 4-1: reset high-speed USB device number 20 using dummy_hcd
[  816.842914][ T5971] usb 4-1: device descriptor read/64, error -32
[  817.179640][ T5971] usb 4-1: reset high-speed USB device number 20 using dummy_hcd
[  818.358219][T11470] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  818.364811][T11470] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  818.372734][T11470] vhci_hcd vhci_hcd.0: Device attached
[  819.685961][T11472] vhci_hcd: connection closed
[  819.854863][ T6017] vhci_hcd: stop threads
[  820.065592][ T9359] usb 4-1: USB disconnect, device number 20
[  820.107805][ T6017] vhci_hcd: release socket
[  820.179243][ T5849] usb 45-1: new high-speed USB device number 3 using vhci_hcd
[  820.200198][ T6017] vhci_hcd: disconnect device
[  821.389811][ T5872] vhci_hcd: vhci_device speed not set
[  821.501822][ T5849] usb 45-1: enqueue for inactive port 0
[  821.679177][ T5849] vhci_hcd: vhci_device speed not set
[  823.130439][T11486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'.
[  823.668648][    T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  823.874640][ T5872] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  823.951453][    T8] usb 3-1: no configurations
[  824.011376][    T8] usb 3-1: can't read configurations, error -22
[  824.244958][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  824.344999][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  824.357697][T11515] overlayfs: missing 'lowerdir'
[  824.364918][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  824.378160][ T5872] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  824.390742][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.415583][ T5872] usb 7-1: config 0 descriptor??
[  824.439223][    T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  824.640947][    T8] usb 3-1: no configurations
[  824.645669][    T8] usb 3-1: can't read configurations, error -22
[  824.676237][    T8] usb usb3-port1: attempt power cycle
[  824.768098][T11519] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  824.774772][T11519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  824.783495][T11519] vhci_hcd vhci_hcd.0: Device attached
[  825.026850][ T5872] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  825.919925][T11520] vhci_hcd: connection closed
[  826.014493][ T5849] usb 39-1: new high-speed USB device number 3 using vhci_hcd
[  826.021239][   T48] vhci_hcd: stop threads
[  826.053361][ T5872] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  826.129549][T11527] syz.5.1432: attempt to access beyond end of device
[  826.129549][T11527] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  826.142556][T11527] efs: cannot read volume header
[  826.190746][T11528] loop5: detected capacity change from 0 to 512
[  826.198282][T11528] EXT4-fs: Ignoring removed bh option
[  826.874619][    T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  826.894500][   T48] vhci_hcd: release socket
[  826.916394][   T48] vhci_hcd: disconnect device
[  826.918066][T11528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  826.936710][T11528] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  827.003990][    T8] usb 3-1: device descriptor read/8, error -71
[  827.168403][T10605] usb 7-1: USB disconnect, device number 4
[  827.277175][T11532] fido_id[11532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  827.317922][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.344426][T11538] loop6: detected capacity change from 0 to 16
[  827.398926][T11538] erofs: (device loop6): mounted with root inode @ nid 36.
[  827.618905][T11541] loop3: detected capacity change from 0 to 256
[  827.780461][T11544] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  827.790462][T11544] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  827.800089][T11544] erofs: (device loop6): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  827.809352][T11544] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  827.819318][T11544] erofs: (device loop6): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  827.828478][T11544] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  827.838386][T11544] erofs: (device loop6): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  827.847907][T11544] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  827.857636][T11544] erofs: (device loop6): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  827.868304][T11544] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  827.878062][T11544] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  827.888128][T11544] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  828.323824][   T28] audit: type=1800 audit(1759783273.291:40): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1436" name="file2" dev="loop6" ino=89 res=0 errno=0
[  828.465252][T11541] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  828.883642][T11551] overlayfs: missing 'workdir'
[  830.028888][T11555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  830.035506][T11555] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  830.043460][T11555] vhci_hcd vhci_hcd.0: Device attached
[  830.049227][T11564] vhci_hcd: connection closed
[  830.050580][T11565] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  830.241329][   T11] vhci_hcd: stop threads
[  830.343572][   T11] vhci_hcd: release socket
[  830.419780][   T11] vhci_hcd: disconnect device
[  830.419857][T11559] loop2: detected capacity change from 0 to 1024
[  830.491464][T11559] EXT4-fs: Ignoring removed nobh option
[  830.497118][T11559] EXT4-fs: inline encryption not supported
[  830.692457][T11559] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  830.715614][T11572] loop3: detected capacity change from 0 to 128
[  830.801237][T11559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  830.905926][T11579] syz.5.1444: attempt to access beyond end of device
[  830.905926][T11579] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  830.919373][T11579] efs: cannot read volume header
[  830.967802][T11580] loop5: detected capacity change from 0 to 512
[  830.975381][T11580] EXT4-fs: Ignoring removed bh option
[  831.151862][T11580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  831.168968][T11580] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  831.520365][ T5849] vhci_hcd: vhci_device speed not set
[  831.630151][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.632372][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.301902][T11595] overlayfs: missing 'workdir'
[  834.944911][T11628] syz.3.1457: attempt to access beyond end of device
[  834.944911][T11628] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  834.958155][T11628] efs: cannot read volume header
[  835.007558][T11629] loop3: detected capacity change from 0 to 512
[  835.015074][T11629] EXT4-fs: Ignoring removed bh option
[  835.090563][T11629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  835.104653][T11629] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  835.675802][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  835.732482][T11637] loop2: detected capacity change from 0 to 2048
[  835.838191][T11642] overlayfs: missing 'workdir'
[  835.862708][T11637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  837.099508][T11664] loop3: detected capacity change from 0 to 16
[  838.635843][T11664] erofs: (device loop3): mounted with root inode @ nid 36.
[  838.653255][T11662] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  838.663661][T11662] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  838.673192][T11662] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  838.683291][T11662] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  838.692615][T11662] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  838.702612][T11662] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  838.712104][T11662] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  838.723208][T11662] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  838.733200][T11662] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  838.742361][   T28] audit: type=1800 audit(1759783284.141:41): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1470" name="file2" dev="loop3" ino=89 res=0 errno=0
[  840.715710][T11700] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1480'.
[  841.647013][T11709] loop5: detected capacity change from 0 to 2048
[  841.723012][T11709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  841.874208][T11714] loop3: detected capacity change from 0 to 1024
[  842.016641][T11714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  842.762086][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  843.193076][T11729] syz.5.1486: attempt to access beyond end of device
[  843.193076][T11729] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  843.206250][T11729] efs: cannot read volume header
[  843.252774][T11730] loop5: detected capacity change from 0 to 512
[  843.260364][T11730] EXT4-fs: Ignoring removed bh option
[  843.993312][T11730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  844.008871][T11730] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  844.326668][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  844.435795][T11738] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1490'.
[  845.113866][T11740] loop3: detected capacity change from 0 to 512
[  845.208217][T11740] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  845.243064][T11740] EXT4-fs (loop3): orphan cleanup on readonly fs
[  845.285840][T11740] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.1492: Block bitmap for bg 0 marked uninitialized
[  845.345884][T11740] EXT4-fs (loop3): Remounting filesystem read-only
[  845.356224][T11740] EXT4-fs (loop3): 1 orphan inode deleted
[  845.376812][T11740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  847.364578][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.610545][T11763] loop3: detected capacity change from 0 to 2048
[  847.754375][T11763] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  847.917628][T11763] Invalid option length (805) for dns_resolver key
[  848.499419][T11770] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1501'.
[  848.530698][T11770] loop5: detected capacity change from 0 to 2048
[  848.637033][T11770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  852.151168][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  852.928244][T11803] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1512'.
[  854.132733][T11806] loop2: detected capacity change from 0 to 1024
[  855.782066][ T7437] hfsplus: b-tree write err: -5, ino 4
[  856.305987][T11837] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1523'.
[  857.272692][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  859.127843][T11859] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  859.134493][T11859] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  859.142745][T11859] vhci_hcd vhci_hcd.0: Device attached
[  859.448484][T11869] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1535'.
[  859.576886][T11869] loop5: detected capacity change from 0 to 2048
[  860.128583][T11866] vhci_hcd: connection closed
[  860.175606][ T6017] vhci_hcd: stop threads
[  860.211932][T11869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  860.262032][ T6017] vhci_hcd: release socket
[  860.299227][ T6017] vhci_hcd: disconnect device
[  860.455322][ T5849] usb 37-1: new high-speed USB device number 3 using vhci_hcd
[  860.463150][ T5849] usb 37-1: enqueue for inactive port 0
[  860.574649][ T5849] vhci_hcd: vhci_device speed not set
[  863.776726][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1546'.
[  863.810047][T11904] loop5: detected capacity change from 0 to 2048
[  863.833137][T11904] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  864.479625][ T5848] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  865.437226][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  865.458442][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  865.468922][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  865.499192][ T5848] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  865.508467][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.540375][ T5848] usb 4-1: config 0 descriptor??
[  867.023508][T11929] loop2: detected capacity change from 0 to 1024
[  867.031283][T11929] EXT4-fs: Ignoring removed orlov option
[  867.037007][T11929] EXT4-fs: Ignoring removed nomblk_io_submit option
[  867.432667][T11929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  867.674713][ T5848] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  867.832129][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.983661][ T5848] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  868.691334][T11941] loop2: detected capacity change from 0 to 1024
[  868.858824][ T5848] usb 4-1: USB disconnect, device number 21
[  868.946682][T11945] loop5: detected capacity change from 0 to 512
[  869.009531][T11945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  869.009996][T10737] hfsplus: b-tree write err: -5, ino 4
[  869.183229][T11945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  869.279483][T11945] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  870.565094][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  870.571614][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  870.662695][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  871.346586][T11970] loop3: detected capacity change from 0 to 512
[  871.545027][T11973] syz.2.1564: attempt to access beyond end of device
[  871.545027][T11973] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  871.558132][T11973] efs: cannot read volume header
[  871.609306][T11973] loop2: detected capacity change from 0 to 512
[  871.621016][T11973] EXT4-fs: Ignoring removed bh option
[  871.936150][T11970] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  872.343104][T11973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  872.357877][T11973] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  872.405991][T11970] EXT4-fs (loop3): 1 truncate cleaned up
[  872.440680][T11970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  872.643769][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  874.578375][T11999] loop5: detected capacity change from 0 to 256
[  877.302899][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  878.908154][T12033] loop5: detected capacity change from 0 to 512
[  878.939239][T12033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  878.990936][T12033] EXT4-fs (loop5): 1 truncate cleaned up
[  878.998218][T12033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  879.089178][ T9359] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  880.011422][ T9359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  880.023418][ T9359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.037766][ T9359] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  880.051456][ T9359] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  880.069971][ T9359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.084397][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  880.095794][ T9359] usb 4-1: config 0 descriptor??
[  880.547322][ T9359] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  880.606652][ T9359] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  880.690403][T12051] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  881.837482][T12047] loop5: detected capacity change from 0 to 1024
[  883.009373][ T5848] usb 4-1: reset high-speed USB device number 22 using dummy_hcd
[  883.873663][T12075] loop3: detected capacity change from 0 to 512
[  883.958829][T12075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  883.962142][   T48] hfsplus: b-tree write err: -5, ino 4
[  883.993839][T12075] EXT4-fs (loop3): 1 truncate cleaned up
[  884.060532][T12075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  884.620095][T10625] usb 4-1: USB disconnect, device number 22
[  885.177585][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  885.426948][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'.
[  885.788357][T12096] loop3: detected capacity change from 0 to 1024
[  885.796006][T12096] EXT4-fs: Ignoring removed i_version option
[  885.802165][T12096] EXT4-fs: Ignoring removed bh option
[  885.807660][T12096] EXT4-fs: inline encryption not supported
[  885.832443][T12096] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  887.363350][T12096] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.1599: lblock 2 mapped to illegal pblock 2 (length 1)
[  887.380093][T12096] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  887.388392][T12096] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.1599: lblock 0 mapped to illegal pblock 48 (length 1)
[  887.407300][T12096] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  887.417033][T12096] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1599: Failed to acquire dquot type 0
[  887.449783][T12096] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  887.470115][T12096] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.1599: mark_inode_dirty error
[  887.483571][T12096] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  887.494552][T12096] EXT4-fs (loop3): 1 orphan inode deleted
[  887.502126][T12096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  887.855031][T12104] syz.5.1601: attempt to access beyond end of device
[  887.855031][T12104] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  887.868243][T12104] efs: cannot read volume header
[  887.917076][T12105] loop5: detected capacity change from 0 to 512
[  887.924723][T12105] EXT4-fs: Ignoring removed bh option
[  888.622120][ T6644] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  888.646441][T12100] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  888.653168][T12100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  888.661188][T12100] vhci_hcd vhci_hcd.0: Device attached
[  888.737999][T12105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  888.749500][ T6644] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  888.759928][T12105] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  889.592432][T12108] vhci_hcd: connection closed
[  889.593891][ T3438] vhci_hcd: stop threads
[  889.620858][ T6644] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:11: Failed to release dquot type 0
[  889.635702][ T3438] vhci_hcd: release socket
[  889.661014][ T3438] vhci_hcd: disconnect device
[  889.699209][T10627] usb 45-1: new high-speed USB device number 4 using vhci_hcd
[  889.709299][T10627] usb 45-1: enqueue for inactive port 0
[  889.743053][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  889.751842][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  889.769399][ T5792] EXT4-fs error (device loop3): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0
[  889.796610][T12118] loop2: detected capacity change from 0 to 512
[  889.822973][T10627] vhci_hcd: vhci_device speed not set
[  889.847613][ T5792] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  889.884322][ T5792] EXT4-fs error (device loop3): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error
[  889.923716][T12118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  889.959557][T12118] ext4 filesystem being mounted at /404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  890.199382][T12118] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.1606: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  890.393582][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  890.540164][ T8391] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  890.803040][ T8391] usb 4-1: Using ep0 maxpacket: 16
[  890.861677][ T8391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10
[  890.877839][ T8391] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[  890.888840][ T8391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.917211][ T8391] usb 4-1: config 0 descriptor??
[  890.948740][T12140] fuse: Bad value for 'fd'
[  891.155132][ T8391] usb 4-1: string descriptor 0 read error: -71
[  891.187163][ T8391] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33
[  891.205220][ T5140] bcm5974 4-1:0.0: could not read from device
[  891.263218][ T8391] usb 4-1: USB disconnect, device number 23
[  891.273729][ T5140] bcm5974 4-1:0.0: could not read from device
[  891.320924][ T5140] bcm5974 4-1:0.0: could not read from device
[  891.347903][ T5140] bcm5974 4-1:0.0: could not read from device
[  891.426309][ T7341] bcm5974 4-1:0.0: could not read from device
[  892.068281][T12152] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  892.074995][T12152] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  892.083062][T12152] vhci_hcd vhci_hcd.0: Device attached
[  892.567984][T12153] vhci_hcd: connection closed
[  892.568472][   T11] vhci_hcd: stop threads
[  892.578201][   T11] vhci_hcd: release socket
[  892.601058][   T11] vhci_hcd: disconnect device
[  892.697022][T12162] loop3: detected capacity change from 0 to 2048
[  892.767273][T12162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  892.787665][T12167] loop5: detected capacity change from 0 to 1024
[  892.868377][T12162] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.1620: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  892.917442][T12167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  892.949812][T12114] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  892.959501][T12167] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  893.028121][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  893.056369][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  893.600285][T12188] fuse: Unknown parameter 'user00000000000000000000'
[  893.759514][T12191] loop2: detected capacity change from 0 to 764
[  893.784210][T12191] rock: directory entry would overflow storage
[  893.790974][ T9359] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  893.834922][T12191] rock: sig=0x4654, size=5, remaining=4
[  893.876972][T12191] isofs: Unable to find the ".." directory for NFS.
[  894.003259][T12196] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  894.009903][T12196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  894.018871][T12196] vhci_hcd vhci_hcd.0: Device attached
[  894.135023][ T9359] usb 4-1: config 0 has no interfaces?
[  894.296089][ T9359] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  894.389452][ T5971] usb 43-1: new high-speed USB device number 3 using vhci_hcd
[  894.402527][ T9359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.523953][ T9359] usb 4-1: Product: syz
[  894.616133][ T9359] usb 4-1: Manufacturer: syz
[  894.699257][ T9359] usb 4-1: SerialNumber: syz
[  894.735349][T12197] vhci_hcd: connection reset by peer
[  894.839809][ T6017] vhci_hcd: stop threads
[  894.942975][ T6017] vhci_hcd: release socket
[  894.989622][ T9359] usb 4-1: config 0 descriptor??
[  895.069870][ T6017] vhci_hcd: disconnect device
[  895.333530][T10625] usb 4-1: USB disconnect, device number 24
[  895.676802][ T8391] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  895.716469][T12214] fuse: Unknown parameter 'user_i00000000000000000000'
[  895.882704][ T8391] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  895.918996][ T8391] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  895.942696][T12217] loop5: detected capacity change from 0 to 512
[  895.961739][T12217] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  895.974914][ T8391] usb 3-1: config 0 has no interface number 0
[  895.989991][ T8391] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  896.028773][ T8391] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  896.036328][T12217] EXT4-fs (loop5): 1 truncate cleaned up
[  896.049295][T12217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  896.345734][ T8391] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  896.355322][ T8391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.796988][ T8391] usb 3-1: Product: syz
[  896.801567][ T8391] usb 3-1: Manufacturer: syz
[  896.806642][ T8391] usb 3-1: SerialNumber: syz
[  897.170550][ T8391] usb 3-1: config 0 descriptor??
[  897.585488][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  897.793808][ T5849] usb 3-1: USB disconnect, device number 23
[  898.192419][T12243] fuse: Unknown parameter 'user_i00000000000000000000'
[  899.669711][ T5971] vhci_hcd: vhci_device speed not set
[  900.177041][T12262] loop2: detected capacity change from 0 to 256
[  900.194304][T12262] exfat: Deprecated parameter 'namecase'
[  900.349966][T12262] exfat: Deprecated parameter 'namecase'
[  900.986622][T12262] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  902.279295][ T5971] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  902.479405][ T5971] usb 6-1: device descriptor read/64, error -71
[  902.669990][T12280] fuse: Unknown parameter 'user_00000000000000000000'
[  902.789777][ T5971] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  902.979317][ T5971] usb 6-1: device descriptor read/64, error -71
[  903.099337][ T5971] usb usb6-port1: attempt power cycle
[  903.779168][ T5971] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  903.882312][ T5971] usb 6-1: device descriptor read/8, error -71
[  904.160925][T12291] syz.2.1662: attempt to access beyond end of device
[  904.160925][T12291] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  904.174221][T12291] efs: cannot read volume header
[  904.188852][T12291] loop2: detected capacity change from 0 to 512
[  904.196396][T12291] EXT4-fs: Ignoring removed bh option
[  904.202776][ T5971] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  904.289440][ T5971] usb 6-1: device descriptor read/8, error -71
[  904.301504][T12291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  904.315641][T12291] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  904.493013][ T5971] usb usb6-port1: unable to enumerate USB device
[  904.875460][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  904.902440][T12303] loop5: detected capacity change from 0 to 512
[  904.981273][T12304] xt_CT: You must specify a L4 protocol and not use inversions on it
[  905.009681][T12303] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  905.320325][T12303] EXT4-fs (loop5): 1 truncate cleaned up
[  905.505347][T12303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  907.457181][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  907.473318][T12316] fuse: Unknown parameter 'user_00000000000000000000'
[  909.576211][T10625] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  909.743256][T10625] usb 3-1: device descriptor read/64, error -71
[  910.229369][T10625] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  910.719217][T10625] usb 3-1: device descriptor read/64, error -71
[  910.999306][T10625] usb usb3-port1: attempt power cycle
[  911.005826][T12334] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  911.012723][T12334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  911.021394][T12334] vhci_hcd vhci_hcd.0: Device attached
[  911.106581][T12346] vhci_hcd: connection closed
[  911.110485][T10737] vhci_hcd: stop threads
[  911.130661][T10737] vhci_hcd: release socket
[  911.199420][T10737] vhci_hcd: disconnect device
[  911.259205][ T5971] vhci_hcd: vhci_device speed not set
[  911.419159][T10625] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  911.517281][T10625] usb 3-1: device descriptor read/8, error -71
[  911.689989][T12352] fuse: Unknown parameter 'user_00000000000000000000'
[  911.819635][T10625] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  911.968759][T10625] usb 3-1: device descriptor read/8, error -71
[  912.310467][T10625] usb usb3-port1: unable to enumerate USB device
[  914.142759][T12371] loop3: detected capacity change from 0 to 128
[  914.221110][T12371] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  914.298524][T12371] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  914.325985][T12371] ext2 filesystem being mounted at /399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  914.357957][    C0] vkms_vblank_simulate: vblank timer overrun
[  914.670196][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  915.098533][T12380] loop3: detected capacity change from 0 to 512
[  915.201510][T12380] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  915.311580][T12385] fuse: Bad value for 'fd'
[  915.347677][T12380] EXT4-fs (loop3): 1 truncate cleaned up
[  915.459245][ T5971] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  915.468624][T12380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  915.689267][ T5971] usb 3-1: device descriptor read/64, error -71
[  916.811039][ T5971] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  916.997248][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  917.227071][ T5971] usb 3-1: device descriptor read/64, error -71
[  917.355339][ T5971] usb usb3-port1: attempt power cycle
[  917.809313][ T5971] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  917.831734][T12403] loop3: detected capacity change from 0 to 2048
[  917.888381][ T5971] usb 3-1: device descriptor read/8, error -71
[  918.011013][T12403]  loop3: p1 < > p4
[  918.131302][T12403] loop3: p4 size 8388608 extends beyond EOD, truncated
[  918.136937][T12404] syz.3.1693: attempt to access beyond end of device
[  918.136937][T12404] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0
[  918.189186][ T5971] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  918.314883][T12404] EXT4-fs (loop7): unable to read superblock
[  918.429299][ T5971] usb 3-1: device not accepting address 31, error -71
[  918.720000][ T8391] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  919.082368][ T8391] usb 6-1: Using ep0 maxpacket: 8
[  919.198857][ T5971] usb usb3-port1: unable to enumerate USB device
[  919.240026][ T8391] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  919.271861][ T8391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.316724][ T5155]  loop3: p1 < > p4
[  919.329182][ T8391] usb 6-1: Product: syz
[  919.333423][ T8391] usb 6-1: Manufacturer: syz
[  919.359757][ T5155] loop3: p4 size 8388608 extends beyond EOD, truncated
[  919.368396][ T8391] usb 6-1: SerialNumber: syz
[  919.390006][ T8391] usb 6-1: config 0 descriptor??
[  919.443434][T12415] loop2: detected capacity change from 0 to 2048
[  919.486988][T12415] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=4096, location=4096
[  919.527392][T12415] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  919.569361][T12415] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  919.573149][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  919.584283][T11005] udevd[11005]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  919.611686][T12415] UDF-fs: Scanning with blocksize 512 failed
[  919.622467][ T8391] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  919.676309][T12415] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  919.699445][T12415] UDF-fs: Scanning with blocksize 1024 failed
[  919.720516][T12415] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  919.757856][T12415] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  919.786550][T12415] UDF-fs: Scanning with blocksize 2048 failed
[  919.823487][T12415] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  919.875549][T12415] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  919.918886][T12415] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  919.944279][T12415] UDF-fs: Scanning with blocksize 4096 failed
[  919.959132][T12415] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  920.068521][T12420] fuse: Bad value for 'fd'
[  920.069764][ T5796] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  920.165051][T10307] Bluetooth: hci2: command 0x0406 tx timeout
[  920.355259][T12423] loop3: detected capacity change from 0 to 512
[  920.375259][T12423] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  920.389299][T10625] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  920.423187][T12423] EXT4-fs (loop3): 1 truncate cleaned up
[  920.499686][T12423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  920.817193][T10625] usb 3-1: Using ep0 maxpacket: 32
[  920.825976][T10625] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  920.834939][T10625] usb 3-1: config 0 has no interface number 0
[  920.842444][T10625] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  920.853294][T10625] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  920.864546][T10625] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  920.889077][T10625] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  920.898639][T10625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.910457][T10625] usb 3-1: Product: syz
[  920.914965][T10625] usb 3-1: Manufacturer: syz
[  920.923121][T10625] usb 3-1: SerialNumber: syz
[  921.445296][T10625] usb 3-1: config 0 descriptor??
[  921.499703][T12415] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  921.578502][ T8391] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  921.614854][ T8391] usb 6-1: USB disconnect, device number 7
[  921.640365][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  921.772897][T10625] usb-storage 3-1:0.20: USB Mass Storage device detected
[  921.821840][T10625] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  921.841379][T10625] scsi host1: usb-storage 3-1:0.20
[  921.886908][T10625] usb 3-1: USB disconnect, device number 32
[  922.258060][T12450] fuse: Bad value for 'fd'
[  923.089126][T12456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  923.095752][T12456] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  923.104530][T12456] vhci_hcd vhci_hcd.0: Device attached
[  923.150001][T10625] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  923.279457][T12460] vhci_hcd: connection closed
[  923.299873][ T7437] vhci_hcd: stop threads
[  923.308912][ T7437] vhci_hcd: release socket
[  923.362836][ T7437] vhci_hcd: disconnect device
[  923.439256][T10625] usb 6-1: device descriptor read/64, error -71
[  923.439725][ T5971] vhci_hcd: vhci_device speed not set
[  923.719289][T10625] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  923.909487][T10625] usb 6-1: device descriptor read/64, error -71
[  924.049722][T10625] usb usb6-port1: attempt power cycle
[  924.489324][T10625] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  924.575757][T10625] usb 6-1: device descriptor read/8, error -71
[  924.873501][T10625] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  924.921444][T10625] usb 6-1: device descriptor read/8, error -71
[  925.109430][T10625] usb usb6-port1: unable to enumerate USB device
[  925.129807][T12477] loop2: detected capacity change from 0 to 8192
[  925.167326][T12481] fuse: Unknown parameter '0x0000000000000005'
[  926.189159][T12500] loop2: detected capacity change from 0 to 1024
[  926.196994][T12500] EXT4-fs: Ignoring removed nobh option
[  926.209199][T12500] EXT4-fs: Ignoring removed bh option
[  926.239207][T12500] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  926.313615][T12500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  926.386975][T12505] fuse: Unknown parameter '0x0000000000000005'
[  926.455649][   T28] audit: type=1804 audit(1759783371.851:42): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1729" name="/newroot/432/file2/bus" dev="loop2" ino=18 res=1 errno=0
[  926.513886][   T28] audit: type=1804 audit(1759783371.911:43): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1729" name="/newroot/432/file2/bus" dev="loop2" ino=18 res=1 errno=0
[  926.680226][T12513] EXT4-fs (loop2): shut down requested (0)
[  927.259106][ T5971] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  927.491410][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.645911][ T5971] usb 6-1: device descriptor read/64, error -71
[  927.844664][T12517] xt_TCPMSS: Only works on TCP SYN packets
[  927.939241][ T5971] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  928.230062][ T5971] usb 6-1: device descriptor read/64, error -71
[  928.400744][ T5971] usb usb6-port1: attempt power cycle
[  928.839268][ T5971] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  928.912996][ T5971] usb 6-1: device descriptor read/8, error -71
[  928.950208][T12533] fuse: Unknown parameter '0xffffffffffffffff'
[  929.259237][ T5971] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  929.330867][ T5971] usb 6-1: device descriptor read/8, error -71
[  929.479685][ T5971] usb usb6-port1: unable to enumerate USB device
[  929.757021][T12542] loop2: detected capacity change from 0 to 8
[  930.520737][T12556] fuse: Unknown parameter '0x0000000000000005'
[  930.801703][T12561] xt_CT: You must specify a L4 protocol and not use inversions on it
[  932.014001][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  932.020518][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  932.379411][ T9359] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  932.389326][T12575] loop2: detected capacity change from 0 to 512
[  932.433579][T12575] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  932.527245][T12575] EXT4-fs (loop2): 1 truncate cleaned up
[  932.582870][T12575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  932.602320][ T9359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  932.613328][ T9359] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  932.623862][ T9359] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  932.633500][ T9359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.662188][ T9359] usb 4-1: config 0 descriptor??
[  933.616043][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.017229][T12593] fuse: Unknown parameter '0x0000000000000005'
[  934.541769][T12595] xt_CT: You must specify a L4 protocol and not use inversions on it
[  935.628174][T10625] usb 4-1: USB disconnect, device number 25
[  936.333609][T12615] loop5: detected capacity change from 0 to 2048
[  936.666649][ T5796] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  937.294569][T12621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  937.301257][T12621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  937.309896][T12621] vhci_hcd vhci_hcd.0: Device attached
[  937.536347][T12622] vhci_hcd: connection closed
[  937.585475][   T11] vhci_hcd: stop threads
[  937.659481][ T5848] usb 39-1: new high-speed USB device number 6 using vhci_hcd
[  937.732433][   T11] vhci_hcd: release socket
[  937.811192][   T11] vhci_hcd: disconnect device
[  938.110279][T12627] fuse: Unknown parameter '0xffffffffffffffff'
[  940.359129][ T5971] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  940.608581][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  940.651671][ T5971] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  940.725954][T12649] loop2: detected capacity change from 0 to 512
[  940.738420][ T5971] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  940.799434][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.829221][T12649] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  940.868443][ T5971] usb 4-1: config 0 descriptor??
[  940.954798][T12649] EXT4-fs (loop2): 1 truncate cleaned up
[  941.020605][T12649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  941.978577][T12662] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  942.055139][T12661] loop5: detected capacity change from 0 to 1024
[  942.111170][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.210731][T12661] EXT4-fs: Ignoring removed nomblk_io_submit option
[  942.300352][T12661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  942.733001][T10625] kernel write not supported for file /input/event2 (pid: 10625 comm: kworker/1:3)
[  942.949554][ T5848] vhci_hcd: vhci_device speed not set
[  943.243894][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  943.397278][ T5849] usb 4-1: USB disconnect, device number 26
[  943.448076][T12678] loop2: detected capacity change from 0 to 1024
[  943.563380][T12683] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  944.930396][T12702] fuse: Bad value for 'fd'
[  945.223095][T12707] loop2: detected capacity change from 0 to 2048
[  945.320310][T12711] binder: 12700:12711 ioctl 4018620d 0 returned -22
[  945.334605][T12711] binder: 12700:12711 ioctl c0306201 0 returned -14
[  945.342385][T12711] binder: 12700:12711 ioctl c0306201 200000000780 returned -11
[  945.579088][T12707]  loop2: p1 < > p4
[  945.861609][T12707] loop2: p4 size 8388608 extends beyond EOD, truncated
[  946.069513][ T5155]  loop2: p1 < > p4
[  946.098194][ T5155] loop2: p4 size 8388608 extends beyond EOD, truncated
[  946.222706][T12721] syz_tun: entered allmulticast mode
[  946.250127][T12720] syz_tun: left allmulticast mode
[  946.325322][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  946.344255][T12719] loop5: detected capacity change from 0 to 4096
[  946.395482][ T7341] udevd[7341]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  946.463679][T12719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  946.572974][T12719] fs-verity: sha256 using implementation "sha256-avx2"
[  946.652769][T12719] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file!
[  947.557459][T10305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  947.909692][T10307] Bluetooth: hci2: command 0x0406 tx timeout
[  948.240101][T10625] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  948.507973][T10625] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  948.548952][T10625] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  948.609219][T10625] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  948.659197][T10625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.730902][T10625] usb 6-1: config 0 descriptor??
[  948.762075][T10625] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  948.832178][T12748] loop3: detected capacity change from 0 to 2048
[  948.948382][T12748]  loop3: p1 < > p4
[  949.004228][T12748] loop3: p4 size 8388608 extends beyond EOD, truncated
[  949.629600][ T7341] udevd[7341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  949.646121][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  950.141966][ T5849] usb 6-1: USB disconnect, device number 16
[  951.219137][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  951.683612][T12781] binder: 12773:12781 ioctl 4018620d 0 returned -22
[  951.693680][T12781] binder: 12773:12781 ioctl c0306201 200000000780 returned -11
[  951.789127][T12782] loop3: detected capacity change from 0 to 2048
[  951.960761][T12782]  loop3: p1 < > p4
[  951.980177][T12782] loop3: p4 size 8388608 extends beyond EOD, truncated
[  952.497180][T12787] loop2: detected capacity change from 0 to 1024
[  952.509246][T12787] EXT4-fs: Ignoring removed orlov option
[  952.515235][T12787] EXT4-fs: Ignoring removed nomblk_io_submit option
[  953.065780][T12787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  953.413352][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.282046][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  954.618269][T12799] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  954.624922][T12799] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  954.633295][T12799] vhci_hcd vhci_hcd.0: Device attached
[  954.656917][T12802] vhci_hcd: connection closed
[  954.751959][ T6017] vhci_hcd: stop threads
[  954.884762][ T6017] vhci_hcd: release socket
[  954.996474][ T6017] vhci_hcd: disconnect device
[  955.001552][ T5848] usb 37-1: new high-speed USB device number 4 using vhci_hcd
[  955.039243][ T5848] usb 37-1: enqueue for inactive port 0
[  955.284311][ T5848] vhci_hcd: vhci_device speed not set
[  956.238918][T12816] loop2: detected capacity change from 0 to 512
[  956.483393][T12816] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.1830: corrupted inode contents
[  956.496421][T12824] loop5: detected capacity change from 0 to 2048
[  956.519896][T12816] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.1830: mark_inode_dirty error
[  956.554806][T12816] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.1830: corrupted inode contents
[  956.559686][T12824]  loop5: p1 < > p4
[  956.573172][T12816] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1830: mark_inode_dirty error
[  956.597365][T12816] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.1830: corrupted inode contents
[  956.603770][T12824] loop5: p4 size 8388608 extends beyond EOD, 
[  956.617410][T12816] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  956.629230][T12824] truncated
[  956.646069][T12816] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.1830: corrupted inode contents
[  956.666668][T12816] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.1830: mark_inode_dirty error
[  956.679759][ T5155]  loop5: p1 < > p4
[  956.682407][T12816] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  956.698518][T12816] EXT4-fs (loop2): 1 truncate cleaned up
[  956.706212][T12816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  956.708117][ T5155] loop5: p4 size 8388608 extends beyond EOD, 
[  956.719440][T12816] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  956.736388][ T5155] truncated
[  956.750506][ T3438] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  956.764956][ T3438] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:7: Failed to release dquot type 1
[  956.867098][T12829] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1834'.
[  956.966776][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.032995][T12847] loop5: detected capacity change from 0 to 128
[  958.062707][T12847] EXT4-fs: Ignoring removed nobh option
[  958.307070][T12847] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  958.639691][T12847] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  958.906830][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  959.137037][ T5796] udevd[5796]: incorrect ext4dev checksum on /dev/loop5
[  959.224731][T12847] EXT4-fs warning (device loop5): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1282777659
[  959.267762][T12863] syz.3.1842: attempt to access beyond end of device
[  959.267762][T12863] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  959.281322][T12863] efs: cannot read volume header
[  959.329761][T12864] loop3: detected capacity change from 0 to 512
[  959.337139][T12864] EXT4-fs: Ignoring removed bh option
[  959.550066][T12864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  959.564210][T12864] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  959.920732][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.968740][T10305] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  960.167418][T12871] loop2: detected capacity change from 0 to 2048
[  960.346646][T12881] loop3: detected capacity change from 0 to 512
[  960.414584][T12881] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  960.560804][T12871]  loop2: p1 < > p4
[  960.577554][T12881] EXT4-fs (loop3): 1 truncate cleaned up
[  960.586417][T12871] loop2: p4 size 8388608 extends beyond EOD, truncated
[  960.587274][T12881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  961.738559][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  962.559370][T10307] Bluetooth: hci2: command 0x0406 tx timeout
[  962.629378][T12901] program syz.2.1855 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  964.428210][T12918] loop3: detected capacity change from 0 to 256
[  965.255181][T12932] binder: 12927:12932 ioctl 4018620d 0 returned -22
[  965.273223][T12932] binder: 12927:12932 ioctl c0306201 200000000780 returned -11
[  965.588234][ T9359] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  965.979173][ T9359] usb 4-1: Using ep0 maxpacket: 16
[  966.019089][ T9359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  966.050198][ T9359] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  966.076798][ T9359] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  966.088630][T12940] loop2: detected capacity change from 0 to 256
[  966.095651][ T9359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.120338][ T9359] usb 4-1: Product: syz
[  966.129636][ T9359] usb 4-1: Manufacturer: syz
[  966.134394][ T9359] usb 4-1: SerialNumber: syz
[  966.197489][T12940] FAT-fs (loop2): Directory bread(block 64) failed
[  966.219251][T12940] FAT-fs (loop2): Directory bread(block 65) failed
[  966.234947][T12940] FAT-fs (loop2): Directory bread(block 66) failed
[  966.243075][T12940] FAT-fs (loop2): Directory bread(block 67) failed
[  966.259933][T12940] FAT-fs (loop2): Directory bread(block 68) failed
[  966.266681][T12940] FAT-fs (loop2): Directory bread(block 69) failed
[  966.319425][T12940] FAT-fs (loop2): Directory bread(block 70) failed
[  966.326428][T12940] FAT-fs (loop2): Directory bread(block 71) failed
[  966.358210][T12940] FAT-fs (loop2): Directory bread(block 72) failed
[  966.374188][T12940] FAT-fs (loop2): Directory bread(block 73) failed
[  966.550360][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  968.580626][ T9359] usb 4-1: 0:2 : does not exist
[  968.593686][ T9359] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  968.673591][ T9359] usb 4-1: USB disconnect, device number 27
[  968.737932][T12964] loop3: detected capacity change from 0 to 512
[  968.768266][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  968.813136][T12964] EXT4-fs: Ignoring removed i_version option
[  968.843407][T12964] ext4: Unknown parameter 'noacl'
[  969.088184][T12969] binder: 12965:12969 ioctl 4018620d 0 returned -22
[  969.103348][T12969] binder: 12965:12969 ioctl c0306201 200000000780 returned -11
[  969.820321][T12971] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1876'.
[  969.888464][T12975] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  969.895044][T12975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  969.903461][T12975] vhci_hcd vhci_hcd.0: Device attached
[  969.944314][T12977] vhci_hcd: connection closed
[  969.944875][   T12] vhci_hcd: stop threads
[  969.965049][   T12] vhci_hcd: release socket
[  969.973751][   T12] vhci_hcd: disconnect device
[  970.216199][T12984] 9pnet_fd: Insufficient options for proto=fd
[  970.969130][T10307] Bluetooth: hci2: command 0x0406 tx timeout
[  972.202234][T12993] loop3: detected capacity change from 0 to 2048
[  972.308317][T12993]  loop3: p1 < > p4
[  972.341304][T12993] loop3: p4 size 8388608 extends beyond EOD, truncated
[  972.622316][ T5155]  loop3: p1 < > p4
[  972.705179][ T5155] loop3: p4 size 8388608 extends beyond EOD, truncated
[  973.640560][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1888'.
[  973.844617][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  973.859803][ T7341] udevd[7341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  975.027865][T13025] loop2: detected capacity change from 0 to 512
[  975.048949][T13025] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  975.157531][T13025] EXT4-fs (loop2): 1 truncate cleaned up
[  975.180588][T13025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  975.509590][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  976.536120][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.044758][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1900'.
[  978.325429][T13057] loop3: detected capacity change from 0 to 1024
[  978.333189][T13057] EXT4-fs: Ignoring removed bh option
[  978.341289][T13057] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  978.397065][T13057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  978.469167][T13062] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  978.475756][T13062] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  978.484217][T13062] vhci_hcd vhci_hcd.0: Device attached
[  978.504430][T13063] vhci_hcd: connection closed
[  978.534331][   T12] vhci_hcd: stop threads
[  978.551046][   T12] vhci_hcd: release socket
[  978.566596][   T12] vhci_hcd: disconnect device
[  978.575141][T13066] loop2: detected capacity change from 0 to 256
[  978.586437][T13067] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.1905: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4
[  978.611481][T13066] exfat: Deprecated parameter 'namecase'
[  978.617247][T13066] exfat: Deprecated parameter 'namecase'
[  978.641860][ T5796] udevd[5796]: incorrect ext4 checksum on /dev/loop3
[  978.657244][T13067] EXT4-fs (loop3): Remounting filesystem read-only
[  978.705500][T13069] loop5: detected capacity change from 0 to 256
[  978.715475][T13066] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  978.740612][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  979.330929][T10307] Bluetooth: hci2: command 0x0406 tx timeout
[  979.331745][T13069] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3a19f819, utbl_chksum : 0xe619d30d)
[  980.310595][ T8391] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  980.474800][ T3412] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.499109][ T8391] usb 3-1: Using ep0 maxpacket: 32
[  980.506671][ T8391] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  980.529395][ T8391] usb 3-1: config 0 has no interface number 0
[  980.545476][ T8391] usb 3-1: config 0 interface 184 has no altsetting 0
[  980.572053][ T8391] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  980.589136][ T8391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.597217][ T8391] usb 3-1: Product: syz
[  980.609164][ T8391] usb 3-1: Manufacturer: syz
[  980.613844][ T8391] usb 3-1: SerialNumber: syz
[  980.640801][ T8391] usb 3-1: config 0 descriptor??
[  980.650323][ T8391] smsc75xx v1.0.0
[  980.661219][ T3412] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.796914][ T3412] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.982062][ T3412] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.492792][ T8391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  981.529135][ T8391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  981.560287][ T8391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  981.590371][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  981.619449][ T8391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  981.668332][ T8391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  981.736012][ T8391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  981.799375][ T8391] smsc75xx: probe of 3-1:0.184 failed with error -71
[  981.855661][ T8391] usb 3-1: USB disconnect, device number 33
[  981.970892][T13097] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  981.977488][T13097] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  981.986166][T13097] vhci_hcd vhci_hcd.0: Device attached
[  982.361119][T10627] usb 39-1: new high-speed USB device number 7 using vhci_hcd
[  982.537916][T10307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  982.620285][T10307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  982.642881][T10307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  982.657516][T13098] vhci_hcd: connection reset by peer
[  982.736759][T10307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  982.770833][T10307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  982.786963][T10307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  982.802625][ T7437] vhci_hcd: stop threads
[  982.975970][ T7437] vhci_hcd: release socket
[  983.067370][ T7437] vhci_hcd: disconnect device
[  983.895152][T13112] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  983.901870][T13112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  983.910237][T13112] vhci_hcd vhci_hcd.0: Device attached
[  984.388889][T13113] vhci_hcd: connection closed
[  984.406865][T10737] vhci_hcd: stop threads
[  984.554611][T10737] vhci_hcd: release socket
[  984.683646][T10737] vhci_hcd: disconnect device
[  985.029463][ T5785] Bluetooth: hci0: command tx timeout
[  985.201835][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1926'.
[  985.214772][T13130] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1926'.
[  985.235363][T13131] loop2: detected capacity change from 0 to 1024
[  985.243025][T13131] EXT4-fs: Ignoring removed orlov option
[  985.300308][T13131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  986.626241][T13145] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  986.632838][T13145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  986.661078][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  986.671331][T13145] vhci_hcd vhci_hcd.0: Device attached
[  986.847630][T13149] vhci_hcd: connection closed
[  986.848071][   T12] vhci_hcd: stop threads
[  986.883808][   T12] vhci_hcd: release socket
[  986.897007][   T12] vhci_hcd: disconnect device
[  986.949208][ T9359] usb 45-1: new high-speed USB device number 5 using vhci_hcd
[  986.957928][ T9359] usb 45-1: enqueue for inactive port 0
[  987.069171][ T9359] vhci_hcd: vhci_device speed not set
[  987.109165][ T5785] Bluetooth: hci0: command tx timeout
[  987.117674][T13101] chnl_net:caif_netlink_parms(): no params data found
[  987.819681][T10627] vhci_hcd: vhci_device speed not set
[  988.440127][T13161] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1933'.
[  988.449554][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'.
[  988.460728][T13161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1933'.
[  989.001653][ T3412] hsr_slave_0: left promiscuous mode
[  989.022882][ T3412] hsr_slave_1: left promiscuous mode
[  989.045023][ T3412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  989.191164][ T5785] Bluetooth: hci0: command tx timeout
[  989.226819][ T3412] batman_adv: batadv0: Removing interface: batadv_slave_0
[  989.313664][ T3412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  989.388717][ T3412] batman_adv: batadv0: Removing interface: batadv_slave_1
[  989.461145][ T3412] bridge_slave_1: left allmulticast mode
[  989.480036][ T3412] bridge_slave_1: left promiscuous mode
[  989.485949][ T3412] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.539965][ T3412] bridge_slave_0: left allmulticast mode
[  989.545780][ T3412] bridge_slave_0: left promiscuous mode
[  989.578715][ T3412] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.776787][ T3412] veth1_macvtap: left promiscuous mode
[  989.788045][ T3412] veth0_macvtap: left promiscuous mode
[  989.795915][ T3412] veth1_vlan: left promiscuous mode
[  989.805658][ T3412] veth0_vlan: left promiscuous mode
[  989.901753][T13184] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  989.908447][T13184] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  989.916712][T13184] vhci_hcd vhci_hcd.0: Device attached
[  990.220899][ T9359] usb 37-1: new high-speed USB device number 5 using vhci_hcd
[  990.671056][T13185] vhci_hcd: connection reset by peer
[  990.721760][ T7437] vhci_hcd: stop threads
[  990.758895][ T7437] vhci_hcd: release socket
[  990.821521][ T7437] vhci_hcd: disconnect device
[  991.281643][ T5785] Bluetooth: hci0: command tx timeout
[  992.554072][ T3412] team0 (unregistering): Port device team_slave_1 removed
[  992.629594][ T3412] team0 (unregistering): Port device team_slave_0 removed
[  992.703371][ T3412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  992.828339][ T3412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  993.439175][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  993.447508][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  993.736336][ T3412] bond0 (unregistering): Released all slaves
[  994.000435][T13101] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.007663][T13101] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.016299][T13101] bridge_slave_0: entered allmulticast mode
[  994.024470][T13101] bridge_slave_0: entered promiscuous mode
[  994.040554][T13101] bridge0: port 2(bridge_slave_1) entered blocking state
[  994.050598][T13101] bridge0: port 2(bridge_slave_1) entered disabled state
[  994.080230][T13101] bridge_slave_1: entered allmulticast mode
[  994.088289][T13101] bridge_slave_1: entered promiscuous mode
[  994.416964][T13101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  994.497078][T13101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  995.959386][ T9359] vhci_hcd: vhci_device speed not set
[  996.237045][T13101] team0: Port device team_slave_0 added
[  996.324283][T13101] team0: Port device team_slave_1 added
[  997.511016][T13101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  997.524593][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  997.559397][T13101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  997.649571][T13101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  997.656586][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  997.729145][T13234] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  997.735709][T13234] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  997.745767][T13234] vhci_hcd vhci_hcd.0: Device attached
[  997.756294][T13101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  997.814486][T13235] vhci_hcd: connection closed
[  997.815050][ T3438] vhci_hcd: stop threads
[  997.858008][ T3438] vhci_hcd: release socket
[  997.873486][ T3438] vhci_hcd: disconnect device
[  997.959331][T10625] vhci_hcd: vhci_device speed not set
[  997.982592][T13101] hsr_slave_0: entered promiscuous mode
[  997.999786][T13101] hsr_slave_1: entered promiscuous mode
[  998.024661][T13101] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  998.034560][T13101] Cannot create hsr debugfs directory
[  999.215051][T13101] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  999.234690][T13266] loop3: detected capacity change from 0 to 2048
[  999.265462][T13101] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  999.285818][T13101] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  999.312655][T13266]  loop3: p1 < > p4
[  999.335766][T13101] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  999.360095][T13266] loop3: p4 size 8388608 extends beyond EOD, truncated
[  999.439702][T10625] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  999.715737][T10625] usb 3-1: config 0 has no interfaces?
[  999.753534][T10625] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  999.789110][T10625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.810672][T10625] usb 3-1: Product: syz
[  999.819151][T10625] usb 3-1: Manufacturer: syz
[  999.823918][T10625] usb 3-1: SerialNumber: syz
[  999.843984][T13194] udevd[13194]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  999.871094][T13101] 8021q: adding VLAN 0 to HW filter on device bond0
[  999.881901][T10625] usb 3-1: config 0 descriptor??
[  999.964030][T13101] 8021q: adding VLAN 0 to HW filter on device team0
[ 1000.193350][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.200601][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1000.222978][T13287] udevd[13287]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[ 1000.242875][ T8391] usb 3-1: USB disconnect, device number 34
[ 1000.364877][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.372112][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1001.299529][T13101] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1001.569448][T10627] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1001.769103][T10627] usb 4-1: Using ep0 maxpacket: 8
[ 1001.784564][T10627] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1001.804289][T10627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.829583][T10627] usb 4-1: Product: syz
[ 1001.833838][T10627] usb 4-1: Manufacturer: syz
[ 1001.869123][T10627] usb 4-1: SerialNumber: syz
[ 1001.883047][T10627] usb 4-1: config 0 descriptor??
[ 1002.147997][T10627] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1002.358356][T13101] veth0_vlan: entered promiscuous mode
[ 1002.416600][T13101] veth1_vlan: entered promiscuous mode
[ 1002.586400][T13101] veth0_macvtap: entered promiscuous mode
[ 1002.626544][T13101] veth1_macvtap: entered promiscuous mode
[ 1002.752680][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.785212][T13329] loop2: detected capacity change from 0 to 2048
[ 1002.789179][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.819166][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.854762][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.889061][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.929037][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.947252][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.979105][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.017850][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.050655][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.083885][T13101] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1003.107754][T13329]  loop2: p1 < > p4
[ 1003.153362][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.163604][T10627] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[ 1003.168681][T13329] loop2: p4 size 8388608 extends beyond EOD, 
[ 1003.183114][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.183130][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.183148][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.243836][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.256852][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.267334][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.279756][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.299279][T13329] truncated
[ 1003.330357][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.357009][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.367740][ T5155]  loop2: p1 < > p4
[ 1003.419392][ T5155] loop2: p4 size 8388608 extends beyond EOD, truncated
[ 1003.438516][T13101] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1003.473401][T13101] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.757410][T13101] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.782262][T13101] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.813521][T13101] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.875114][T13194] udevd[13194]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[ 1003.891915][T13287] udevd[13287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[ 1004.010630][T13287] udevd[13287]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[ 1004.050345][ T8391] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1004.116274][ T6292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1004.159479][ T6292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1004.211746][ T6292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1004.269702][ T6292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1004.282899][ T9359] usb 4-1: USB disconnect, device number 28
[ 1004.470541][ T8391] usb 3-1: config 0 has no interfaces?
[ 1004.509968][ T8391] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1004.540527][ T8391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1004.589548][ T8391] usb 3-1: Product: syz
[ 1004.609107][ T8391] usb 3-1: Manufacturer: syz
[ 1004.613792][ T8391] usb 3-1: SerialNumber: syz
[ 1004.658618][ T8391] usb 3-1: config 0 descriptor??
[ 1004.889325][T13355] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1004.895941][T13355] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1004.903786][T13355] vhci_hcd vhci_hcd.0: Device attached
[ 1004.934263][T13356] vhci_hcd: connection closed
[ 1004.940166][ T6017] vhci_hcd: stop threads
[ 1004.995389][ T6017] vhci_hcd: release socket
[ 1005.022023][ T6017] vhci_hcd: disconnect device
[ 1005.090354][T10625] usb 3-1: USB disconnect, device number 35
[ 1005.169269][T13359] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[ 1005.175982][T13359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1005.183939][T13359] vhci_hcd vhci_hcd.0: Device attached
[ 1005.193354][T10627] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1005.263784][T13360] vhci_hcd: connection closed
[ 1005.274615][T10737] vhci_hcd: stop threads
[ 1005.329186][T10737] vhci_hcd: release socket
[ 1005.369194][T10737] vhci_hcd: disconnect device
[ 1005.431355][T10605] vhci_hcd: vhci_device speed not set
[ 1005.447374][T10627] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.522870][T10627] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1005.629692][T10627] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1005.699322][T10627] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.721282][T10627] usb 8-1: config 0 descriptor??
[ 1005.768375][T10627] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1006.538443][T13372] loop2: detected capacity change from 0 to 2048
[ 1006.757823][T13372]  loop2: p1 < > p4
[ 1006.836902][T13372] loop2: p4 size 8388608 extends beyond EOD, truncated
[ 1007.023734][ T9359] usb 8-1: USB disconnect, device number 2
[ 1007.389797][T13387] loop3: detected capacity change from 0 to 1024
[ 1008.827239][T13387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1008.840152][T13387] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1009.243239][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.288935][T13194] udevd[13194]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[ 1009.296747][T13335] udevd[13335]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[ 1009.499123][T10627] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1009.759419][T10627] usb 8-1: Using ep0 maxpacket: 8
[ 1009.781373][T10627] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.823114][T10627] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1009.861272][T13400] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[ 1009.867934][T13400] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1009.869092][T10627] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1009.888218][T13400] vhci_hcd vhci_hcd.0: Device attached
[ 1009.908410][T13403] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[ 1009.914998][T13403] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1009.923552][T13403] vhci_hcd vhci_hcd.0: Device attached
[ 1009.951373][T10627] usb 8-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[ 1009.993904][T13407] vhci_hcd: connection closed
[ 1009.996861][T10737] vhci_hcd: stop threads
[ 1010.019047][T10627] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.030204][T10737] vhci_hcd: release socket
[ 1010.046492][T10627] usb 8-1: config 0 descriptor??
[ 1010.050072][T10737] vhci_hcd: disconnect device
[ 1010.133520][ T5849] vhci_hcd: vhci_device speed not set
[ 1010.149273][ T9359] usb 45-1: new high-speed USB device number 8 using vhci_hcd
[ 1010.165503][T13405] vhci_hcd: connection reset by peer
[ 1010.206090][ T3438] vhci_hcd: stop threads
[ 1010.220673][ T3438] vhci_hcd: release socket
[ 1010.240091][ T3438] vhci_hcd: disconnect device
[ 1010.529119][    T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1010.561393][T10627] input: HID 28bd:0905 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28BD:0905.0010/input/input37
[ 1010.743673][T10627] uclogic 0003:28BD:0905.0010: input,hidraw0: USB HID v8.15 Mouse [HID 28bd:0905] on usb-dummy_hcd.7-1/input0
[ 1010.780338][    T8] usb 4-1: config 0 has no interfaces?
[ 1010.790924][    T8] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1010.829145][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1010.830605][T10627] usb 8-1: USB disconnect, device number 3
[ 1010.837305][    T8] usb 4-1: Product: syz
[ 1010.888512][    T8] usb 4-1: Manufacturer: syz
[ 1010.916131][    T8] usb 4-1: SerialNumber: syz
[ 1010.955763][    T8] usb 4-1: config 0 descriptor??
[ 1011.120809][T13421] fido_id[13421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[ 1011.204567][T13412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1985'.
[ 1011.292675][T10605] usb 4-1: USB disconnect, device number 29
[ 1012.209758][T13428] loop2: detected capacity change from 0 to 2048
[ 1012.325393][T13428] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1012.415816][T13428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1012.780315][T10627] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1012.889271][T13442] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[ 1012.895939][T13442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1012.904502][T13442] vhci_hcd vhci_hcd.0: Device attached
[ 1012.922331][T13445] vhci_hcd: connection closed
[ 1012.940190][   T48] vhci_hcd: stop threads
[ 1012.969185][   T48] vhci_hcd: release socket
[ 1012.970954][T13444] loop2: detected capacity change from 0 to 2048
[ 1012.973749][   T48] vhci_hcd: disconnect device
[ 1013.019394][T10627] usb 4-1: Using ep0 maxpacket: 8
[ 1013.029846][T10627] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1013.049136][T10627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.057631][T10627] usb 4-1: Product: syz
[ 1013.067806][T10627] usb 4-1: Manufacturer: syz
[ 1013.074068][T13444]  loop2: p1 < > p4
[ 1013.091665][T10627] usb 4-1: SerialNumber: syz
[ 1013.098011][T13444] loop2: p4 size 8388608 extends beyond EOD, truncated
[ 1013.110950][T10627] usb 4-1: config 0 descriptor??
[ 1013.361732][T10627] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1013.643928][T13291] udevd[13291]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[ 1013.661235][T13287] udevd[13287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[ 1014.478054][T10627] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[ 1015.050451][ T5971] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1015.251448][ T5971] usb 3-1: config 0 has no interfaces?
[ 1015.284743][ T5971] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1015.325020][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.359103][ T9359] vhci_hcd: vhci_device speed not set
[ 1015.372823][T10625] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1015.379180][ T5971] usb 3-1: Product: syz
[ 1015.384850][ T5971] usb 3-1: Manufacturer: syz
[ 1015.429116][ T5971] usb 3-1: SerialNumber: syz
[ 1015.470229][ T5971] usb 3-1: config 0 descriptor??
[ 1015.629635][T10625] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1015.699184][T10625] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1015.731317][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2000'.
[ 1015.750057][T10625] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.784153][ T5971] usb 3-1: USB disconnect, device number 36
[ 1015.802536][    T8] usb 4-1: USB disconnect, device number 30
[ 1015.900668][T10625] usb 8-1: config 0 descriptor??
[ 1015.961617][T10625] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1017.189776][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'.
[ 1018.291605][T13513] loop3: detected capacity change from 0 to 128
[ 1018.380035][T13513] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[ 1018.513959][T10627] usb 8-1: USB disconnect, device number 4
[ 1018.587782][T13517] loop2: detected capacity change from 0 to 512
[ 1018.654251][T13517] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1018.870299][T13517] EXT4-fs (loop2): 1 truncate cleaned up
[ 1018.888002][T13524] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1018.892798][T13517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1020.246100][T13537] loop7: detected capacity change from 0 to 128
[ 1020.556706][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1022.475848][T13570] loop2: detected capacity change from 0 to 512
[ 1022.589094][T13570] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1022.634080][T13570] EXT4-fs (loop2): 1 truncate cleaned up
[ 1022.650885][T13570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1023.635365][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1023.855552][T13603] loop2: detected capacity change from 0 to 256
[ 1023.894488][T13603] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb45ad1ca, utbl_chksum : 0xe619d30d)
[ 1024.819199][ T9359] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1025.139276][ T9359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1025.250606][ T9359] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1025.355378][ T9359] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1025.431518][ T9359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.520192][ T9359] usb 4-1: config 0 descriptor??
[ 1025.561808][ T9359] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1026.264581][T13624] binder: 13623:13624 ioctl 4018620d 0 returned -22
[ 1026.274536][T13624] binder: 13623:13624 ioctl c0306201 200000000780 returned -11
[ 1028.020123][    T8] usb 4-1: USB disconnect, device number 31
[ 1028.209746][T13652] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[ 1028.216438][T13652] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1028.224322][T13652] vhci_hcd vhci_hcd.0: Device attached
[ 1028.426849][T13653] vhci_hcd: connection closed
[ 1028.440201][ T3412] vhci_hcd: stop threads
[ 1028.506867][ T3412] vhci_hcd: release socket
[ 1028.509986][T10627] usb 45-1: new high-speed USB device number 9 using vhci_hcd
[ 1028.539202][ T3412] vhci_hcd: disconnect device
[ 1028.693069][T13663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2052'.
[ 1029.495647][T13671] binder: 13665:13671 ioctl 4018620d 0 returned -22
[ 1029.505346][T13671] binder: 13665:13671 ioctl c0306201 200000000780 returned -11
[ 1029.518042][T13676] syz.7.2055: attempt to access beyond end of device
[ 1029.518042][T13676] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1029.531208][T13676] efs: cannot read volume header
[ 1029.608054][T13674] loop7: detected capacity change from 0 to 512
[ 1029.621092][T13674] EXT4-fs: Ignoring removed bh option
[ 1030.764309][T13682] input: syz0 as /devices/virtual/input/input38
[ 1030.783121][T13674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1030.796309][T13674] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1031.094334][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1031.299181][ T9359] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1031.729850][ T9359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1032.032767][ T9359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1032.289182][ T9359] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1032.298319][ T9359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.442299][ T9359] usb 3-1: config 0 descriptor??
[ 1032.489147][ T9359] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1032.689297][T10605] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1032.926491][T10605] usb 8-1: config 0 has no interfaces?
[ 1032.974263][T10605] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1033.049307][T10605] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.057485][T10605] usb 8-1: Product: syz
[ 1033.110126][T10605] usb 8-1: Manufacturer: syz
[ 1033.121380][T10605] usb 8-1: SerialNumber: syz
[ 1033.177368][T10605] usb 8-1: config 0 descriptor??
[ 1033.449791][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2060'.
[ 1033.550351][T10605] usb 8-1: USB disconnect, device number 5
[ 1033.669495][T10627] vhci_hcd: vhci_device speed not set
[ 1034.049432][T13718] binder: 13717:13718 ioctl 4018620d 0 returned -22
[ 1034.059558][T13718] binder: 13717:13718 ioctl c0306201 200000000780 returned -11
[ 1035.595862][ T5971] usb 3-1: USB disconnect, device number 37
[ 1036.128644][T13752] loop7: detected capacity change from 0 to 512
[ 1036.190288][T13752] EXT4-fs: Ignoring removed i_version option
[ 1036.196470][T13752] EXT4-fs: Ignoring removed bh option
[ 1036.399239][ T9359] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1036.876980][T13752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1037.061880][T13752] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1037.229757][T13752] EXT4-fs (loop7): shut down requested (1)
[ 1037.364127][ T9359] usb 3-1: config 0 has no interfaces?
[ 1037.424411][ T9359] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1037.452311][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1037.459241][ T9359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.499120][ T9359] usb 3-1: Product: syz
[ 1037.503386][ T9359] usb 3-1: Manufacturer: syz
[ 1037.508286][ T9359] usb 3-1: SerialNumber: syz
[ 1037.516270][ T9359] usb 3-1: config 0 descriptor??
[ 1037.769198][T10625] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1037.780567][T13755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2077'.
[ 1037.845107][ T8391] usb 3-1: USB disconnect, device number 38
[ 1038.029258][T10625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1038.064864][T10625] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1038.139128][T10625] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1038.189178][T10625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.261130][T10625] usb 4-1: config 0 descriptor??
[ 1038.295624][T10625] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1038.715503][T13786] loop7: detected capacity change from 0 to 256
[ 1038.787574][T13788] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2085'.
[ 1038.854001][T13788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1038.917399][T13287] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1040.407523][T13803] loop2: detected capacity change from 0 to 512
[ 1040.482070][T13803] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1040.628757][ T9359] usb 4-1: USB disconnect, device number 32
[ 1040.670841][T13803] EXT4-fs (loop2): 1 truncate cleaned up
[ 1040.677924][T13803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1041.174530][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1041.671256][T10627] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1041.881401][T10627] usb 3-1: config 0 has no interfaces?
[ 1041.894317][T10627] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1041.929496][T10627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.966273][T10627] usb 3-1: Product: syz
[ 1041.998853][T10627] usb 3-1: Manufacturer: syz
[ 1042.784153][T10627] usb 3-1: SerialNumber: syz
[ 1042.792611][T10627] usb 3-1: config 0 descriptor??
[ 1043.070849][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'.
[ 1043.135424][ T5872] usb 3-1: USB disconnect, device number 39
[ 1044.055655][T13857] ip6erspan0: left promiscuous mode
[ 1047.108168][T13897] loop3: detected capacity change from 0 to 1024
[ 1047.116661][T13897] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1047.457382][T13897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1047.957976][T13908] loop2: detected capacity change from 0 to 512
[ 1048.012769][T13908] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1048.050819][T13908] EXT4-fs (loop2): 1 truncate cleaned up
[ 1048.066348][T13908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1048.189279][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.257203][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.356838][T13918] loop3: detected capacity change from 0 to 256
[ 1048.510567][T13918] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1049.638634][T13931] loop7: detected capacity change from 0 to 2048
[ 1049.890834][T13931]  loop7: p1 < > p4
[ 1049.896479][T13931] loop7: p4 size 8388608 extends beyond EOD, truncated
[ 1050.804408][T13101] __loop_clr_fd: partition scan of loop7 failed (rc=-16)
[ 1050.812048][T13287] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1050.828043][T13194] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1050.859360][T13287] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1050.868655][T13287] Buffer I/O error on dev loop7p1, logical block 0, async page read
[ 1050.877747][T13194] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1050.899145][T13194] Buffer I/O error on dev loop7p4, logical block 1, async page read
[ 1050.915063][T13287] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1050.960578][T13287] Buffer I/O error on dev loop7p1, logical block 0, async page read
[ 1050.979813][T13287] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1051.009050][T13287] Buffer I/O error on dev loop7p1, logical block 0, async page read
[ 1051.017860][T13287] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1051.069338][T13287] Buffer I/O error on dev loop7p1, logical block 0, async page read
[ 1051.078258][T13287] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1051.119251][T13287] Buffer I/O error on dev loop7p1, logical block 0, async page read
[ 1051.319992][T13953] loop3: detected capacity change from 0 to 128
[ 1051.342626][T13194] udevd[13194]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[ 1051.347158][T13287] udevd[13287]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[ 1051.354367][T13953] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1051.452417][T13953] ext4 filesystem being mounted at /515/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1051.810844][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1052.257423][ T5971] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1052.309592][ T5971] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1052.349115][ T8391] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1052.717860][ T8391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.746177][ T8391] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[ 1052.766130][ T8391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.809198][ T8391] usb 4-1: config 0 descriptor??
[ 1054.879315][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.886907][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.221743][T10625] usb 4-1: USB disconnect, device number 33
[ 1055.489291][ T8391] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1055.644778][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2147'.
[ 1055.689306][ T8391] usb 8-1: device descriptor read/64, error -71
[ 1055.979476][ T8391] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1056.329205][ T8391] usb 8-1: device descriptor read/64, error -71
[ 1056.449315][ T8391] usb usb8-port1: attempt power cycle
[ 1056.889094][ T8391] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1056.952473][ T8391] usb 8-1: device descriptor read/8, error -71
[ 1057.242839][ T8391] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1057.274831][T14080] fuse: Bad value for 'fd'
[ 1057.290741][ T8391] usb 8-1: device descriptor read/8, error -71
[ 1057.449320][ T8391] usb usb8-port1: unable to enumerate USB device
[ 1057.679231][ T5872] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1057.917620][ T5872] usb 3-1: config 0 has no interfaces?
[ 1058.002754][ T5872] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1058.237024][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.336515][ T5872] usb 3-1: Product: syz
[ 1058.362512][ T5872] usb 3-1: Manufacturer: syz
[ 1058.368438][ T5872] usb 3-1: SerialNumber: syz
[ 1058.469831][ T5872] usb 3-1: config 0 descriptor??
[ 1058.592940][T14102] loop3: detected capacity change from 0 to 512
[ 1058.651209][T14102] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 1058.672689][T14104] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2163'.
[ 1058.688119][T14102] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1058.718809][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'.
[ 1058.719299][T14102] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1058.753725][ T5971] usb 3-1: USB disconnect, device number 40
[ 1058.789551][T14102] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1058.823165][T14102] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080]
[ 1058.855337][T14102] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1058.887235][T14102] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2165: bg 0: block 34: padding at end of block bitmap is not set
[ 1058.949812][T14102] Quota error (device loop3): write_blk: dquota write failed
[ 1058.969205][T14102] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[ 1058.999297][T14102] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.2165: Failed to acquire dquot type 1
[ 1059.023392][T14102] EXT4-fs (loop3): 1 truncate cleaned up
[ 1059.087009][T14102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1059.236462][T14102] veth2: entered promiscuous mode
[ 1059.244367][T14102] veth2: entered allmulticast mode
[ 1059.412045][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1060.347406][T14125] loop3: detected capacity change from 0 to 8
[ 1060.397334][T14125] SQUASHFS error: Failed to read block 0x63a: -5
[ 1060.421078][T14125] SQUASHFS error: Unable to read metadata cache entry [638]
[ 1060.434719][ T5872] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1060.461149][T14125] SQUASHFS error: Unable to read directory block [26067d:ffff]
[ 1060.599127][ T5872] usb 8-1: device descriptor read/64, error -71
[ 1060.663730][T14129] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2176'.
[ 1060.692195][T14133] loop2: detected capacity change from 0 to 128
[ 1060.740013][T13287] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1060.869194][ T5872] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1061.049727][ T5872] usb 8-1: device descriptor read/64, error -71
[ 1061.939582][ T5872] usb usb8-port1: attempt power cycle
[ 1062.579331][T10625] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1062.949117][T10625] usb 4-1: config 0 has no interfaces?
[ 1062.958273][T10625] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1062.979693][T10625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.996798][T10625] usb 4-1: Product: syz
[ 1063.003271][T10625] usb 4-1: Manufacturer: syz
[ 1063.011681][T10625] usb 4-1: SerialNumber: syz
[ 1063.040377][T10625] usb 4-1: config 0 descriptor??
[ 1063.202089][T14161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[ 1063.208668][T14161] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1063.245128][T14161] vhci_hcd vhci_hcd.0: Device attached
[ 1063.283586][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'.
[ 1063.286223][T14165] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2188'.
[ 1063.491300][T10625] usb 4-1: USB disconnect, device number 34
[ 1063.503442][T14162] vhci_hcd: connection closed
[ 1063.509237][T10737] vhci_hcd: stop threads
[ 1063.518273][T10737] vhci_hcd: release socket
[ 1063.541455][T10737] vhci_hcd: disconnect device
[ 1063.560148][ T9359] usb 37-1: new high-speed USB device number 7 using vhci_hcd
[ 1063.589359][ T9359] usb 37-1: enqueue for inactive port 0
[ 1063.679152][ T9359] vhci_hcd: vhci_device speed not set
[ 1067.131787][T14210] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1067.138553][T14210] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1067.146603][T14210] vhci_hcd vhci_hcd.0: Device attached
[ 1067.410868][T14211] vhci_hcd: connection closed
[ 1067.411321][ T6644] vhci_hcd: stop threads
[ 1067.429173][T10625] usb 39-1: new high-speed USB device number 8 using vhci_hcd
[ 1067.462243][ T6644] vhci_hcd: release socket
[ 1067.469086][ T6644] vhci_hcd: disconnect device
[ 1068.189530][T14228] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2213'.
[ 1068.218434][T14228] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2213'.
[ 1068.441293][T14238] loop2: detected capacity change from 0 to 16
[ 1068.461849][T14238] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1068.540776][T14238] syz.2.2216: attempt to access beyond end of device
[ 1068.540776][T14238] loop2: rw=0, sector=296, nr_sectors = 32 limit=16
[ 1068.580581][T14238] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[ 1070.453244][T14268] syz.2.2226: attempt to access beyond end of device
[ 1070.453244][T14268] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1070.466247][T14268] efs: cannot read volume header
[ 1070.482835][T14268] loop2: detected capacity change from 0 to 512
[ 1070.490448][T14268] EXT4-fs: Ignoring removed bh option
[ 1070.576199][T14268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1070.591090][T14268] ext4 filesystem being mounted at /565/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1070.763093][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1071.179382][T14277] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1071.185987][T14277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1071.207581][T14277] vhci_hcd vhci_hcd.0: Device attached
[ 1071.279167][T10605] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1071.424347][T14278] vhci_hcd: connection reset by peer
[ 1071.439469][T10737] vhci_hcd: stop threads
[ 1071.444077][T10737] vhci_hcd: release socket
[ 1071.459191][T10605] usb 3-1: device descriptor read/64, error -71
[ 1071.465555][T10737] vhci_hcd: disconnect device
[ 1071.729259][T10605] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1072.019175][T10605] usb 3-1: device descriptor read/64, error -71
[ 1072.167362][T10605] usb usb3-port1: attempt power cycle
[ 1072.599461][T10625] vhci_hcd: vhci_device speed not set
[ 1073.099191][T10605] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1073.119048][T14288] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[ 1073.125868][T14288] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1073.135104][T14288] vhci_hcd vhci_hcd.0: Device attached
[ 1073.219401][T10605] usb 3-1: device descriptor read/8, error -71
[ 1073.306074][T14289] vhci_hcd: connection closed
[ 1073.319225][ T3412] vhci_hcd: stop threads
[ 1073.339013][ T3412] vhci_hcd: release socket
[ 1073.345527][ T3412] vhci_hcd: disconnect device
[ 1073.379232][ T8391] vhci_hcd: vhci_device speed not set
[ 1073.490081][T10605] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1073.529909][T10605] usb 3-1: device descriptor read/8, error -71
[ 1073.748155][T10605] usb usb3-port1: unable to enumerate USB device
[ 1073.758439][T14303] syz.3.2236: attempt to access beyond end of device
[ 1073.758439][T14303] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1073.771354][T14303] efs: cannot read volume header
[ 1073.787536][T14303] loop3: detected capacity change from 0 to 512
[ 1073.795447][T14303] EXT4-fs: Ignoring removed bh option
[ 1073.830936][T14303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1073.845943][T14303] ext4 filesystem being mounted at /537/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1073.981046][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1076.470881][T14337] loop2: detected capacity change from 0 to 8
[ 1076.739631][    T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1076.949141][    T8] usb 8-1: Using ep0 maxpacket: 8
[ 1076.961496][    T8] usb 8-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1077.015711][    T8] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1077.027096][    T8] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1077.047217][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.059236][    T8] usb 8-1: config 0 descriptor??
[ 1077.113725][T14343] syz.2.2247: attempt to access beyond end of device
[ 1077.113725][T14343] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1077.126686][T14343] efs: cannot read volume header
[ 1077.143770][T14343] loop2: detected capacity change from 0 to 512
[ 1077.151577][T14343] EXT4-fs: Ignoring removed bh option
[ 1077.316003][T14343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1077.341419][T14343] ext4 filesystem being mounted at /570/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1077.507361][    T8] holtek 0003:1241:5015.0012: unknown main item tag 0x0
[ 1077.517084][    T8] holtek 0003:1241:5015.0012: unknown main item tag 0x0
[ 1077.525128][    T8] holtek 0003:1241:5015.0012: unknown main item tag 0x0
[ 1077.533775][    T8] holtek 0003:1241:5015.0012: item fetching failed at offset 5/7
[ 1077.543337][    T8] holtek 0003:1241:5015.0012: parse failed
[ 1077.551696][    T8] holtek: probe of 0003:1241:5015.0012 failed with error -22
[ 1077.773549][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1077.799180][T14349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1077.805871][T14349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1077.829485][T14349] vhci_hcd vhci_hcd.0: Device attached
[ 1077.886323][T10625] usb 8-1: USB disconnect, device number 13
[ 1078.187972][ T8391] usb 39-1: new high-speed USB device number 9 using vhci_hcd
[ 1078.199572][T14352] vhci_hcd: connection reset by peer
[ 1078.219270][ T1134] vhci_hcd: stop threads
[ 1078.223929][ T1134] vhci_hcd: release socket
[ 1078.254610][ T1134] vhci_hcd: disconnect device
[ 1080.318200][T14382] syz.3.2261: attempt to access beyond end of device
[ 1080.318200][T14382] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1080.331547][T14382] efs: cannot read volume header
[ 1080.345968][T14382] loop3: detected capacity change from 0 to 512
[ 1080.353478][T14382] EXT4-fs: Ignoring removed bh option
[ 1080.616506][T14382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1080.629548][T14382] ext4 filesystem being mounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1080.935557][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1081.434217][T14397] loop3: detected capacity change from 0 to 256
[ 1081.539072][T14397] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[ 1081.876630][T14401] loop7: detected capacity change from 0 to 512
[ 1081.965338][T14401] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1082.148443][T14401] EXT4-fs (loop7): 1 truncate cleaned up
[ 1082.742575][T14401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1082.814262][T14407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1082.820856][T14407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1083.191413][T14407] vhci_hcd vhci_hcd.0: Device attached
[ 1083.385542][T14408] vhci_hcd: connection reset by peer
[ 1083.411005][ T6644] vhci_hcd: stop threads
[ 1083.415365][ T6644] vhci_hcd: release socket
[ 1083.462479][ T6644] vhci_hcd: disconnect device
[ 1083.559609][ T8391] vhci_hcd: vhci_device speed not set
[ 1084.142776][T14419] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1084.540558][T14428] syz.3.2272: attempt to access beyond end of device
[ 1084.540558][T14428] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1084.553975][T14428] efs: cannot read volume header
[ 1084.605795][T14429] loop3: detected capacity change from 0 to 512
[ 1084.613531][T14429] EXT4-fs: Ignoring removed bh option
[ 1084.893812][T14433] loop2: detected capacity change from 0 to 256
[ 1084.946492][T14429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1084.961924][T14429] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1085.207115][ T5785] Bluetooth: hci0: link tx timeout
[ 1085.216533][ T5785] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1085.232892][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1085.553205][ T9359] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1085.901747][T14446] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1086.345299][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1086.729106][ T9359] usb 3-1: Using ep0 maxpacket: 16
[ 1087.269921][T10307] Bluetooth: hci0: command 0x0406 tx timeout
[ 1087.574238][ T9359] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1087.584607][ T9359] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1087.597379][ T9359] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1087.609015][ T9359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.617086][ T9359] usb 3-1: Product: syz
[ 1087.626135][ T9359] usb 3-1: Manufacturer: syz
[ 1087.630976][ T9359] usb 3-1: SerialNumber: syz
[ 1087.900524][ T9359] usb 3-1: 0:2 : does not exist
[ 1087.954149][ T9359] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 1088.067086][T14462] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1088.073686][T14462] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1088.132490][ T9359] usb 3-1: USB disconnect, device number 45
[ 1088.169109][T14462] vhci_hcd vhci_hcd.0: Device attached
[ 1088.228589][T14468] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1088.354428][T13287] udevd[13287]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1088.449111][    T8] usb 39-1: new high-speed USB device number 10 using vhci_hcd
[ 1088.755076][T14464] vhci_hcd: connection reset by peer
[ 1088.800610][T10737] vhci_hcd: stop threads
[ 1088.825656][T10737] vhci_hcd: release socket
[ 1088.841719][T10737] vhci_hcd: disconnect device
[ 1089.075313][T14475] syz.2.2287: attempt to access beyond end of device
[ 1089.075313][T14475] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1089.089330][T14475] efs: cannot read volume header
[ 1089.103637][T14475] loop2: detected capacity change from 0 to 512
[ 1089.111474][T14475] EXT4-fs: Ignoring removed bh option
[ 1089.201292][T14475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1089.214593][T14475] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1089.704853][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1090.072889][T14488] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1092.084677][T14501] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1092.559114][T10605] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1092.769112][T10605] usb 3-1: Using ep0 maxpacket: 8
[ 1092.776967][T10605] usb 3-1: no configurations
[ 1092.786612][T10605] usb 3-1: can't read configurations, error -22
[ 1092.969258][T10605] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1093.359290][T10605] usb 3-1: Using ep0 maxpacket: 8
[ 1093.365480][T10605] usb 3-1: no configurations
[ 1093.374782][T10605] usb 3-1: can't read configurations, error -22
[ 1093.385197][T10605] usb usb3-port1: attempt power cycle
[ 1093.589208][    T8] vhci_hcd: vhci_device speed not set
[ 1093.810704][T10605] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1093.867684][T10605] usb 3-1: Using ep0 maxpacket: 8
[ 1093.875280][T10605] usb 3-1: no configurations
[ 1093.888999][T10605] usb 3-1: can't read configurations, error -22
[ 1094.059789][T10605] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1094.115316][T10605] usb 3-1: Using ep0 maxpacket: 8
[ 1094.130869][T10605] usb 3-1: no configurations
[ 1094.146498][T10605] usb 3-1: can't read configurations, error -22
[ 1094.175043][T10605] usb usb3-port1: unable to enumerate USB device
[ 1094.328303][T14521] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1095.931784][T14531] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1096.066684][T14535] loop3: detected capacity change from 0 to 512
[ 1096.075086][T14535] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1096.092119][T14535] EXT4-fs (loop3): 1 truncate cleaned up
[ 1096.099926][T14535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1097.190611][T14553] syz.2.2310: attempt to access beyond end of device
[ 1097.190611][T14553] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1097.204155][T14553] efs: cannot read volume header
[ 1097.235209][T14553] loop2: detected capacity change from 0 to 512
[ 1097.242665][T14553] EXT4-fs: Ignoring removed bh option
[ 1097.289732][T14553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1097.309989][T14553] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1097.861543][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1098.358274][T14562] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1098.452631][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1098.806196][T14567] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1100.064654][T14578] loop7: detected capacity change from 0 to 2048
[ 1100.284704][T14578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1100.457115][T14588] syz.2.2320: attempt to access beyond end of device
[ 1100.457115][T14588] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1100.470585][T14588] efs: cannot read volume header
[ 1100.504793][T14589] loop2: detected capacity change from 0 to 512
[ 1100.512288][T14589] EXT4-fs: Ignoring removed bh option
[ 1100.549526][T10605] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1100.799667][T10605] usb 4-1: Using ep0 maxpacket: 8
[ 1100.875967][T10605] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.916613][T14589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1100.932165][T14589] ext4 filesystem being mounted at /586/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1100.950533][   T28] audit: type=1800 audit(1759783546.311:44): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2318" name="bus" dev="loop7" ino=1436 res=0 errno=0
[ 1100.996436][T10605] usb 4-1: config 0 has no interfaces?
[ 1101.018093][T10605] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1101.033071][T10605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.049791][T10605] usb 4-1: Product: syz
[ 1101.054164][T10605] usb 4-1: Manufacturer: syz
[ 1101.060503][T10605] usb 4-1: SerialNumber: syz
[ 1101.073909][T10605] usb 4-1: config 0 descriptor??
[ 1101.257891][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1101.507911][T14600] loop2: detected capacity change from 0 to 512
[ 1101.542341][T14600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1101.570163][T14600] EXT4-fs (loop2): 1 truncate cleaned up
[ 1101.580502][T14600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1102.920566][T14613] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1103.213172][T10627] usb 4-1: USB disconnect, device number 35
[ 1103.249762][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1103.573747][T14620] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1105.909420][T14630] loop3: detected capacity change from 0 to 128
[ 1106.046571][T14630] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1106.121399][T14634] loop2: detected capacity change from 0 to 128
[ 1106.139243][T14630] ext4 filesystem being mounted at /566/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1106.139840][T14634] EXT4-fs: Ignoring removed nobh option
[ 1106.174914][T14634] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1106.194968][T14634] ext4 filesystem being mounted at /590/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1106.308099][T14630] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN
[ 1106.320087][T14630] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[ 1106.328984][T14630] CPU: 1 PID: 14630 Comm: syz.3.2331 Not tainted syzkaller #0
[ 1106.336566][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1106.346849][T14630] RIP: 0010:utf8nlookup+0x39/0xa50
[ 1106.352149][T14630] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 72 ce f7 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 08 26 4f ff 48 8b 1b 48 83 c3 30
[ 1106.371969][T14630] RSP: 0018:ffffc900137ef800 EFLAGS: 00010206
[ 1106.378144][T14630] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000
[ 1106.386418][T14630] RDX: ffffc9000d16c000 RSI: 00000000000005db RDI: 00000000000005dc
[ 1106.394425][T14630] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 1106.402512][T14630] R10: ffffc900137ef998 R11: fffff520026fdf36 R12: dffffc0000000000
[ 1106.410606][T14630] R13: 0000000000000000 R14: ffff8880793dbae0 R15: dffffc0000000000
[ 1106.418859][T14630] FS:  00007f342b16e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1106.428068][T14630] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1106.434688][T14630] CR2: 00007fa41bc23000 CR3: 0000000075887000 CR4: 00000000003506e0
[ 1106.442783][T14630] Call Trace:
[ 1106.446084][T14630]  <TASK>
[ 1106.449026][T14630]  ? __kasan_kmalloc+0x8f/0xa0
[ 1106.454074][T14630]  ? ext4_fname_prepare_lookup+0x213/0x3a0
[ 1106.460079][T14630]  ? ext4_lookup+0xfa/0x6d0
[ 1106.464618][T14630]  ? lookup_one_qstr_excl+0x112/0x250
[ 1106.470380][T14630]  ? filename_create+0x222/0x460
[ 1106.475599][T14630]  utf8byte+0x34f/0x1370
[ 1106.479880][T14630]  ? utf8ncursor+0x170/0x210
[ 1106.484507][T14630]  utf8_casefold+0x130/0x230
[ 1106.489124][T14630]  ? utf8_strncasecmp_folded+0x250/0x250
[ 1106.494902][T14630]  ext4_fname_setup_ci_filename+0x1d5/0x430
[ 1106.501002][T14630]  ext4_fname_prepare_lookup+0x213/0x3a0
[ 1106.506683][T14630]  ? ext4_fname_free_filename+0xb0/0xb0
[ 1106.512272][T14630]  ext4_lookup+0xfa/0x6d0
[ 1106.516806][T14630]  ? ext4_add_entry+0xd70/0xd70
[ 1106.521879][T14630]  ? do_raw_spin_unlock+0x121/0x230
[ 1106.527099][T14630]  ? _raw_spin_unlock+0x28/0x40
[ 1106.531995][T14630]  ? d_alloc+0x173/0x1b0
[ 1106.536259][T14630]  lookup_one_qstr_excl+0x112/0x250
[ 1106.541570][T14630]  filename_create+0x222/0x460
[ 1106.546360][T14630]  ? kern_path_create+0x50/0x50
[ 1106.551324][T14630]  ? __virt_addr_valid+0x469/0x540
[ 1106.556578][T14630]  do_mkdirat+0xa1/0x440
[ 1106.560869][T14630]  ? vfs_mkdir+0x440/0x440
[ 1106.565313][T14630]  ? getname_flags+0x20a/0x500
[ 1106.570190][T14630]  __x64_sys_mkdir+0x6e/0x80
[ 1106.574908][T14630]  do_syscall_64+0x55/0xb0
[ 1106.579344][T14630]  ? clear_bhb_loop+0x40/0x90
[ 1106.584038][T14630]  ? clear_bhb_loop+0x40/0x90
[ 1106.588824][T14630]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1106.594831][T14630] RIP: 0033:0x7f342a38eec9
[ 1106.599287][T14630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1106.619190][T14630] RSP: 002b:00007f342b16e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1106.627807][T14630] RAX: ffffffffffffffda RBX: 00007f342a5e5fa0 RCX: 00007f342a38eec9
[ 1106.635898][T14630] RDX: 0000000000000000 RSI: 0000000000000180 RDI: 0000200000000000
[ 1106.644068][T14630] RBP: 00007f342a411f91 R08: 0000000000000000 R09: 0000000000000000
[ 1106.652153][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1106.660745][T14630] R13: 00007f342a5e6038 R14: 00007f342a5e5fa0 R15: 00007ffc33b79d98
[ 1106.669011][T14630]  </TASK>
[ 1106.672157][T14630] Modules linked in:
[ 1106.685247][T13194] udevd[13194]: incorrect ext4dev checksum on /dev/loop2
[ 1106.782323][T14630] ---[ end trace 0000000000000000 ]---
[ 1106.788002][T14630] RIP: 0010:utf8nlookup+0x39/0xa50
[ 1106.793883][T14630] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 72 ce f7 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 08 26 4f ff 48 8b 1b 48 83 c3 30
[ 1106.832622][T14634] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1282777659
[ 1106.847764][T13287] udevd[13287]: incorrect ext4dev checksum on /dev/loop2
[ 1106.866760][T14630] RSP: 0018:ffffc900137ef800 EFLAGS: 00010206
[ 1106.918472][T14630] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000
[ 1107.171885][T14630] RDX: ffffc9000d16c000 RSI: 00000000000005db RDI: 00000000000005dc
[ 1107.192894][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1107.208889][T14630] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 1107.237092][T14630] R10: ffffc900137ef998 R11: fffff520026fdf36 R12: dffffc0000000000
[ 1107.285603][T14630] R13: 0000000000000000 R14: ffff8880793dbae0 R15: dffffc0000000000
[ 1107.308032][T14630] FS:  00007f342b16e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1107.349674][T14630] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1107.356332][T14630] CR2: 00007fd9995b3ad8 CR3: 0000000075887000 CR4: 00000000003506e0
[ 1107.375691][T14630] Kernel panic - not syncing: Fatal exception
[ 1107.382255][T14630] Kernel Offset: disabled
[ 1107.386706][T14630] Rebooting in 86400 seconds..