last executing test programs:

1m24.216811416s ago: executing program 3 (id=1530):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000c00)={[0xff, 0x48, 0xc0000, 0x6, 0x4, 0x1, 0x2, 0x6, 0x3, 0xffffffff, 0x7fffffff, 0x0, 0xdf1, 0x4814ded8, 0x6, 0x7, 0x101, 0x5, 0x10000, 0x48000000, 0x3e2, 0x5, 0x5, 0x5, 0x7a, 0x2, 0x0, 0x401, 0x2, 0x2279, 0x2, 0x100, 0x2, 0x2, 0x7, 0xfffffff9, 0x4, 0x7, 0x7ff, 0x9, 0xfff, 0x8, 0x200, 0x3ff, 0x8d8d, 0x400, 0x4, 0x39f, 0x81, 0x4, 0x9b3, 0x5, 0x5, 0x6, 0xffff1a7f, 0xbc, 0x7ff, 0x9, 0x2, 0xfffffffb, 0x3, 0x190d, 0xfffffffa, 0xa8c5, 0x80, 0x80000000, 0xffffff01, 0x7, 0x4, 0xa, 0xe, 0x480, 0x6, 0x9, 0x4, 0x9, 0x3, 0x7, 0xef, 0x7fff, 0x9, 0x0, 0x400, 0x5, 0x9, 0x9, 0x7ff, 0x65, 0x2, 0xfffffffe, 0x4, 0x1, 0xfffffff7, 0x74e, 0x1, 0x80000000, 0x2, 0x3, 0x1, 0x6, 0x7, 0x9, 0x2, 0x9, 0x1, 0x7f, 0x1000, 0x5, 0x5, 0x7, 0x5, 0xfffffffa, 0x1, 0x2, 0x1000, 0x8, 0x2, 0x4, 0xf, 0x37, 0x2, 0x2, 0x4ae15beb, 0x80, 0x1, 0x3, 0x29, 0x6, 0x18, 0x2, 0xb97a, 0xffaa, 0x200, 0x105b, 0x5, 0x24000000, 0x0, 0xe56, 0x1, 0x1, 0x1, 0xb1, 0xff, 0x0, 0x3, 0x9, 0x1, 0x2, 0xfffff51e, 0x3, 0x5, 0x9, 0x3, 0x4, 0x8, 0xffff, 0xb, 0x93, 0x8, 0xa59b, 0x2, 0x8, 0x9, 0x2, 0x5, 0x4, 0x2, 0x0, 0x8, 0xaf9e, 0x10000, 0x3, 0x3, 0x300000, 0x3, 0x637, 0x4, 0x0, 0x3, 0x7, 0xb8b, 0x8b04, 0x3, 0x4, 0x0, 0x68a, 0x80000000, 0x4a7, 0xec6, 0x149, 0x4, 0xa, 0x2, 0x44, 0x4, 0xe, 0x80, 0x9c9, 0x0, 0xfffffffe, 0x0, 0xa, 0x80000001, 0xa, 0x2a94893f, 0x5e, 0xf, 0x0, 0x74, 0x3, 0x6, 0x7, 0x8000, 0x6, 0x4, 0xfffffffe, 0x7fff, 0xffff4ea7, 0xee, 0x0, 0x400, 0x0, 0x10000, 0x0, 0x81, 0x255cdff, 0x7ff4, 0x5, 0x8, 0x1d51, 0x23, 0x1, 0x3, 0x0, 0x8, 0x2, 0x1, 0xfd, 0x3, 0x2, 0x7, 0x0, 0x7fffffff, 0x5, 0x8, 0x7ff, 0x7, 0x8000, 0x5, 0x7, 0x7, 0xfffffff7, 0xe00000, 0x19d7, 0x5, 0x8, 0x401, 0x3, 0xffffff49, 0xd, 0x8, 0x2, 0x9, 0x6, 0x8, 0xf, 0x8001, 0x7, 0x9, 0x8, 0x8000, 0x3, 0x7fffffff, 0x3, 0x81, 0x4, 0xfff, 0x4, 0x8, 0x7, 0x3, 0x80000001, 0x8, 0x1, 0x10001, 0x4, 0x7f, 0x8a56, 0x800, 0x83, 0x10001, 0x999d, 0xd25f, 0x9, 0x3, 0x7, 0x9, 0x6, 0xff, 0xa, 0x6, 0xee0c, 0x6b8f, 0x5, 0x59, 0x2, 0x5, 0x5, 0xf, 0x7ff, 0x3, 0x0, 0x6, 0x0, 0xfffffc00, 0x6, 0x7, 0x400, 0x81, 0x465, 0x1, 0x6, 0x80, 0x5, 0x60, 0x8000, 0x81, 0x740e, 0x2, 0x2, 0x73, 0x9, 0x80, 0x6, 0x2, 0x40, 0xfffffff0, 0x8001, 0xd1, 0x8de9, 0x2, 0x5, 0x1, 0x100, 0x5, 0x0, 0xd, 0xf, 0x6, 0x5, 0x101, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0xfffffff4, 0x0, 0x3dea, 0x8, 0x400, 0x3f, 0x715, 0x7fd, 0x4, 0xec, 0xd, 0x3ff, 0x1, 0xf, 0xfffffff7, 0x3c, 0x3, 0x401, 0xad12, 0xc, 0xd8, 0xffffffff, 0x2d, 0x6, 0x4, 0x68a, 0x2, 0x100, 0x9, 0x2a61, 0x7, 0x1, 0x3ff000, 0x400, 0x1, 0x2, 0x400, 0x1fc0, 0x5, 0x6, 0xb, 0x7, 0x3, 0x6a4c, 0xe, 0x86, 0x7, 0x53f7e108, 0xfffffffc, 0x4, 0x0, 0x3, 0x7ff, 0x2, 0x5, 0x2, 0x5, 0xffffffff, 0x0, 0x5, 0x4, 0x1, 0x9, 0x5, 0x0, 0x2, 0xf, 0x1, 0x7fff, 0x9, 0x3900, 0x200, 0xebf, 0x5, 0x7, 0x4, 0x0, 0x4, 0x5, 0x2, 0xf8d, 0x9, 0x2, 0x9, 0x2, 0x6, 0x0, 0x1, 0x9, 0x7, 0x5, 0x8001, 0x8, 0x6, 0x5, 0x1, 0x0, 0x394, 0x78b5, 0x100, 0xde, 0x2, 0x3ff, 0x59b3, 0x9, 0xffffffff, 0x3, 0xd9, 0x1, 0x8000000, 0x98, 0x7, 0x8, 0xffffff84, 0x401, 0x8, 0x8, 0x6, 0x3, 0x7fff, 0x4, 0x8, 0x9e67, 0x6, 0x9, 0x800, 0x0, 0xa, 0x6, 0x6, 0x1, 0x529, 0x3, 0x8a000000, 0x7, 0xd, 0x1, 0xe, 0x7fff, 0x7, 0x0, 0xfff, 0xfff, 0xffff4b15, 0x9, 0x5, 0x0, 0xfffff7ff, 0x2, 0x8, 0x0, 0x41, 0xfffffff8, 0x4, 0x2, 0x800, 0xffffff0d, 0x3, 0x4, 0x10001, 0x5, 0x6, 0xffffffff, 0x6, 0xfffffff7, 0x1, 0x3ff, 0xff, 0x9, 0x2, 0x3, 0x4, 0xf, 0x9, 0x6, 0x0, 0x7, 0x27a, 0xc, 0x7, 0x0, 0x9, 0x3, 0x1, 0x8, 0xffffff81, 0x0, 0x8, 0x3, 0x6, 0x790d, 0x0, 0x400, 0xc2, 0x1, 0x4, 0x4, 0x10001, 0x1, 0x1000, 0x10001, 0xffff0000, 0xa5, 0x5, 0x8, 0x2, 0x80, 0x9, 0x7, 0x72, 0x8, 0x745cf293, 0x6c78, 0x6, 0x5, 0x80000001, 0xc, 0x4, 0x101, 0x2, 0x7, 0x2, 0xffffffff, 0x1, 0x100, 0x0, 0x8, 0x5, 0x8, 0x401, 0x3c3, 0x8001, 0xc, 0x2, 0x9, 0x8, 0x1000, 0xd, 0x8, 0xe, 0xffffffff, 0x0, 0x4, 0x1000, 0x5, 0xfffffff8, 0x7ff, 0xfffff754, 0xa620, 0x101, 0x3, 0xfffffffb, 0x3, 0x749, 0xd, 0x4, 0x0, 0x4, 0x6, 0x7ef751c4, 0x1, 0x101, 0xce9b, 0x0, 0x4, 0x3, 0x45, 0x14, 0xfffffffc, 0x0, 0x78, 0xffffffff, 0x2, 0x4, 0x2, 0x80000001, 0x1e, 0x6, 0x4, 0x6, 0x4, 0x7, 0xbed8, 0x7, 0x9, 0xa, 0x4, 0x9, 0x3, 0x8, 0x92, 0xfffffffa, 0x3, 0x917b, 0x7ff, 0x6, 0x8, 0x0, 0x4, 0x5, 0x40, 0x5, 0x4, 0xa, 0x1, 0x1, 0x1000, 0x7f, 0x7, 0x6, 0x7, 0x3f, 0xe44c, 0x2, 0x1, 0x81, 0xfffffadb, 0xe, 0x1000, 0x8, 0x6, 0x0, 0x9, 0x7fff, 0x3, 0x7, 0x8, 0x4, 0x1, 0x2, 0x5, 0x0, 0x5, 0x5, 0xc, 0x2217, 0x7, 0x1, 0x10, 0x9, 0x6, 0x1, 0xf1, 0x10000, 0x5, 0xffff, 0x5, 0x0, 0x0, 0x7fffffff, 0xa, 0x0, 0x4063, 0x9, 0x1, 0x2, 0x0, 0x0, 0x5, 0xf, 0x101, 0x6, 0x7b, 0xe, 0x8, 0xeac, 0x6, 0x200, 0x9f, 0x3ff, 0x9, 0x6, 0x2, 0x3, 0x1, 0x200, 0x9, 0x852, 0x0, 0x1, 0x0, 0x100, 0x0, 0xfffffff0, 0x3, 0x800, 0x1, 0x0, 0x401, 0x1ff, 0x7, 0x1, 0x0, 0x3, 0x80000001, 0x1, 0x5, 0x5, 0x5, 0xffff, 0x2, 0x6, 0xffffff00, 0x5, 0x1, 0x5, 0x0, 0x1, 0x7, 0x7, 0x7, 0x1, 0x100, 0x1, 0x7, 0x2, 0x8, 0x254978be, 0x1000, 0x3, 0x3, 0x1000, 0x4, 0x3, 0x101, 0x7ff, 0x1, 0x0, 0x9, 0x0, 0x80000000, 0x10, 0x8, 0xca4d, 0x9, 0x7, 0x8001, 0xd27, 0x7, 0xc, 0x5, 0x1, 0x7, 0x7025deb4, 0xbf7, 0xa, 0x2ca, 0x4, 0x8001, 0x5, 0x3, 0x0, 0x7c1, 0x2, 0x1, 0x9, 0x252, 0x9e, 0x2, 0x401, 0x5, 0x10001, 0xa, 0x2, 0x10009, 0x9, 0x86, 0xb7fa0dca, 0xfffffff9, 0x40, 0x800, 0x3, 0x1, 0x2, 0x9, 0x1ff, 0x6, 0xd, 0x1, 0x1, 0x8, 0x91e8, 0x0, 0x2, 0x3bd3, 0xb, 0x101, 0x8, 0x6, 0x9, 0xff, 0xcd1, 0x10, 0x400, 0x800, 0x6, 0x4, 0x5, 0x3, 0xfff, 0x2, 0x400, 0xfffffffd, 0x8, 0x2, 0x3, 0x9, 0x5, 0xd17, 0x9af, 0xffff, 0x7, 0x8000, 0xffffffff, 0x3, 0x1, 0x4, 0xe, 0x8f5b, 0x7, 0x5, 0x7f, 0x10001, 0x7ac2, 0xffffffff, 0x9, 0x401, 0x6ae51f7, 0x6, 0x3, 0x7, 0x8, 0x8, 0x8, 0x4, 0x9, 0x4, 0x6, 0xe, 0x1000000, 0x1, 0x6, 0x8, 0x6f9, 0x4, 0x67e1, 0x9f7, 0xa206, 0xa, 0x400, 0x4de75aa, 0x7, 0x6, 0xd, 0x7, 0x2, 0x2a4, 0x2c76b8f, 0x3, 0x1, 0x4f8d8151, 0x1, 0xf, 0x3, 0x401, 0x8, 0xa282, 0x2, 0xf8, 0x8d1a, 0x100, 0x6, 0x7, 0x3, 0xec1, 0x4, 0x101, 0x2, 0xffff, 0xfffffff4, 0x8, 0x4c, 0x100, 0x9, 0x3, 0xcb, 0xd, 0xa, 0x8888, 0x101, 0x52a, 0x9, 0x6, 0x3, 0xd, 0xffff0001, 0x7c7, 0x0, 0x3, 0x9, 0x1, 0x7, 0x5, 0x6, 0x9, 0x3, 0x5, 0x7f, 0x9, 0x9d1, 0x3, 0x4, 0x0, 0x1, 0xdb, 0x8, 0x6, 0x6, 0x2, 0xffff, 0x9, 0x3, 0x2, 0xa54d, 0x7b57, 0x6, 0x0, 0x0, 0x7, 0x6, 0x3ff, 0xa12, 0x6, 0x4, 0x5, 0x1, 0x5, 0x7fffffff, 0x7f, 0x3, 0x80000000, 0x5, 0xffffffc0, 0x8, 0x1, 0x1, 0x2, 0x0, 0x607dea20, 0x3, 0x9, 0x1, 0x0, 0xfffffffd, 0x5, 0x0, 0x80, 0x1, 0x7, 0x5, 0x2, 0x1, 0xa69, 0x5, 0x10000, 0xfd, 0xc6f4]})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x40000, 0x0, 0x0, 'queue0\x00', 0xffffffff})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

1m23.986596271s ago: executing program 3 (id=1533):
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40)

1m23.506868243s ago: executing program 3 (id=1536):
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="20161a000000e09901"], 0x0, 0x0})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0xc)

1m21.398290243s ago: executing program 3 (id=1561):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m20.881037416s ago: executing program 3 (id=1566):
r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000040)=r0, 0x12)

1m20.474100885s ago: executing program 1 (id=1571):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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")
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0x400)

1m20.324091799s ago: executing program 3 (id=1572):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x13, 0x69, "48634320151db1f8aedea3d7c16866d165bb7d54fe7ca0a67cf6b0f719fed5f1e9fec14d50b78d09fecd93ad0ade835475c0d50bb321e40f22b6e743b113031b256c196ee50ef91769ae2a8b016458c039198e3de219bee74b90b9a3d9123cc7f69141ecdf6defa676"}, 0x0, 0x0, 0x0, &(0x7f0000000440)})

1m19.8714264s ago: executing program 32 (id=1572):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x13, 0x69, "48634320151db1f8aedea3d7c16866d165bb7d54fe7ca0a67cf6b0f719fed5f1e9fec14d50b78d09fecd93ad0ade835475c0d50bb321e40f22b6e743b113031b256c196ee50ef91769ae2a8b016458c039198e3de219bee74b90b9a3d9123cc7f69141ecdf6defa676"}, 0x0, 0x0, 0x0, &(0x7f0000000440)})

1m19.8666983s ago: executing program 1 (id=1576):
r0 = epoll_create1(0x80000)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x8, "008100450494621b0600000000e0120000000500", <r2=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r2, 0x6242}], 0x1, 0x7f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x10000018})

1m19.614514105s ago: executing program 1 (id=1579):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0)

1m19.510643778s ago: executing program 1 (id=1580):
syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f0000000340)='./bus\x00', 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x6}]}, 0x54, 0x3)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m18.495718382s ago: executing program 1 (id=1585):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2603, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @local}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e22, @multicast1}, 'syzkaller0\x00'})

1m17.30409944s ago: executing program 1 (id=1594):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

1m17.303236381s ago: executing program 2 (id=1595):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x10000000, 0x1, 0x0, r2, 0x0, 0x0, 0x8000000000000000, 0x0, 0x3, r0}])

1m16.8960442s ago: executing program 33 (id=1594):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

1m16.849136041s ago: executing program 2 (id=1597):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7f, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfc}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, &(0x7f0000000100)=0x8)

1m16.706640225s ago: executing program 2 (id=1598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

1m16.270586635s ago: executing program 2 (id=1599):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m15.880730615s ago: executing program 2 (id=1601):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES32=r1, @ANYRESOCT=r0], 0x0)

1m14.865221569s ago: executing program 2 (id=1605):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)

1m14.545120016s ago: executing program 34 (id=1605):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)

53.38140344s ago: executing program 6 (id=1663):
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0xffff, r1, 0x0}])
syz_clone(0x40900100, 0x0, 0x0, 0x0, 0x0, 0x0)

52.603763728s ago: executing program 6 (id=1668):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000005c0), 0x400, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

52.384676753s ago: executing program 6 (id=1670):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={[{@lazytime}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x9b, 0x4fc, &(0x7f0000000140)="$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")
write(r0, &(0x7f00000002c0)='0', 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x22c0, 0x0)

51.309234149s ago: executing program 6 (id=1680):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
setxattr$incfs_metadata(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x3)

50.759506782s ago: executing program 6 (id=1687):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)

50.345215032s ago: executing program 6 (id=1689):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x6, 0x2c57, 0xfffd, 0x8001}, 'syz1\x00', 0xb})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x6e)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

49.924879342s ago: executing program 35 (id=1689):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x6, 0x2c57, 0xfffd, 0x8001}, 'syz1\x00', 0xb})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x6e)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

9.042096945s ago: executing program 0 (id=1931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073017a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40d0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000000a0a010800000800000000000a0000010900010073797a3100000000090002"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44)

8.889247888s ago: executing program 0 (id=1933):
syz_usb_connect(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xdd, 0x46, 0x81, 0x20, 0x424, 0x9905, 0x17da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x90, 0x2, "", [{{0x9, 0x4, 0x15, 0xe, 0x2, 0xda, 0x53, 0x5f, 0x3, [], [{{0x9, 0x5, 0xc, 0x10, 0x10, 0xe}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0x1, 0x9}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7.276165307s ago: executing program 0 (id=1942):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

6.092552285s ago: executing program 7 (id=1953):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020)

5.189730796s ago: executing program 0 (id=1959):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$eJzs3M1vFGUYAPBnptsvWmkxRoWY2MSgRuNSKMGEE3g2aiIHj9R2S5ouH7Y1sQ2Hgnf1YIwHEsOfYOJdLp5MPOBB0X+AGIkhegEOa2Y/SmW7Sy27O6X8fsm787777s7zPDuw806y0wCeWBPZQxqxPyJOJxFj9efTiBio9oYi1mqvu3v74kzWkqhU3v8riSQi7ty+ONPYV1LfjtQHQxFx/a0knv60Oe7SyurCdLlcWqyPDy2fvXBoaWX1jfmz02dKZ0rnjk69eXTq2NRUB2u9eeHDr1/4+Z2XL1/9bPLdr/b+mMSJGK3PbayjUyZiYv0zyfTXt4WImO50sJz01evZWGdSyDEhAADaSjes4Z6NseiL+4u3sfjhl1yTAwAAADqi0hdRAQAAAHa5xPU/AAAA7HKN3wHcuX1xptHy/UVCb906GRHjtfob9zfXZgqxVt0OVe/b3fN3Ehtva01qb3tkE1mk734qZS26dB9yO2uXIuL5zY5/Uq1/vHoXd3P9aURMdiD+xAPjx6n+Ex2In3f9ADyZrp2snciaz3/p+vonNjn/FTY5d21H3ue/xvrvbtP67379fS3Wf+9tMcaBe69dbzW3cf33wee/zWbxs+0jFfU/3LoUcaCwWf3Jev1Ji/pPbzHGyMzNK63msvqzehut1/VXrkYcrK7mmutvSNr9faJDc/Pl0mTtcZP9rxxrH3/j8c9aFr9xLdAL2fHfE9s7/he2GGP8uT/3t5p7eP3pHwPJqWpvoP7MJ9PLy4uHIwaSt5ufP9I+l8ZrGvvI6n/1pfb//zerP/tOWKt/Dtm/nkv1bTa+/EDMkYNHvt1+/d2V1T+7zeP/xRZjfPP9lY9azeVdPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPhzQiRiNJi+v9NC0WI0Yi4pnYk5bPLy2/Pnf+43Oz2VzEePSnc/Pl0mREjNXGSTY+XO3fHx95YDwVEfsi4sux4eq4OHO+PJt38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwbiYjRSNJiRKQR8c9YmhaLeWcFAAAAdNx43gkAAAAAXef6HwAAAHa/puv/wn9GQ73MBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF1p34vXbiQRsXZ8uNoyA/W5/lwzA7ot3fY7K5WOJgL0XF/eCQC5KWzoVyrO6fAkcY0PJA+ZH6pvf2+aGexKPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsTK/sv3YjiYi148PVlhmoz/XnmhnQbWneCQC56Ws3mfQuD6D3CnknAOTGNT5QW+rfq9Q0zw+1fOdgN9MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIcZrbYkLUZEWu2nabEY8VREjEd/MjdfLk1GxN6I+HWsfzAbH847aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpuaWV1YbpcLi3qbLdz71TEDkhDZ2d1hqPrIQa7WUXe30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORhaWV1YbpcLi0u5Z0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLelldWF6XK5tNjFTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQn38DAAD//yk3EKU=")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

5.145288177s ago: executing program 7 (id=1960):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42)
syz_usb_disconnect(r0)
r2 = dup2(r1, r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)

4.1918791s ago: executing program 0 (id=1967):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

3.704569841s ago: executing program 4 (id=1971):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0x80000001, 0x4)
write(r0, &(0x7f0000000000)="08001800000020a3", 0x8)
recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0)

3.684433402s ago: executing program 0 (id=1972):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
write$char_usb(r1, &(0x7f00000003c0)='0', 0x1)

3.376860839s ago: executing program 36 (id=1972):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
write$char_usb(r1, &(0x7f00000003c0)='0', 0x1)

3.370741429s ago: executing program 4 (id=1974):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x80000000)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4)
ppoll(&(0x7f0000000340)=[{r0, 0x5082}], 0x1, 0x0, 0x0, 0x1a)

3.279906032s ago: executing program 4 (id=1975):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100003801000000000000000000b484589adec8e1c35698f5c92c8f")
ioctl(r0, 0xc138fd09, &(0x7f0000000000))

3.105821206s ago: executing program 7 (id=1976):
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1})
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

3.054731887s ago: executing program 4 (id=1978):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.731416625s ago: executing program 7 (id=1980):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x348, 0x0, 0x160, 0xfeffffff, 0xb8, 0xb8, 0x2b0, 0x2b0, 0xffffffff, 0x2b0, 0x2b0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv4=@loopback, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, @gre_key, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @broadcast, @multicast2, @icmp_id=0x66, @icmp_id=0x65}}}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr=0x64010100, @icmp_id=0x67, @icmp_id=0x66}}}}, {{@ip={@private=0xa010102, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1d, 0x18, 0xf63, 0x101, 0x0, 0x0, "05010902a10105091901290315002501950375018102950175058103c0"}}, 0x135)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x0, 0x6a4, &(0x7f0000002380)="$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")
write$UHID_INPUT2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x1e)

2.433781692s ago: executing program 5 (id=1981):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)

1.983667792s ago: executing program 7 (id=1982):
r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N")
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4a47c, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES32, @ANYRESHEX, @ANYRES16=r0, @ANYRES64, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES32, @ANYRES16], 0x5, 0x0, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202000, 0x0)
renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)

1.841732146s ago: executing program 5 (id=1983):
r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000014c0)=@ublk_io_fetch_sqe={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x1, 0xd25, 0x0, 0x0}})
r4 = eventfd2(0x1, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r4, 0x1)
io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0)

1.632389891s ago: executing program 7 (id=1984):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)

1.597751591s ago: executing program 5 (id=1985):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80)
setfsuid(0xee00)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x10, @desc3})

1.068297634s ago: executing program 5 (id=1986):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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")
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500000000000190780a010101ac1414"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

796.679961ms ago: executing program 4 (id=1987):
syz_usb_connect(0x0, 0x39, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x400448c9, 0x0)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17)

346.531841ms ago: executing program 5 (id=1988):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

9.770889ms ago: executing program 4 (id=1989):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000750000001400040073797a6b616c6c65723000000000000008000500070000000a00180003030303030300001c00e7"], 0x98}, 0x1, 0x0, 0x0, 0x91}, 0x24004884)

0s ago: executing program 5 (id=1990):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

kernel console output (not intermixed with test programs):

  250.465851][T10020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  250.712913][T10028] loop1: detected capacity change from 0 to 2048
[  250.785073][T10028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.812212][T10025] loop0: detected capacity change from 0 to 8192
[  250.888292][T10025] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  250.973401][T10025] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  250.982682][T10025] REISERFS (device loop0): using ordered data mode
[  250.994091][T10025] reiserfs: using flush barriers
[  251.012584][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.031638][T10025] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  251.118678][T10025] REISERFS (device loop0): checking transaction log (loop0)
[  251.291085][T10025] REISERFS (device loop0): Using tea hash to sort names
[  251.307981][T10025] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  251.689053][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'.
[  251.699210][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.851466][T10052] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.933323][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'.
[  251.952649][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'.
[  251.977346][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'.
[  252.209273][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1503'.
[  252.469576][T10076] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1510'.
[  252.762057][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'.
[  252.893304][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  253.093565][    T9] usb 2-1: Using ep0 maxpacket: 16
[  253.103077][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.129157][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.134604][T10088] loop8: detected capacity change from 0 to 8
[  253.152705][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  253.167696][T10088]  loop8: [CUMANA/ADFS] p1 [ADFS] p1
[  253.173048][T10088] loop8: partition table partially beyond EOD, truncated
[  253.180149][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.180175][    T9] usb 2-1: Product: syz
[  253.180188][    T9] usb 2-1: Manufacturer: syz
[  253.180203][    T9] usb 2-1: SerialNumber: syz
[  253.225087][T10088] loop8: p1 size 3004527350 extends beyond EOD, truncated
[  253.327123][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  253.421712][    T9] usb 2-1: 0:2 : does not exist
[  253.442904][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  253.491367][    T9] usb 2-1: USB disconnect, device number 19
[  253.552647][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.623068][T10101] loop0: detected capacity change from 0 to 128
[  253.649845][T10101] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  253.688825][T10101] hpfs: filesystem error: improperly stopped
[  253.696033][T10101] hpfs: You really don't want any checks? You are crazy...
[  253.710521][T10101] hpfs: hpfs_map_sector(): read error
[  253.718130][T10101] hpfs: code page support is disabled
[  253.730139][T10101] hpfs: hpfs_map_4sectors(): unaligned read
[  253.737304][T10101] hpfs: hpfs_map_4sectors(): unaligned read
[  253.747584][T10101] hpfs: filesystem error: unable to find root dir
[  253.771527][T10101] hpfs: hpfs_map_4sectors(): unaligned read
[  253.779831][T10101] hpfs: hpfs_map_sector(): read error
[  253.793833][T10101] hpfs: hpfs_map_4sectors(): unaligned read
[  253.802292][T10101] hpfs: hpfs_map_sector(): read error
[  254.346755][T10123] CIFS: Attempting to mount //127.0.0.1/share
[  254.368215][T10123] CIFS: VFS: Error connecting to socket. Aborting operation.
[  254.390474][T10123] CIFS: VFS: cifs_mount failed w/return code = -101
[  254.843376][ T5815] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  255.045368][ T5815] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[  255.061831][ T5815] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 97
[  255.079021][ T5815] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  255.089513][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.101200][T10129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  255.108832][T10129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  255.123998][ T5815] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  255.145874][ T5815] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  255.382611][ T5815] usb 1-1: USB disconnect, device number 11
[  255.393405][ T5776] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  255.414813][ T5815] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  255.434144][ T5815] cyberjack 1-1:1.0: device disconnected
[  255.490701][T10140] syzkaller1: entered promiscuous mode
[  255.498848][T10140] syzkaller1: entered allmulticast mode
[  255.605266][ T5776] usb 4-1: not running at top speed; connect to a high speed hub
[  255.634612][ T5776] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.646511][ T5776] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  255.663257][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.697404][ T5776] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  255.817520][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.826905][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.100609][T10152] macsec1: entered allmulticast mode
[  256.136052][ T5776] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  256.171592][ T5776] uvcvideo 4-1:1.1: No frame descriptor found for the default format.
[  256.198330][ T5776] uvcvideo 4-1:1.1: Failed to initialize the device (-22).
[  256.492669][ T5815] usb 4-1: USB disconnect, device number 22
[  256.501317][T10164] syzkaller1: entered promiscuous mode
[  256.529110][T10164] syzkaller1: entered allmulticast mode
[  256.825963][T10175] device-mapper: ioctl: Unable to rename non-existent device,  to .2\���.j�DH
[  257.208180][T10188] loop2: detected capacity change from 0 to 2048
[  257.384998][T10195] loop3: detected capacity change from 0 to 2048
[  257.446677][T10195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.531735][T10195] overlayfs: upper fs needs to support d_type.
[  257.571603][T10195] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  257.585066][T10195] overlayfs: failed to set xattr on upper
[  257.592826][T10195] overlayfs: ...falling back to redirect_dir=nofollow.
[  257.608834][T10195] overlayfs: ...falling back to index=off.
[  257.619724][T10195] overlayfs: ...falling back to uuid=null.
[  257.633389][   T28] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  257.650800][T10203] syzkaller1: entered promiscuous mode
[  257.673272][T10203] syzkaller1: entered allmulticast mode
[  257.749740][ T5773] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  257.761448][ T5773] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  257.833318][   T28] usb 3-1: Using ep0 maxpacket: 8
[  257.856560][   T28] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.875878][T10208] loop1: detected capacity change from 0 to 512
[  257.877401][   T28] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.924755][   T27] audit: type=1326 audit(1791450242.604:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  257.935993][   T28] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  257.969877][   T28] usb 3-1: config 0 interface 0 has no altsetting 0
[  257.990354][   T28] usb 3-1: New USB device found, idVendor=045e, idProduct=073a, bcdDevice= 0.00
[  258.013578][   T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.023412][   T27] audit: type=1326 audit(1791450242.604:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.051857][   T28] usb 3-1: config 0 descriptor??
[  258.067111][   T27] audit: type=1326 audit(1791450242.614:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.094044][   T27] audit: type=1326 audit(1791450242.614:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.178997][   T27] audit: type=1326 audit(1791450242.614:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.253223][   T27] audit: type=1326 audit(1791450242.644:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.261914][T10214] loop1: detected capacity change from 0 to 1024
[  258.314464][   T27] audit: type=1326 audit(1791450242.644:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.330255][T10214] hfsplus: invalid length 32517 has been corrected to 255
[  258.376356][   T27] audit: type=1326 audit(1791450242.644:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.434936][   T27] audit: type=1326 audit(1791450242.644:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.436996][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'.
[  258.521092][   T28] hid-generic 0003:045E:073A.0014: unknown main item tag 0x2
[  258.541088][   T28] hid-generic 0003:045E:073A.0014: unbalanced collection at end of report description
[  258.553375][   T27] audit: type=1326 audit(1791450242.644:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.1.1569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff4a299e199 code=0x7ffc0000
[  258.580194][ T1309] hfsplus: b-tree write err: -5, ino 20
[  258.606228][   T28] hid-generic: probe of 0003:045E:073A.0014 failed with error -22
[  258.800930][ T5776] usb 3-1: USB disconnect, device number 12
[  259.085568][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.097900][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.106331][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.123388][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.132804][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  259.140377][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.162250][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.194891][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.202303][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.210891][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.220414][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  259.227942][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.474638][T10230] chnl_net:caif_netlink_parms(): no params data found
[  259.632554][T10230] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.652512][T10233] loop1: detected capacity change from 0 to 40427
[  259.658911][T10230] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.679208][T10233] F2FS-fs (loop1): invalid crc value
[  259.679390][T10230] bridge_slave_0: entered allmulticast mode
[  259.701915][T10233] F2FS-fs (loop1): Found nat_bits in checkpoint
[  259.704538][T10230] bridge_slave_0: entered promiscuous mode
[  259.735912][T10230] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.748115][T10230] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.757355][T10230] bridge_slave_1: entered allmulticast mode
[  259.767468][T10230] bridge_slave_1: entered promiscuous mode
[  259.778523][T10233] F2FS-fs (loop1): Start checkpoint disabled!
[  259.819192][T10233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  259.851444][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.887851][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.992008][T10230] team0: Port device team_slave_0 added
[  260.024064][T10230] team0: Port device team_slave_1 added
[  260.087353][ T5771] syz-executor: attempt to access beyond end of device
[  260.087353][ T5771] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  260.100026][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.116466][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.124232][ T5771] syz-executor: attempt to access beyond end of device
[  260.124232][ T5771] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  260.150029][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.191627][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.201978][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.235680][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.359344][ T2972] kworker/u4:9: attempt to access beyond end of device
[  260.359344][ T2972] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  260.375378][ T2972] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  260.390573][ T2972] kworker/u4:9: attempt to access beyond end of device
[  260.390573][ T2972] loop1: rw=2049, sector=40976, nr_sectors = 8 limit=40427
[  260.407650][ T2972] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  260.412601][T10230] hsr_slave_0: entered promiscuous mode
[  260.449901][T10230] hsr_slave_1: entered promiscuous mode
[  260.457044][T10230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.465335][T10230] Cannot create hsr debugfs directory
[  260.875339][T10267] loop2: detected capacity change from 0 to 256
[  260.900358][T10267] exfat: Deprecated parameter 'utf8'
[  260.918667][T10267] exfat: Deprecated parameter 'utf8'
[  260.930705][T10267] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  260.955386][ T5815] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  261.027803][T10230] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  261.079456][T10230] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  261.113971][T10230] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  261.137839][T10230] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  261.163624][ T5815] usb 1-1: Using ep0 maxpacket: 8
[  261.175906][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  261.207885][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  261.246843][ T5815] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  261.257532][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.274919][ T5815] usb 1-1: config 0 descriptor??
[  261.334367][ T5780] Bluetooth: hci3: command tx timeout
[  261.410878][T10230] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.442784][T10230] 8021q: adding VLAN 0 to HW filter on device team0
[  261.469784][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.477008][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.504063][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.511231][ T9436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.776672][ T5815] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0
[  261.803218][ T5815] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0
[  261.818144][ T5815] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0
[  261.839723][ T5815] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0
[  261.859205][ T1309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.873210][ T5815] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0
[  261.880221][ T5815] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0
[  261.894431][ T1309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.903248][ T5815] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0
[  261.922091][ T5815] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0
[  261.941468][ T5815] lenovo 0003:17EF:6047.0015: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[  261.971660][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'.
[  261.993693][ T5815] lenovo 0003:17EF:6047.0015: Failed to switch F7/9/11 mode: -71
[  262.019234][ T5815] lenovo 0003:17EF:6047.0015: Failed to switch middle button: -71
[  262.043999][ T5815] lenovo 0003:17EF:6047.0015: Fn-lock setting failed: -71
[  262.057707][ T5815] lenovo 0003:17EF:6047.0015: Sensitivity setting failed: -71
[  262.083976][ T5815] usb 1-1: USB disconnect, device number 12
[  262.104143][ T1309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.145387][ T1309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.161415][T10280] fido_id[10280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  262.309573][ T1309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.320171][ T1309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.351134][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  262.366084][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.374998][T10285] loop2: detected capacity change from 0 to 2048
[  262.383376][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  262.395932][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  262.417506][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  262.421145][T10285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.440599][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  262.460490][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  262.488761][T10285] overlayfs: upper fs needs to support d_type.
[  262.497312][T10285] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  262.511490][T10285] overlayfs: failed to set xattr on upper
[  262.520018][ T1309] bond0: (slave netdevsim0): Releasing backup interface
[  262.521637][T10285] overlayfs: ...falling back to redirect_dir=nofollow.
[  262.537506][ T1309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.552167][T10285] overlayfs: ...falling back to index=off.
[  262.554898][ T1309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.563688][T10285] overlayfs: ...falling back to uuid=null.
[  262.735485][ T5770] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  262.759386][ T5770] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  262.979858][ T1309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.003336][ T1309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.205506][ T1309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.228738][ T1309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.364669][ T1309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.380666][ T1309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.413825][ T5785] Bluetooth: hci3: command tx timeout
[  263.467465][T10308] syzkaller1: entered promiscuous mode
[  263.472994][T10308] syzkaller1: entered allmulticast mode
[  263.500890][ T1309] bond0: (slave netdevsim0): Releasing backup interface
[  263.521413][ T1309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.540916][ T1309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.618724][T10230] veth0_vlan: entered promiscuous mode
[  263.674390][T10230] veth1_vlan: entered promiscuous mode
[  263.704801][T10282] chnl_net:caif_netlink_parms(): no params data found
[  263.952533][T10230] veth0_macvtap: entered promiscuous mode
[  264.045643][T10230] veth1_macvtap: entered promiscuous mode
[  264.129139][T10282] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.168929][T10282] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.177913][T10282] bridge_slave_0: entered allmulticast mode
[  264.199474][ T5776] IPVS: starting estimator thread 0...
[  264.200823][T10282] bridge_slave_0: entered promiscuous mode
[  264.240498][T10282] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.263763][T10282] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.274203][T10282] bridge_slave_1: entered allmulticast mode
[  264.281574][T10282] bridge_slave_1: entered promiscuous mode
[  264.303236][T10326] IPVS: using max 20 ests per chain, 48000 per kthread
[  264.326512][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.347682][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.395020][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.540850][ T5785] Bluetooth: hci1: command tx timeout
[  264.626261][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  264.637290][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  264.649754][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  264.650040][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.667687][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.679235][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.690158][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.700771][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  264.708389][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.718948][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.730358][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.733458][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  264.740888][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.749271][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  264.759878][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.798072][T10282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.991613][T10282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.055001][T10230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.068712][T10230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.092249][T10230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.101191][T10230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.237103][T10282] team0: Port device team_slave_0 added
[  265.284906][T10282] team0: Port device team_slave_1 added
[  265.493844][ T5785] Bluetooth: hci3: command tx timeout
[  265.615862][T10282] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.622851][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.649307][T10282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.755861][T10282] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.767640][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.797675][T10282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.314350][T10282] hsr_slave_0: entered promiscuous mode
[  266.330850][T10282] hsr_slave_1: entered promiscuous mode
[  266.361108][T10282] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.383195][T10282] Cannot create hsr debugfs directory
[  266.434464][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.442367][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.614897][ T5785] Bluetooth: hci1: command tx timeout
[  266.853971][ T5785] Bluetooth: hci0: command tx timeout
[  267.128755][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.172654][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.337135][T10331] chnl_net:caif_netlink_parms(): no params data found
[  267.523780][T10391] loop0: detected capacity change from 0 to 2048
[  267.573925][ T5785] Bluetooth: hci3: command tx timeout
[  267.867608][T10331] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.884803][T10331] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.892127][T10331] bridge_slave_0: entered allmulticast mode
[  267.903282][ T7338] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  267.924134][T10331] bridge_slave_0: entered promiscuous mode
[  267.940510][T10331] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.949352][T10331] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.957324][T10331] bridge_slave_1: entered allmulticast mode
[  267.965157][T10331] bridge_slave_1: entered promiscuous mode
[  268.103287][ T7338] usb 1-1: Using ep0 maxpacket: 8
[  268.111719][T10331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.135073][ T7338] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.157839][T10331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.160224][ T7338] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.181644][T10282] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  268.188651][ T7338] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  268.226320][ T7338] usb 1-1: config 0 interface 0 has no altsetting 0
[  268.237070][ T7338] usb 1-1: New USB device found, idVendor=045e, idProduct=073a, bcdDevice= 0.00
[  268.250002][ T7338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.259825][ T1309] hsr_slave_0: left promiscuous mode
[  268.267362][ T1309] hsr_slave_1: left promiscuous mode
[  268.272843][ T7338] usb 1-1: config 0 descriptor??
[  268.278374][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.288259][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.307858][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.317852][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.326889][ T1309] veth0: left allmulticast mode
[  268.331818][ T1309] veth0: left promiscuous mode
[  268.340615][ T1309] bridge0: port 3(veth0) entered disabled state
[  268.350573][ T1309] bridge_slave_1: left allmulticast mode
[  268.356488][ T1309] bridge_slave_1: left promiscuous mode
[  268.363685][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.381994][ T1309] bridge_slave_0: left allmulticast mode
[  268.388583][ T1309] bridge_slave_0: left promiscuous mode
[  268.394417][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.417959][ T1309] hsr_slave_0: left promiscuous mode
[  268.424632][ T1309] hsr_slave_1: left promiscuous mode
[  268.430611][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.438811][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.447093][ T1309] bridge_slave_1: left allmulticast mode
[  268.452775][ T1309] bridge_slave_1: left promiscuous mode
[  268.461354][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.477645][ T1309] bridge_slave_0: left allmulticast mode
[  268.487256][ T1309] bridge_slave_0: left promiscuous mode
[  268.493011][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.552425][ T1309] veth0_macvtap: left promiscuous mode
[  268.558740][ T1309] veth1_vlan: left promiscuous mode
[  268.564873][ T1309] veth0_vlan: left promiscuous mode
[  268.578993][ T1309] veth1_macvtap: left promiscuous mode
[  268.585166][ T1309] veth0_macvtap: left promiscuous mode
[  268.590797][ T1309] veth1_vlan: left promiscuous mode
[  268.596716][ T1309] veth0_vlan: left promiscuous mode
[  268.693465][ T5785] Bluetooth: hci1: command tx timeout
[  268.705547][ T7338] hid-generic 0003:045E:073A.0016: unknown main item tag 0x2
[  268.719357][ T7338] hid-generic 0003:045E:073A.0016: unbalanced collection at end of report description
[  268.730055][ T7338] hid-generic: probe of 0003:045E:073A.0016 failed with error -22
[  268.944629][ T5785] Bluetooth: hci0: command tx timeout
[  268.950903][ T5815] usb 1-1: USB disconnect, device number 13
[  269.612871][ T1309] team0 (unregistering): Port device team_slave_1 removed
[  269.614168][T10415] FAULT_INJECTION: forcing a failure.
[  269.614168][T10415] name failslab, interval 1, probability 0, space 0, times 0
[  269.635453][T10415] CPU: 1 PID: 10415 Comm: syz.0.1624 Not tainted syzkaller #0
[  269.642964][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  269.653049][T10415] Call Trace:
[  269.656355][T10415]  <TASK>
[  269.659294][T10415]  dump_stack_lvl+0x18c/0x250
[  269.663981][T10415]  ? show_regs_print_info+0x20/0x20
[  269.669189][T10415]  ? load_image+0x420/0x420
[  269.673702][T10415]  ? __might_sleep+0xe0/0xe0
[  269.678313][T10415]  ? __lock_acquire+0x7eb0/0x7eb0
[  269.683342][T10415]  should_fail_ex+0x394/0x4c0
[  269.688060][T10415]  should_failslab+0x9/0x20
[  269.692552][T10415]  slab_pre_alloc_hook+0x59/0x300
[  269.697564][T10415]  ? d_instantiate+0x6f/0x90
[  269.702144][T10415]  kmem_cache_alloc+0x5a/0x2c0
[  269.706912][T10415]  ? alloc_empty_file+0x9e/0x1d0
[  269.711859][T10415]  alloc_empty_file+0x9e/0x1d0
[  269.716618][T10415]  alloc_file+0x5b/0x600
[  269.720848][T10415]  alloc_file_pseudo+0x184/0x210
[  269.725791][T10415]  ? fput+0x1a0/0x1a0
[  269.729782][T10415]  ? alloc_fd+0x590/0x640
[  269.734118][T10415]  sock_alloc_file+0xb7/0x280
[  269.738945][T10415]  __sys_socket+0x140/0x1b0
[  269.743465][T10415]  __x64_sys_socket+0x7a/0x90
[  269.748160][T10415]  do_syscall_64+0x55/0xb0
[  269.752567][T10415]  ? clear_bhb_loop+0x40/0x90
[  269.757232][T10415]  ? clear_bhb_loop+0x40/0x90
[  269.761897][T10415]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  269.767790][T10415] RIP: 0033:0x7ff16dd9e199
[  269.772208][T10415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.791807][T10415] RSP: 002b:00007ff16ed17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  269.800246][T10415] RAX: ffffffffffffffda RBX: 00007ff16e025fa0 RCX: 00007ff16dd9e199
[  269.808216][T10415] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c
[  269.816192][T10415] RBP: 00007ff16de35888 R08: 0000000000000000 R09: 0000000000000000
[  269.824188][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.832165][T10415] R13: 00007ff16e026038 R14: 00007ff16e025fa0 R15: 00007ffd9819cd98
[  269.840161][T10415]  </TASK>
[  269.923936][ T1309] team0 (unregistering): Port device team_slave_0 removed
[  269.987208][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.042751][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.488291][ T1309] bond0 (unregistering): Released all slaves
[  270.773317][ T5785] Bluetooth: hci1: command tx timeout
[  271.013519][ T5785] Bluetooth: hci0: command tx timeout
[  271.162382][ T1309] team0 (unregistering): Port device team_slave_1 removed
[  271.231855][ T1309] team0 (unregistering): Port device team_slave_0 removed
[  271.297722][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.362128][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.752235][ T1309] bond0 (unregistering): Released all slaves
[  271.828489][T10282] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  271.854410][T10331] team0: Port device team_slave_0 added
[  271.876153][T10331] team0: Port device team_slave_1 added
[  271.918201][T10282] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  271.980755][T10282] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  272.549940][T10422] loop4: detected capacity change from 0 to 65536
[  272.585038][T10331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.633237][T10331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.667321][T10422] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  272.727325][T10422] XFS (loop4): Ending clean mount
[  272.732126][T10331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.739866][T10422] XFS (loop4): Quotacheck needed: Please wait.
[  272.764334][T10424] loop0: detected capacity change from 0 to 32768
[  272.765409][T10331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.778337][T10331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.804535][T10331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.841680][T10424] JBD2: Ignoring recovery information on journal
[  272.970852][T10422] XFS (loop4): Quotacheck: Done.
[  273.025944][T10424] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  273.093490][ T5785] Bluetooth: hci0: command tx timeout
[  273.198728][T10331] hsr_slave_0: entered promiscuous mode
[  273.251317][T10331] hsr_slave_1: entered promiscuous mode
[  273.500076][T10282] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.549396][T10230] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  273.584596][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  273.624611][T10282] 8021q: adding VLAN 0 to HW filter on device team0
[  273.779800][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.787013][ T9440] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.821312][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.828524][ T9440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.109673][T10449] loop0: detected capacity change from 0 to 128
[  274.305099][T10449] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.344686][T10449] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.393761][T10331] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  274.427056][ T1309] IPVS: stop unused estimator thread 0...
[  274.427145][T10331] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  274.485241][ T1309] IPVS: stop unused estimator thread 0...
[  274.510823][T10331] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  274.540855][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.579281][T10331] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  274.925049][ T1309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  274.951892][ T1309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.068982][T10331] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.167504][T10470] loop4: detected capacity change from 0 to 256
[  275.169540][ T1309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.206880][ T1309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.357456][T10282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.451278][T10459] loop0: detected capacity change from 0 to 32768
[  275.478939][ T1309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.514987][ T1309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.539121][T10459] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  275.596819][T10331] 8021q: adding VLAN 0 to HW filter on device team0
[  275.651699][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.658948][ T9437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.674390][T10459] XFS (loop0): Ending clean mount
[  275.728730][T10459] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 
[  275.763046][T10459] XFS (loop0): Unmount and run xfs_repair
[  275.771435][ T1309] bond0: (slave netdevsim0): Releasing backup interface
[  275.786792][T10459] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  275.798870][T10459] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  275.811321][ T1309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.830356][T10459] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  275.839691][ T1309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.856221][T10459] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  275.902196][T10459] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  275.927119][T10459] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  275.931792][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.943259][ T9437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.953727][T10459] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  275.962633][T10459] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  275.997437][T10459] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  276.032965][T10459] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x223/0x400" at daddr 0x3 len 1 error 74
[  276.112067][T10496] loop4: detected capacity change from 0 to 2048
[  276.121180][T10459] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  276.148902][T10459] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  276.171286][T10496] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  276.262853][T10496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.275998][ T5772] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  276.615086][T10230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.824469][T10512] loop4: detected capacity change from 0 to 64
[  277.132501][T10331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.461446][T10282] veth0_vlan: entered promiscuous mode
[  277.490158][T10282] veth1_vlan: entered promiscuous mode
[  277.879302][T10519] loop0: detected capacity change from 0 to 32768
[  277.900555][T10519] XFS: attr2 mount option is deprecated.
[  277.907831][T10282] veth0_macvtap: entered promiscuous mode
[  278.013390][T10519] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.024400][T10282] veth1_macvtap: entered promiscuous mode
[  278.070342][T10519] XFS (loop0): Ending clean mount
[  278.160376][T10519] XFS (loop0): User initiated shutdown received.
[  278.167427][T10519] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  278.180833][T10526] loop4: detected capacity change from 0 to 32768
[  278.209565][T10519] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  278.243688][T10526] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.281417][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.307889][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.327200][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.329533][T10282] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.366437][T10331] veth0_vlan: entered promiscuous mode
[  278.437185][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.452631][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.481442][T10526] XFS (loop4): Ending clean mount
[  278.500654][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.521504][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.539518][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.563215][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.583236][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  278.583253][   T27] audit: type=1800 audit(1791450263.264:51): pid=10526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1641" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  278.615879][T10282] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.632256][T10526] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  278.691019][T10331] veth1_vlan: entered promiscuous mode
[  278.742898][T10282] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.771466][T10557] xt_hashlimit: size too large, truncated to 1048576
[  278.772173][T10282] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.803223][T10282] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.822470][T10282] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.058402][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'.
[  279.099384][T10230] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  279.214421][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.221920][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.273585][ T1309] bridge_slave_1: left allmulticast mode
[  279.279287][ T1309] bridge_slave_1: left promiscuous mode
[  279.304327][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.329160][ T1309] bridge_slave_0: left allmulticast mode
[  279.351423][ T1309] bridge_slave_0: left promiscuous mode
[  279.390402][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.537991][ T1309] veth1_macvtap: left promiscuous mode
[  279.558401][ T1309] veth0_macvtap: left promiscuous mode
[  279.580026][ T1309] veth1_vlan: left promiscuous mode
[  279.592420][ T1309] veth0_vlan: left promiscuous mode
[  280.486951][ T1309] bond1 (unregistering): Released all slaves
[  281.359636][ T1309] team0 (unregistering): Port device team_slave_1 removed
[  281.433978][ T1309] team0 (unregistering): Port device team_slave_0 removed
[  281.502092][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.590533][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.206915][ T1309] bond0 (unregistering): Released all slaves
[  282.420509][T10331] veth0_macvtap: entered promiscuous mode
[  282.455153][T10331] veth1_macvtap: entered promiscuous mode
[  282.576446][T10331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.595127][T10331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.605159][T10331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.619834][T10331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.652229][T10331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.673772][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.675689][T10331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.681610][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.706739][T10331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.716978][T10331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.728252][T10331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.738457][T10331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.749340][T10331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.774028][T10331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.856993][T10331] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.883682][T10331] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.892453][T10331] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.917506][T10331] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.970092][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.019388][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.233418][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.259591][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.325937][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.340854][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.463399][T10599] Bluetooth: MGMT ver 1.22
[  283.652188][   T27] audit: type=1800 audit(1791450268.334:52): pid=10603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1606" name="direction" dev="configfs" ino=25008 res=0 errno=0
[  283.870156][T10610] tipc: Started in network mode
[  283.893388][T10610] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  283.903978][T10615] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  283.927144][T10610] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  283.950925][T10617] tipc: Resetting bearer <eth:syz_tun>
[  284.098658][T10617] tipc: Disabling bearer <eth:syz_tun>
[  284.159192][T10594] loop4: detected capacity change from 0 to 40427
[  284.173059][T10594] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7
[  284.223327][T10594] F2FS-fs (loop4): invalid crc value
[  284.225851][T10624] loop0: detected capacity change from 0 to 2048
[  284.247011][T10594] F2FS-fs (loop4): Found nat_bits in checkpoint
[  284.303334][   T28] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  284.419419][T10594] F2FS-fs (loop4): Start checkpoint disabled!
[  284.514331][T10594] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  284.554208][   T28] usb 6-1: Using ep0 maxpacket: 32
[  284.576403][   T28] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  284.615704][   T28] usb 6-1: config 0 has no interface number 0
[  284.644316][   T28] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  284.651746][T10594] syz.4.1650: attempt to access beyond end of device
[  284.651746][T10594] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.663176][   T28] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.693151][   T28] usb 6-1: Product: syz
[  284.697377][   T28] usb 6-1: Manufacturer: syz
[  284.699493][T10634] CacheFiles: Failed to register: -95
[  284.701978][   T28] usb 6-1: SerialNumber: syz
[  284.724522][   T28] usb 6-1: config 0 descriptor??
[  284.739887][   T28] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  284.948983][   T28] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  284.949123][ T1006] kworker/u4:5: attempt to access beyond end of device
[  284.949123][ T1006] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  285.002025][   T28] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  285.031272][ T1006] kworker/u4:5: attempt to access beyond end of device
[  285.031272][ T1006] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  285.073341][ T1006] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  285.110571][ T1006] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  285.506875][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  285.507468][    T8] usb 6-1: USB disconnect, device number 2
[  285.547694][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  285.598632][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  285.636563][    T8] quatech2 6-1:0.51: device disconnected
[  285.751307][T10662] loop4: detected capacity change from 0 to 1024
[  285.852497][T10662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  285.865313][T10662] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.932280][   T27] audit: type=1800 audit(1791450270.614:53): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1660" name="file1" dev="loop4" ino=15 res=0 errno=0
[  285.949198][T10670] syzkaller1: entered promiscuous mode
[  285.993265][   T27] audit: type=1800 audit(1791450270.654:54): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1660" name="file1" dev="loop4" ino=15 res=0 errno=0
[  286.016572][T10670] syzkaller1: entered allmulticast mode
[  286.053819][ T9437] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm kworker/u4:17: lblock 0 mapped to illegal pblock 0 (length 1)
[  286.099621][ T9437] EXT4-fs (loop4): Remounting filesystem read-only
[  286.128843][T10230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  286.299687][T10679] loop6: detected capacity change from 0 to 512
[  286.326896][T10681] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  286.362854][T10679] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  286.481397][T10679] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  286.590235][T10679] Quota error (device loop6): write_blk: dquota write failed
[  286.631473][T10679] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  286.667660][T10679] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1670: Failed to acquire dquot type 0
[  286.698043][T10679] EXT4-fs (loop6): 1 truncate cleaned up
[  286.709763][T10679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.742209][T10701] loop0: detected capacity change from 0 to 512
[  286.859867][T10701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.907550][T10701] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.028631][T10679] Quota error (device loop6): write_blk: dquota write failed
[  287.040833][T10679] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  287.066454][T10679] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1670: Failed to acquire dquot type 0
[  287.122475][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.239716][T10331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.365213][T10721] loop6: detected capacity change from 0 to 1024
[  287.389707][T10721] EXT4-fs: Ignoring removed bh option
[  287.448634][T10721] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  287.491838][T10721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.839485][T10331] EXT4-fs error (device loop6): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  287.891089][T10745] loop0: detected capacity change from 0 to 2048
[  287.896345][T10331] EXT4-fs (loop6): Remounting filesystem read-only
[  288.096622][T10331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.114323][ T5760] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  288.323639][ T5760] usb 5-1: Using ep0 maxpacket: 16
[  288.351588][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.369677][ T1309] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.394181][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.423460][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  288.476719][ T5760] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  288.509002][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.556550][ T5760] usb 5-1: config 0 descriptor??
[  288.587838][ T1309] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.708194][ T1309] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.856109][ T1309] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.023655][ T5760] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input21
[  289.036396][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1692'.
[  289.078331][T10760] block nbd0: Unsupported socket: should be TCP or UNIX.
[  289.116985][ T5760] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  289.279875][ T1309] tipc: Left network mode
[  289.436096][ T5760] usb 5-1: USB disconnect, device number 2
[  289.644917][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  289.657219][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  289.665977][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  289.673905][    T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  289.683434][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  289.694578][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  289.712248][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  289.873319][    T8] usb 6-1: Using ep0 maxpacket: 8
[  289.894786][    T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  289.922803][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  289.934199][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  289.963320][    T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  289.977758][    T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  289.987770][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.187389][T10772] chnl_net:caif_netlink_parms(): no params data found
[  290.235613][    T8] usb 6-1: GET_CAPABILITIES returned 0
[  290.241181][    T8] usbtmc 6-1:16.0: can't read capabilities
[  290.510114][    T8] usb 6-1: USB disconnect, device number 3
[  290.724156][T10792] loop0: detected capacity change from 0 to 32768
[  290.825395][T10792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1698 (10792)
[  290.910417][T10792] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  291.003762][T10792] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  291.055130][T10792] BTRFS info (device loop0): setting nodatasum
[  291.061359][T10792] BTRFS info (device loop0): force zlib compression, level 3
[  291.101516][T10772] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.109788][T10792] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  291.141720][T10772] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.153276][T10792] BTRFS info (device loop0): use lzo compression, level 0
[  291.160502][T10792] BTRFS info (device loop0): turning on flush-on-commit
[  291.162985][T10772] bridge_slave_0: entered allmulticast mode
[  291.193790][T10792] BTRFS info (device loop0): enabling auto defrag
[  291.205119][T10772] bridge_slave_0: entered promiscuous mode
[  291.213385][T10807] loop5: detected capacity change from 0 to 128
[  291.234206][T10772] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.241371][T10772] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.243228][T10792] BTRFS info (device loop0): max_inline at 4096
[  291.284158][T10792] BTRFS info (device loop0): using free space tree
[  291.301180][T10772] bridge_slave_1: entered allmulticast mode
[  291.325238][T10807] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.358255][T10772] bridge_slave_1: entered promiscuous mode
[  291.398126][T10807] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.518452][T10772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.583773][T10792] BTRFS info (device loop0): enabling ssd optimizations
[  291.679334][T10282] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.745733][T10772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.772994][   T27] audit: type=1800 audit(1791450276.454:55): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1698" name="file1" dev="loop0" ino=260 res=0 errno=0
[  291.817932][ T5780] Bluetooth: hci0: command tx timeout
[  291.905482][ T1309] hsr_slave_0: left promiscuous mode
[  291.977153][ T1309] hsr_slave_1: left promiscuous mode
[  291.995206][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.002701][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.005005][T10834] loop5: detected capacity change from 0 to 4096
[  292.061275][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.062616][T10837] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.119296][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.174811][ T1309] bridge_slave_1: left allmulticast mode
[  292.175775][   T27] audit: type=1800 audit(1791450276.854:56): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1701" name="file1" dev="loop5" ino=15 res=0 errno=0
[  292.193440][ T1309] bridge_slave_1: left promiscuous mode
[  292.228712][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.282632][ T1309] bridge_slave_0: left allmulticast mode
[  292.300638][ T1309] bridge_slave_0: left promiscuous mode
[  292.310034][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.418732][ T5772] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  292.441935][ T1309] veth1_macvtap: left promiscuous mode
[  292.456929][ T1309] veth0_macvtap: left promiscuous mode
[  292.480962][ T1309] veth1_vlan: left promiscuous mode
[  292.487426][ T1309] veth0_vlan: left promiscuous mode
[  292.670266][T10842] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1704'.
[  293.893670][ T5780] Bluetooth: hci0: command tx timeout
[  293.900681][ T1309] team0 (unregistering): Port device team_slave_1 removed
[  293.960456][ T1309] team0 (unregistering): Port device team_slave_0 removed
[  294.018174][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.107995][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.207112][T10857] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  294.371833][T10861] loop5: detected capacity change from 0 to 1024
[  294.382784][T10861] EXT4-fs: Ignoring removed nomblk_io_submit option
[  294.399074][T10861] EXT4-fs: Ignoring removed nomblk_io_submit option
[  294.450359][T10861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  294.483060][T10861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  294.498006][T10861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.640131][T10282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.762919][T10867] loop5: detected capacity change from 0 to 256
[  294.770339][T10867] exfat: Bad value for 'uid'
[  294.822003][ T5764] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  294.854209][   T28] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  295.062139][ T1309] bond0 (unregistering): Released all slaves
[  295.065957][   T28] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.079441][   T28] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.104606][   T28] usb 1-1: config 0 interface 0 has no altsetting 0
[  295.111283][   T28] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  295.121277][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.156077][   T28] usb 1-1: config 0 descriptor??
[  295.210400][T10772] team0: Port device team_slave_0 added
[  295.237603][T10772] team0: Port device team_slave_1 added
[  295.320318][T10772] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.339266][T10772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.390330][T10874] loop4: detected capacity change from 0 to 64
[  295.419294][T10772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.450389][T10772] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.458640][T10772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.469043][T10872] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  295.508410][T10772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.547560][T10872] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  295.706123][T10772] hsr_slave_0: entered promiscuous mode
[  295.734347][T10772] hsr_slave_1: entered promiscuous mode
[  295.823576][   T28] sony 0003:054C:0268.0018: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  295.857487][   T28] sony 0003:054C:0268.0018: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.0-1/input0
[  295.902045][   T28] sony 0003:054C:0268.0018: failed to claim input
[  295.957452][   T28] usb 1-1: USB disconnect, device number 14
[  295.974430][ T5780] Bluetooth: hci0: command tx timeout
[  296.118946][T10883] fido_id[10883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  296.201259][T10895] sctp: Failed to create the SCTP UDP tunneling v4 sock
[  296.343880][T10772] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  296.359185][T10772] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  296.379021][T10772] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  296.413203][T10772] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  296.588001][T10772] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.665673][T10772] 8021q: adding VLAN 0 to HW filter on device team0
[  296.685458][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.692676][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.719020][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.726248][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.884458][T10910] loop0: detected capacity change from 0 to 512
[  296.949637][T10910] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  297.048917][T10910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.073946][T10910] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.351634][T10908] loop4: detected capacity change from 0 to 32768
[  297.368724][T10772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.391611][T10908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1725 (10908)
[  297.442204][T10908] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  297.461662][T10908] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  297.496317][T10908] BTRFS info (device loop4): force clearing of disk cache
[  297.513273][T10908] BTRFS info (device loop4): enabling auto defrag
[  297.522873][T10908] BTRFS info (device loop4): max_inline at 0
[  297.529715][T10908] BTRFS info (device loop4): enabling disk space caching
[  297.546162][T10908] BTRFS info (device loop4): disk space caching is enabled
[  297.672648][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.827929][T10908] BTRFS info (device loop4): enabling ssd optimizations
[  297.837919][T10954] loop5: detected capacity change from 0 to 1024
[  297.838490][T10908] BTRFS info (device loop4): rebuilding free space tree
[  297.918123][T10954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.971800][T10908] BTRFS info (device loop4): disabling free space tree
[  298.013658][T10908] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  298.053894][ T5780] Bluetooth: hci0: command tx timeout
[  298.075690][T10908] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  298.346027][T10282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.491802][T10772] veth0_vlan: entered promiscuous mode
[  298.556579][T10772] veth1_vlan: entered promiscuous mode
[  298.676715][T10772] veth0_macvtap: entered promiscuous mode
[  298.705665][T10230] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  298.713799][T10772] veth1_macvtap: entered promiscuous mode
[  298.726643][T10980] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  298.808377][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.861458][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.879824][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.906055][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.930821][T10772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.948014][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.989370][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.019850][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.057634][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.088177][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.110496][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.155763][T10772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.219764][T10772] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.241592][T10772] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.267639][T10772] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.287572][T10772] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.557048][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.595198][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.600385][T10976] loop5: detected capacity change from 0 to 32768
[  299.616011][T10998] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  299.655399][T10976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1733 (10976)
[  299.730671][T10976] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  299.741892][ T9437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.771316][T10976] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  299.778075][ T9437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.810091][T10976] BTRFS info (device loop5): setting nodatasum
[  299.821914][T10976] BTRFS info (device loop5): force zlib compression, level 3
[  299.840803][T10976] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  299.853443][T10976] BTRFS info (device loop5): use lzo compression, level 0
[  299.861737][T10976] BTRFS info (device loop5): turning on flush-on-commit
[  299.892994][T10976] BTRFS info (device loop5): enabling auto defrag
[  299.917546][T10976] BTRFS info (device loop5): max_inline at 4096
[  299.933969][T10976] BTRFS info (device loop5): using free space tree
[  300.059190][T10976] BTRFS info (device loop5): enabling ssd optimizations
[  300.408687][   T27] audit: type=1800 audit(1791450541.086:57): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1733" name="file1" dev="loop5" ino=260 res=0 errno=0
[  300.642826][T11033] netlink: 'syz.4.1743': attribute type 13 has an invalid length.
[  300.726999][T11033] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1743'.
[  301.010846][T10282] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  301.085715][T11039] loop4: detected capacity change from 0 to 128
[  301.141649][T11021] loop7: detected capacity change from 0 to 131072
[  301.170444][T11039] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  301.230216][T11021] F2FS-fs (loop7): invalid crc value
[  301.282895][T11021] F2FS-fs (loop7): Found nat_bits in checkpoint
[  301.327818][T11039] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.365419][T11021] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  301.902258][T10230] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  302.403886][   T28] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  302.624673][   T28] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  302.650311][   T28] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  302.670723][   T28] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  302.702612][   T28] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  302.731722][T11062] loop0: detected capacity change from 0 to 32768
[  302.733433][   T28] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  302.762285][T11062] (syz.0.1749,11062,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  302.778767][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.795071][T11062] (syz.0.1749,11062,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  302.812649][T11062] (syz.0.1749,11062,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  302.833621][T11068] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  302.840899][T11068] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  302.905048][   T28] pl2303 5-1:1.0: pl2303 converter detected
[  302.914025][   T28] usb 5-1: pl2303 converter now attached to ttyUSB0
[  302.933029][T11062] JBD2: Ignoring recovery information on journal
[  303.076181][T11062] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  303.314663][T11068] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  303.333772][T11062] (syz.0.1749,11062,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC.
[  303.352121][T11068] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  303.367881][T11068] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  303.375353][T11062] (syz.0.1749,11062,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c
[  303.397061][T11068] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  303.407223][T11062] (syz.0.1749,11062,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  303.419408][T11068] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[  303.426877][T11062] (syz.0.1749,11062,0):ocfs2_quota_read:201 ERROR: status = -5
[  303.442208][ T5776] usb 5-1: USB disconnect, device number 3
[  303.458567][ T5776] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  303.479298][ T5776] pl2303 5-1:1.0: device disconnected
[  303.485171][T11062] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1
[  303.494166][ T5815] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  303.507626][T11062] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 980643439
[  303.525431][T11062] (syz.0.1749,11062,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  303.628012][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  303.703234][ T5815] usb 6-1: Using ep0 maxpacket: 16
[  303.741011][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.774088][ T5815] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.803702][ T5815] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.841516][ T5815] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  303.863225][ T5815] usb 6-1: config 0 interface 0 has no altsetting 0
[  303.869898][ T5815] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  303.896990][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.924693][ T5815] usb 6-1: config 0 descriptor??
[  304.031887][T11102] loop7: detected capacity change from 0 to 4096
[  304.053902][T11102] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512).
[  304.190883][T11102] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  304.229717][T11112] Bluetooth: MGMT ver 1.22
[  304.245300][T11102] ntfs3: loop7: Failed to initialize $Extend/$Reparse.
[  304.420157][ T5815] logitech-djreceiver 0003:046D:C53A.0019: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0
[  304.728402][ T5776] usb 6-1: USB disconnect, device number 4
[  305.194459][T11116] loop0: detected capacity change from 0 to 32768
[  305.217470][T11116] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1761 (11116)
[  305.275670][T11116] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  305.294690][T11116] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  305.303539][T11116] BTRFS info (device loop0): force clearing of disk cache
[  305.351961][T11116] BTRFS info (device loop0): enabling auto defrag
[  305.378931][T11116] BTRFS info (device loop0): max_inline at 0
[  305.404948][T11116] BTRFS info (device loop0): enabling disk space caching
[  305.423294][T11116] BTRFS info (device loop0): disk space caching is enabled
[  305.524442][T11158] Bluetooth: MGMT ver 1.22
[  305.564896][T11116] BTRFS info (device loop0): enabling ssd optimizations
[  305.600025][T11116] BTRFS info (device loop0): rebuilding free space tree
[  305.686951][T11116] BTRFS info (device loop0): disabling free space tree
[  305.709025][T11116] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  305.736904][T11116] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  306.033413][ T1200] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  306.095319][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.193446][ T5815] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  306.265564][ T1200] usb 6-1: unable to get BOS descriptor or descriptor too short
[  306.298570][ T1200] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.339882][ T1200] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.384586][ T1200] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  306.413235][ T5815] usb 8-1: Using ep0 maxpacket: 16
[  306.418527][ T1200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.436805][ T1200] usb 6-1: Product: syz
[  306.451282][ T1200] usb 6-1: Manufacturer: syz
[  306.457194][ T5815] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  306.473227][ T1200] usb 6-1: SerialNumber: syz
[  306.478003][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.512604][ T1200] usb 6-1: selecting invalid altsetting 1
[  306.523575][ T5815] usb 8-1: Product: syz
[  306.527784][ T5815] usb 8-1: Manufacturer: syz
[  306.552223][ T1200] usb 6-1: unit 6 not found!
[  306.557690][ T5815] usb 8-1: SerialNumber: syz
[  306.580539][ T5815] usb 8-1: config 0 descriptor??
[  306.606164][ T5815] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  306.639624][ T5815] usb 8-1: Detected FT-X
[  306.732795][T11176] loop4: detected capacity change from 0 to 32768
[  306.762251][T11176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1772 (11176)
[  306.822584][ T5815] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  306.865203][T11176] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.893222][T11176] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  306.912145][T11176] BTRFS info (device loop4): using free space tree
[  307.008741][T11176] BTRFS info (device loop4): enabling ssd optimizations
[  307.039319][T11176] BTRFS info (device loop4): auto enabling async discard
[  307.240753][T10230] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  307.286038][ T5815] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  307.411846][ T1200] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  307.449692][ T1200] usb 6-1: USB disconnect, device number 5
[  307.542564][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.582434][ T5815] usb 8-1: USB disconnect, device number 2
[  307.789800][ T5815] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  307.837083][ T5815] ftdi_sio 8-1:0.0: device disconnected
[  307.983576][T11229] loop4: detected capacity change from 0 to 512
[  308.015492][T11229] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  308.063747][T11229] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  308.081916][T11229] Quota error (device loop4): write_blk: dquota write failed
[  308.090797][T11229] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  308.102855][T11229] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1777: Failed to acquire dquot type 0
[  308.126391][T11229] EXT4-fs (loop4): 1 truncate cleaned up
[  308.136643][T11229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.295779][T11237] Quota error (device loop4): write_blk: dquota write failed
[  308.346085][T11237] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  308.356457][T11237] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1777: Failed to acquire dquot type 0
[  308.725978][T11252] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1782'.
[  308.751846][T10230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.877333][T11236] loop5: detected capacity change from 0 to 32768
[  308.927317][T11236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1778 (11236)
[  308.943202][ T7102] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  309.031998][T11236] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  309.062374][T11236] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  309.093251][T11236] BTRFS info (device loop5): setting nodatacow, compression disabled
[  309.101506][T11236] BTRFS info (device loop5): turning on flush-on-commit
[  309.121765][T11236] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  309.153360][T11236] BTRFS info (device loop5): use lzo compression, level 0
[  309.156657][ T7102] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.169087][T11236] BTRFS info (device loop5): setting nodatasum
[  309.193142][T11236] BTRFS info (device loop5): use no compression
[  309.209684][T11236] BTRFS info (device loop5): trying to use backup root at mount time
[  309.212971][ T7102] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  309.229958][T11236] BTRFS info (device loop5): max_inline at 0
[  309.248522][T11236] BTRFS info (device loop5): using free space tree
[  309.271612][ T7102] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  309.301110][ T7102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.319796][ T7102] usb 1-1: Product: syz
[  309.334822][ T7102] usb 1-1: Manufacturer: syz
[  309.343389][ T7102] usb 1-1: SerialNumber: syz
[  309.365959][ T7102] cdc_mbim 1-1:1.0: skipping garbage
[  309.394218][ T9437] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  309.439055][T11236] BTRFS warning (device loop5): couldn't read tree root
[  309.446397][T11236] BTRFS warning (device loop5): try to load backup roots slot 1
[  309.458973][ T2956] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  309.472992][T11236] BTRFS warning (device loop5): couldn't read tree root
[  309.473472][T11282] FAULT_INJECTION: forcing a failure.
[  309.473472][T11282] name failslab, interval 1, probability 0, space 0, times 0
[  309.480034][T11236] BTRFS warning (device loop5): try to load backup roots slot 2
[  309.506990][ T2956] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  309.517715][T11236] BTRFS warning (device loop5): couldn't read tree root
[  309.527684][T11236] BTRFS warning (device loop5): try to load backup roots slot 3
[  309.535814][T11282] CPU: 1 PID: 11282 Comm: syz.4.1786 Not tainted syzkaller #0
[  309.543311][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  309.553392][T11282] Call Trace:
[  309.556696][T11282]  <TASK>
[  309.559652][T11282]  dump_stack_lvl+0x18c/0x250
[  309.564373][T11282]  ? show_regs_print_info+0x20/0x20
[  309.569605][T11282]  ? load_image+0x420/0x420
[  309.574150][T11282]  ? __might_sleep+0xe0/0xe0
[  309.578779][T11282]  ? __lock_acquire+0x7eb0/0x7eb0
[  309.583848][T11282]  should_fail_ex+0x394/0x4c0
[  309.588570][T11282]  should_failslab+0x9/0x20
[  309.590220][T11249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  309.593091][T11282]  slab_pre_alloc_hook+0x59/0x300
[  309.605250][T11282]  kmem_cache_alloc+0x5a/0x2c0
[  309.610052][T11282]  ? security_inode_alloc+0x34/0x110
[  309.615414][T11282]  security_inode_alloc+0x34/0x110
[  309.620559][T11282]  inode_init_always+0x914/0xc90
[  309.625535][T11282]  new_inode_pseudo+0x95/0x1d0
[  309.630334][T11282]  new_inode+0x22/0x1d0
[  309.634521][T11282]  shmem_get_inode+0x34d/0xcd0
[  309.639344][T11282]  __shmem_file_setup+0x167/0x2c0
[  309.644431][T11282]  __se_sys_memfd_create+0x357/0x660
[  309.649734][T11282]  do_syscall_64+0x55/0xb0
[  309.654158][T11282]  ? clear_bhb_loop+0x40/0x90
[  309.658837][T11282]  ? clear_bhb_loop+0x40/0x90
[  309.663515][T11282]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  309.669444][T11282] RIP: 0033:0x7f597f79e199
[  309.673871][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.693483][T11282] RSP: 002b:00007f597d9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  309.701900][T11282] RAX: ffffffffffffffda RBX: 00007f597fa25fa0 RCX: 00007f597f79e199
[  309.709875][T11282] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000
[  309.717853][T11282] RBP: 00007f597f835888 R08: 0000000000000000 R09: 0000000000000000
[  309.725824][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.733796][T11282] R13: 00007f597fa26038 R14: 00007f597fa25fa0 R15: 00007ffc632dcd28
[  309.741965][T11282]  </TASK>
[  309.838400][T11236] BTRFS info (device loop5): enabling ssd optimizations
[  309.867120][T11236] BTRFS info (device loop5): auto enabling async discard
[  309.903531][T11236] BTRFS info (device loop5): rebuilding free space tree
[  309.965559][T11236] BTRFS info (device loop5): checking UUID tree
[  310.147226][T10282] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  310.227897][T11261] loop7: detected capacity change from 0 to 32768
[  310.227903][T11249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  310.228424][ T7102] cdc_mbim 1-1:1.0: setting rx_max = 16384
[  310.324557][ T1200] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  310.338341][T11261] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  310.465630][ T7102] cdc_mbim 1-1:1.0: setting tx_max = 184
[  310.513241][ T1200] usb 5-1: Using ep0 maxpacket: 8
[  310.517517][ T7102] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  310.520050][ T1200] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  310.553300][ T1200] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  310.556218][T11261] XFS (loop7): Ending clean mount
[  310.593420][ T1200] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  310.633377][ T1200] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  310.638306][ T7102] wwan wwan0: port wwan0mbim0 attached
[  310.673261][ T1200] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  310.718572][ T1200] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  310.731857][ T7102] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 3e:a8:7a:de:49:78
[  310.788248][ T7102] usb 1-1: USB disconnect, device number 15
[  310.793620][ T1200] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  310.803965][ T7102] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  310.818702][   T27] audit: type=1800 audit(1791450551.506:58): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1784" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  310.824385][ T1200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.850617][T11261] XFS (loop7): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  311.032429][ T7102] wwan wwan0: port wwan0mbim0 disconnected
[  311.121592][ T1200] usb 5-1: GET_CAPABILITIES returned 0
[  311.135414][ T1200] usbtmc 5-1:16.0: can't read capabilities
[  311.278185][T10772] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  311.514411][ T1200] usb 5-1: USB disconnect, device number 4
[  311.792476][T11331] loop7: detected capacity change from 0 to 128
[  311.817112][T11331] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  311.858241][T11331] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  311.890463][T11331] fscrypt (loop7, inode 12): Unsupported encryption flags (0x7b)
[  311.986508][T10772] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  312.045735][T11323] loop0: detected capacity change from 0 to 32768
[  312.084493][T11323] JBD2: Ignoring recovery information on journal
[  312.173991][T11338] loop7: detected capacity change from 0 to 256
[  312.205208][T11323] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  312.849406][T11358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1800'.
[  312.951542][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  313.365651][T11376] IPVS: fo: FWM 3 0x00000003 - no destination available
[  313.373213][ T5815] IPVS: starting estimator thread 0...
[  313.451537][T11380] loop0: detected capacity change from 0 to 128
[  313.482662][T11380] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  313.503640][T11377] IPVS: using max 21 ests per chain, 50400 per kthread
[  313.533581][T11380] hpfs: filesystem error: improperly stopped
[  313.550034][T11380] hpfs: You really don't want any checks? You are crazy...
[  313.570975][T11380] hpfs: hpfs_map_sector(): read error
[  313.590451][T11380] hpfs: code page support is disabled
[  313.621799][T11380] hpfs: hpfs_map_4sectors(): unaligned read
[  313.631132][T11386] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1809'.
[  313.634570][T11380] hpfs: hpfs_map_4sectors(): unaligned read
[  313.667803][T11380] hpfs: filesystem error: unable to find root dir
[  313.667910][T11386] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1809'.
[  313.753216][ T5815] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  313.898006][T11370] loop4: detected capacity change from 0 to 32768
[  313.924666][T11370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1805 (11370)
[  313.963780][T11370] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  313.983749][ T5815] usb 8-1: Using ep0 maxpacket: 16
[  313.991827][ T5815] usb 8-1: config index 0 descriptor too short (expected 51443, got 18)
[  314.000127][T11370] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  314.007706][ T5815] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  314.022837][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.032265][ T5815] usb 8-1: Product: syz
[  314.038928][T11370] BTRFS info (device loop4): using free space tree
[  314.041023][ T5815] usb 8-1: Manufacturer: syz
[  314.054038][ T5815] usb 8-1: SerialNumber: syz
[  314.081168][ T5815] r8152-cfgselector 8-1: config 0 descriptor??
[  314.219166][T11370] BTRFS info (device loop4): enabling ssd optimizations
[  314.226530][T11370] BTRFS info (device loop4): auto enabling async discard
[  314.556828][ T5815] r8152-cfgselector 8-1: Unknown version 0x0000
[  314.594951][ T5815] r8152-cfgselector 8-1: USB disconnect, device number 3
[  314.866403][ T9440] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  315.062489][T10230] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  315.468040][T11421] loop5: detected capacity change from 0 to 32768
[  315.496900][T11447] loop0: detected capacity change from 0 to 128
[  315.602112][T11447] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  315.713531][T11447] ext4 filesystem being mounted at /518/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  315.981962][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  316.011624][ T5815] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  316.279216][ T5815] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  316.308155][ T5815] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.359546][ T5815] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.366982][T11467] bond0: (slave dummy0): Error: Slave does not support XDP
[  316.393300][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0
[  316.399968][ T5815] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  316.433260][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.480325][ T5815] usb 5-1: config 0 descriptor??
[  316.575739][T11479] loop1: detected capacity change from 0 to 8
[  316.597855][T11479] Dev loop1: unable to read RDB block 8
[  316.611779][T11479]  loop1: unable to read partition table
[  316.628856][T11479] loop1: partition table beyond EOD, truncated
[  316.669938][T11479] loop_reread_partitions: partition scan of loop1 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  316.814886][T11486] syzkaller1: entered promiscuous mode
[  316.820442][T11486] syzkaller1: entered allmulticast mode
[  316.988547][ T5815] input: HID 17ef:6047 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6047.001A/input/input23
[  317.131839][ T5815] lenovo 0003:17EF:6047.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[  317.213900][ T5815] usb 5-1: USB disconnect, device number 5
[  317.262227][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.275494][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  317.412238][T11501] loop7: detected capacity change from 0 to 1024
[  317.424777][T11498] fido_id[11498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  317.484711][T11501] EXT4-fs: Ignoring removed orlov option
[  317.551481][T11501] EXT4-fs: test_dummy_encryption requires encrypt feature
[  317.899732][T11515] loop7: detected capacity change from 0 to 512
[  317.933280][ T5815] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  318.024559][T11515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.047672][T11483] loop0: detected capacity change from 0 to 65536
[  318.062125][T11515] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.117103][T11521] tun0: tun_chr_ioctl cmd 2147767511
[  318.126983][T11521] tun0: tun_chr_ioctl cmd 35108
[  318.145246][ T5815] usb 6-1: config 0 has an invalid interface number: 120 but max is 0
[  318.155200][ T5815] usb 6-1: config 0 has no interface number 0
[  318.161427][ T5815] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  318.165672][T11483] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  318.187473][T11515] EXT4-fs (loop7): shut down requested (2)
[  318.222554][ T5815] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  318.233257][ T5815] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  318.242596][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.260874][ T5815] usb 6-1: config 0 descriptor??
[  318.266876][T10772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.271519][ T5815] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input24
[  318.302027][T11483] XFS (loop0): Ending clean mount
[  318.330733][T11483] XFS (loop0): Quotacheck needed: Please wait.
[  318.593322][T11483] XFS (loop0): Quotacheck: Done.
[  318.660137][ T1200] usb 6-1: USB disconnect, device number 6
[  318.762866][T11483] XFS (loop0): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[  318.962892][ T5772] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  319.148596][T11536] loop4: detected capacity change from 0 to 32768
[  319.193362][T11536] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1843 (11536)
[  319.225323][T11536] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  319.269126][T11536] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  319.315168][T11536] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  319.345458][T11536] BTRFS info (device loop4): use zstd compression, level 3
[  319.383272][T11536] BTRFS info (device loop4): using free space tree
[  319.494980][T11536] BTRFS info (device loop4): enabling ssd optimizations
[  319.523441][T11536] BTRFS info (device loop4): auto enabling async discard
[  319.755206][T11573] loop5: detected capacity change from 0 to 4096
[  319.841102][T11573] ntfs3: loop5: Failed to load $Extend (-22).
[  319.874050][T11573] ntfs3: loop5: Failed to initialize $Extend.
[  319.879655][T11579] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1846'.
[  320.201730][T11586] loop0: detected capacity change from 0 to 2048
[  320.319396][T11586]  loop0: p1 < >
[  320.334594][T10230] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  320.962733][T11609] loop4: detected capacity change from 0 to 256
[  321.105812][T11609] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  321.160470][T11609] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  321.213423][T11609] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  321.244577][   T27] audit: type=1800 audit(1791450561.926:59): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1856" name="file1" dev="loop4" ino=1048767 res=0 errno=0
[  321.350684][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1860'.
[  321.773226][ T5760] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  321.957441][ T5760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  321.994044][ T5760] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  322.021231][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.044238][ T5760] usb 6-1: config 0 descriptor??
[  322.054266][T11626] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  322.294894][ T5760] usbhid 6-1:0.0: can't add hid device: -71
[  322.314346][ T5760] usbhid: probe of 6-1:0.0 failed with error -71
[  322.343002][ T5760] usb 6-1: USB disconnect, device number 7
[  322.451135][T11638] loop0: detected capacity change from 0 to 32768
[  322.486789][T11638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1866 (11638)
[  322.530553][T11638] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  322.579426][T11638] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  322.613302][T11638] BTRFS info (device loop0): using free space tree
[  322.835287][T11638] BTRFS info (device loop0): enabling ssd optimizations
[  322.855476][T11638] BTRFS info (device loop0): auto enabling async discard
[  323.281404][T11667] loop7: detected capacity change from 0 to 32768
[  323.309013][ T1006] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  323.488813][   T27] audit: type=1800 audit(1791450564.176:60): pid=11667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1876" name="file1" dev="loop7" ino=4097 res=0 errno=0
[  323.669835][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1884'.
[  323.716361][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  323.716562][T11711] ipvlan2: entered allmulticast mode
[  323.732399][T11711] syz_tun: entered allmulticast mode
[  324.463295][T11732] loop7: detected capacity change from 0 to 1024
[  324.477819][T11731] db_root: cannot open: /dev/net/tun
[  324.486872][T11731] db_root: not a directory: /dev/net/tun
[  324.548516][T11732] hfsplus: invalid length 32517 has been corrected to 255
[  324.644040][T11732] hfsplus: invalid length 32517 has been corrected to 255
[  324.651779][T11732] hfsplus: invalid length 32517 has been corrected to 255
[  324.676974][T11732] hfsplus: invalid length 32517 has been corrected to 255
[  324.744271][T11732] hfsplus: invalid length 32517 has been corrected to 255
[  324.774014][T11732] hfsplus: b-tree write err: -5, ino 2
[  324.809359][   T27] audit: type=1800 audit(1791450565.496:61): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1895" name="submit_queues" dev="configfs" ino=27419 res=0 errno=0
[  324.935518][ T2956] hfsplus: b-tree write err: -5, ino 25
[  324.941356][ T2956] hfsplus: b-tree write err: -5, ino 4
[  324.962364][ T2956] hfsplus: b-tree write err: -5, ino 2
[  325.561024][T11775] loop3: detected capacity change from 0 to 7
[  325.568987][T11775] Dev loop3: unable to read RDB block 7
[  325.583558][T11775]  loop3: AHDI p3 p4
[  325.587607][T11775] loop3: partition table partially beyond EOD, truncated
[  325.598467][T11775] loop3: p3 start 1702000233 is beyond EOD, truncated
[  325.763272][ T7338] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  325.976418][ T7338] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  325.995497][ T7338] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  326.015292][ T7338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.221260][T11796] loop4: detected capacity change from 0 to 2048
[  326.229495][T11799] loop7: detected capacity change from 0 to 1024
[  326.279308][T11799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.279993][ T7338] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device
[  326.331051][T11796] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  326.350447][ T7338] wwan wwan0: port wwan0qmi0 attached
[  326.493899][ T7338] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, e6:ee:7d:08:4d:35
[  326.566683][ T7338] usb 6-1: USB disconnect, device number 8
[  326.594647][ T7338] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device
[  326.607175][T10772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.744551][ T7338] wwan wwan0: port wwan0qmi0 disconnected
[  326.904207][T11815] loop0: detected capacity change from 0 to 4096
[  326.991878][T11822] loop4: detected capacity change from 0 to 512
[  327.053516][T11827] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  327.118442][T11822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  327.187345][T11822] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.288190][T11822] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  327.315659][T11822] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  327.327394][T11822] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1913: Failed to acquire dquot type 0
[  327.389821][T11834] loop0: detected capacity change from 0 to 512
[  327.420155][T10230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  327.443479][T11834] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  327.515816][T11834] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.1916: casefold flag without casefold feature
[  327.634789][T11834] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1916: couldn't read orphan inode 15 (err -117)
[  327.721052][T11834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.767605][T11843] loop5: detected capacity change from 0 to 256
[  327.789726][T11834] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1916: bg 0: block 5: invalid block bitmap
[  327.859310][T11843] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  327.878981][T11844] CacheFiles: mkdir cache failed with error -105
[  327.901602][T11844] CacheFiles: Failed to register: -105
[  328.021415][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.051676][T11843] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  328.131739][T11843] exFAT-fs (loop5): Filesystem has been set read-only
[  328.193858][ T7338] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  328.413447][ T7338] usb 5-1: Using ep0 maxpacket: 8
[  328.431429][ T7338] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  328.453958][ T7338] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  328.491672][ T7338] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  328.542162][ T7338] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  328.566663][ T7338] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  328.619205][ T7338] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  328.631393][T11863] sctp: [Deprecated]: syz.5.1922 (pid 11863) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.631393][T11863] Use struct sctp_sack_info instead
[  328.647759][ T7338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.862284][T11869] bond1 (unregistering): Released all slaves
[  328.970948][T11875] loop7: detected capacity change from 0 to 2048
[  329.039910][T11875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.464911][T11888] usbtmc 5-1:16.0: simple usb_control_msg failed -32
[  329.480059][ T7338] usb 5-1: USB disconnect, device number 6
[  329.916371][T11884] loop7: detected capacity change from 0 to 32768
[  329.993549][ T7338] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  330.213334][ T7338] usb 1-1: Using ep0 maxpacket: 32
[  330.227290][ T7338] usb 1-1: unable to get BOS descriptor or descriptor too short
[  330.257292][ T7338] usb 1-1: config 1 has an invalid interface number: 21 but max is 0
[  330.283258][ T7338] usb 1-1: config 1 has no interface number 0
[  330.293802][ T7338] usb 1-1: config 1 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  330.316561][ T7338] usb 1-1: config 1 interface 21 has no altsetting 0
[  330.338789][ T7338] usb 1-1: New USB device found, idVendor=0424, idProduct=9905, bcdDevice=17.da
[  330.358444][ T7338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.375747][ T7338] usb 1-1: Product: syz
[  330.383500][ T7338] usb 1-1: Manufacturer: syz
[  330.388230][ T7338] usb 1-1: SerialNumber: syz
[  330.404037][    T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  330.605767][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.654701][    T8] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  330.664704][ T7338] smsc95xx v2.0.0
[  330.669169][ T7338] smsc95xx 1-1:1.21 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  330.685397][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.703538][    T8] usb 5-1: Product: syz
[  330.707981][ T7338] smsc95xx: probe of 1-1:1.21 failed with error -22
[  330.718035][    T8] usb 5-1: Manufacturer: syz
[  330.722675][    T8] usb 5-1: SerialNumber: syz
[  330.748444][ T7338] usb 1-1: USB disconnect, device number 16
[  330.919055][T11926] loop5: detected capacity change from 0 to 736
[  331.007338][    T8] dvbdev: DVB: registering new adapter (DEC3000-s)
[  331.051249][    T8] usb 5-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)...
[  331.235957][    T8] usb 5-1: selecting invalid altsetting 8
[  331.506073][    T8] usb 5-1: USB disconnect, device number 7
[  331.614211][ T5776] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  331.759832][T11954] loop7: detected capacity change from 0 to 512
[  331.774539][T11954] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  331.813735][T11954] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1947: invalid indirect mapped block 9 (level 0)
[  331.839122][ T5776] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  331.866656][T11954] EXT4-fs (loop7): 1 truncate cleaned up
[  331.884075][T11954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.903735][ T5776] usb 1-1: config 0 interface 0 has no altsetting 0
[  331.910408][ T5776] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  331.948097][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.972526][ T5776] usb 1-1: config 0 descriptor??
[  332.056875][T10772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.399790][T11973] loop4: detected capacity change from 0 to 1024
[  332.430172][T11976] loop5: detected capacity change from 0 to 2048
[  332.476623][ T5776] input: HID 04f2:1421 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F2:1421.001B/input/input25
[  332.555092][T11976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.696264][ T5776] chicony 0003:04F2:1421.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0
[  332.762934][T11983] gadgetfs: bound to dummy_udc driver
[  332.774602][ T5776] usb 1-1: USB disconnect, device number 17
[  332.828340][ T2956] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  332.892441][ T2956] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  332.924589][T11992] ieee802154 phy0 wpan0: encryption failed: -22
[  332.931001][ T2956] EXT4-fs (loop5): This should not happen!! Data will be lost
[  332.931001][ T2956] 
[  332.946999][ T2956] EXT4-fs (loop5): Total free blocks count 0
[  332.953028][ T2956] EXT4-fs (loop5): Free/Dirty block details
[  332.958827][T11987] fido_id[11987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  332.981768][ T2956] EXT4-fs (loop5): free_blocks=2415919504
[  332.993067][ T2956] EXT4-fs (loop5): dirty_blocks=16
[  332.998523][ T2956] EXT4-fs (loop5): Block reservation details
[  333.043304][ T2956] EXT4-fs (loop5): i_reserved_data_blocks=1
[  333.064909][ T2956] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28
[  333.255390][ T5776] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  333.263326][    C0] gadgetfs: connected
[  333.271095][ T5776] gadgetfs: disconnected
[  333.500349][T12011] loop0: detected capacity change from 0 to 4096
[  333.562565][T12011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  333.803378][ T5815] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  333.823272][T12011] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present
[  333.873339][T12011] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  333.882811][T12011] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1959: Failed to acquire dquot type 1
[  333.910189][T12011] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  333.964748][T12023] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  333.987024][T12028] loop6: detected capacity change from 0 to 8
[  333.995842][T12023] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present
[  334.015026][T12028] Dev loop6: unable to read RDB block 8
[  334.020745][T12028]  loop6: unable to read partition table
[  334.027010][T12023] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  334.029603][ T5815] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  334.037335][T12028] loop6: partition table beyond EOD, truncated
[  334.057616][T12023] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1959: Failed to acquire dquot type 1
[  334.072433][T12028] loop_reread_partitions: partition scan of loop6 (�被x�^>����) failed (rc=-5)
[  334.082678][ T5815] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  334.100119][T12023] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  334.124467][ T5815] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  334.163265][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.205631][T12015] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  334.217641][ T5815] usb 8-1: Quirk or no altest; falling back to MIDI 1.0
[  334.617076][ T5815] usb 8-1: USB disconnect, device number 4
[  335.017567][ T9440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.121097][ T9440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.226864][ T9440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.340832][ T9440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.393638][T12063] device-mapper: ioctl: name not supplied when creating device
[  335.801155][T12078] loop5: detected capacity change from 0 to 512
[  335.834905][T12078] EXT4-fs: Ignoring removed oldalloc option
[  335.869063][T12078] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  335.943348][T12078] EXT4-fs (loop5): 1 truncate cleaned up
[  335.950454][T12078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.974337][ T7338] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  336.017117][T12082] loop7: detected capacity change from 0 to 1024
[  336.031534][    T8] input: syz0 as /devices/virtual/misc/uhid/0018:0F63:0101.001C/input/input26
[  336.083329][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  336.107608][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  336.117531][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  336.131985][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  336.133679][T10282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.182906][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  336.195941][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  336.200036][T12082] hfsplus: failed to load root directory
[  336.226477][ T7338] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  336.259275][    T8] hid-generic 0018:0F63:0101.001C: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1
[  336.295455][ T7338] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  336.322791][ T7338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.590335][T12088] fido_id[12088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  336.666711][ T7338] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device
[  336.691568][ T7338] wwan wwan0: port wwan0qmi0 attached
[  336.714973][T12098] loop7: detected capacity change from 0 to 128
[  337.042545][T12106] loop5: detected capacity change from 0 to 512
[  337.088887][T12106] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.1985: bg 0: block 5: invalid block bitmap
[  337.107797][ T7338] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, e6:f0:3f:d9:b2:8b
[  337.138499][T12106] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  337.167528][ T7338] usb 5-1: USB disconnect, device number 8
[  337.178736][T12106] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1985: invalid indirect mapped block 3 (level 2)
[  337.196070][ T7338] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[  337.244397][T12106] EXT4-fs (loop5): 1 orphan inode deleted
[  337.250855][T12106] EXT4-fs (loop5): 1 truncate cleaned up
[  337.262930][T12106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.441592][ T7338] wwan wwan0: port wwan0qmi0 disconnected
[  337.518811][T10282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.527969][   T28] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  337.671487][T12130] loop5: detected capacity change from 0 to 512
[  337.682307][T12130] EXT4-fs: Ignoring removed nomblk_io_submit option
[  337.689268][T12130] EXT4-fs: Ignoring removed nomblk_io_submit option
[  337.735215][   T28] usb 8-1: Using ep0 maxpacket: 16
[  337.740511][T12130] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  337.757930][   T28] usb 8-1: config 1 has an invalid interface number: 105 but max is 0
[  337.799750][   T28] usb 8-1: config 1 has no interface number 0
[  337.853235][   T28] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  337.863457][   T28] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  337.873569][T12130] EXT4-fs (loop5): 1 truncate cleaned up
[  337.875077][T12130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.879997][   T28] usb 8-1: config 1 interface 105 has no altsetting 0
[  337.903010][   T28] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  337.912452][   T28] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  337.920618][   T28] usb 8-1: Product: syz
[  337.925288][   T28] usb 8-1: Manufacturer: syz
[  337.929923][   T28] usb 8-1: SerialNumber: syz
[  337.938639][T12107] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  337.946288][T12107] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  337.976091][T12084] chnl_net:caif_netlink_parms(): no params data found
[  338.224148][T10282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.303406][ T5780] Bluetooth: hci2: command tx timeout
[  338.323259][T12084] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.330593][T12084] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.337953][T12084] bridge_slave_0: entered allmulticast mode
[  338.348921][T12084] bridge_slave_0: entered promiscuous mode
[  338.359812][T12084] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.367355][T12084] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.375230][T12084] bridge_slave_1: entered allmulticast mode
[  338.383021][T12084] bridge_slave_1: entered promiscuous mode
[  338.390626][   T28] aqc111: probe of 8-1:1.105 failed with error -71
[  338.426461][   T28] usb 8-1: USB disconnect, device number 5
[  338.431192][ T9440] hsr_slave_0: left promiscuous mode
[  338.504205][ T9440] hsr_slave_1: left promiscuous mode
[  338.520279][ T9440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.543313][ T9440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.589405][ T9440] veth0: left allmulticast mode
[  338.599569][ T9440] veth0: left promiscuous mode
[  338.613511][ T9440] bridge0: port 3(veth0) entered disabled state
[  338.629080][ T9440] bridge_slave_1: left allmulticast mode
[  338.645941][T12153] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1989'.
[  338.646146][ T9440] bridge_slave_1: left promiscuous mode
[  338.669419][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.682449][ T9440] bridge_slave_0: left allmulticast mode
[  338.698913][ T9440] bridge_slave_0: left promiscuous mode
[  338.709120][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.718992][ T9440] general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] PREEMPT SMP KASAN
[  338.730876][ T9440] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127]
[  338.740167][ T9440] CPU: 0 PID: 9440 Comm: kworker/u4:20 Not tainted syzkaller #0
[  338.747902][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  338.753240][T12155] loop5: detected capacity change from 0 to 4096
[  338.757953][ T9440] Workqueue: netns cleanup_net
[  338.758010][ T9440] RIP: 0010:br_del_frame+0xd1/0x150
[  338.758101][ T9440] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 6d 74 f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 f0 6d 74 f8 4d 89 37 4d 85 f6 74
[  338.758117][ T9440] RSP: 0018:ffffc900031f7870 EFLAGS: 00010a06
[  338.758133][ T9440] RAX: 1bd5a00000000024 RBX: ffffffff8f6e4080 RCX: ffff88807aa43c00
[  338.758147][ T9440] RDX: 0000000000000000 RSI: ffffffff8f6e4068 RDI: ffffffff8f6e4078
[  338.758158][ T9440] RBP: 000000000000001d R08: ffffffff91ff150f R09: 1ffffffff23fe2a1
[  338.758171][ T9440] R10: dffffc0000000000 R11: fffffbfff23fe2a2 R12: dffffc0000000000
[  338.758184][ T9440] R13: 1ffffffff1edc810 R14: 0000000000000000 R15: dead000000000122
[  338.758197][ T9440] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  338.758217][ T9440] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  338.855624][ T9440] CR2: 00007fd8cd427dac CR3: 0000000054f53000 CR4: 00000000003506f0
[  338.863597][ T9440] Call Trace:
[  338.866878][ T9440]  <TASK>
[  338.869807][ T9440]  br_cfm_port_del+0x116/0x1b0
[  338.874656][ T9440]  del_nbp+0x167/0x9e0
[  338.878719][ T9440]  br_dev_delete+0x6e/0x130
[  338.883215][ T9440]  ? nbp_backup_change+0x390/0x390
[  338.888329][ T9440]  default_device_exit_batch+0x8c0/0xa00
[  338.894026][ T9440]  ? __might_sleep+0xe0/0xe0
[  338.898608][ T9440]  ? rdma_dev_exit_net+0x2b3/0x340
[  338.903787][ T9440]  ? netdev_exit+0xc0/0xc0
[  338.908198][ T9440]  ? rdma_dev_init_net+0x280/0x280
[  338.913315][ T9440]  ? netdev_exit+0xc0/0xc0
[  338.917717][ T9440]  cleanup_net+0x785/0xb00
[  338.922118][ T9440]  ? ops_free_list+0x3b0/0x3b0
[  338.926883][ T9440]  ? _raw_spin_unlock_irq+0x23/0x50
[  338.932192][ T9440]  ? process_scheduled_works+0x975/0x1600
[  338.938049][ T9440]  ? process_scheduled_works+0x975/0x1600
[  338.943775][ T9440]  process_scheduled_works+0xa60/0x1600
[  338.949336][ T9440]  ? worker_attach_to_pool+0x370/0x370
[  338.954798][ T9440]  ? assign_work+0x3cc/0x5d0
[  338.959392][ T9440]  worker_thread+0xa5e/0xfe0
[  338.963995][ T9440]  kthread+0x2fa/0x390
[  338.968065][ T9440]  ? pr_cont_work+0x550/0x550
[  338.972739][ T9440]  ? kthread_blkcg+0xd0/0xd0
[  338.977324][ T9440]  ret_from_fork+0x48/0x80
[  338.981763][ T9440]  ? kthread_blkcg+0xd0/0xd0
[  338.986346][ T9440]  ret_from_fork_asm+0x11/0x20
[  338.991126][ T9440]  </TASK>
[  338.994145][ T9440] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  339.005830][ T9440] ---[ end trace 0000000000000000 ]---
[  339.011327][ T9440] RIP: 0010:br_del_frame+0xd1/0x150
[  339.017205][ T9440] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 6d 74 f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 f0 6d 74 f8 4d 89 37 4d 85 f6 74
[  339.038817][T12155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  339.134126][ T9440] RSP: 0018:ffffc900031f7870 EFLAGS: 00010a06
[  339.140237][ T9440] RAX: 1bd5a00000000024 RBX: ffffffff8f6e4080 RCX: ffff88807aa43c00
[  339.185151][ T9440] RDX: 0000000000000000 RSI: ffffffff8f6e4068 RDI: ffffffff8f6e4078
[  339.194682][T12155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.212340][ T9440] RBP: 000000000000001d R08: ffffffff91ff150f R09: 1ffffffff23fe2a1
[  339.246350][ T9440] R10: dffffc0000000000 R11: fffffbfff23fe2a2 R12: dffffc0000000000
[  339.263726][ T9440] R13: 1ffffffff1edc810 R14: 0000000000000000 R15: dead000000000122
[  339.293241][ T9440] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  339.302396][ T9440] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  339.323168][ T9440] CR2: 000055ef859d5000 CR3: 00000000320b4000 CR4: 00000000003506e0
[  339.331312][ T9440] Kernel panic - not syncing: Fatal exception
[  339.337791][ T9440] Kernel Offset: disabled
[  339.342103][ T9440] Rebooting in 86400 seconds..