last executing test programs:

9m0.71209385s ago: executing program 0 (id=392):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x3a2, 0x0)
preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800)
getpgid(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={&(0x7f0000000280), 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

8m58.425351436s ago: executing program 0 (id=397):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getrusage(0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
accept4(r3, 0x0, 0x0, 0x80000)

8m57.406596101s ago: executing program 0 (id=400):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x4005)

8m57.063377579s ago: executing program 0 (id=402):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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")
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x9e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1400)
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

8m54.57884868s ago: executing program 0 (id=411):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)}, 0x40000)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
socket$kcm(0xa, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffdfff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x48040)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

8m51.31153047s ago: executing program 0 (id=419):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

8m50.127923529s ago: executing program 32 (id=419):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

8.055860863s ago: executing program 4 (id=2065):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkdK4VwwSCEcqhQVQ49W4nTWN0kVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/b6LS/rGD6faDzPzPPMM7/57TMzuxOtNsD/rSvn0ryfIlfOvXGvXN5YX2hvrC+8UFe3k5TlRtLszlLcSooHyWJZXwxMGZhv8/HK5bc+e7jxeXepWU9V+4ndththRNu1esps3d/syC0n97uLtTq8vJjkaj0fNrXfvoYalkk7W8/h0HW2WTvI5gc5b4HnTO/uVHTvm9vMJMeSTNfvA1JfHRrji/DZONBVDgAAAI6AUY+9P719CIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkVX0/k7UC0X9+/5VxWyK3u//T/Ubd8vPocV9t7z/TOMAAAAAAAAAgPH4+qM8yr0c7y13iur//M9UCyfzRSf5Ut7P3SznTs7nXpaymtXcyXySmYGOpu4tra7eme9vWRq95cWRW14c1xEDAAAAAAAAwP+kX6a1+f//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSie6smk7W88yk0cxmXdaSfyaZOux4D6AYtfL++OMAAACAJzL9GNt8+VEe5V6O95Y7RfWZ/yvV5+XpvJ9bWc1KVtPOcq7Vn6HLT/2NjfWF9sb6ws1yKpeH+/3+vw8UxlTdw0S1NGrPp6sWrVzPSrXmfK5WwVxLo7vvs8npXjwDcQ34qIyp+F5tn5E167SWO/v9Tk8RnorhRxGNXVq2NoNL+hmZq2MrtzzRzUBRPahJtmZiz1enObQ0Uz8JKpV7mk+j/+Tn5JPkfG303o/V8/J4fvNMc35QM1V+J3O90c3Exd7oK8+Z3TORfOOvf3r7RvvWuzeu3z33/BzSHiZ2WN/PRD36FgYy8cqRzkTzgO3nqkyc6i9fyY/yk5zLbN7Mnazkp1nKapbTqeuX6vFc/p3ZPVOLQ0tv7hXJVP26dF+z/cQ0mx9WpaWcqbY9npUUuZ1rWc7r1b+Lmc+3cymXcnngFT61Y9zVsVVnfWPrWd97pf82Mviz36wL5dXtt5tXucXdjnin0fm0dK/9ZV5PDOS1O+of9ludGDgP5gay9FIvO5MjO3+c+1Hzq3Wh3Mev9rhPjNdMnYnyBOrdJXrRvdzNRLO6F20f53/olNulfavTubH03g79b71ZvFbPy2G1/rW9WveMfimernK8vJTp+koyPDrKupf7V5mBus7mWO7WDV5d56vtTlV1RdE7U3+c29UA2H6mTtXv4bb3dLGqe2Vk3UJVd3qgbuj9Vm6nnWtjyB8Aj+Mfb/eLMzk21fpX69PWJ61ft2603pj+wQvfeeHVqUz+ffK7zbmJ1xqvFn/JJ/n55ud/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8d394MN3l9rt5TujC42dq4YKrWxds1fPWwpF/YM+B9vq+S1MJxlaU/3O0djDaG0NY1uh84tk7Pnp/Yjg6Da/KwvNbSNqVGFxaM2ft3f40QEjLPZ3XjzDQiPj3elERg+AQ7woAWNxYfXmexfufvDht1ZuLr2z/M7yrclLly7PXb70+sKF6yvt5bnu38OOEngWht4GAAAAAAAAAAAAAEfCqC8GnHlxry+N7Os7Hv01h32MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNF25Vya91Nkfu78XLm8sb7QLqdeebNlM0mjkRQ/S4oHyWK6U2YGuivyxwfpjNjPxyuX3/rs4cbnm301u+2TRj3f2e61SdbqKbNJJur5Exjq7+oT91f8p3cMZcK+6HQ6i08WHzwd/w0AAP//aKX0ZQ==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00')

5.416251048s ago: executing program 4 (id=2072):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x5646103b32456b61)
write(r2, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x161400, 0x94)

4.018432602s ago: executing program 5 (id=2083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x38, r1, 0x101, 0x4000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x38}}, 0x240448d0)

4.014527302s ago: executing program 1 (id=2084):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
r1 = epoll_create1(0x0)
epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000004})

3.930629924s ago: executing program 5 (id=2087):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8480, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

3.769502508s ago: executing program 2 (id=2091):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)

3.719600979s ago: executing program 5 (id=2092):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c0000000190001000000000008000000fe888000000000000000000000000101ffffffff000000000000000000000000000000004e2300000a00"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0)

3.718552039s ago: executing program 3 (id=2093):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef})
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
timer_create(0x3, 0x0, &(0x7f0000000080)=<r6=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
timer_getoverrun(r6)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)

3.69914369s ago: executing program 2 (id=2094):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000280)={[{@time_offset}, {@discard}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x2}}, {@fmask={'fmask', 0x3d, 0x40}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {@discard}], [{@flag='async'}]}, 0x1, 0x1535, &(0x7f0000001380)="$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")
mknod(0x0, 0x8, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$nfs(&(0x7f00000001c0)='>.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x801091, 0x0)

3.397506877s ago: executing program 2 (id=2095):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./bus\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xda9, &(0x7f0000000e00)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103500, 0x81)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x80087601, 0x0)

3.396600737s ago: executing program 5 (id=2096):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000b00)="cc3aeeaccf96d11507c3f901cfa7dafb3ec49c9bd686e87bbde5871b2694cabde13b5b104bcf442d92733cef238f4f10b74f58efdd6bd87cd453e251fccc5af43ea942a6b53bafb44428")
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061157c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x0, 0x0})

3.138084603s ago: executing program 2 (id=2097):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f00000002c0)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@fault_type={'fault_type', 0x3d, 0x302}}, {@lfs_mode}, {@inline_data}, {}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x20, 0x5548, &(0x7f00000058c0)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmf7Q8U1yh4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UkTcGPIzJp8PvDmfXcymfd9MxDynTcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURu9M4yTbdCZxXOy79/jWStbff6LP3Nl4sJi1LI7qTPr/4aXqh6jbXCIAAAAcHUlZ34cQHqabS1kfd/L6Py2PyWr+b5+ZxGU9/2TdX/Zl7Z+1X35+9MLWQJ3JONlJL60OB6d3ptI6uFnOt2f/9YhWfuXzZy9JfkPi99efH6X59Yy+vnv33XYeHqsjWwDgvzhV9kVQ/j6U9f0mEwPgyGhVCu+i/v8r6TScFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEANRuvhqTKOQgiLrWmcuf/41spu/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8HEJoavS3i+lf+XCGg0No5PocVPD3eDze03cdbz7nfQVxcbNnOLg9Lzk3HzT4QwkAgEMpLVpW1z9MN5eyfdFCCOPvttf/r1XiMGP9/+ij8/eqY1Xr/35tM5x/vbWrn/Wu37j5xurV5cuDy4NP3jzTf6t/9sK5cxd6+bOSnicmAAAA7E+7aNX6P17Yuf5/shKHGev/z7/pfzkd6bd8q/7fabro13QmAAAAR9tzr/z5R7TL/qjdDl8sr61d60+2W5/PTLYNpLpnx4pWrf+ThaazAgAAAOowWo+2rf9frMRhxvX/p79/8cfqOZMQwoli/f/UyqfDi/VNZ67V8efETc8RAACAZp0oWnX9P83f/4+3XnmIQwivvzqJi38DOFP9n7z31Q/VsZLK+/9n65viXIq7k+uR990QWt1tX/61scQAAAA4lI4XLSv2f083lz7+6eQHbe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtnwAAAP//gQBD5A==")
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000001480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800004, 0x0, 0x1, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2900004, 0x0, 0xbe, 0x0, &(0x7f00000007c0))

3.075832675s ago: executing program 1 (id=2098):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = inotify_init1(0x0)
r6 = dup(r5)
inotify_rm_watch(r6, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

2.002018661s ago: executing program 5 (id=2099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x48}}, 0x0)

2.001628101s ago: executing program 3 (id=2100):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800012, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bcef3ab754c3b730034e20162", @ANYRESOCT, @ANYRES16, @ANYRES8], 0x1, 0x1d2, &(0x7f0000000580)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000500)='rw\x00', 0x0, 0x0)

1.845954234s ago: executing program 4 (id=2101):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@nobh}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.845805264s ago: executing program 3 (id=2102):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f00000043c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xa}}, {@resuid}, {@usrjquota}, {@data_err_ignore}, {@noblock_validity}, {@noinit_itable}, {@orlov}]}, 0x1, 0x610, &(0x7f0000004540)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBKDxaW5AqvbGHJULuGytBDCy2U0mspvuQfyD2YXHMLgSS3nANOCA45JMEbZnbGXla78lrR/pDn84FZvXkzu+99d/Q07+3o7QRQWbPZQxpxPCKuJREzLdumo7lxttjv6WcPrmdLEo3G7z5NIinyyv2fFT8PZw9JxGREvHsx4vu1neVu3rt/c6neaPprxPzW+sb85r37p9fWl26s3Fi5tXjml2fPLfxq8ezivsRZxnXp8m9/9K+//ekXq+/VTydxPq6O/2U52uLYL7MxG8+KEFvzxyLiXJbo8L4cNGUISZftDwdYF15drfh9HI+IYzETtXytaSbW/jnUygF91ahFNICKSrR/qKiyH1CO7fsxDh5lTy40B0A74x9rfjYSk/nY6NDTpGVk1BzvHtmH8rMyvn5w4n/ZEl0+hxjbh3K62c4G6D/sFH+S1+1I/ilOFn8aacvzsvRCREwU70W6x/Jn29YH/fv3KvG3Hocs3vPFzyz/4h7LH3b8AFTT4wvFiXw7W3tx/st6hmX/Jzr0f6Y7nLv2Ytjnv+79v/J8P5l/Rp629cOyPs+Vzi853p7x0T8u/adb+a39v2zJyi/7goPw5GHEibb4/5535pLnxz/pcPyzXa71WMZv3v/kUrdtw46/8SjiZMfxz4srWllqfmt9o8xruz45v7pWX1loPnYs4613/vhGt/KHHf+T4gJdt/5vt+Of5W30WMabVx6td9s2/dL4048nkqt5aqLI+fPS1tadxYiJ5HKxS0v+md3rUu5TvkYW/6mfdm7/u8SfH+jtHuPf+P3Np83UzqukPR//HX9Vcs8aPdahmyz+5T0e/3/3WMYXf7j747asqTKxW/xTO18q6fU9BwAAAAAAgCpK82uwSTr3PJ2mc3PNObw/iENp/fbm1s9Wb9+9tRxxKv9/yPG0vNI901xPsvXF4v9hy/Uzbes/j4ijEfHf2lS+Pnf9dn152MEDAAAAAAAAAAAAAAAAAADAiDhczP8v71P9ea05/78nW8f6XDug7/p5gzlgtGn/UF15+9/rHVyBA835H6pL+4fq0v6hurR/qC7tH6pL+4fq0v6hurR/AAAAAHgtHf3J4w+TiNj+9VS+ZCaKbeNDrRnQb6/exmf7Ug9g8GoDfRowSp5f+jf9Hyqnp/7/l8WXA/a/OsAQJJ0y885BY/fG/7jjMwEAAAAAAAAAAACAPjh53Px/qKo03h52FYAh+RYT+X0HABxwvvofqssYH3jZLP7JbhvM/wcAAAAAAAAAAACAgZnOlySdK24BOh1pOjcX8d2IOBLjyepafWUhIr4XER/Uxr+TrS8Ou9IAAAAAAAAAAAAAAAAAAADwmtm8d//mUr2+cqc18dWOnNc7Ud4FdVTq05qIZPCFTkXEKMTen8RYS04SsZ0d+ZGo2J3NGIlqpHk1hvyHCQAAAAAAAAAAAAAAAAAAKqhl7nFnJ/4/4BoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOC9uP//3hPJS15n2DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfTNwEAAP//sc85qQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})

1.798989745s ago: executing program 1 (id=2103):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x3e, 0x0, [{0x40000003, 0x0, 0x1}]})

1.63707282s ago: executing program 1 (id=2104):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x181042, 0x15)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x2)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x8000)

1.60100504s ago: executing program 3 (id=2105):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = inotify_init1(0x0)
r6 = dup(r5)
inotify_rm_watch(r6, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1.483239663s ago: executing program 5 (id=2106):
socket$nl_route(0x10, 0x3, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000001800), 0x18b440, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32=r0, @ANYRES8=r0], 0x0)

1.317487737s ago: executing program 1 (id=2107):
syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000001780)=ANY=[@ANYRES32=0x0, @ANYBLOB="e3875d521f5532124979134cee223e3b811021bfe1f72c45dffda9ca1c0ed71b1140ce4294b7128da40685c173b8aef0a8d1deea7da01bcb5130b02b4d199c24d4f64a2cabf05df6cb8b5bb31f16f0b3242109414fa7d4117548b88b42e4aeee291a40d33563c7808461dc72cd2f6d6cc7b3c9ae9bf60362ad54bd3677a94fb74b6907d6d3d00e4385b2459f3fbf1a9512f9858a9342bd773a080587bf66016cf54549cb76958043b5d865b6435b56df4a2be99aff0f40456cb1fc14e35948a3db27be2c8f84e5276f", @ANYRES16, @ANYRES32, @ANYRESOCT], 0xff, 0x6de, &(0x7f0000000c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x42)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)

361.605881ms ago: executing program 4 (id=2108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x70, r1, 0x211, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x7, 0x0, {0x2000000000, 0xbe, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x9, 0x3}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x0, 0x7, 0x0, {0x8, 0x7, 0x0, 0x193, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x91e, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800)

361.399861ms ago: executing program 2 (id=2109):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000002640)="$eJzs3U2MW0cdAPBn73rzWeKUhIa0tAmFtgK62+yG8BFBUzUXoqbiVqniEqVpiUgDIpWgVQ5JTtxoFYUb4kOceqkAIdELinriUolG4tJT4cCBKEiROEBLYhTvjNf+x+6zk9196/XvJ43H783YM8/7/PZ53puZAphY9fZjo/146e2Lh//5yD823Xr+ZCdHs/043bV0K3ctLU+H9/tgajG+cf3s8X5xrZhvP+bl4tlrndduKYriXLGnuFw0i92Xrrzx7vwzR88fubD3vTcPXl2JbQcAgEnz7csH9+/821/u3/7hWw8eKjZ01ufz82Za3prO+w+lE/98/l8vepdrXaHbTMg3nUI95Jvqk6+7nEbOt7H3dbH8mfC+jQH5NpSUP9W1rt92wzjL+3GzqNVne5br9dnZxd/kRft3/Uxt9vTJUy+eqaiiwLL790NFUewRhEkLrW2dL0HldakudH0KAJWK1wtvcy62LNydzrtND1f+tafq/V8Py2C193/lx/fvrcdql1+2/b8574jD8hl+b9q4ovVYbnm78vdoa1qO1xHi/UujHn/y+02F92sMWc9B1xHG5frCoHpOrXI97tSg+sf9Yr36Rorz5/DNkN79/Yl/03H5GwP9/WfNtf9vWqpc5XUZKWwc03oLExxa1Rx2gDEQ75trJTk93tcX0zeUpG8sSd9Ukr65JH1LSTpMst+/8tPi9drS7/z4m/7G9bPtL8uw7WG5ne2eFH9ixPrE9shR2+Pifb+jutvy4/3EsJb98dhzJ776wvNXFu//r3X2/5tpf9+Tlpvpu3U5ZcjthbFdvXPvf7O3nPqAfPeG+tzTJ3/7+Y7efLUdS+9TdB1nbqvHrt7XbRuU74HefM2Qb1MK8SpIPD/ZHF6Xzz/ycTV/XtNhexthO2ZCPfJxZXuKx+tqDGtV3h8H3f+f989dRaP24slTJ55Iy3k//fNUY8Ot9ftWud7A3Ru2/8+uorf/z9bO+ka9+7iwbWl9rfu40Azr5wesX0jL+f/cd6c2tdfPHv/+qReWe+Nhwp159bXvHTt16sQPPfHEE086T6o+MgErbe6Vl38wd+bV1x4/+fKxl068dOL0woEDC/PzB762sH+ufV4/1312D6wnS//0q64JAAAAAAAAAAAAMKwfHTl85a/vfOX9xf7/S/3/cv//fOdv7v//k9D/P/aTz/3gcz/A7X3S23nCAKszIV8jhU+G+u4I5ewMr/tUijvz+KX+/7m4OK5rrs99YX0cvzfnC8MJ3DZeykwYgyTOF/jZFF9I8a8LqFDt5/1Xp7hsfOu8r+fxKYxLMZ7y3y2PZ5LHMcn9vweN65SP/9tXoY4sv9XoTlj1NgL9/WvNjf+93kPXL4bK6yKstXCj1WqtZnmtllk8gLWh6vk/c7tnjk//6Vsbb4Wc7dpTvcfLOH4p3I2q57+srPzcsDip2z9k+cs9/2dn/ruhj39hxrzmnZX7319cfb+r2GL3sOXH7c/jQO8YrfwPU/l5ax4thiu/9atQfrwgNKSPQvmbhyw/bv/FUQtOBf4vlZ8/tsceHrb8xTeo1XvrEduN8/W/2G6c3Qjbn8f2HPnvf4cTNd5M5cMkG5d5Zkc1LvP/DhLvw/hyWs4HwnyfQ5zvZNT65/sr8v+BneH9ayX/38z/O96+nuKy70Oe/zfvj80+y/Wu5Uafz3a9HmtgXH3g+p8w5qF9RrMG6jGOodVqrWyDVolKC6fyz7/q3wlVl1/1518mzv8bz+Hj/L8xPc7/G9Pj/L8xvd2u+NHSpL0xPc7/Gz/POP9vTL8vlBvnB95Vkv7pkvTdJen3l6Q/UJL+mZL0vSXpD5akP1SSfm9J+sMl6Z8rSf98SfojJemPfXz6wo9LXr/e5f4ok7r9MMli/zzff5gc+frPoO//jpJ0YHz97K19Tz//u+80F/v/z3TaQ/J1vENpuZF+O8ffS7H9ZCqlvZOW/x7S13p7B0ySOH5G/P/+aEk6ML7yfV6+3zCBav1H7Bl23KpB5/mMly+k+Isp/lKKH0/xbIrnUrwvxfOrVD9WxtO//cPB12tLv/e3hfRh7yeP/YHiOFELQ9Yntg+Mej97HMdvVHdb/h12BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKhMvf24f/+uWlFcevvi4eeOnpy7tebJTo5m+3G6a6nReV1RPJHiqRT/Mj25cf3s8e74ZoprxXxRK2qd9cWz1zolbSmK4lyxp7hcNIvdl6688e78M0fPH7mw9703D15duU8AAAAA1r//BwAA///3txjh")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f00000030c0)={0xe4})

361.134711ms ago: executing program 1 (id=2110):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000b00)="cc3aeeaccf96d11507c3f901cfa7dafb3ec49c9bd686e87bbde5871b2694cabde13b5b104bcf442d92733cef238f4f10b74f58efdd6bd87cd453e251fccc5af43ea942a6b53bafb44428")
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061157c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x0, 0x0})

354.477911ms ago: executing program 3 (id=2111):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e})
readv(r0, &(0x7f0000000440)=[{&(0x7f00000019c0)=""/4098, 0x1c}], 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280})

124.459546ms ago: executing program 3 (id=2112):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x5646103b32456b61)
write(r2, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x161400, 0x94)

124.155817ms ago: executing program 4 (id=2113):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4)
write$P9_RSETATTR(r0, 0x0, 0x2f)

24.540469ms ago: executing program 2 (id=2114):
syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad21ed0d1bf91b29550987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f3b096c060890e0878f0e1ac6e7049b096e959b449a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b075d0d36cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f4077fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a81aa1020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b21052010689af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474b0679dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691951264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a70500be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x8f5}}, 0x1006)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198)

0s ago: executing program 4 (id=2115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff)
rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/Loopback.0\x00')

kernel console output (not intermixed with test programs):

 EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 117
[  138.592174][ T4409] EXT4-fs (loop0): This should not happen!! Data will be lost
[  138.592174][ T4409] 
[  138.646062][ T4409] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2049 with max blocks 298 with error 28
[  138.658966][ T4409] EXT4-fs (loop0): This should not happen!! Data will be lost
[  138.658966][ T4409] 
[  138.669134][ T4409] EXT4-fs (loop0): Total free blocks count 0
[  138.675130][ T4409] EXT4-fs (loop0): Free/Dirty block details
[  138.681554][ T4409] EXT4-fs (loop0): free_blocks=0
[  138.686549][ T4409] EXT4-fs (loop0): dirty_blocks=304
[  138.728369][ T4409] EXT4-fs (loop0): Block reservation details
[  138.734426][ T4409] EXT4-fs (loop0): i_reserved_data_blocks=19
[  139.053716][ T5406] loop3: detected capacity change from 0 to 128
[  139.203686][ T5406] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  139.244125][ T5406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
ºTê’ÝìQ±J×%³-j¡)q?+Å䲋-‹g�¢U®ÞǶ='iWêÞݼƒ;Þú�ÊWr:í*L,SA¿{“ºícž[;`ÄÑ%~pÐ(*'FÐøª\ÿšÑ}Œ¦
Ý[  140.110867][ T5424] loop4: detected capacity change from 0 to 1024
[  140.137146][ T5424] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  140.914093][ T5430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'.
[  141.244892][ T5438] netlink: 'syz.2.333': attribute type 1 has an invalid length.
[  141.440536][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'.
[  141.553779][ T5445] device bond3 entered promiscuous mode
[  141.591754][ T5445] 8021q: adding VLAN 0 to HW filter on device bond3
[  141.671705][ T5446] bond2: (slave veth3): Enslaving as an active interface with a down link
[  141.707507][ T5442] tipc: Started in network mode
[  141.715003][ T5442] tipc: Node identity ac1414aa, cluster identity 4711
[  141.754809][ T5442] tipc: New replicast peer: 172.20.20.187
[  141.782923][ T5442] tipc: Enabled bearer <udp:syz0>, priority 10
[  141.806968][ T5359] 9pnet: bogus RWRITE count (2 > 1)
[  141.852367][ T5449] device veth3 entered promiscuous mode
[  141.877613][ T5449] bond3: (slave veth3): Enslaving as an active interface with an up link
[  141.984255][ T5450] bond2: (slave veth0_to_bond): making interface the new active one
[  142.048035][ T5450] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  142.069640][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  142.203481][ T5452] bond3 (unregistering): (slave veth3): Releasing backup interface
[  142.247097][ T5452] device veth3 left promiscuous mode
[  142.295591][ T5452] bond3 (unregistering): Released all slaves
[  143.376283][ T4231] tipc: Node number set to 2886997162
[  144.229783][ T5473] loop4: detected capacity change from 0 to 512
[  144.374766][ T5473] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.341: Unimplemented hash flags: 0x0001
[  144.465115][ T5473] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.341: Corrupt directory, running e2fsck is recommended
[  144.672889][ T5493] loop3: detected capacity change from 0 to 40427
[  144.705152][ T5473] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  144.721064][ T5473] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.341: corrupted in-inode xattr
[  144.747738][ T5493] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  144.756120][ T5493] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  144.808721][ T5473] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.341: couldn't read orphan inode 15 (err -117)
[  144.822399][ T5493] F2FS-fs (loop3): Found nat_bits in checkpoint
[  144.867679][ T5502] loop0: detected capacity change from 0 to 512
[  144.882748][ T5493] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  144.890005][ T5493] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  144.900040][ T5473] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.nodelalloc,barrier=0x0000000000000008,jqfmt=vfsv1,nombcache,,,errors=continue. Quota mode: writeback.
[  144.928022][ T5473] EXT4-fs error (device loop4): ext4_xattr_set_entry:1615: inode #2: comm syz.4.341: corrupted xattr entries
[  145.012934][ T5474] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.341: Unimplemented hash flags: 0x0001
[  145.080909][ T5474] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.341: Corrupt directory, running e2fsck is recommended
[  145.202806][   T26] kauditd_printk_skb: 283 callbacks suppressed
[  145.202819][   T26] audit: type=1804 audit(1788280636.857:298): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.346" name="/newroot/80/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  145.253018][ T5502] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  145.332966][   T26] audit: type=1804 audit(1788280636.987:299): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.346" name="/newroot/80/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  145.359910][ T5507] attempt to access beyond end of device
[  145.359910][ T5507] loop3: rw=10241, want=45104, limit=40427
[  145.413189][ T5493] attempt to access beyond end of device
[  145.413189][ T5493] loop3: rw=2049, want=45104, limit=40427
[  145.528972][ T5512] loop4: detected capacity change from 0 to 1024
[  145.581411][ T5512] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent
[  145.631827][ T5513] device syzkaller0 entered promiscuous mode
[  147.391615][ T5523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.399084][ T5523] IPv6: NLM_F_CREATE should be set when creating new route
[  148.760298][ T5566] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.584210][ T5572] device syzkaller0 entered promiscuous mode
[  149.914955][ T5583] loop4: detected capacity change from 0 to 128
[  152.253296][ T5583] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  152.266646][ T5583] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.581997][   T26] audit: type=1326 audit(1788280644.107:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  152.787482][   T26] audit: type=1326 audit(1788280644.117:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  152.928493][   T26] audit: type=1326 audit(1788280644.217:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  153.005555][   T26] audit: type=1326 audit(1788280644.227:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  153.066748][ T5600] capability: warning: `syz.4.374' uses deprecated v2 capabilities in a way that may be insecure
[  153.068692][   T26] audit: type=1326 audit(1788280644.227:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  153.168099][   T26] audit: type=1326 audit(1788280644.227:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  153.266947][   T26] audit: type=1326 audit(1788280644.217:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  153.317786][   T26] audit: type=1326 audit(1788280644.227:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  153.354701][   T26] audit: type=1326 audit(1788280644.227:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  153.468401][   T26] audit: type=1326 audit(1788280644.357:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.0.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f92acb83159 code=0x7ffc0000
[  153.836044][ T1110] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  154.496142][ T1110] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  154.726538][ T5629] loop1: detected capacity change from 0 to 512
[  154.976173][ T5629] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.383: Unimplemented hash flags: 0x0001
[  155.101913][ T5636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'.
[  155.145523][ T5629] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.383: Corrupt directory, running e2fsck is recommended
[  155.168517][ T5629] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  155.177627][ T5629] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.383: corrupted in-inode xattr
[  155.198912][ T5629] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.383: couldn't read orphan inode 15 (err -117)
[  155.215212][ T5636] device bond1 entered promiscuous mode
[  155.258796][ T5629] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.nodelalloc,barrier=0x0000000000000008,jqfmt=vfsv1,nombcache,,,errors=continue. Quota mode: writeback.
[  155.353339][ T5636] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.434718][ T5629] EXT4-fs error (device loop1): ext4_xattr_set_entry:1615: inode #2: comm syz.1.383: corrupted xattr entries
[  155.514469][ T5629] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.383: Unimplemented hash flags: 0x0001
[  155.568467][ T5629] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.383: Corrupt directory, running e2fsck is recommended
[  155.875914][ T5648] device syzkaller0 entered promiscuous mode
[  157.249789][ T5678] device syzkaller0 entered promiscuous mode
[  157.475930][ T5683] loop0: detected capacity change from 0 to 512
[  157.517458][ T5683] EXT4-fs (loop0): Ignoring removed orlov option
[  157.564524][ T5683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  157.623016][ T5683] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #16: comm syz.0.402: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  157.723868][ T5683] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.402: couldn't read orphan inode 16 (err -117)
[  157.844479][ T5683] EXT4-fs (loop0): 1 orphan inode deleted
[  157.900476][ T5683] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,noblock_validity,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none.
[  159.139781][ T5683] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.402: iget: bad extra_isize 46 (inode size 256)
[  159.820664][ T5702] device syzkaller0 entered promiscuous mode
[  160.342087][ T4187] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  160.438988][ T4187] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  163.618254][ T4878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.318949][ T4878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.442010][ T4878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.586885][ T4878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.598129][ T5770] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  164.634512][ T5778] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  166.187477][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'.
[  166.334871][ T5802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.388716][ T5802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.429886][ T5802] bond0 (unregistering): Released all slaves
[  166.468582][ T4228] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  166.705420][ T5813] netlink: 128 bytes leftover after parsing attributes in process `syz.3.429'.
[  166.858511][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  166.883952][ T4228] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  167.626167][ T5813] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  167.643462][ T5813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.746175][ T5825] ipt_CLUSTERIP: Please specify destination IP
[  167.757269][ T5787] chnl_net:caif_netlink_parms(): no params data found
[  167.871090][ T5825] IPVS: nq: FWM 3 0x00000003 - no destination available
[  167.880720][ T4228] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  167.910850][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.939936][ T4228] usb 2-1: Product: syz
[  167.958529][ T4228] usb 2-1: Manufacturer: syz
[  167.978703][ T4228] usb 2-1: SerialNumber: syz
[  167.999777][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[  168.069370][ T4228] usb 2-1: NFC: intf ffff888079232000 id ffffffff8cb63620
[  168.166503][ T4228] nfcmrvl 2-1:1.0: NFC: registered with nci successfully
[  168.220262][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.228666][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.238551][ T5787] device bridge_slave_0 entered promiscuous mode
[  168.258956][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.266138][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.275135][ T5787] device bridge_slave_1 entered promiscuous mode
[  168.302340][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.315772][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.377530][ T5803] jffs2: notice: (5803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  168.459854][ T5787] team0: Port device team_slave_0 added
[  168.484764][ T4228] usb 2-1: USB disconnect, device number 3
[  168.495151][ T4228] usb 2-1: NFC: intf ffff888079232000
[  168.511341][ T5787] team0: Port device team_slave_1 added
[  169.641542][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.668483][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.832903][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.875363][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.904796][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.981320][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.028592][ T1110] Bluetooth: hci2: command 0x041b tx timeout
[  170.110405][ T5882] loop1: detected capacity change from 0 to 128
[  170.790199][ T5882] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  170.806646][ T5882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.862532][ T5787] device hsr_slave_0 entered promiscuous mode
[  170.909777][ T5787] device hsr_slave_1 entered promiscuous mode
[  171.021373][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.042392][ T5787] Cannot create hsr debugfs directory
[  171.405745][ T5904] loop4: detected capacity change from 0 to 4096
[  171.680437][ T5904] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  172.745230][ T4878] device hsr_slave_0 left promiscuous mode
[  172.749671][ T4231] Bluetooth: hci2: command 0x040f tx timeout
[  172.783505][ T4878] device hsr_slave_1 left promiscuous mode
[  172.849563][ T4878] device veth1_macvtap left promiscuous mode
[  172.868554][ T1110] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  172.883002][ T4878] device veth0_macvtap left promiscuous mode
[  172.904774][ T4878] device veth1_vlan left promiscuous mode
[  172.924372][ T4878] device veth0_vlan left promiscuous mode
[  173.223974][ T4878] bond2 (unregistering): Released all slaves
[  173.239569][ T1110] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  173.239838][ T4878] bond1 (unregistering): Released all slaves
[  173.257228][ T1110] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  173.435077][ T1110] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  173.457399][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.493998][ T1110] usb 5-1: Product: syz
[  173.505450][ T1110] usb 5-1: Manufacturer: syz
[  173.513698][ T1110] usb 5-1: SerialNumber: syz
[  173.580259][ T1110] usb 5-1: NFC: intf ffff8880760ab000 id ffffffff8cb63620
[  173.645965][ T4878] bond0 (unregistering): Released all slaves
[  173.649347][ T1110] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[  173.805113][ T5787] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  173.808424][   T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  173.844765][ T5787] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  173.884355][ T5787] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  173.893904][ T5920] jffs2: notice: (5920) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  173.924960][ T5787] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.080010][ T4281] usb 5-1: USB disconnect, device number 5
[  174.086973][ T4281] usb 5-1: NFC: intf ffff8880760ab000
[  174.198938][   T21] usb 2-1: config 2 has an invalid interface number: 228 but max is 0
[  174.207163][   T21] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  174.228866][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.273697][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[  174.286523][   T21] usb 2-1: config 2 has no interface number 0
[  174.317232][   T21] usb 2-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  174.338225][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  174.352952][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  174.360512][   T21] usb 2-1: config 2 interface 228 has no altsetting 0
[  174.372132][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'.
[  174.390874][ T5968] device bridge_slave_1 left promiscuous mode
[  174.397412][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.419796][ T5968] device bridge_slave_0 left promiscuous mode
[  174.427062][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.539239][   T21] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  174.582077][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.705140][   T21] usb 2-1: Product: syz
[  174.772565][   T21] usb 2-1: Manufacturer: syz
[  174.841444][   T21] usb 2-1: SerialNumber: syz
[  175.035154][ T4188] Bluetooth: hci2: command 0x0419 tx timeout
[  175.103353][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  175.115493][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  175.124218][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.131359][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.218486][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  175.244856][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  175.354802][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  175.417574][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.424788][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.433676][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.444029][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  175.463963][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.473701][   T21] ims_pcu: probe of 2-1:2.228 failed with error -22
[  175.514217][   T21] usb 2-1: USB disconnect, device number 4
[  175.553180][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.833562][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.052914][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  176.089249][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  176.187493][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  176.201943][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  176.235928][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.261467][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  176.273449][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  176.282939][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  176.628830][ T6004] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[  176.699103][ T6004] pit: kvm: requested 115657 ns i8254 timer period limited to 200000 ns
[  176.736099][ T6004] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  176.778993][ T6004] pit: kvm: requested 36876 ns i8254 timer period limited to 200000 ns
[  176.798147][ T6004] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns
[  176.817920][ T6004] pit: kvm: requested 62019 ns i8254 timer period limited to 200000 ns
[  176.849957][ T6004] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[  176.858409][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.865825][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  176.886393][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  176.900320][ T6004] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  176.917772][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'.
[  176.946076][ T6027] device bridge_slave_1 left promiscuous mode
[  176.949283][ T6004] pit: kvm: requested 123200 ns i8254 timer period limited to 200000 ns
[  176.978758][ T6004] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  176.993858][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.039425][ T6027] device bridge_slave_0 left promiscuous mode
[  177.078611][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.106376][ T6046] ipt_CLUSTERIP: Please specify destination IP
[  178.414148][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.425990][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.495905][ T6060] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  178.562077][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.581325][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.622128][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.654467][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.701508][ T5787] device veth0_vlan entered promiscuous mode
[  178.734495][ T5787] device veth1_vlan entered promiscuous mode
[  178.759748][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  178.819922][ T5787] device veth0_macvtap entered promiscuous mode
[  178.844794][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.863433][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.903067][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.924107][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.924467][   T21] libceph: connect (1)[c::]:6789 error -101
[  178.945361][ T5787] device veth1_macvtap entered promiscuous mode
[  178.958038][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  178.966520][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  179.017534][   T21] libceph: mon0 (1)[c::]:6789 connect error
[  179.036177][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.100213][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.118591][ T4231] usb 5-1: config 2 has an invalid interface number: 228 but max is 0
[  179.128876][ T4231] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  179.150707][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.177251][ T4231] usb 5-1: config 2 has no interface number 0
[  179.199438][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.209750][ T4231] usb 5-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  179.231910][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.245345][ T4231] usb 5-1: config 2 interface 228 has no altsetting 0
[  179.253722][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.290763][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.302964][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.324930][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.347331][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.361173][ T1110] libceph: connect (1)[c::]:6789 error -101
[  179.367239][ T1110] libceph: mon0 (1)[c::]:6789 connect error
[  179.397849][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.417087][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.433169][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.443760][ T4231] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  179.449695][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.453412][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.471175][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.474789][ T4231] usb 5-1: Product: syz
[  179.486640][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.491035][ T4231] usb 5-1: Manufacturer: syz
[  179.497542][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.502706][ T4231] usb 5-1: SerialNumber: syz
[  179.519756][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.528787][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  179.544642][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  179.554535][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  179.564080][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  179.590127][ T5787] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.614634][ T5787] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.639287][ T5787] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.657584][ T5787] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.702854][ T6076] ceph: No mds server is up or the cluster is laggy
[  179.842964][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.879940][ T4231] ims_pcu: probe of 5-1:2.228 failed with error -22
[  179.896527][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.935031][ T4231] usb 5-1: USB disconnect, device number 6
[  179.946091][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  179.996658][ T4639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.012752][ T4639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.057419][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  181.165590][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  181.188827][    T7] Bluetooth: hci0: command 0x0406 tx timeout
[  181.246598][ T6097] ODEBUG: Out of memory. ODEBUG disabled
[  181.300596][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'.
[  181.378741][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  181.384836][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  181.607928][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.177601][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.260985][ T6124] bond0 (unregistering): Released all slaves
[  182.325884][ T6133] loop5: detected capacity change from 0 to 256
[  182.886497][ T6143] overlayfs: failed to clone upperpath
[  183.721746][ T1108] libceph: connect (1)[c::]:6789 error -101
[  183.728331][ T1108] libceph: mon0 (1)[c::]:6789 connect error
[  183.874493][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  184.506804][ T6148] ceph: No mds server is up or the cluster is laggy
[  185.189095][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.494'.
[  185.257579][    T7] libceph: connect (1)[c::]:6789 error -101
[  185.264697][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  185.659890][ T4198] Bluetooth: hci5: sending frame failed (-49)
[  185.982265][ T6187] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  186.154321][ T6204] binder: 6195:6204 ioctl 82307201 0 returned -22
[  187.711264][ T1110] Bluetooth: hci5: command 0x1003 tx timeout
[  187.751938][ T4198] Bluetooth: hci5: sending frame failed (-49)
[  188.297606][ T6223] netlink: 288 bytes leftover after parsing attributes in process `syz.3.516'.
[  188.421635][ T4231] libceph: connect (1)[c::]:6789 error -101
[  188.427711][ T4231] libceph: mon0 (1)[c::]:6789 connect error
[  188.455820][ T4231] libceph: connect (1)[c::]:6789 error -101
[  188.468510][ T4231] libceph: mon0 (1)[c::]:6789 connect error
[  188.738806][ T4231] libceph: connect (1)[c::]:6789 error -101
[  188.746191][ T4231] libceph: mon0 (1)[c::]:6789 connect error
[  189.179099][ T6226] ceph: No mds server is up or the cluster is laggy
[  189.292642][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.518'.
[  189.303485][ T6258] device bridge_slave_1 left promiscuous mode
[  189.317694][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.328034][ T6258] device bridge_slave_0 left promiscuous mode
[  189.341223][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.828117][ T1110] Bluetooth: hci5: command 0x1001 tx timeout
[  189.910231][ T4198] Bluetooth: hci5: sending frame failed (-49)
[  190.017029][ T6260] device syzkaller0 entered promiscuous mode
[  190.405624][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.512'.
[  192.430143][ T6292] binder: 6288:6292 ioctl 82307201 0 returned -22
[  192.532275][ T1110] Bluetooth: hci5: command 0x1009 tx timeout
[  193.417246][ T6312] loop1: detected capacity change from 0 to 64
[  194.553512][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.559938][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  195.737655][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'.
[  195.801261][ T6328] device bridge_slave_1 left promiscuous mode
[  195.856531][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.783736][ T6328] device bridge_slave_0 left promiscuous mode
[  196.841209][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.864425][ T6358] syz.2.529 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  197.583975][ T6333] netlink: 'syz.5.526': attribute type 1 has an invalid length.
[  199.999110][ T6393] fuse: Bad value for 'fd'
[  200.019408][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'.
[  200.176178][ T6402] netlink: 76 bytes leftover after parsing attributes in process `syz.5.541'.
[  201.110193][ T6416] netlink: 256 bytes leftover after parsing attributes in process `syz.1.545'.
[  201.174371][ T6421] netlink: 'syz.2.547': attribute type 1 has an invalid length.
[  201.310304][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.254605][ T6427] bond0: (slave geneve2): making interface the new active one
[  202.934246][ T6449] loop5: detected capacity change from 0 to 128
[  203.252458][ T6427] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  204.221681][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  204.265486][ T6427] syz.2.547 (6427) used greatest stack depth: 17456 bytes left
[  205.266401][ T6449] EXT4-fs: error -4 creating inode table initialization thread
[  205.275728][ T6449] EXT4-fs (loop5): mount failed
[  208.267419][ T6501] netlink: 288 bytes leftover after parsing attributes in process `syz.5.561'.
[  209.130454][ T6512] device syzkaller0 entered promiscuous mode
[  209.193074][ T6528] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[  209.304310][ T6528] 8021q: adding VLAN 0 to HW filter on device bond2
[  210.042611][ T6538] bond2: (slave geneve3): making interface the new active one
[  210.333723][ T6538] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  210.370853][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  210.536720][ T6549] loop4: detected capacity change from 0 to 2048
[  211.539107][ T6549] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.785343][ T6579] netlink: 288 bytes leftover after parsing attributes in process `syz.2.579'.
[  211.953154][ T6567] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  211.969133][ T6567] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  212.363624][ T6584] loop0: detected capacity change from 0 to 3904
[  213.064705][ T5185] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  213.125310][ T5185] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[  213.176399][ T5185] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  213.184216][ T5185]  loop0:
[  213.196761][ T6584] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  213.278940][ T6584] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[  213.332642][ T6584] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  213.452785][ T6584]  loop0:
[  214.273773][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.589'.
[  216.590317][ T6665] device syzkaller0 entered promiscuous mode
[  217.554305][ T6676] loop5: detected capacity change from 0 to 32768
[  218.752254][ T6676] XFS (loop5): Mounting V5 Filesystem
[  219.682035][ T6709] loop1: detected capacity change from 0 to 256
[  220.918370][ T6676] XFS (loop5): Ending clean mount
[  220.926240][ T6676] XFS (loop5): Quotacheck needed: Please wait.
[  221.037379][ T6676] XFS (loop5): Quotacheck: Done.
[  221.154396][ T5787] XFS (loop5): Unmounting Filesystem
[  221.413298][ T6730] fuse: Bad value for 'fd'
[  224.407152][ T6777] loop4: detected capacity change from 0 to 1024
[  224.417334][ T6773] device syzkaller1 entered promiscuous mode
[  225.056459][ T6777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  225.224469][ T6777] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.428649][ T6791] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  225.577328][   T26] kauditd_printk_skb: 128 callbacks suppressed
[  225.577345][   T26] audit: type=1804 audit(1788280717.227:438): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.631" name="/newroot/114/file0" dev="fuse" ino=1 res=1 errno=0
[  227.072409][ T6826] netlink: 'syz.3.638': attribute type 1 has an invalid length.
[  227.187511][ T6832] loop1: detected capacity change from 0 to 1024
[  227.347273][ T6832] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  227.358563][ T6832] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  228.103297][ T6832] JBD2: no valid journal superblock found
[  228.110049][ T6832] EXT4-fs (loop1): error loading journal
[  228.893161][ T6826] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.986283][ T6848] device syzkaller1 entered promiscuous mode
[  229.113606][ T6830] bond3: (slave gretap1): making interface the new active one
[  229.124622][ T6830] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  229.147865][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  229.535539][ T6866] loop5: detected capacity change from 0 to 256
[  229.819124][ T6879] fuse: Bad value for 'fd'
[  231.368042][ T6900] device vlan3 entered promiscuous mode
[  231.401430][ T6901] netlink: 'syz.4.654': attribute type 1 has an invalid length.
[  231.532681][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.416659][ T6903] bond0: (slave gretap1): making interface the new active one
[  232.455707][ T6903] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  232.474799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  233.632619][ T6935] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  233.764797][ T6931] device syzkaller1 entered promiscuous mode
[  235.076796][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'.
[  235.138675][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.667'.
[  235.270554][ T6985] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  236.286966][ T7007] CIFS: Attempting to mount \\127.0.0.1\share
[  236.398759][ T7014] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  236.426014][ T7012] netlink: 'syz.4.677': attribute type 1 has an invalid length.
[  237.859488][ T7007] CIFS: VFS: Could not allocate crypto cmac(aes)
[  238.059108][ T7007] CIFS: VFS: Could not allocate crypto cmac(aes)
[  238.109840][ T7007] CIFS: VFS: cifs_mount failed w/return code = -112
[  238.524055][ T7049] netlink: 68 bytes leftover after parsing attributes in process `syz.3.682'.
[  238.594404][ T7050] device vlan2 entered promiscuous mode
[  238.709911][ T7053] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  240.203286][ T7087] FAULT_INJECTION: forcing a failure.
[  240.203286][ T7087] name failslab, interval 1, probability 0, space 0, times 0
[  240.580546][ T7087] CPU: 0 PID: 7087 Comm: syz.5.688 Not tainted syzkaller #0
[  240.587888][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  240.597960][ T7087] Call Trace:
[  240.601244][ T7087]  <TASK>
[  240.604173][ T7087]  dump_stack_lvl+0x188/0x250
[  240.608885][ T7087]  ? show_regs_print_info+0x20/0x20
[  240.614087][ T7087]  ? load_image+0x410/0x410
[  240.618716][ T7087]  ? __might_sleep+0xf0/0xf0
[  240.623328][ T7087]  ? __lock_acquire+0x7b50/0x7b50
[  240.628372][ T7087]  should_fail+0x383/0x4b0
[  240.632810][ T7087]  should_failslab+0x5/0x20
[  240.637326][ T7087]  slab_pre_alloc_hook+0x51/0xc0
[  240.642273][ T7087]  __kmalloc+0x6b/0x340
[  240.646438][ T7087]  ? sk_prot_alloc+0xe7/0x210
[  240.651126][ T7087]  sk_prot_alloc+0xe7/0x210
[  240.655626][ T7087]  ? sk_alloc+0x1d/0x310
[  240.659871][ T7087]  sk_alloc+0x2f/0x310
[  240.663946][ T7087]  __netlink_create+0x6c/0x290
[  240.668712][ T7087]  ? __lock_acquire+0x7b50/0x7b50
[  240.673748][ T7087]  netlink_create+0x3a7/0x510
[  240.678434][ T7087]  ? rtnetlink_rcv+0x20/0x20
[  240.683031][ T7087]  __sock_create+0x473/0x910
[  240.687650][ T7087]  __sys_socket+0xe2/0x170
[  240.692076][ T7087]  __x64_sys_socket+0x76/0x80
[  240.696767][ T7087]  do_syscall_64+0x4c/0xa0
[  240.701188][ T7087]  ? clear_bhb_loop+0x30/0x80
[  240.705882][ T7087]  ? clear_bhb_loop+0x30/0x80
[  240.710578][ T7087]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  240.716491][ T7087] RIP: 0033:0x7f485d657159
[  240.720917][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.740551][ T7087] RSP: 002b:00007f485b8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  240.749005][ T7087] RAX: ffffffffffffffda RBX: 00007f485d8defa0 RCX: 00007f485d657159
[  240.757002][ T7087] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[  240.765081][ T7087] RBP: 00007f485d6ee024 R08: 0000000000000000 R09: 0000000000000000
[  240.773082][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.781079][ T7087] R13: 00007f485d8df038 R14: 00007f485d8defa0 R15: 00007ffc0eaca5e8
[  240.789104][ T7087]  </TASK>
[  240.934877][ T7099] mmap: syz.4.701 (7099) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  240.956714][ T7100] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[  241.103009][ T7100] 8021q: adding VLAN 0 to HW filter on device bond3
[  241.248136][ T7106] bond3: (slave gretap1): making interface the new active one
[  241.257158][ T7106] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  241.266502][ T7107] netlink: 'syz.5.691': attribute type 1 has an invalid length.
[  241.289375][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  241.363742][ T7107] bond1: (slave veth3): Enslaving as an active interface with a down link
[  241.434661][ T7114] bond1: (slave veth0_to_bond): making interface the new active one
[  241.703837][ T7114] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  244.429994][ T7147] netlink: 'syz.2.707': attribute type 1 has an invalid length.
[  244.475872][ T7147] 8021q: adding VLAN 0 to HW filter on device bond3
[  244.527869][ T4281] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  244.564845][ T7151] bond3: (slave gretap1): making interface the new active one
[  244.577407][ T7151] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  244.596258][ T7129] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  244.607324][ T4281] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  247.672774][ T7184] jffs2: notice: (7184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  249.384500][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  249.517640][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  249.594543][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  249.620195][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  249.797744][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  249.876719][ T7220] netlink: 256 bytes leftover after parsing attributes in process `syz.5.725'.
[  250.527421][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  250.580277][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  250.596886][ T7215] device ipip0 entered promiscuous mode
[  251.776790][ T7229] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.728'.
[  251.978831][ T7239] loop4: detected capacity change from 0 to 16
[  252.004241][ T7238] loop1: detected capacity change from 0 to 512
[  252.024554][ T1108] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  252.065053][ T1108] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  252.085533][ T7239] erofs: (device loop4): mounted with root inode @ nid 36.
[  252.096028][ T7238] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  252.335552][ T7238] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.730: invalid indirect mapped block 9 (level 0)
[  252.948809][ T7238] EXT4-fs (loop1): 1 truncate cleaned up
[  252.954499][ T7238] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  253.087492][   T26] audit: type=1800 audit(1788280744.737:439): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.730" name="file1" dev="loop1" ino=15 res=0 errno=0
[  255.622848][ T7278] device bond_slave_0 entered promiscuous mode
[  255.629892][ T7278] device bond_slave_1 entered promiscuous mode
[  255.642977][ T7278] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  255.667157][ T7278] bond4: (slave macvlan2): making interface the new active one
[  255.918166][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.924542][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  256.092026][ T7278] bond4: (slave macvlan2): Enslaving as an active interface with an up link
[  256.094579][ T7281] netlink: 'syz.5.738': attribute type 11 has an invalid length.
[  257.338390][   T23] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  257.798852][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.818515][   T23] usb 6-1: config 0 has no interfaces?
[  257.836516][ T7300] loop1: detected capacity change from 0 to 1024
[  258.098439][   T23] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  258.117778][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.126017][   T23] usb 6-1: Product: syz
[  258.136885][   T23] usb 6-1: Manufacturer: syz
[  258.141673][   T23] usb 6-1: SerialNumber: syz
[  258.148059][   T23] usb 6-1: config 0 descriptor??
[  258.213272][ T7300] EXT4-fs (loop1): Encoding requested by superblock is unknown
[  260.100291][ T7307] device syzkaller0 entered promiscuous mode
[  262.625059][ T7343] netlink: 'syz.4.757': attribute type 11 has an invalid length.
[  262.666268][ T7346] device syzkaller0 entered promiscuous mode
[  262.695377][ T7346] tipc: Started in network mode
[  262.718348][ T7346] tipc: Node identity 6af2a5bf2e2e, cluster identity 4711
[  262.757527][ T7346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.838538][ T7344] tipc: Resetting bearer <eth:syzkaller0>
[  263.915363][ T7344] tipc: Disabling bearer <eth:syzkaller0>
[  264.236014][ T1108] tipc: Node number set to 1155311039
[  264.397274][ T7362] device syzkaller0 entered promiscuous mode
[  268.064070][ T6589] usb 6-1: USB disconnect, device number 2
[  268.501539][ T7419] fuse: Bad value for 'fd'
[  268.508451][ T1108] Bluetooth: hci2: command 0x0405 tx timeout
[  269.468169][ T7422] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 9 (only 8 groups)
[  270.701341][ T7430] loop1: detected capacity change from 0 to 32768
[  270.916587][ T7430] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  276.112919][ T4196] ocfs2: Unmounting device (7,1) on (node local)
[  281.693688][ T4231] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  281.749007][ T4231] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  281.757272][ T7547] fuse: Bad value for 'fd'
[  281.825505][ T7549] device syzkaller0 entered promiscuous mode
[  287.275351][ T7589] device syzkaller0 entered promiscuous mode
[  287.413536][ T7595] loop5: detected capacity change from 0 to 8
[  289.396585][ T4228] Bluetooth: hci2: command 0x0406 tx timeout
[  289.403201][    C0] hrtimer: interrupt took 562728 ns
[  292.162359][   T26] audit: type=1400 audit(1788280783.817:440): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=7626 comm="syz.5.835"
[  292.272697][ T7635] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 9 (only 8 groups)
[  292.607767][ T7637] loop4: detected capacity change from 0 to 32768
[  292.993160][ T7637] XFS (loop4): Mounting V5 Filesystem
[  293.948581][ T7637] XFS (loop4): Ending clean mount
[  293.962077][ T7637] XFS (loop4): Quotacheck needed: Please wait.
[  294.027678][ T7637] XFS (loop4): Quotacheck: Done.
[  295.326944][ T7665] device syzkaller0 entered promiscuous mode
[  295.530284][ T7669] jffs2: notice: (7669) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  295.557352][ T4186] XFS (loop4): Unmounting Filesystem
[  295.699379][ T7669] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  295.711442][ T7669] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  296.856738][ T7679] loop1: detected capacity change from 0 to 1024
[  297.096006][ T7689] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  297.142217][ T7679] hfsplus: unable to load nls mapping "cp43"
[  297.164203][ T7679] hfsplus: unable to parse mount options
[  297.529769][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'.
[  297.701885][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  298.791072][ T7711] loop1: detected capacity change from 0 to 1024
[  299.709811][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  300.870607][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  300.926465][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  301.000167][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  301.073429][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  301.121539][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  301.146737][ T7720] dccp_v6_rcv: dropped packet with invalid checksum
[  301.175815][ T7719] device syzkaller0 entered promiscuous mode
[  304.188321][ T7753] loop5: detected capacity change from 0 to 32768
[  307.794810][ T7779] loop4: detected capacity change from 0 to 256
[  308.243722][ T7779] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  308.313255][ T7784] loop1: detected capacity change from 0 to 512
[  308.334063][   T26] audit: type=1800 audit(1788280799.987:441): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.873" name="file1" dev="loop4" ino=1048626 res=0 errno=0
[  308.358607][ T7775] attempt to access beyond end of device
[  308.358607][ T7775] loop4: rw=0, want=304, limit=256
[  308.452392][ T7784] EXT4-fs (loop1): Test dummy encryption mode enabled
[  308.539650][ T7784] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  308.804571][ T7784] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  309.352848][ T7784] EXT4-fs (loop1): 1 truncate cleaned up
[  309.528502][ T7784] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none.
[  316.126928][ T7848] loop1: detected capacity change from 0 to 8
[  316.406169][   T26] audit: type=1800 audit(1788280808.057:442): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.899" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  316.464726][ T7840] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  316.633220][ T7840] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  316.654976][ T7840] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  317.632869][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.639392][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  319.776813][   T26] audit: type=1800 audit(1788280811.427:443): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.900" name="zoned" dev="configfs" ino=44047 res=0 errno=0
[  319.875453][   T26] audit: type=1800 audit(1788280811.457:444): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.900" name="zone_nr_conv" dev="configfs" ino=44048 res=0 errno=0
[  319.942183][   T26] audit: type=1800 audit(1788280811.467:445): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.900" name="power" dev="configfs" ino=44049 res=0 errno=0
[  320.027762][   T26] audit: type=1800 audit(1788280811.647:446): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.900" name="zoned" dev="configfs" ino=44130 res=0 errno=0
[  320.267256][   T26] audit: type=1800 audit(1788280811.657:447): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.900" name="power" dev="configfs" ino=44131 res=0 errno=0
[  320.314160][ T7888] crypto_alloc_aead failed rc=-4
[  321.301923][ T7902] device syzkaller0 entered promiscuous mode
[  321.655440][ T7918] loop5: detected capacity change from 0 to 128
[  323.669519][ T7929] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  323.676791][ T7929] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  323.701482][ T7929] vhci_hcd vhci_hcd.0: Device attached
[  324.089946][   T23] vhci_hcd: vhci_device speed not set
[  325.209185][   T23] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  325.299706][ T7929] jffs2: notice: (7929) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  326.668829][ T7934] vhci_hcd: connection reset by peer
[  326.731277][    T9] vhci_hcd: stop threads
[  326.736783][    T9] vhci_hcd: release socket
[  326.831883][    T9] vhci_hcd: disconnect device
[  326.963024][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  326.978304][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0
[  326.985900][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  326.995977][ T4198] Workqueue: hci4 hci_rx_work
[  327.000788][ T4198] Call Trace:
[  327.004064][ T4198]  <TASK>
[  327.006978][ T4198]  dump_stack_lvl+0x188/0x250
[  327.011741][ T4198]  ? show_regs_print_info+0x20/0x20
[  327.016936][ T4198]  ? load_image+0x410/0x410
[  327.021447][ T4198]  sysfs_create_dir_ns+0x26a/0x290
[  327.026553][ T4198]  ? sysfs_warn_dup+0xa0/0xa0
[  327.031214][ T4198]  ? kthread+0x42e/0x520
[  327.035449][ T4198]  ? do_raw_spin_unlock+0x11d/0x230
[  327.040634][ T4198]  kobject_add_internal+0x5ba/0xcd0
[  327.045913][ T4198]  kobject_add+0x160/0x230
[  327.050326][ T4198]  ? kobject_init+0x1c0/0x1c0
[  327.054990][ T4198]  ? __raw_spin_lock_init+0x41/0x100
[  327.060258][ T4198]  ? klist_children_get+0x50/0x50
[  327.065275][ T4198]  ? get_device_parent+0x121/0x3e0
[  327.070403][ T4198]  device_add+0x470/0x1050
[  327.074817][ T4198]  ? device_initialize+0x2a5/0x4d0
[  327.079928][ T4198]  hci_conn_add_sysfs+0xd1/0x1e0
[  327.084862][ T4198]  le_conn_complete_evt+0xc2e/0x14d0
[  327.090144][ T4198]  ? cs_le_create_conn+0x5e0/0x5e0
[  327.095293][ T4198]  ? __mutex_trylock_common+0x15c/0x260
[  327.100839][ T4198]  hci_le_meta_evt+0x285/0x3ca0
[  327.105703][ T4198]  ? hci_event_packet+0x363/0x1310
[  327.110821][ T4198]  ? __lock_acquire+0x7b50/0x7b50
[  327.115845][ T4198]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  327.121818][ T4198]  ? lock_chain_count+0x20/0x20
[  327.126658][ T4198]  ? hci_remote_host_features_evt+0x240/0x240
[  327.132802][ T4198]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  327.138512][ T4198]  ? mutex_unlock+0x10/0x10
[  327.143036][ T4198]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  327.149190][ T4198]  hci_event_packet+0xe0b/0x1310
[  327.154152][ T4198]  ? _raw_spin_unlock+0x40/0x40
[  327.158993][ T4198]  ? rcu_lock_release+0x20/0x20
[  327.163844][ T4198]  ? hci_send_to_monitor+0x9c/0x4a0
[  327.169046][ T4198]  hci_rx_work+0x255/0xa10
[  327.173500][ T4198]  process_one_work+0x867/0xff0
[  327.178390][ T4198]  ? worker_detach_from_pool+0x240/0x240
[  327.184019][ T4198]  ? lockdep_hardirqs_off+0x70/0x100
[  327.189304][ T4198]  ? _raw_spin_lock_irq+0xb7/0xf0
[  327.194376][ T4198]  ? _raw_spin_lock_irqsave+0x100/0x100
[  327.200009][ T4198]  ? wq_worker_running+0x97/0x170
[  327.205036][ T4198]  worker_thread+0xad7/0x12a0
[  327.209717][ T4198]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  327.215615][ T4198]  kthread+0x42e/0x520
[  327.219681][ T4198]  ? rcu_lock_release+0x20/0x20
[  327.224526][ T4198]  ? kthread_blkcg+0xd0/0xd0
[  327.229114][ T4198]  ret_from_fork+0x1f/0x30
[  327.233552][ T4198]  </TASK>
[  327.265288][ T4198] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  327.348642][ T4198] Bluetooth: hci4: failed to register connection device
[  329.041286][ T7987] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  331.308373][   T23] vhci_hcd: vhci_device speed not set
[  331.567192][ T8020] device syzkaller0 entered promiscuous mode
[  332.199763][ T8024] futex_wake_op: syz.2.931 tries to shift op by -1; fix this program
[  333.812328][ T8034] loop1: detected capacity change from 0 to 40427
[  333.873945][ T8038] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  333.875121][ T8034] F2FS-fs (loop1): invalid crc value
[  333.880506][ T8038] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  333.901225][ T8034] F2FS-fs (loop1): Found nat_bits in checkpoint
[  333.946547][ T8034] F2FS-fs (loop1): Start checkpoint disabled!
[  334.304811][ T8038] vhci_hcd vhci_hcd.0: Device attached
[  334.358945][   T23] vhci_hcd: vhci_device speed not set
[  334.428874][   T23] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  334.949866][ T8038] jffs2: notice: (8038) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  335.073278][ T4281] Bluetooth: hci5: command 0x1003 tx timeout
[  335.119753][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  335.163669][ T8034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  335.467158][ T8040] vhci_hcd: connection reset by peer
[  335.481331][ T6916] vhci_hcd: stop threads
[  336.126040][ T6916] vhci_hcd: release socket
[  336.145559][ T6916] vhci_hcd: disconnect device
[  336.372425][ T4262] attempt to access beyond end of device
[  336.372425][ T4262] loop1: rw=2049, want=40976, limit=40427
[  336.795597][ T8076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.941'.
[  337.237445][ T4281] Bluetooth: hci5: command 0x1001 tx timeout
[  337.244314][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  337.459217][ T8083] tc action pedit 'at' offset 164 out of bounds
[  337.466225][ T8087] batman_adv: batadv0: Local translation table size (156) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  339.711900][   T23] vhci_hcd: vhci_device speed not set
[  339.893465][ T4281] Bluetooth: hci5: command 0x1009 tx timeout
[  341.619214][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'.
[  344.091075][ T8167] loop4: detected capacity change from 0 to 16
[  344.229360][ T8167] erofs: (device loop4): mounted with root inode @ nid 36.
[  348.861919][ T8208] autofs4:pid:8208:autofs_fill_super: called with bogus options
[  350.208824][ T8222] loop5: detected capacity change from 0 to 16
[  350.478735][ T8222] erofs: (device loop5): mounted with root inode @ nid 36.
[  352.499920][ T8240] 9pnet: p9_fd_create_tcp (8240): problem connecting socket to 127.0.0.1
[  363.524830][ T8361] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1011'.
[  367.726917][ T1108] Bluetooth: hci5: command 0x1003 tx timeout
[  367.755106][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  370.715063][ T4228] Bluetooth: hci5: command 0x1001 tx timeout
[  370.724503][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  371.299862][ T8415] SET target dimension over the limit!
[  374.172261][ T8425] autofs4:pid:8425:autofs_fill_super: called with bogus options
[  374.192329][ T8432] netlink: 'syz.3.1031': attribute type 1 has an invalid length.
[  374.457150][ T8432] netlink: 'syz.3.1031': attribute type 2 has an invalid length.
[  374.723541][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'.
[  376.302305][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'.
[  378.984941][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.991495][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  382.717353][ T8497] batman_adv: batadv0: Adding interface: veth0
[  382.733308][ T8497] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.768869][ T8497] batman_adv: batadv0: Interface activated: veth0
[  382.961411][ T8499] batman_adv: batadv0: Interface deactivated: veth0
[  383.000667][ T8499] batman_adv: batadv0: Removing interface: veth0
[  383.125914][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  383.198851][ T8499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.261483][ T8499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.304304][ T8499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.334881][ T8499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.670326][ T4174] Bluetooth: hci5: command 0x1003 tx timeout
[  385.677440][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  387.743804][   T23] Bluetooth: hci5: command 0x1001 tx timeout
[  388.746706][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  392.506950][ T4231] Bluetooth: hci5: command 0x1009 tx timeout
[  392.920113][ T8567] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  394.693166][ T8574] loop5: detected capacity change from 0 to 256
[  396.335975][ T8586] batman_adv: batadv0: Adding interface: veth0
[  396.412119][ T8586] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.539705][ T8586] batman_adv: batadv0: Interface activated: veth0
[  396.546944][ T8586] batadv0: mtu less than device minimum
[  396.578331][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.592264][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.606651][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.621243][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.635625][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.650461][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.664987][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.679434][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  396.693486][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  402.488326][ T8645] batman_adv: batadv0: Adding interface: veth0
[  402.494536][ T8645] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.570205][ T8645] batman_adv: batadv0: Interface activated: veth0
[  402.651543][ T8645] batman_adv: batadv0: Interface deactivated: veth0
[  402.678093][ T8645] batman_adv: batadv0: Removing interface: veth0
[  402.706036][ T8645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.718382][ T8645] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.987289][ T8645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.372017][ T8645] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.472606][ T8679] loop4: detected capacity change from 0 to 16
[  406.924759][    C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.938091][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  406.947684][ T8679] erofs: (device loop4): erofs_read_superblock: cannot read erofs superblock
[  407.010542][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  407.021532][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  408.876880][ T8720] net_ratelimit: 10 callbacks suppressed
[  408.876941][ T8720] IPVS: sh: FWM 3 0x00000003 - no destination available
[  409.269756][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  413.576986][ T8741] loop4: detected capacity change from 0 to 1024
[  414.707605][ T8751] ip_tables: iptables: counters copy to user failed while replacing table
[  415.814542][  T573] hfsplus: b-tree write err: -5, ino 25
[  415.829962][  T573] hfsplus: b-tree write err: -5, ino 4
[  416.025610][  T573] hfsplus: b-tree write err: -5, ino 2
[  416.053333][  T573] hfsplus: b-tree write err: -5, ino 26
[  418.588502][ T8796] kAFS: bad VL server IP address
[  423.773184][ T8837] loop4: detected capacity change from 0 to 4096
[  424.039240][ T8843] loop5: detected capacity change from 0 to 16
[  425.518544][ T8843] erofs: (device loop5): mounted with root inode @ nid 36.
[  426.777109][   T26] audit: type=1800 audit(1788280918.427:448): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1140" name="file2" dev="loop5" ino=89 res=0 errno=0
[  426.851503][ T8869] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8869]
[  427.591033][    C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  428.304710][ T8882] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  428.665692][ T8884] device syzkaller0 entered promiscuous mode
[  429.266401][ T8893] batman_adv: batadv0: Adding interface: veth0
[  429.312283][ T8893] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.491644][ T8902] overlayfs: failed to clone lowerpath
[  429.516179][ T8902] overlayfs: failed to clone lowerpath
[  430.448352][ T8893] batman_adv: batadv0: Interface activated: veth0
[  430.487071][ T8896] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  432.927138][ T8926] device syzkaller0 entered promiscuous mode
[  433.151573][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'.
[  433.988273][ T4231] Bluetooth: hci2: command 0x0405 tx timeout
[  434.015521][ T8926] loop4: detected capacity change from 0 to 8
[  434.141188][ T8581] udevd[8581]: incorrect cramfs checksum on /dev/loop4
[  434.168906][ T8926] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  435.256523][ T8581] udevd[8581]: incorrect cramfs checksum on /dev/loop4
[  435.692911][ T8960] create_pit_timer: 3 callbacks suppressed
[  435.692945][ T8960] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  436.552146][ T8968] overlayfs: failed to clone upperpath
[  439.135068][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  439.158834][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  439.284671][ T8988] device bond1 left promiscuous mode
[  439.339485][ T8988] device vlan2 left promiscuous mode
[  439.366497][ T8988] device ipip0 left promiscuous mode
[  440.216699][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.249821][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  442.902418][ T9015] MTD: Couldn't look up './dev/mtdblock0': -2
[  445.336215][ T9025] loop4: detected capacity change from 0 to 256
[  445.401115][ T9025] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  445.429911][   T26] audit: type=1800 audit(1788280937.087:449): pid=9025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1184" name="file1" dev="loop4" ino=1048629 res=0 errno=0
[  446.452534][ T9030] loop5: detected capacity change from 0 to 4096
[  449.918348][ T4228] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  450.167772][ T9067] afs: Unknown parameter ''
[  455.264093][ T4281] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  455.742164][ T9107] loop4: detected capacity change from 0 to 512
[  456.490425][ T4281] usb 6-1: Using ep0 maxpacket: 16
[  457.095512][ T9107] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  457.119593][ T4281] usb 6-1: device descriptor read/all, error -71
[  457.207375][ T9107] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.843060][   T13] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  465.790329][   T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  466.266437][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  467.043022][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.073471][   T13] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  467.086346][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.980083][   T13] usb 5-1: config 0 descriptor??
[  471.424463][   T13] usb 5-1: can't set config #0, error -71
[  471.463895][   T13] usb 5-1: USB disconnect, device number 8
[  472.554958][ T9234] loop5: detected capacity change from 0 to 128
[  475.629227][ T9234] omfs: Invalid superblock (7b3184f9)
[  477.529167][ T9263] CIFS: Attempting to mount \\127.0.0.1\share
[  477.536693][ T9263] CIFS: VFS: Error connecting to socket. Aborting operation.
[  477.545090][ T9263] CIFS: VFS: cifs_mount failed w/return code = -101
[  483.212452][ T9319] CIFS: Attempting to mount \\127.0.0.1\share
[  483.383817][ T9322] nvmet: adding nsid 1 to subsystem testsubsys
[  484.271965][ T9327] loop5: detected capacity change from 0 to 1024
[  484.295833][ T9319] CIFS: VFS: Error connecting to socket. Aborting operation.
[  484.303925][ T9319] CIFS: VFS: cifs_mount failed w/return code = -4
[  484.357493][ T9327] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  484.494104][ T4228] nvmet: creating controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:6648e821-01cf-46d0-b052-cbacac9237ef.
[  484.602979][ T9322] nvme nvme0: creating 2 I/O queues.
[  484.627259][ T9322] nvme nvme0: new ctrl: "testsubsys"
[  485.935570][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  486.467178][ T9343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  487.039339][ T9354] loop4: detected capacity change from 0 to 32768
[  487.388312][ T9362] loop5: detected capacity change from 0 to 128
[  488.566258][ T9362] FAT-fs (loop5): Directory bread(block 414) failed
[  488.573148][ T9362] FAT-fs (loop5): Directory bread(block 415) failed
[  488.579938][ T9362] FAT-fs (loop5): Directory bread(block 416) failed
[  488.590172][ T9362] FAT-fs (loop5): Directory bread(block 417) failed
[  488.596883][ T9362] FAT-fs (loop5): Directory bread(block 418) failed
[  488.651235][ T9362] FAT-fs (loop5): Directory bread(block 419) failed
[  488.657997][ T9362] FAT-fs (loop5): Directory bread(block 420) failed
[  488.664671][ T9362] FAT-fs (loop5): Directory bread(block 421) failed
[  489.039736][ T9354] XFS (loop4): Mounting V5 Filesystem
[  489.819431][ T9354] XFS (loop4): Ending clean mount
[  489.989871][ T4186] XFS (loop4): Unmounting Filesystem
[  491.736841][ T9382] loop5: detected capacity change from 0 to 32768
[  491.818067][ T9382] (syz.5.1292,9382,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  491.917506][ T9382] (syz.5.1292,9382,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  492.183770][ T9382] (syz.5.1292,9382,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  492.744905][ T9382] JBD2: Ignoring recovery information on journal
[  494.291858][ T9382] JBD2: recovery failed
[  494.644598][ T9382] (syz.5.1292,9382,0):ocfs2_journal_load:1106 ERROR: Failed to load journal!
[  494.700352][ T9382] (syz.5.1292,9382,1):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5
[  494.739902][ T9382] (syz.5.1292,9382,1):ocfs2_check_volume:2491 ERROR: status = -5
[  494.798889][ T9382] (syz.5.1292,9382,0):ocfs2_mount_volume:1824 ERROR: status = -5
[  494.967732][ T9428] CIFS: Attempting to mount \\127.0.0.1\share
[  494.984189][ T9428] CIFS: VFS: Error connecting to socket. Aborting operation.
[  494.992422][ T9428] CIFS: VFS: cifs_mount failed w/return code = -111
[  495.078792][ T9382] (syz.5.1292,9382,1):ocfs2_fill_super:1177 ERROR: status = -5
[  499.683201][ T9482] 9pnet: p9_fd_create_tcp (9482): problem connecting socket to 127.0.0.1
[  500.695837][ T9492] loop4: detected capacity change from 0 to 2048
[  500.890632][ T9493] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  501.680612][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.686996][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  502.273101][ T9503] netlink: 'syz.3.1315': attribute type 2 has an invalid length.
[  506.897954][ T9550] futex_wake_op: syz.1.1326 tries to shift op by 144; fix this program
[  510.898026][ T9562] loop5: detected capacity change from 0 to 8192
[  513.821769][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  517.659297][ T9594] sctp: [Deprecated]: syz.1.1338 (pid 9594) Use of int in max_burst socket option.
[  517.659297][ T9594] Use struct sctp_assoc_value instead
[  517.842523][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[  517.874764][ T9594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1338'.
[  523.107556][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  523.360284][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  523.700584][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  523.778624][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  523.807189][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  523.989368][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  523.997607][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  524.010374][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  524.030046][ T9635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  524.420025][ T6544] Bluetooth: hci5: Frame reassembly failed (-84)
[  525.985683][ T9686] loop4: detected capacity change from 0 to 512
[  526.256218][ T9694] 
: renamed from bond_slave_0
[  526.331479][ T9686] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  526.438297][ T4174] Bluetooth: hci5: command 0x1003 tx timeout
[  526.450383][ T9667] Bluetooth: hci5: sending frame failed (-49)
[  527.940460][ T9686] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  528.148425][ T9686] ext4 filesystem being mounted at /244/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  528.666885][ T4174] Bluetooth: hci5: command 0x1001 tx timeout
[  528.688291][ T9667] Bluetooth: hci5: sending frame failed (-49)
[  531.421018][ T9730] netlink: 'syz.2.1363': attribute type 1 has an invalid length.
[  531.439790][ T6589] Bluetooth: hci5: command 0x1009 tx timeout
[  531.701540][ T9741] futex_wake_op: syz.4.1362 tries to shift op by 144; fix this program
[  536.737118][ T9768] loop5: detected capacity change from 0 to 2048
[  537.434684][ T9768] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  537.525219][ T9768] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.895506][   T23] Bluetooth: hci2: command 0x0405 tx timeout
[  540.224846][ T9804] loop4: detected capacity change from 0 to 32768
[  540.284755][ T9804] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1376 (9804)
[  541.951164][ T9804] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  541.961934][ T9804] BTRFS info (device loop4): turning on sync discard
[  541.969576][ T9804] BTRFS info (device loop4): using free space tree
[  541.976850][ T9804] BTRFS info (device loop4): has skinny extents
[  543.753457][ T9804] BTRFS info (device loop4): enabling ssd optimizations
[  546.311483][ T9869] lo speed is unknown, defaulting to 1000
[  546.318042][ T9869] lo speed is unknown, defaulting to 1000
[  546.423253][ T9869] lo speed is unknown, defaulting to 1000
[  546.615808][ T9869] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[  546.655545][ T9869] lo speed is unknown, defaulting to 1000
[  546.667374][ T9869] lo speed is unknown, defaulting to 1000
[  546.688959][ T9869] lo speed is unknown, defaulting to 1000
[  546.695625][ T9869] lo speed is unknown, defaulting to 1000
[  547.486532][ T9869] lo speed is unknown, defaulting to 1000
[  547.544327][ T9563] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (9563)
[  549.101841][ T9893] overlayfs: failed to clone upperpath
[  555.593487][ T4198] Bluetooth: hci4: unexpected event for opcode 0x0c5a
[  559.229944][ T9961] fuse: Bad value for 'group_id'
[  559.283299][ T9962] capability: warning: `syz.1.1406' uses 32-bit capabilities (legacy support in use)
[  560.855156][ T9969] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  560.954069][ T9982] loop5: detected capacity change from 0 to 512
[  563.072366][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.078953][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  564.323300][ T9982] EXT4-fs: error -4 creating inode table initialization thread
[  564.335237][ T9982] EXT4-fs (loop5): mount failed
[  565.384768][T10002] tmpfs: Unknown parameter 'quota'
[  570.574343][T10041] loop4: detected capacity change from 0 to 2048
[  570.771889][T10033] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  570.819123][T10041] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  570.850121][T10041] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  571.625499][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1432'.
[  571.635758][T10059] netlink: 'syz.5.1432': attribute type 10 has an invalid length.
[  571.644673][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1432'.
[  571.661750][T10059] device geneve2 entered promiscuous mode
[  575.168001][T10081] loop5: detected capacity change from 0 to 4096
[  576.004137][T10081] ntfs: volume version 3.1.
[  576.727862][T10095] loop4: detected capacity change from 0 to 2048
[  576.989691][T10095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  577.032738][T10095] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  577.042208][T10107] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  578.845566][T10126] loop4: detected capacity change from 0 to 2048
[  579.090496][T10126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  579.118418][T10126] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  580.920828][T10154] jffs2: notice: (10154) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  582.046867][   T26] audit: type=1800 audit(1788281073.694:450): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1457" name="control" dev="configfs" ino=50348 res=0 errno=0
[  584.423351][T10189] loop5: detected capacity change from 0 to 2048
[  584.423484][T10194] loop4: detected capacity change from 0 to 1024
[  584.488726][T10189] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  584.507767][T10194] EXT4-fs (loop4): Can't support bigalloc feature without extents feature
[  584.507767][T10194] 
[  584.561483][T10194] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  584.652434][T10189] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: none.
[  586.950652][T10231] loop5: detected capacity change from 0 to 2048
[  587.654992][T10231] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  587.674105][T10231] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.933871][   T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  588.568180][   T13] usb 5-1: config 0 has an invalid interface number: 168 but max is 0
[  588.609563][   T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.639011][   T13] usb 5-1: config 0 has no interface number 0
[  588.648093][T10255] loop5: detected capacity change from 0 to 16
[  588.658018][   T13] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  588.668795][T10255] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  588.884745][   T13] usb 5-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16
[  588.907124][   T13] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[  588.925045][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.085084][   T13] usb 5-1: config 0 descriptor??
[  589.175384][   T13] HFC-S_USB: probe of 5-1:0.168 failed with error -5
[  589.291476][T10267] lo speed is unknown, defaulting to 1000
[  589.297859][T10267] lo speed is unknown, defaulting to 1000
[  589.304820][T10267] lo speed is unknown, defaulting to 1000
[  589.314710][T10267] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  589.328401][T10267] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  589.351179][T10267] lo speed is unknown, defaulting to 1000
[  589.353537][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  589.366077][T10267] lo speed is unknown, defaulting to 1000
[  589.374050][T10267] lo speed is unknown, defaulting to 1000
[  589.381083][T10267] lo speed is unknown, defaulting to 1000
[  589.388259][T10267] lo speed is unknown, defaulting to 1000
[  589.494365][ T9876] usb 5-1: USB disconnect, device number 9
[  591.800379][T10297] loop4: detected capacity change from 0 to 64
[  591.901316][ T4261] Bluetooth: hci2: command 0x0405 tx timeout
[  591.981540][T10297] BFS-fs: bfs_fill_super(): Impossible last inode number 67099697 > 513 on loop4
[  592.006824][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'.
[  592.015845][T10301] netlink: 'syz.3.1506': attribute type 10 has an invalid length.
[  592.023958][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'.
[  592.036434][T10301] device geneve3 entered promiscuous mode
[  593.830389][T10328] loop4: detected capacity change from 0 to 4096
[  594.114170][T10341] jfs: Unrecognized mount option "† Ř" or missing value
[  595.140770][T10328] ntfs: volume version 3.1.
[  595.898224][T10328] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  595.917682][T10328] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  596.383299][T10328] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  596.585936][T10328] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  596.622471][T10328] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  596.691697][T10328] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  596.817584][T10328] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  596.876976][T10328] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  596.898632][T10328] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  596.921247][T10328] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x2, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  598.541439][T10381] netlink: 'syz.1.1534': attribute type 4 has an invalid length.
[  600.021514][T10399] jffs2: notice: (10399) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  602.847138][ T4231] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  605.787158][ T4231] usb 6-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4
[  606.170432][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.187219][ T4231] usb 6-1: config 0 descriptor??
[  606.290843][ T4231] pwc: Philips PCVC675K (Vesta) USB webcam detected.
[  606.347003][ T9885] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  606.496810][ T4231] pwc: send_video_command error -71
[  606.502065][ T4231] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  606.510569][ T4231] Philips webcam: probe of 6-1:0.0 failed with error -71
[  606.524011][ T4231] usb 6-1: USB disconnect, device number 5
[  606.716780][ T9885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  606.727812][ T9885] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  606.738192][ T9885] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  606.748358][ T9885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  606.758877][ T9885] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0
[  606.768949][ T9885] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  606.781915][ T9885] usb 5-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00
[  606.791610][ T9885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.817428][T10445] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  606.825014][T10445] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  606.838490][ T9885] io_ti 5-1:1.0: required endpoints missing
[  607.041600][ T9885] usb 5-1: USB disconnect, device number 10
[  608.011705][T10476] loop5: detected capacity change from 0 to 131072
[  608.087463][T10476] F2FS-fs (loop5): invalid crc value
[  608.125404][T10476] F2FS-fs (loop5): Found nat_bits in checkpoint
[  608.160795][T10476] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  608.425363][T10476] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  608.606682][   T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  609.876771][   T13] usb 5-1: Using ep0 maxpacket: 8
[  610.037080][   T13] usb 5-1: unable to get BOS descriptor or descriptor too short
[  610.307001][   T13] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  610.323757][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.346789][   T13] usb 5-1: Product: syz
[  610.353968][   T13] usb 5-1: Manufacturer: syz
[  610.360485][   T13] usb 5-1: SerialNumber: syz
[  610.807568][   T13] usb 5-1: MIDIStreaming interface descriptor not found
[  611.519644][T10543] tipc: Can't bind to reserved service type 0
[  611.854840][   T13] usb 5-1: USB disconnect, device number 11
[  614.063399][T10556] jffs2: notice: (10556) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  614.173799][T10564] usb usb8: usbfs: process 10564 (syz.5.1590) did not claim interface 0 before use
[  615.147964][T10565] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  615.248425][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  615.248459][   T26] audit: type=1800 audit(1788281106.906:451): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1585" name="control" dev="configfs" ino=49850 res=0 errno=0
[  615.401315][T10577] loop5: detected capacity change from 0 to 2048
[  615.477188][T10577] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  615.493690][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  615.521263][T10577] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  615.532393][T10579] loop4: detected capacity change from 0 to 2048
[  616.296508][T10579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  616.329779][T10579] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  616.487669][T10595] fuse: blksize only supported for fuseblk
[  617.371632][T10608] loop4: detected capacity change from 0 to 256
[  617.543048][T10609] loop5: detected capacity change from 0 to 4096
[  617.613984][T10609] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  617.662290][T10609] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  617.699181][T10609] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  617.754711][T10609] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  617.816529][T10609] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  617.833231][T10619] loop4: detected capacity change from 0 to 2048
[  617.900557][T10609] ntfs: volume version 3.1.
[  617.922514][T10609] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  617.928672][T10619] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  617.959418][T10619] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.981365][T10609] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  618.006032][T10609] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  618.027741][T10609] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  619.025057][T10635] loop5: detected capacity change from 0 to 64
[  619.212074][T10639] loop4: detected capacity change from 0 to 8
[  619.402055][T10629] infiniband syz0: set down
[  619.431708][T10629] infiniband syz0: added bond_slave_1
[  619.509206][T10629] RDS/IB: syz0: added
[  619.515136][T10629] smc: adding ib device syz0 with port count 1
[  619.629833][T10629] smc:    ib device syz0 port 1 has pnetid 
[  619.911559][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'.
[  620.214951][T10654] lo speed is unknown, defaulting to 1000
[  620.267208][T10646] loop4: detected capacity change from 0 to 32768
[  620.411284][T10646] XFS (loop4): Mounting V5 Filesystem
[  620.510859][T10646] XFS (loop4): Ending clean mount
[  620.765071][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'.
[  620.775956][T10669] netlink: 'syz.3.1626': attribute type 10 has an invalid length.
[  620.784569][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'.
[  620.946669][ T4186] XFS (loop4): Unmounting Filesystem
[  622.318900][T10687] loop4: detected capacity change from 0 to 16
[  622.391165][T10687] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  622.424531][T10687] cramfs: empty filesystem
[  622.859437][T10698] sctp: [Deprecated]: syz.2.1638 (pid 10698) Use of int in maxseg socket option.
[  622.859437][T10698] Use struct sctp_assoc_value instead
[  622.975482][T10695] loop4: detected capacity change from 0 to 8192
[  623.101692][T10695] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  623.176031][T10695] REISERFS (device loop4): using ordered data mode
[  623.182733][T10695] reiserfs: using flush barriers
[  623.215247][T10695] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  623.279304][T10695] REISERFS (device loop4): checking transaction log (loop4)
[  623.344735][T10695] REISERFS (device loop4): Using r5 hash to sort names
[  623.417700][T10695] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  623.612666][T10724] overlayfs: './file0' not a directory
[  623.971154][T10699] loop5: detected capacity change from 0 to 32768
[  624.041162][T10699] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1639 (10699)
[  624.215411][T10699] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  624.398650][T10699] BTRFS info (device loop5): setting nodatacow, compression disabled
[  624.398743][T10699] BTRFS info (device loop5): setting datasum, datacow enabled
[  624.398764][T10699] BTRFS info (device loop5): enabling ssd optimizations
[  624.398791][T10699] BTRFS info (device loop5): force clearing of disk cache
[  624.398810][T10699] BTRFS info (device loop5): using spread ssd allocation scheme
[  624.398828][T10699] BTRFS info (device loop5): turning on sync discard
[  624.398889][T10699] BTRFS info (device loop5): turning on flush-on-commit
[  624.398913][T10699] BTRFS info (device loop5): not using ssd optimizations
[  624.398928][T10699] BTRFS info (device loop5): not using spread ssd allocation scheme
[  624.398945][T10699] BTRFS info (device loop5): using free space tree
[  624.398959][T10699] BTRFS info (device loop5): has skinny extents
[  624.767413][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.767637][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  626.138870][T10699] BTRFS error (device loop5): open_ctree failed: -12
[  626.340331][T10770] lo speed is unknown, defaulting to 1000
[  626.812548][T10790] loop4: detected capacity change from 0 to 2048
[  626.996594][T10790] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  627.016027][T10790] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  628.157065][ T4271] Bluetooth: hci5: Frame reassembly failed (-84)
[  628.184251][ T4271] Bluetooth: hci5: Frame reassembly failed (-84)
[  628.557272][T10813] loop5: detected capacity change from 0 to 64
[  629.822018][T10827] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1681'.
[  630.203158][T10798] Bluetooth: hci5: command 0x1003 tx timeout
[  630.228748][ T9667] Bluetooth: hci5: sending frame failed (-49)
[  631.156747][T10830] loop5: detected capacity change from 0 to 40427
[  631.207962][T10830] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  631.235757][T10830] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  631.274775][T10830] F2FS-fs (loop5): invalid crc value
[  631.321790][T10830] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  631.562898][T10830] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  631.595368][T10830] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  632.215106][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'.
[  632.224227][T10898] netlink: 'syz.1.1714': attribute type 10 has an invalid length.
[  632.232408][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'.
[  632.389971][ T9885] Bluetooth: hci5: command 0x1001 tx timeout
[  632.396378][ T9667] Bluetooth: hci5: sending frame failed (-49)
[  633.142785][T10911] loop5: detected capacity change from 0 to 64
[  633.411178][T10911] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  633.470441][T10911] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  634.573171][T10798] Bluetooth: hci5: command 0x1009 tx timeout
[  634.716841][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'.
[  634.725838][T10944] netlink: 'syz.2.1731': attribute type 10 has an invalid length.
[  634.733675][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'.
[  634.746447][T10944] device geneve3 entered promiscuous mode
[  635.584253][T10956] usb usb8: usbfs: process 10956 (syz.5.1736) did not claim interface 0 before use
[  635.823204][T10963] loop5: detected capacity change from 0 to 2364
[  637.204459][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'.
[  637.213680][T10984] netlink: 'syz.5.1745': attribute type 10 has an invalid length.
[  637.221804][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1745'.
[  637.254381][T10979] lo speed is unknown, defaulting to 1000
[  638.153874][T11001] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1753'.
[  638.434067][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'.
[  638.443397][T11011] netlink: 'syz.3.1759': attribute type 10 has an invalid length.
[  638.451345][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'.
[  638.806558][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'.
[  638.815574][T11013] netlink: 'syz.5.1760': attribute type 10 has an invalid length.
[  638.823398][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1760'.
[  639.935272][T10793] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  639.943059][ T9876] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  640.043508][T11039] jffs2: notice: (11039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  640.209995][T11046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready
[  640.338311][T10793] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.350002][ T9876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.381838][ T9876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  640.395526][T10793] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  640.414548][ T9876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  640.432133][T10793] usb 5-1: config 0 interface 0 has no altsetting 0
[  640.439180][T10793] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  640.452139][ T9876] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  640.461821][T10793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.474372][ T9876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.484660][T10793] usb 5-1: config 0 descriptor??
[  640.497961][ T9876] usb 6-1: config 0 descriptor??
[  640.712647][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'.
[  640.721796][T11051] netlink: 'syz.2.1774': attribute type 10 has an invalid length.
[  640.729698][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1774'.
[  641.349239][ T9876] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x1
[  641.362885][T10793] hid-multitouch 0003:0EEF:72C4.0006: No inputs registered, leaving
[  641.371791][ T9876] steelseries_srws1 0003:1038:1410.0007: not enough values in HID_OUTPUT_REPORT 0 field 0
[  641.423997][T10793] hid-multitouch 0003:0EEF:72C4.0006: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0
[  641.614182][ T1108] usb 6-1: USB disconnect, device number 6
[  641.691393][ T4228] usb 5-1: USB disconnect, device number 12
[  642.754489][T11083] loop5: detected capacity change from 0 to 16
[  642.822366][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'.
[  642.831776][T11086] netlink: 'syz.3.1788': attribute type 10 has an invalid length.
[  642.840231][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1788'.
[  642.846959][T11082] loop4: detected capacity change from 0 to 2048
[  642.901710][T11083] erofs: (device loop5): mounted with root inode @ nid 36.
[  643.594478][T11082] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  643.734689][T11082] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  643.871388][T11100] loop5: detected capacity change from 0 to 1024
[  644.444022][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1795'.
[  644.602065][ T4878] hfsplus: b-tree write err: -5, ino 25
[  644.614961][ T4878] hfsplus: b-tree write err: -5, ino 4
[  644.630791][ T4878] hfsplus: b-tree write err: -5, ino 2
[  644.722773][ T4878] hfsplus: b-tree write err: -5, ino 17
[  644.823474][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'.
[  644.833590][T11125] netlink: 'syz.1.1803': attribute type 10 has an invalid length.
[  644.842302][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1803'.
[  645.848852][T11136] loop4: detected capacity change from 0 to 2048
[  646.019447][T11135] loop5: detected capacity change from 0 to 4096
[  646.191722][T11149] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  646.749239][T11135] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  647.408728][T11136] attempt to access beyond end of device
[  647.408728][T11136] loop4: rw=0, want=2198922592330, limit=2048
[  647.525366][T11136] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1)
[  649.344133][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'.
[  649.518549][T11182] loop5: detected capacity change from 0 to 40427
[  649.609029][T11182] F2FS-fs (loop5): Found nat_bits in checkpoint
[  649.726895][T11188] loop4: detected capacity change from 0 to 32768
[  649.830684][T11182] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  650.133723][T11182] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0
[  650.221469][T11182] CPU: 1 PID: 11182 Comm: syz.5.1825 Not tainted syzkaller #0
[  650.228979][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  650.239348][T11182] Call Trace:
[  650.242647][T11182]  <TASK>
[  650.245586][T11182]  dump_stack_lvl+0x188/0x250
[  650.250287][T11182]  ? show_regs_print_info+0x20/0x20
[  650.255503][T11182]  ? pagecache_get_page+0xbcf/0xf20
[  650.260710][T11182]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  650.266533][T11182]  ? unlock_page+0x17c/0x1f0
[  650.271134][T11182]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  650.276529][T11182]  f2fs_get_read_data_page+0x2c4/0x580
[  650.282182][T11182]  ? f2fs_get_block+0x2a0/0x2a0
[  650.287055][T11182]  ? __lock_acquire+0x7b50/0x7b50
[  650.292112][T11182]  f2fs_find_data_page+0x1c2/0x5d0
[  650.297243][T11182]  f2fs_readdir+0x4b3/0xd90
[  650.301797][T11182]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  650.307014][T11182]  ? mutex_lock_io_nested+0x60/0x60
[  650.312240][T11182]  ? end_current_label_crit_section+0x14b/0x170
[  650.318504][T11182]  ? iterate_dir+0x10d/0x550
[  650.323119][T11182]  ? down_read_killable+0x1ce/0x340
[  650.328333][T11182]  ? fsnotify_perm+0x254/0x560
[  650.333115][T11182]  iterate_dir+0x213/0x550
[  650.337543][T11182]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  650.342756][T11182]  __se_sys_getdents+0xf2/0x260
[  650.347614][T11182]  ? __x64_sys_getdents+0x80/0x80
[  650.352640][T11182]  ? fillonedir+0x4c0/0x4c0
[  650.357154][T11182]  ? lockdep_hardirqs_on+0x94/0x140
[  650.362368][T11182]  do_syscall_64+0x4c/0xa0
[  650.366791][T11182]  ? clear_bhb_loop+0x30/0x80
[  650.371474][T11182]  ? clear_bhb_loop+0x30/0x80
[  650.376161][T11182]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  650.382095][T11182] RIP: 0033:0x7f485d657159
[  650.386565][T11182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.406177][T11182] RSP: 002b:00007f485b8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  650.414610][T11182] RAX: ffffffffffffffda RBX: 00007f485d8defa0 RCX: 00007f485d657159
[  650.422592][T11182] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000004
[  650.430588][T11182] RBP: 00007f485d6ee024 R08: 0000000000000000 R09: 0000000000000000
[  650.438617][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  650.446604][T11182] R13: 00007f485d8df038 R14: 00007f485d8defa0 R15: 00007ffc0eaca5e8
[  650.454610][T11182]  </TASK>
[  652.434259][ T1108] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  653.564264][ T4228] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  653.734224][ T1108] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  653.777451][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  653.824345][ T4228] usb 6-1: Using ep0 maxpacket: 32
[  653.854162][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[  653.921727][ T1108] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  653.946697][ T4228] usb 6-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30
[  653.966558][ T4228] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  653.987055][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.998922][ T4228] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  654.015378][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0
[  654.042464][ T1108] usb 5-1: config 0 descriptor??
[  654.048600][ T4228] usb 6-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.00
[  654.059907][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.078813][T11234] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  654.091560][ T4228] usb 6-1: config 0 descriptor??
[  655.446671][ T1108] hid-thrustmaster 0003:044F:B65D.0008: ignoring exceeding usage max
[  655.471646][ T4228] input: HID 05ac:0304 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:0304.0009/input/input7
[  655.495795][ T1108] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x4
[  655.692793][ T1108] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  655.724768][ T4228] apple 0003:05AC:0304.0009: input,hidraw1: USB HID vd.8f Joystick [HID 05ac:0304] on usb-dummy_hcd.5-1/input0
[  655.756626][ T4228] usb 6-1: USB disconnect, device number 7
[  655.764120][ T1108] hid-thrustmaster 0003:044F:B65D.0008: setup data couldn't be sent
[  655.783956][    C0] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71
[  655.827720][ T1108] usb 5-1: USB disconnect, device number 13
[  655.907747][T11281] fido_id[11281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  656.007097][T11282] fido_id[11282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  656.460257][ T4228] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  656.660584][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'.
[  656.668632][ T1108] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  656.669983][T11304] netlink: 'syz.3.1873': attribute type 10 has an invalid length.
[  656.685350][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'.
[  656.824205][ T4228] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  656.838653][ T4228] usb 6-1: config 0 has no interface number 0
[  656.858448][ T4228] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  656.916027][ T1108] usb 5-1: Using ep0 maxpacket: 8
[  657.627062][ T4228] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  657.637120][ T1108] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  657.647579][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.657369][ T4228] usb 6-1: Product: syz
[  657.661998][ T4228] usb 6-1: Manufacturer: syz
[  657.668361][ T4228] usb 6-1: SerialNumber: syz
[  657.679592][ T4228] usb 6-1: config 0 descriptor??
[  657.785425][ T4228] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  657.804359][ T1108] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  657.848837][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.868759][ T1108] usb 5-1: Product: syz
[  657.873439][ T1108] usb 5-1: Manufacturer: syz
[  657.888546][ T1108] usb 5-1: SerialNumber: syz
[  657.916034][ T1108] usb 5-1: config 0 descriptor??
[  658.131674][ T9876] usb 6-1: USB disconnect, device number 8
[  658.241416][ T9876] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  658.241740][ T1108] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  658.259770][ T1108] usb 5-1: setting power ON
[  658.269952][ T1108] dvb-usb: bulk message failed: -22 (2/0)
[  658.311613][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  658.349197][ T1108] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  658.369541][ T1108] usb 5-1: media controller created
[  658.420591][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  658.553167][ T1108] usb 5-1: selecting invalid altsetting 6
[  658.560085][ T1108] usb 5-1: digital interface selection failed (-22)
[  658.567806][ T1108] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  659.587816][ T1108] usb 5-1: setting power OFF
[  659.595649][ T1108] dvb-usb: bulk message failed: -22 (2/0)
[  659.608957][ T1108] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  659.620096][ T1108] (NULL device *): no alternate interface
[  659.639817][T11359] loop5: detected capacity change from 0 to 256
[  659.698546][ T1108] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  659.701148][T11355] loop4: detected capacity change from 0 to 4096
[  659.731039][ T1108] usb 5-1: USB disconnect, device number 14
[  659.776924][T11359] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  659.884917][T11367] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  659.938758][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  659.938790][   T26] audit: type=1800 audit(1788281151.598:452): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1896" name="file2" dev="loop5" ino=1048646 res=0 errno=0
[  660.163085][T11372] loop4: detected capacity change from 0 to 1024
[  660.237981][   T26] audit: type=1800 audit(1788281151.898:453): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1904" name="idProduct" dev="configfs" ino=53419 res=0 errno=0
[  661.217280][T11398] jffs2: notice: (11398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  662.275181][T11423] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  662.306107][T11423] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  662.412663][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'.
[  662.427649][T11427] device hsr_slave_0 left promiscuous mode
[  662.470885][T11430] loop5: detected capacity change from 0 to 128
[  663.317863][T11457] loop5: detected capacity change from 0 to 128
[  663.370457][T11457] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  663.476757][T10793] Bluetooth: hci5: command 0x1003 tx timeout
[  663.486554][ T9667] Bluetooth: hci5: sending frame failed (-49)
[  663.517567][T11457] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  663.533992][T11457] ext2 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  664.314532][   T26] audit: type=1800 audit(1788281155.979:454): pid=11457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1938" name="file1" dev="loop5" ino=12 res=0 errno=0
[  665.551189][T10793] Bluetooth: hci5: command 0x1001 tx timeout
[  665.561382][ T9667] Bluetooth: hci5: sending frame failed (-49)
[  665.684622][T11476] loop5: detected capacity change from 0 to 32768
[  665.807037][T11476] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  665.846926][T11476] JBD2: Ignoring recovery information on journal
[  665.977490][T11476] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  666.143852][ T5787] ocfs2: Unmounting device (7,5) on (node local)
[  666.438503][T11491] loop5: detected capacity change from 0 to 1024
[  666.700233][T11491] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback.
[  667.623540][T10793] Bluetooth: hci5: command 0x1009 tx timeout
[  668.030540][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1959'.
[  668.040139][T11516] netlink: 'syz.3.1959': attribute type 10 has an invalid length.
[  668.048550][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1959'.
[  669.063358][ T4228] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  669.583537][ T4228] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  669.603519][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.612376][ T4228] usb 6-1: Product: syz
[  669.981343][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'.
[  669.990513][T11552] netlink: 'syz.1.1974': attribute type 10 has an invalid length.
[  669.998755][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1974'.
[  670.073137][ T4228] usb 6-1: Manufacturer: syz
[  670.078263][ T4228] usb 6-1: SerialNumber: syz
[  670.099097][ T4228] usb 6-1: config 0 descriptor??
[  670.181868][ T4228] ch341 6-1:0.0: ch341-uart converter detected
[  670.903487][ T4228] usb 6-1: failed to send control message: -71
[  670.915649][ T4228] ch341-uart: probe of ttyUSB0 failed with error -71
[  670.967955][ T4228] usb 6-1: USB disconnect, device number 9
[  671.002132][ T4228] ch341 6-1:0.0: device disconnected
[  671.509135][T11578] loop5: detected capacity change from 0 to 512
[  673.145540][T11595] loop4: detected capacity change from 0 to 512
[  673.246008][T11595] EXT4-fs (loop4): 1 truncate cleaned up
[  673.251859][T11595] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[  673.354157][T11595] EXT4-fs (loop4): shut down requested (1)
[  673.747447][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1989'.
[  673.756864][T11605] netlink: 'syz.5.1989': attribute type 10 has an invalid length.
[  673.764972][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1989'.
[  674.969442][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'.
[  674.978891][T11621] netlink: 'syz.3.1998': attribute type 10 has an invalid length.
[  674.986853][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'.
[  677.001199][T11647] tap0: tun_chr_ioctl cmd 1074025677
[  677.023480][T11647] tap0: linktype set to 805
[  677.046078][ T9885] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  677.214468][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'.
[  677.223906][T11651] netlink: 'syz.4.2010': attribute type 10 has an invalid length.
[  677.232097][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'.
[  677.244550][T11651] device geneve2 entered promiscuous mode
[  678.018318][ T9885] usb 6-1: Using ep0 maxpacket: 8
[  678.542779][ T9885] usb 6-1: unable to read config index 0 descriptor/all
[  678.551988][ T9885] usb 6-1: can't read configurations, error -71
[  678.801299][T11669] loop5: detected capacity change from 0 to 1024
[  678.888204][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'.
[  678.897650][T11673] netlink: 'syz.3.2018': attribute type 10 has an invalid length.
[  678.905626][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'.
[  679.327619][T10798] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  679.602970][T10798] usb 5-1: Using ep0 maxpacket: 8
[  680.165079][T10798] usb 5-1: config 0 interface 0 has no altsetting 0
[  680.182058][T10798] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  680.205425][T10798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.244348][T10798] usb 5-1: config 0 descriptor??
[  680.280195][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'.
[  680.289489][T11685] netlink: 'syz.3.2023': attribute type 10 has an invalid length.
[  680.297603][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2023'.
[  681.806936][T10798] usb 5-1: string descriptor 0 read error: -71
[  681.837783][T10798] uclogic 0003:5543:3031.000A: failed retrieving string descriptor #200: -71
[  681.892584][T10798] uclogic 0003:5543:3031.000A: failed retrieving pen parameters: -71
[  681.915728][T10798] uclogic 0003:5543:3031.000A: failed probing pen v2 parameters: -71
[  682.197783][T10798] uclogic 0003:5543:3031.000A: failed probing parameters: -71
[  682.206987][T10798] uclogic: probe of 0003:5543:3031.000A failed with error -71
[  682.226583][T10798] usb 5-1: USB disconnect, device number 15
[  683.125823][T11734] loop4: detected capacity change from 0 to 16
[  683.142420][T11736] loop5: detected capacity change from 0 to 2048
[  684.094301][T11734] erofs: (device loop4): mounted with root inode @ nid 36.
[  684.219090][T11734] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89
[  684.246937][T11734] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89
[  684.288275][T11734] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89
[  684.305258][T11736] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  684.329778][T11736] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  684.349438][   T26] audit: type=1800 audit(1788281176.000:455): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2039" name="file2" dev="loop4" ino=89 res=0 errno=0
[  684.470956][T11736] fs-verity: sha512 using implementation "sha512-avx2"
[  684.517258][T11736] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2040: bg 0: block 321: padding at end of block bitmap is not set
[  684.563723][T11736] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -28
[  684.852725][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'.
[  684.861779][T11763] netlink: 'syz.4.2053': attribute type 10 has an invalid length.
[  684.870071][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'.
[  685.946075][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  685.953048][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  686.497479][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  686.507274][T11800] netlink: 'syz.3.2066': attribute type 10 has an invalid length.
[  686.515240][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'.
[  687.839655][T11798] loop4: detected capacity change from 0 to 1024
[  688.115145][T11812] loop5: detected capacity change from 0 to 1024
[  688.746980][ T1277] hfsplus: b-tree write err: -5, ino 3
[  689.428348][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2079'.
[  689.438362][T11840] netlink: 'syz.5.2079': attribute type 10 has an invalid length.
[  689.446339][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2079'.
[  690.617583][T11866] loop5: detected capacity change from 0 to 128
[  690.807468][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'.
[  690.817336][T11876] netlink: 'syz.3.2093': attribute type 10 has an invalid length.
[  690.826479][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2093'.
[  690.891425][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2092'.
[  690.998087][T11883] loop5: detected capacity change from 0 to 2048
[  691.113545][T11883] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  691.133642][T11883] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  692.548171][T11900] loop4: detected capacity change from 0 to 512
[  692.597583][T11900] EXT4-fs (loop4): Ignoring removed nobh option
[  692.655368][T11900] EXT4-fs (loop4): Ignoring removed orlov option
[  692.689057][T11900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  692.746094][T11900] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.2101: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  692.922875][T11900] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.2101: couldn't read orphan inode 16 (err -117)
[  693.146618][T11900] EXT4-fs (loop4): 1 orphan inode deleted
[  693.168211][T11900] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none.
[  694.191891][ T4228] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  694.618742][T11940] 
[  694.621115][T11940] ======================================================
[  694.628125][T11940] WARNING: possible circular locking dependency detected
[  694.635206][T11940] syzkaller #0 Not tainted
[  694.639636][T11940] ------------------------------------------------------
[  694.646644][T11940] syz.4.2115/11940 is trying to acquire lock:
[  694.652706][T11940] ffffffff8cece6b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980
[  694.662462][T11940] 
[  694.662462][T11940] but task is already holding lock:
[  694.669818][T11940] ffff88804e8e1590 (&sb->s_type->i_mutex_key#35){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410
[  694.679489][T11940] 
[  694.679489][T11940] which lock already depends on the new lock.
[  694.679489][T11940] 
[  694.689888][T11940] 
[  694.689888][T11940] the existing dependency chain (in reverse order) is:
[  694.699078][T11940] 
[  694.699078][T11940] -> #2 (&sb->s_type->i_mutex_key#35){++++}-{3:3}:
[  694.707869][T11940]        down_write+0x38/0x60
[  694.712559][T11940]        configfs_depend_item_unlocked+0x14f/0x430
[  694.719068][T11940]        usbg_make_tpg+0x1f3/0x580
[  694.724189][T11940]        target_fabric_make_tpg+0xa0/0x6d0
[  694.730000][T11940]        configfs_mkdir+0x511/0x9e0
[  694.735221][T11940]        vfs_mkdir+0x386/0x570
[  694.739989][T11940]        do_mkdirat+0x1dd/0x5c0
[  694.744843][T11940]        __x64_sys_mkdir+0x6a/0x80
[  694.750038][T11940]        do_syscall_64+0x4c/0xa0
[  694.754980][T11940]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  694.761393][T11940] 
[  694.761393][T11940] -> #1 (&opts->dep_lock){+.+.}-{3:3}:
[  694.769394][T11940]        __mutex_lock_common+0x1e5/0x2400
[  694.775134][T11940]        mutex_lock_nested+0x17/0x20
[  694.780773][T11940]        tcm_set_name+0x26/0x90
[  694.785635][T11940]        function_make+0x195/0x350
[  694.790759][T11940]        configfs_mkdir+0x511/0x9e0
[  694.796144][T11940]        vfs_mkdir+0x386/0x570
[  694.800923][T11940]        do_mkdirat+0x1dd/0x5c0
[  694.805790][T11940]        __x64_sys_mkdir+0x6a/0x80
[  694.810914][T11940]        do_syscall_64+0x4c/0xa0
[  694.815952][T11940]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  694.822385][T11940] 
[  694.822385][T11940] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  694.830653][T11940]        __lock_acquire+0x2c66/0x7b50
[  694.836056][T11940]        lock_acquire+0x19e/0x400
[  694.841102][T11940]        __mutex_lock_common+0x1e5/0x2400
[  694.846836][T11940]        mutex_lock_nested+0x17/0x20
[  694.852137][T11940]        configfs_rmdir+0x638/0x980
[  694.857367][T11940]        vfs_rmdir+0x19d/0x410
[  694.862155][T11940]        do_rmdir+0x27f/0x710
[  694.866845][T11940]        __x64_sys_rmdir+0x45/0x50
[  694.871977][T11940]        do_syscall_64+0x4c/0xa0
[  694.877011][T11940]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  694.883438][T11940] 
[  694.883438][T11940] other info that might help us debug this:
[  694.883438][T11940] 
[  694.893679][T11940] Chain exists of:
[  694.893679][T11940]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#35
[  694.893679][T11940] 
[  694.908570][T11940]  Possible unsafe locking scenario:
[  694.908570][T11940] 
[  694.916028][T11940]        CPU0                    CPU1
[  694.921394][T11940]        ----                    ----
[  694.926844][T11940]   lock(&sb->s_type->i_mutex_key#35);
[  694.932323][T11940]                                lock(&opts->dep_lock);
[  694.939271][T11940]                                lock(&sb->s_type->i_mutex_key#35);
[  694.947366][T11940]   lock(gadget_subsys.su_mutex);
[  694.952411][T11940] 
[  694.952411][T11940]  *** DEADLOCK ***
[  694.952411][T11940] 
[  694.960562][T11940] 3 locks held by syz.4.2115/11940:
[  694.965777][T11940]  #0: ffff88801ddf4460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  694.975048][T11940]  #1: ffff88805f0d9080 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710
[  694.985875][T11940]  #2: ffff88804e8e1590 (&sb->s_type->i_mutex_key#35){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410
[  694.995988][T11940] 
[  694.995988][T11940] stack backtrace:
[  695.001872][T11940] CPU: 1 PID: 11940 Comm: syz.4.2115 Not tainted syzkaller #0
[  695.009330][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  695.019389][T11940] Call Trace:
[  695.022671][T11940]  <TASK>
[  695.025599][T11940]  dump_stack_lvl+0x188/0x250
[  695.030286][T11940]  ? load_image+0x410/0x410
[  695.034787][T11940]  ? show_regs_print_info+0x20/0x20
[  695.039997][T11940]  ? print_circular_bug+0x12b/0x1a0
[  695.041768][ T4228] usb 6-1: config 0 has an invalid interface number: 4 but max is 0
[  695.045281][T11940]  check_noncircular+0x296/0x330
[  695.045311][T11940]  ? add_chain_block+0x9b0/0x9b0
[  695.045326][T11940]  ? lockdep_lock+0xf1/0x1f0
[  695.045347][T11940]  ? __lock_acquire+0x2844/0x7b50
[  695.045366][T11940]  ? mark_lock+0x94/0x320
[  695.045380][T11940]  ? _find_first_zero_bit+0xd1/0xf0
[  695.045400][T11940]  __lock_acquire+0x2c66/0x7b50
[  695.045428][T11940]  ? __lock_acquire+0x13dc/0x7b50
[  695.045444][T11940]  ? verify_lock_unused+0x140/0x140
[  695.045464][T11940]  ? __lock_acquire+0x1305/0x7b50
[  695.054351][ T4228] usb 6-1: config 0 has no interface number 0
[  695.058341][T11940]  lock_acquire+0x19e/0x400
[  695.058370][T11940]  ? configfs_rmdir+0x638/0x980
[  695.058391][T11940]  ? __might_sleep+0xf0/0xf0
[  695.058410][T11940]  ? read_lock_is_recursive+0x10/0x10
[  695.058433][T11940]  __mutex_lock_common+0x1e5/0x2400
[  695.058456][T11940]  ? configfs_rmdir+0x638/0x980
[  695.058476][T11940]  ? configfs_rmdir+0x638/0x980
[  695.058491][T11940]  ? __rwlock_init+0x140/0x140
[  695.058507][T11940]  ? rcu_lock_release+0x5/0x20
[  695.058524][T11940]  ? mutex_lock_io_nested+0x60/0x60
[  695.072598][ T4228] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  695.072998][T11940]  ? _raw_spin_unlock+0x24/0x40
[  695.073026][T11940]  mutex_lock_nested+0x17/0x20
[  695.077585][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.082511][T11940]  configfs_rmdir+0x638/0x980
[  695.082544][T11940]  vfs_rmdir+0x19d/0x410
[  695.082563][T11940]  do_rmdir+0x27f/0x710
[  695.082582][T11940]  ? d_delete_notify+0x150/0x150
[  695.082603][T11940]  ? getname_flags+0x1f9/0x4f0
[  695.082621][T11940]  __x64_sys_rmdir+0x45/0x50
[  695.082638][T11940]  do_syscall_64+0x4c/0xa0
[  695.082655][T11940]  ? clear_bhb_loop+0x30/0x80
[  695.082674][T11940]  ? clear_bhb_loop+0x30/0x80
[  695.082691][T11940]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  695.082709][T11940] RIP: 0033:0x7f7774579159
[  695.082727][T11940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.082741][T11940] RSP: 002b:00007f77727d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  695.082758][T11940] RAX: ffffffffffffffda RBX: 00007f7774800fa0 RCX: 00007f7774579159
[  695.082769][T11940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[  695.082779][T11940] RBP: 00007f7774610024 R08: 0000000000000000 R09: 0000000000000000
[  695.082790][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  695.103613][ T4228] usb 6-1: config 0 descriptor??
[  695.108831][T11940] R13: 00007f7774801038 R14: 00007f7774800fa0 R15: 00007fffb6449068
[  695.108860][T11940]  </TASK>
[  695.404288][ T4228] ums-realtek 6-1:0.4: USB Mass Storage device detected
[  695.618851][T10793] usb 6-1: USB disconnect, device number 12
[  696.981648][  T573] wlan1: Trigger new scan to find an IBSS to join
[  700.021527][ T1277] wlan1: Trigger new scan to find an IBSS to join
[  703.061404][  T573] wlan1: Trigger new scan to find an IBSS to join
[  703.941779][ T4368] wlan1: Creating new IBSS network, BSSID 92:c7:87:d7:f1:b8