last executing test programs:

11.416888986s ago: executing program 1 (id=862):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd30000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0xff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0)
write(r1, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400), 0x4)
sendto(0xffffffffffffffff, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000001480)=""/4094, 0xffe}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000780)=""/184, 0xb8}], 0x5}}], 0x1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')

11.000121545s ago: executing program 3 (id=867):
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x97, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x35, 0x1, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x6, 0x66}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0xf, 0xe, 0x40, 0x4}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "bdd1173eb67778629749cabc97cada19"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x1, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0xf, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x5, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x9, 0x7}]}, 0x6, [{0xe7, &(0x7f0000000140)=@string={0xe7, 0x3, "5a862cbf66a7339f4fdf9953df40f53de735a62048b6d565f2fa68bc37e161c0387d6553afd351ffb66e2de901ceb807651933228eb5337b1fd0a5138f739ca073f81413da197e0c102fb41b9072ecc4402694f75c3a9d2ce0e16bd8840295484433e6073349b1d024ec1b0190f6b53a8a1b169c4eece2948994d90644dc3219d8ebe23456ed7b5ffa0c682581a369ac215f3d216c8f46563183a216ae25fb4e7b2254323cee25369706ada9510e47eb468c5c84d59031d8fae65191319096d6417db0dbb2c0af1fef0da22fd89314298c410713711563347a4de0b4d54cd37a1c6e94c803"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}, {0x93, &(0x7f0000000280)=@string={0x93, 0x3, "5c26751b3192098e9027a4596185e47a36b60226ff042a6bb2f7bd94ef7c93f9445a50e6a8e7935df7e3037c0bb4f0a19a651c473204ae69eb6f10cd62998d01a16297aae7fd4ae904d4238903893341a0214e9e226536cf6a37d7199372134ed8605594c652fa5c07d584baadcca3cc455810c6556dfdf68a75e609436ee4ec12d06c5a1056a7363beeceeb9eb73fbc45"}}, {0xbc, &(0x7f0000000340)=@string={0xbc, 0x3, "1abbf6328716943a669f154a45df9ad28c3d3245cdcf2989f51013e187c340ca0453bf4a24c736e5b5e6b6082e4430689e4e3963b470746ae3d1c75be13b52a1b47cdeea0e2a51ef4b3ae88cd41bb3e4c62402a1746001f0d1cba105a39f5c3bd2fbfe55664844396a05a2df43cc262dc4bcf62491b4bba4b5fe35dba5a2fe220ec44107f1fe640b226d2d5820e1350457fd0bba58032a52fcd4c6fa692771ad410ba8821bcfc5d30c9b672277c787be2daf0a8f45c544f8db8a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x300a}}]})
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000002180)={[{@numtail}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@flush}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe5c}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@errors_continue}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}]}, 0x1, 0x362, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

10.869613554s ago: executing program 1 (id=869):
socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@sysvgroups}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setuid(0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e)
syz_emit_ethernet(0x16b, &(0x7f0000000a00)={@local, @random="1a18ccacd4b9", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ff0ff", 0x131, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0xfffffffe, "97a8c3479adbf8f905eb3494ca405c5bb9e943e8291667bced3aca7cb242ab41a60bafde0fb4f62dc52b9cd2db837c9dc0b5ffb12bad3b0dbc3b8b732b9224ed0cc404850cd570914994ed2543e3dc1c6ff11495267672aa02fc3d3e5cd244e4279d5ca67ef7a09a047bf6b0eb5ed5148664cd6dae42ee45c748d6ec9311bcc16566bdc326d4824426460302d1a84696fbc89fa5f91a069c448293a0e542ca9959256749036b01e7c43091bd02901be24e7c5389198092b2339ba7217ef25103e1f90efcc1adc2d9a794a3704b2a0260b13f6f7ec6cd9dd7afda7139869365672b44b9d9dd"}}}}}}}, 0x0)
setpriority(0x2, 0xff, 0x0)
io_setup(0x4, &(0x7f00000004c0)=<r2=>0x0)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
signalfd4(r4, &(0x7f0000000140), 0x8, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xf6, @any, 0x0, 0x2}, 0xe)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})

10.142563312s ago: executing program 1 (id=871):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@sysvgroups}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e)
syz_emit_ethernet(0x16b, &(0x7f0000000a00)={@local, @random="1a18ccacd4b9", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ff0ff", 0x131, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0xfffffffe, "97a8c3479adbf8f905eb3494ca405c5bb9e943e8291667bced3aca7cb242ab41a60bafde0fb4f62dc52b9cd2db837c9dc0b5ffb12bad3b0dbc3b8b732b9224ed0cc404850cd570914994ed2543e3dc1c6ff11495267672aa02fc3d3e5cd244e4279d5ca67ef7a09a047bf6b0eb5ed5148664cd6dae42ee45c748d6ec9311bcc16566bdc326d4824426460302d1a84696fbc89fa5f91a069c448293a0e542ca9959256749036b01e7c43091bd02901be24e7c5389198092b2339ba7217ef25103e1f90efcc1adc2d9a794a3704b2a0260b13f6f7ec6cd9dd7afda7139869365672b44b9d9dd"}}}}}}}, 0x0)
setpriority(0x2, 0xff, 0x0)
io_setup(0x4, &(0x7f00000004c0)=<r3=>0x0)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80))
signalfd4(r5, &(0x7f0000000140), 0x8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})

9.096301488s ago: executing program 1 (id=875):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x5c0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000340)=""/66, &(0x7f00000003c0)=""/181, &(0x7f0000000480)=""/240, 0x1000})
socket$inet6(0xa, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="7b97fb55efee68936b20adae5ff96eb42a32fc618907150e46faf1b96a2ddacc7e9fc2778c25a5d6c6ff5bd48e21ee93e5f61786538daa381b41f75e9bb8acebac68691be26cb25d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='sys_exit\x00', r0}, 0x18)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
shutdown(r5, 0x0)
connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

8.153724305s ago: executing program 1 (id=884):
gettid()
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xdf, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x56, 0x0, 0x15, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x34, {0x9, 0x21, 0x1000, 0x8, 0x1, {0x22, 0x44}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x81, 0x9}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x1, 0xfd, 0x5, 0x20, 0xa}, 0x107, &(0x7f0000000f00)={0x5, 0xf, 0x107, 0x2, [@generic={0xf7, 0x10, 0xa, "6849ceb785ba96d3bb744c8a72d6e284affbdff8cfe6a562e924fb3401e51f6c09064faf34a0ac9e03b547cdf7062efdfb7982463d49198a154fc1123b9a9e644ac9a8b69665f8e1092d2a4094d3f7f4d23d6489c49814dee7db54bb22005a35e4d7ba1d1f795976467ed873356ca5595a9350a78ff90f19379c1609abd0bf9562593720f376b03daa34486a03b2937a8aff0c5862b709cf50de7e6d6e2a8f6f4b87dbb59d921d5b900b709ccd812a34d6aa5117c48c30cb402b8767059e64948c38c7a8f25eeb0864a5319e23380a058fec7c87ed45171b5e8ddebb54e64386c5c2187e2a070062e7a8e26839d4e90a9a52ff0f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x4, 0xff, 0x6, 0xa}]}, 0x1, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x405}}]})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd600000000018f2b6fe8000000000000000000000000000bbffc9c716020000000000000000000000018300907800000000fc00"/78], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a404ac, &(0x7f0000001140)=ANY=[], 0xfe, 0x0, &(0x7f0000001140))
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))

6.627558661s ago: executing program 3 (id=886):
creat(&(0x7f0000000100)='./bus\x00', 0x50)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x0, 0x430, 0x568, 0x0, 0x430, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'ipvlan0\x00', 'veth0\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@empty}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'geneve0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [], [], 'pimreg0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
fstatfs(0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x5526, &(0x7f000000b240)="$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")
unshare(0x400)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14727d, 0x0)
fdatasync(r1)

6.617097721s ago: executing program 2 (id=887):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d4}, 0x8000)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/83, 0x10c000, 0x800}, 0x20)

6.150968809s ago: executing program 2 (id=888):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x62042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000480), 0x4)
io_uring_setup(0x63d8, &(0x7f0000000380))
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fdatasync(0xffffffffffffffff)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x1000000201005)

5.990182829s ago: executing program 3 (id=890):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000340)=""/66, &(0x7f00000003c0)=""/181, &(0x7f0000000480)=""/240, 0x1000})
socket$inet6(0xa, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="7b97fb55efee68936b20adae5ff96eb42a32fc618907150e46faf1b96a2ddacc7e9fc2778c25a5d6c6ff5bd48e21ee93e5f61786538daa381b41f75e9bb8acebac68691be26cb25d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='sys_exit\x00', r0}, 0x18)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
shutdown(r5, 0x0)
connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

5.257968276s ago: executing program 2 (id=892):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd30000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0xff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400), 0x4)
sendto(0xffffffffffffffff, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000001480)=""/4094, 0xffe}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000780)=""/184, 0xb8}], 0x5}}], 0x1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')

5.132414816s ago: executing program 0 (id=893):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd30000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0xff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0)
write(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400), 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000001480)=""/4094, 0xffe}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000780)=""/184, 0xb8}], 0x5}}], 0x1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')

4.951363125s ago: executing program 2 (id=894):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x5c0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000340)=""/66, &(0x7f00000003c0)=""/181, &(0x7f0000000480)=""/240, 0x1000})
socket$inet6(0xa, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="7b97fb55efee68936b20adae5ff96eb42a32fc618907150e46faf1b96a2ddacc7e9fc2778c25a5d6c6ff5bd48e21ee93e5f61786538daa381b41f75e9bb8acebac68691be26cb25d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='sys_exit\x00', r0}, 0x18)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
shutdown(r5, 0x0)
connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

4.527320274s ago: executing program 3 (id=896):
gettid()
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xdf, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x56, 0x0, 0x15, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x34, {0x9, 0x21, 0x1000, 0x8, 0x1, {0x22, 0x44}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x81, 0x9}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x1, 0xfd, 0x5, 0x20, 0xa}, 0x107, &(0x7f0000000f00)={0x5, 0xf, 0x107, 0x2, [@generic={0xf7, 0x10, 0xa, "6849ceb785ba96d3bb744c8a72d6e284affbdff8cfe6a562e924fb3401e51f6c09064faf34a0ac9e03b547cdf7062efdfb7982463d49198a154fc1123b9a9e644ac9a8b69665f8e1092d2a4094d3f7f4d23d6489c49814dee7db54bb22005a35e4d7ba1d1f795976467ed873356ca5595a9350a78ff90f19379c1609abd0bf9562593720f376b03daa34486a03b2937a8aff0c5862b709cf50de7e6d6e2a8f6f4b87dbb59d921d5b900b709ccd812a34d6aa5117c48c30cb402b8767059e64948c38c7a8f25eeb0864a5319e23380a058fec7c87ed45171b5e8ddebb54e64386c5c2187e2a070062e7a8e26839d4e90a9a52ff0f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x4, 0xff, 0x6, 0xa}]}, 0x1, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x405}}]})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd600000000018f2b6fe8000000000000000000000000000bbffc9c716020000000000000000000000018300907800000000fc00"/78], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.080529682s ago: executing program 2 (id=897):
socket(0x10, 0x2, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000a000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000100"/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000002c0)=""/247}, 0x20)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="eaa334dd81ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0_vlan\x00'}, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x10, 0xffffffffffffffff, 0xe7141000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r5}, 0x10)
msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3)

4.071450613s ago: executing program 4 (id=898):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])
setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x5d0}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r3, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

3.450575541s ago: executing program 4 (id=899):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@sysvgroups}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setuid(r1)
r3 = socket$inet(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e)
syz_emit_ethernet(0x16b, &(0x7f0000000a00)={@local, @random="1a18ccacd4b9", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ff0ff", 0x131, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0xfffffffe, "97a8c3479adbf8f905eb3494ca405c5bb9e943e8291667bced3aca7cb242ab41a60bafde0fb4f62dc52b9cd2db837c9dc0b5ffb12bad3b0dbc3b8b732b9224ed0cc404850cd570914994ed2543e3dc1c6ff11495267672aa02fc3d3e5cd244e4279d5ca67ef7a09a047bf6b0eb5ed5148664cd6dae42ee45c748d6ec9311bcc16566bdc326d4824426460302d1a84696fbc89fa5f91a069c448293a0e542ca9959256749036b01e7c43091bd02901be24e7c5389198092b2339ba7217ef25103e1f90efcc1adc2d9a794a3704b2a0260b13f6f7ec6cd9dd7afda7139869365672b44b9d9dd"}}}}}}}, 0x0)
setpriority(0x2, 0xff, 0x0)
io_setup(0x4, &(0x7f00000004c0)=<r4=>0x0)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
signalfd4(r6, &(0x7f0000000140), 0x8, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xf6, @any, 0x0, 0x2}, 0xe)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})

3.4356789s ago: executing program 0 (id=900):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@sysvgroups}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setuid(r1)
r3 = socket$inet(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e)
syz_emit_ethernet(0x16b, &(0x7f0000000a00)={@local, @random="1a18ccacd4b9", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ff0ff", 0x131, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0xfffffffe, "97a8c3479adbf8f905eb3494ca405c5bb9e943e8291667bced3aca7cb242ab41a60bafde0fb4f62dc52b9cd2db837c9dc0b5ffb12bad3b0dbc3b8b732b9224ed0cc404850cd570914994ed2543e3dc1c6ff11495267672aa02fc3d3e5cd244e4279d5ca67ef7a09a047bf6b0eb5ed5148664cd6dae42ee45c748d6ec9311bcc16566bdc326d4824426460302d1a84696fbc89fa5f91a069c448293a0e542ca9959256749036b01e7c43091bd02901be24e7c5389198092b2339ba7217ef25103e1f90efcc1adc2d9a794a3704b2a0260b13f6f7ec6cd9dd7afda7139869365672b44b9d9dd"}}}}}}}, 0x0)
setpriority(0x2, 0xff, 0x0)
io_setup(0x4, &(0x7f00000004c0))
signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80))
signalfd4(r4, &(0x7f0000000140), 0x8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})

3.40173385s ago: executing program 1 (id=901):
gettid()
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2C6kUamhNhBCtHurRkHg3/hfGk16MetHEq94NCTFcQL2smZ0ZupTdsku3XWA/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7c4GR/OH61YtTf1+9OJVEtfrWX0mt3LWrF6fKouX/bcsz1WqR39Sg3qV3IyZnZyvnivzYwpkPxubPX3hh5szkqcqpytmJY8cOH9o7eHTiSEfizOK6tvvjuT27jr9z6Y2pE5fe+ylJI487VsTRKSP53l02uJx8utOVddn2unTSX79l3y/L6UZnAt3UFxHZ4Rqo9f+h6IstN7YNxWufdbVxwLqqVqvVVV6VF6vAfSyJbrcA6I7yjT67/i2XDRp63BWuvJxfAGVxXy+WfEt/pHli38CK69tOGomIE4v/fJUtsU73IQAA6n2XjX+ebzT+S+PhPFGbtfh/MYcyHBEPRMSOiHgwInZGxEMRtbKPRMSjbda/YoakwfgnvXzHwbUgG/+9VMxt3Tz+S8siw31Fbnst/oHk5Mxs5WCxTw7EwKaTM0llfJU6vn/1ty+abasf/2VLVn85Fizacbl/xQ266cmFybXEXO/KpxG7+xvFn0Q5jZNExK6I2H2Hdcw829902+3jX0Xzp21Z9euIZ/Ljvxgr4i8lTecnx188OnFkbHPMVg6OlWfFrX7+denNZvWvKf4OyI7/1obn/434h5PNEfPnL5yuzdfOt1/H0h+fN72mafP8P769OP8Hk7drK8op1Y8mFxbOjUcMJq/fun5i+dnKfFk+i//A/sb9f0cs74nHImJPROyNiMezi8Ki7U9ExJMRsX+V+H985an3249/Y+ZKs/inb3f8o/74t5/oO/3Dt7ePf3NENDv+h2upA8WaVl7/Wm3gWvYdAAAA3Cvyz8An6eiNdJqOjuaf4d8ZW9PZufmF507OfXh2Ov+s/HAMpOWdrqG6+6Hjxb3hMj+xIn+ouG/8Zd+WWn50am52utvBQ4/b1qT/Z/7s63brgHXXgXk04B6l/0Pv0v+hNyX6P/Q0/R96V6P+/0nT0qPfrGtjgA3l/R96UmWptf6/mD80HxUA9ybv/9C79H/oSU2/G5+u6Sv/G574t/g9w7ulPfd/ItK7ohn3f6K/5R+zaCNRHcr7f7ZmU8My3X5lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA//9h8uas")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xdf, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x56, 0x0, 0x15, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x34, {0x9, 0x21, 0x1000, 0x8, 0x1, {0x22, 0x44}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x81, 0x9}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x1, 0xfd, 0x5, 0x20, 0xa}, 0x107, &(0x7f0000000f00)={0x5, 0xf, 0x107, 0x2, [@generic={0xf7, 0x10, 0xa, "6849ceb785ba96d3bb744c8a72d6e284affbdff8cfe6a562e924fb3401e51f6c09064faf34a0ac9e03b547cdf7062efdfb7982463d49198a154fc1123b9a9e644ac9a8b69665f8e1092d2a4094d3f7f4d23d6489c49814dee7db54bb22005a35e4d7ba1d1f795976467ed873356ca5595a9350a78ff90f19379c1609abd0bf9562593720f376b03daa34486a03b2937a8aff0c5862b709cf50de7e6d6e2a8f6f4b87dbb59d921d5b900b709ccd812a34d6aa5117c48c30cb402b8767059e64948c38c7a8f25eeb0864a5319e23380a058fec7c87ed45171b5e8ddebb54e64386c5c2187e2a070062e7a8e26839d4e90a9a52ff0f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x4, 0xff, 0x6, 0xa}]}, 0x1, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x405}}]})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd600000000018f2b6fe8000000000000000000000000000bbffc9c716020000000000000000000000018300907800000000fc00"/78], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00k'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000700)={0x0, 0x17, 0xc7, "4415050132a1284f7aa06ddc37ba73e06272d0d7f610fad7e84b57d48156c2916e2733568631580685c35085092a31027420cc5a8531c665c23ca6dfb7a4cd1b512958d91373e6c647181f55f99c3ef7b05f3037ad55d1bc7c8169358c3bf5c5a00cc8d33b3dc40ba253a66e123ea52ae87dfa3902e7f47b47c01ab79394472b4b31f9c10cf02d1efaaaacc3ff7ae2b8de3608f0185c09f7574996c4f05fa1b78d5d8bc7e1b517ae91adebd67dbdde4350d9ae64fcce3ff28ee92caeb88cd03460738bb41f2434"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x1, 0x6c, "21173d88f404ede11d3d8d2ecb10f510dcb4ff8bd175e91df605bfd91490efd0c64415872b5854406024fd34b53a9a4020f8e901e1d75cbfa44cc38b2fc00ff996b3d6bec4fc9c3d6baedda61972f3411912a0ac909829b2decaa71e2f6f9d15b2f58497e45f429aa32770ba"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x51}})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r2, &(0x7f0000000100)="36ec341835d34773b97f7dd377552122e177ebaccffbf76d5ed7f8f3c8595ff3b78a4920ae37f0fe6a6888ef2fca9cd20b29361a8c5d65d4d40e3b6889e16f1f5b97a0b3550e670a66fd61e940368c768357f0b1a3e666cc3ba452b0e6c00cde403336dd7d584676b1", 0x69, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x200, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))

3.1970455s ago: executing program 2 (id=902):
gettid()
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2C6kUamhNhBCtHurRkHg3/hfGk16MetHEq94NCTFcQL2smZ0ZupTdsku3XWA/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7c4GR/OH61YtTf1+9OJVEtfrWX0mt3LWrF6fKouX/bcsz1WqR39Sg3qV3IyZnZyvnivzYwpkPxubPX3hh5szkqcqpytmJY8cOH9o7eHTiSEfizOK6tvvjuT27jr9z6Y2pE5fe+ylJI487VsTRKSP53l02uJx8utOVddn2unTSX79l3y/L6UZnAt3UFxHZ4Rqo9f+h6IstN7YNxWufdbVxwLqqVqvVVV6VF6vAfSyJbrcA6I7yjT67/i2XDRp63BWuvJxfAGVxXy+WfEt/pHli38CK69tOGomIE4v/fJUtsU73IQAA6n2XjX+ebzT+S+PhPFGbtfh/MYcyHBEPRMSOiHgwInZGxEMRtbKPRMSjbda/YoakwfgnvXzHwbUgG/+9VMxt3Tz+S8siw31Fbnst/oHk5Mxs5WCxTw7EwKaTM0llfJU6vn/1ty+abasf/2VLVn85Fizacbl/xQ266cmFybXEXO/KpxG7+xvFn0Q5jZNExK6I2H2Hdcw829902+3jX0Xzp21Z9euIZ/Ljvxgr4i8lTecnx188OnFkbHPMVg6OlWfFrX7+denNZvWvKf4OyI7/1obn/434h5PNEfPnL5yuzdfOt1/H0h+fN72mafP8P769OP8Hk7drK8op1Y8mFxbOjUcMJq/fun5i+dnKfFk+i//A/sb9f0cs74nHImJPROyNiMezi8Ki7U9ExJMRsX+V+H985an3249/Y+ZKs/inb3f8o/74t5/oO/3Dt7ePf3NENDv+h2upA8WaVl7/Wm3gWvYdAAAA3Cvyz8An6eiNdJqOjuaf4d8ZW9PZufmF507OfXh2Ov+s/HAMpOWdrqG6+6Hjxb3hMj+xIn+ouG/8Zd+WWn50am52utvBQ4/b1qT/Z/7s63brgHXXgXk04B6l/0Pv0v+hNyX6P/Q0/R96V6P+/0nT0qPfrGtjgA3l/R96UmWptf6/mD80HxUA9ybv/9C79H/oSU2/G5+u6Sv/G574t/g9w7ulPfd/ItK7ohn3f6K/5R+zaCNRHcr7f7ZmU8My3X5lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA//9h8uas")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a404ac, &(0x7f0000001140)=ANY=[], 0xfe, 0x0, &(0x7f0000001140))
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))

2.740903978s ago: executing program 0 (id=903):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x62042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000480), 0x4)
io_uring_setup(0x63d8, &(0x7f0000000380))
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fdatasync(0xffffffffffffffff)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x1000000201005)

2.716419368s ago: executing program 4 (id=904):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd30000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0xff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400), 0x4)
sendto(0xffffffffffffffff, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000001480)=""/4094, 0xffe}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000780)=""/184, 0xb8}], 0x5}}], 0x1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')

2.136024846s ago: executing program 4 (id=905):
creat(&(0x7f0000000100)='./bus\x00', 0x50)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x5526, &(0x7f000000b240)="$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")
unshare(0x400)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14727d, 0x0)
fdatasync(r0)

1.965162186s ago: executing program 4 (id=906):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000340)=""/66, &(0x7f00000003c0)=""/181, &(0x7f0000000480)=""/240, 0x1000})
socket$inet6(0xa, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="7b97fb55efee68936b20adae5ff96eb42a32fc618907150e46faf1b96a2ddacc7e9fc2778c25a5d6c6ff5bd48e21ee93e5f61786538daa381b41f75e9bb8acebac68691be26cb25d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='sys_exit\x00', r0}, 0x18)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
shutdown(r5, 0x0)
connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

1.770588325s ago: executing program 0 (id=907):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x5c0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000340)=""/66, &(0x7f00000003c0)=""/181, &(0x7f0000000480)=""/240, 0x1000})
socket$inet6(0xa, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="7b97fb55efee68936b20adae5ff96eb42a32fc618907150e46faf1b96a2ddacc7e9fc2778c25a5d6c6ff5bd48e21ee93e5f61786538daa381b41f75e9bb8acebac68691be26cb25d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='sys_exit\x00', r0}, 0x18)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
shutdown(r5, 0x0)
connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

807.439032ms ago: executing program 0 (id=908):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@sysvgroups}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setuid(0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e)
syz_emit_ethernet(0x16b, &(0x7f0000000a00)={@local, @random="1a18ccacd4b9", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ff0ff", 0x131, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0xfffffffe, "97a8c3479adbf8f905eb3494ca405c5bb9e943e8291667bced3aca7cb242ab41a60bafde0fb4f62dc52b9cd2db837c9dc0b5ffb12bad3b0dbc3b8b732b9224ed0cc404850cd570914994ed2543e3dc1c6ff11495267672aa02fc3d3e5cd244e4279d5ca67ef7a09a047bf6b0eb5ed5148664cd6dae42ee45c748d6ec9311bcc16566bdc326d4824426460302d1a84696fbc89fa5f91a069c448293a0e542ca9959256749036b01e7c43091bd02901be24e7c5389198092b2339ba7217ef25103e1f90efcc1adc2d9a794a3704b2a0260b13f6f7ec6cd9dd7afda7139869365672b44b9d9dd"}}}}}}}, 0x0)
setpriority(0x2, 0xff, 0x0)
io_setup(0x4, &(0x7f00000004c0)=<r3=>0x0)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
signalfd4(r5, &(0x7f0000000140), 0x8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})

771.843252ms ago: executing program 4 (id=909):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x5c0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000340)=""/66, &(0x7f00000003c0)=""/181, &(0x7f0000000480)=""/240, 0x1000})
socket$inet6(0xa, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="7b97fb55efee68936b20adae5ff96eb42a32fc618907150e46faf1b96a2ddacc7e9fc2778c25a5d6c6ff5bd48e21ee93e5f61786538daa381b41f75e9bb8acebac68691be26cb25d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='sys_exit\x00', r0}, 0x18)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
shutdown(r5, 0x0)
connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

308.89117ms ago: executing program 3 (id=910):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xa8)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x5d0}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r5, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

186.20484ms ago: executing program 3 (id=911):
syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000001080)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x5, 0xfe, 0xd, 0x10, 0x4}, 0x11a, &(0x7f0000000480)={0x5, 0xf, 0x11a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x9, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "adc23ed0a7cf71eaff61d952b1595319"}, @generic={0xfa, 0x10, 0xa, "c61e1c9add23b341899b9f064f3f779b53abd2d0271bdc4859a608f1b38067302d9a62803c93bf7f37fb7d7b76828fa8287d0aa1695ec96008121cc15c2e224dfe88783066455191f5af9997893f586e7d3a018ec773987395752e8664aa57fc555709eb13ec16e3375aad119edccd1a05e299cc57be0d58ae733c529704df4e497bd9a841812a0a8317230d4b6140e63790ea37682ea48fd884dc3a665d83f9695c1a1b6489c8bdd6bc4cc44d457a664c849a0833c8bcfda6124c13cd6fbe6694dbfaa30138d875f4256ff0fb677281f836ddde14d0809037e847ccb0d7b55a50063d8a645afe2df47d99176da162df34f09a46181581"}]}, 0x7, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2856}}, {0x17, &(0x7f0000001540)=ANY=[@ANYBLOB="1703037b4f26e4325bc2ea576c6a315a367edf68a1e4296977991774f61272980389762566ad9c0bdffba7ae64c73f3ca73fd77123000196245d0cd145ea733ce6acb5b23aea12e4b83234589e006b2311a879e8fd3ece59ee33b37aeb06b660064b9f13a71c276be1067f265448c68150d3f7a65492cfc2f7eba99638a24e5903e18112fe80cc838aeb3aa0a32e028dc2c5e517195ec939f7da96d9c4cef9a91907f07c4aaf3fb2ec10604a8665fdb9e7030f16981ec67cd273132cfeeaf096cf7104f0400a286646e08054dd1baeb8f776a364397584082e3591ba3ebb96b8a9c6532d5517a0ced8ddc910bc98c1ae37634b8ee6cd"]}, {0xcd, &(0x7f0000000640)=@string={0xcd, 0x3, "3ad1c161c3b46117b95cf2cc7ae3e4202620a99c6317f23796cf764024bd36bfc2464876c62f03b2234b8c7a862690a110391f30aeaec7f1bf537bcfe987bc1bdf1e756d21f201938034be5508fc157bfb19561a6133a4c96e941b116cf1ad9186af3e63ddb7623b7b23f2bc7cf7d0845419869876cb71acea2aa061b13b553892a6020f42b3cfae161f0caf19501c27f95bb96043f5dba928ef750e7654a4bfbba829ff337db5f4902c8ba6172af45fd17095ca3831a4546f970819fe7164cd1e7d59fad4e1f066997f72"}}, {0xc8, &(0x7f0000000740)=@string={0xc8, 0x3, "a643ff77b5a20572b3662d3d2c1279ec6b71b8f2836233837f4959459d96d477a443d2fe523d351d4a0af4f843b11fa1afb43b5272943b2a19eecd75d043034db8bc0cb06bdfe9234dcc361c5fb2188496cee85f79443388dd36f7a9c9f27e114f1bc7e5b4302eb3677942682757a9dad12aacd92580ee2662456b264cf70563057585266720a15931c01b973e919bbb95b3f697d291e3c24cf2ec9ebc7bcaba0e9a99cbffbf0cdaaf3a039c2322c248627904b21e21b624df2a242b2f2924d4c9ce08d58974"}}, {0x99, &(0x7f0000000ec0)=@string={0x99, 0x3, "6e29f7c20667005e5308cbfe1fc2f5af0b8841653562fc6e2fe57b96385c043d0c0534e79954fee2e894a21599728b8c00813f822c15f3a6a25a94603265e9d0f69a8d089db5557c004b3c02e880d8ffeac84660db35e91283040651d1f2ea142453e99eceadec986841ee4ea5a79e4241d1d65882a032e69c831e236cf1856af50bff359d017aad3aa5c8d9814b0382bdd16278c79908"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x404}}, {0xa1, &(0x7f0000000fc0)=@string={0xa1, 0x3, "32fbc1027a398c51365b02e8be312fb79f269b821a94323e95dd335bffcd8e0429949dc085309ed736e6ea1b82b9128eb2e8122275bce2b65c93fae9841b581b682cc37ab18a7d55e20f922fc3bffefbc77d224ab263599b983560cce8a8e433a6f315b6e640b3e74375f67b75818c00c2c331f3d781621ab46e6afea2e83089ca1cf53313c7e8abac92c233f873d82830c8812cb81ea91769810a6e86465c"}}]})

0s ago: executing program 0 (id=912):
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x3e, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

 file system using the ext4 subsystem
[  116.826039][ T2181] overlayfs: missing 'workdir'
[  117.481252][ T2183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  117.492157][ T2183] System zones: 1-12
[  117.498674][ T2183] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2227: inode #15: comm syz.1.425: corrupted in-inode xattr
[  117.521742][ T2183] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.425: couldn't read orphan inode 15 (err -117)
[  117.533795][ T2183] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  117.694292][ T2201] overlayfs: missing 'workdir'
[  117.824891][ T2203] incfs: ino conflict with backing FS 1
[  117.861338][  T569] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  118.101171][    T5] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  118.303505][ T2216] FAT-fs (loop4): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  118.321329][  T569] usb 2-1: Using ep0 maxpacket: 32
[  118.441247][  T569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  118.443832][ T2219] FAT-fs (loop3): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  118.462265][  T569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  118.491131][  T569] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  118.500066][  T569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.522315][  T569] usb 2-1: config 0 descriptor??
[  118.531180][    T5] usb 1-1: not running at top speed; connect to a high speed hub
[  118.541204][ T2183] raw-gadget gadget: fail, usb_ep_enable returned -22
[  118.561764][  T569] hub 2-1:0.0: USB hub found
[  118.631193][    T5] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  118.642088][    T5] usb 1-1: config 1 interface 0 has no altsetting 0
[  118.652366][ T2216] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  118.661866][ T2216] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  118.673878][ T2216] F2FS-fs (loop4): invalid crc value
[  118.682636][ T2216] F2FS-fs (loop4): Found nat_bits in checkpoint
[  118.695025][ T2219] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (67108865, 24)
[  118.710954][ T2219] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  118.713876][ T2227] overlayfs: missing 'workdir'
[  118.731682][ T2219] F2FS-fs (loop3): invalid crc value
[  118.740691][ T2219] F2FS-fs (loop3): Found nat_bits in checkpoint
[  118.748524][ T2216] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  118.755644][ T2216] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  118.781238][  T569] hub 2-1:0.0: 2 ports detected
[  118.787594][ T2219] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  118.796589][ T2219] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  118.834868][  T357] attempt to access beyond end of device
[  118.834868][  T357] loop4: rw=2049, want=45104, limit=40427
[  118.846546][    T5] usb 1-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  118.855853][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.871430][  T356] attempt to access beyond end of device
[  118.871430][  T356] loop3: rw=2049, want=45104, limit=40427
[  118.886855][    T5] usb 1-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  118.918685][    T5] usb 1-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  118.925493][    T5] usb 1-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  118.981575][ T2183] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  119.021220][ T2203] raw-gadget gadget: fail, usb_ep_enable returned -22
[  119.531223][  T704] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  119.631215][    T5] usbhid 1-1:1.0: can't add hid device: -71
[  119.636977][    T5] usbhid: probe of 1-1:1.0 failed with error -71
[  119.644976][    T5] usb 1-1: USB disconnect, device number 11
[  119.771153][  T704] usb 4-1: Using ep0 maxpacket: 16
[  119.971239][  T704] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  119.980849][  T704] usb 4-1: config 1 interface 0 has no altsetting 0
[  120.018794][ T2245] overlayfs: missing 'workdir'
[  120.141292][  T704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  120.150292][  T704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.158898][  T704] usb 4-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  120.170293][ T2248] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  120.195837][ T2258] overlayfs: missing 'workdir'
[  120.206310][  T704] usb 4-1: Manufacturer: я
[  120.210707][  T704] usb 4-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  120.255501][ T2248] overlayfs: missing 'workdir'
[  120.267354][ T2248] EXT4-fs (loop0): re-mounted. Opts: (null)
[  120.281193][ T2241] raw-gadget gadget: fail, usb_ep_enable returned -22
[  120.605927][ T2241] FAT-fs (loop3): Directory bread(block 64) failed
[  120.614233][ T2241] FAT-fs (loop3): Directory bread(block 65) failed
[  120.621043][ T2241] FAT-fs (loop3): Directory bread(block 66) failed
[  120.628086][ T2241] FAT-fs (loop3): Directory bread(block 67) failed
[  120.635842][ T2241] FAT-fs (loop3): Directory bread(block 68) failed
[  120.659612][ T2241] FAT-fs (loop3): Directory bread(block 69) failed
[  120.666714][ T2241] FAT-fs (loop3): Directory bread(block 70) failed
[  120.673247][ T2241] FAT-fs (loop3): Directory bread(block 71) failed
[  120.679745][ T2241] FAT-fs (loop3): Directory bread(block 72) failed
[  120.686169][ T2241] FAT-fs (loop3): Directory bread(block 73) failed
[  120.704500][ T2241] netlink: 'syz.3.445': attribute type 6 has an invalid length.
[  120.770462][ T2267] overlayfs: missing 'workdir'
[  120.822626][  T704] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8
[  120.843860][  T704] usb 4-1: USB disconnect, device number 7
[  120.850886][  T704] usblp0: removed
[  121.440048][  T644] usb 2-1: USB disconnect, device number 5
[  121.706677][ T2287] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  121.733701][ T2287] overlayfs: missing 'workdir'
[  121.739195][ T2287] EXT4-fs (loop3): re-mounted. Opts: (null)
[  121.745206][ T1525] hub 2-1:0.0: activate --> -19
[  121.752440][ T2293] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  121.793707][ T2293] overlayfs: missing 'workdir'
[  121.802652][ T2293] EXT4-fs (loop0): re-mounted. Opts: (null)
[  121.891130][  T569] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  122.192899][ T2308] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  122.215901][ T2308] overlayfs: missing 'workdir'
[  122.221528][ T2311] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  122.233545][ T2308] EXT4-fs (loop3): re-mounted. Opts: (null)
[  122.253148][ T2311] overlayfs: missing 'workdir'
[  122.264888][ T2311] EXT4-fs (loop4): re-mounted. Opts: (null)
[  122.321225][  T569] usb 3-1: not running at top speed; connect to a high speed hub
[  122.411279][  T569] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  122.422311][  T569] usb 3-1: config 1 interface 0 has no altsetting 0
[  122.581264][  T569] usb 3-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  122.593248][  T569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.609352][  T569] usb 3-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  122.651953][ T2324] FAT-fs (loop3): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  122.669596][  T569] usb 3-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  122.676673][  T569] usb 3-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  122.731313][ T2285] raw-gadget gadget: fail, usb_ep_enable returned -22
[  123.017433][ T2324] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (67108865, 24)
[  123.033058][ T2324] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  123.044063][ T2324] F2FS-fs (loop3): invalid crc value
[  123.050929][ T2324] F2FS-fs (loop3): Found nat_bits in checkpoint
[  123.078670][ T2324] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  123.086372][ T2330] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  123.094096][ T2330] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  123.111415][ T2324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  123.118383][ T2330] F2FS-fs (loop4): Found nat_bits in checkpoint
[  123.154772][ T2330] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  123.161842][ T2330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  123.262207][  T356] attempt to access beyond end of device
[  123.262207][  T356] loop3: rw=2049, want=45104, limit=40427
[  123.522423][ T2351] overlayfs: missing 'workdir'
[  123.534983][ T2352] cannot load conntrack support for proto=3
[  123.571208][  T569] usbhid 3-1:1.0: can't add hid device: -71
[  123.577472][  T569] usbhid: probe of 3-1:1.0 failed with error -71
[  123.598147][  T569] usb 3-1: USB disconnect, device number 15
[  124.164252][ T2363] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  124.186557][ T2363] overlayfs: missing 'workdir'
[  124.192723][ T2363] EXT4-fs (loop1): re-mounted. Opts: (null)
[  124.251116][   T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.511239][   T13] usb 4-1: Using ep0 maxpacket: 16
[  124.911454][   T13] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  125.006393][   T13] usb 4-1: config 1 interface 0 has no altsetting 0
[  125.186636][   T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  125.203757][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.211709][   T13] usb 4-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  125.236855][   T13] usb 4-1: Manufacturer: я
[  125.241713][   T13] usb 4-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  125.270269][ T2388] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24)
[  125.280901][ T2388] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  125.291300][ T2361] raw-gadget gadget: fail, usb_ep_enable returned -22
[  125.295055][ T2388] F2FS-fs (loop0): invalid crc value
[  125.303162][ T1525] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  125.312552][ T2388] F2FS-fs (loop0): Found nat_bits in checkpoint
[  125.336738][ T2388] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  125.343741][ T2388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  125.366124][  T355] attempt to access beyond end of device
[  125.366124][  T355] loop0: rw=2049, want=45104, limit=40427
[  125.572676][ T2402] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  125.602943][ T2361] FAT-fs (loop3): Directory bread(block 64) failed
[  125.609275][ T2361] FAT-fs (loop3): Directory bread(block 65) failed
[  125.615950][ T2361] FAT-fs (loop3): Directory bread(block 66) failed
[  125.622407][ T2361] FAT-fs (loop3): Directory bread(block 67) failed
[  125.635047][ T2361] FAT-fs (loop3): Directory bread(block 68) failed
[  125.644757][ T2361] FAT-fs (loop3): Directory bread(block 69) failed
[  125.651745][ T2402] overlayfs: missing 'workdir'
[  125.656933][ T2361] FAT-fs (loop3): Directory bread(block 70) failed
[  125.664253][ T2361] FAT-fs (loop3): Directory bread(block 71) failed
[  125.670759][ T2402] EXT4-fs (loop1): re-mounted. Opts: (null)
[  125.676708][ T2361] FAT-fs (loop3): Directory bread(block 72) failed
[  125.683446][ T2361] FAT-fs (loop3): Directory bread(block 73) failed
[  125.731488][ T2361] netlink: 'syz.3.472': attribute type 6 has an invalid length.
[  125.791149][ T1525] usb 3-1: not running at top speed; connect to a high speed hub
[  125.835888][   T13] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8
[  125.862016][   T13] usb 4-1: USB disconnect, device number 8
[  125.870404][   T13] usblp0: removed
[  126.004403][ T1525] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  126.015251][ T1525] usb 3-1: config 1 interface 0 has no altsetting 0
[  126.181197][ T1525] usb 3-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  126.190154][ T1525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.198449][ T1525] usb 3-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  126.228641][ T1525] usb 3-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  126.236488][ T1525] usb 3-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  126.481402][ T2386] raw-gadget gadget: fail, usb_ep_enable returned -22
[  126.766275][ T2420] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  127.092843][ T1525] usbhid 3-1:1.0: can't add hid device: -71
[  127.098846][ T1525] usbhid: probe of 3-1:1.0 failed with error -71
[  127.099518][ T2420] overlayfs: missing 'workdir'
[  127.106567][ T1525] usb 3-1: USB disconnect, device number 16
[  127.116433][ T2426] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  127.129176][ T2426] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  127.138542][ T2420] EXT4-fs (loop3): re-mounted. Opts: (null)
[  127.139816][ T2426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  127.156436][ T2426] System zones: 1-12
[  127.161690][ T2426] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2227: inode #15: comm syz.1.493: corrupted in-inode xattr
[  127.173954][ T2426] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.493: couldn't read orphan inode 15 (err -117)
[  127.186595][ T2426] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  127.911571][  T561] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  128.381129][  T561] usb 2-1: Using ep0 maxpacket: 32
[  128.501582][  T561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  128.513133][  T561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  128.525861][  T561] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  128.535571][  T561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.655207][  T561] usb 2-1: config 0 descriptor??
[  128.671213][ T2426] raw-gadget gadget: fail, usb_ep_enable returned -22
[  128.691729][  T561] hub 2-1:0.0: USB hub found
[  128.911239][  T561] hub 2-1:0.0: 2 ports detected
[  129.042124][ T2464] FAT-fs (loop3): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  129.113054][ T2426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  130.252214][ T2486] overlayfs: missing 'workdir'
[  130.271997][ T2482] incfs: ino conflict with backing FS 1
[  130.352229][ T2464] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (67108865, 24)
[  130.364162][ T2464] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  130.380437][ T2464] F2FS-fs (loop3): invalid crc value
[  130.388154][ T2464] F2FS-fs (loop3): Found nat_bits in checkpoint
[  130.601639][ T1525] usb 2-1: USB disconnect, device number 6
[  130.609571][ T2464] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  130.617010][ T2464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  130.623118][ T2499] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  130.624519][  T561] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  131.004331][ T2498] overlayfs: missing 'workdir'
[  131.032503][ T2498] EXT4-fs (loop4): re-mounted. Opts: (null)
[  131.047925][  T356] attempt to access beyond end of device
[  131.047925][  T356] loop3: rw=2049, want=45104, limit=40427
[  131.501741][ T2515] EXT4-fs (loop0): Test dummy encryption mode enabled
[  131.509225][ T2515] EXT4-fs (loop0): Ignoring removed orlov option
[  131.532454][ T2515] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  131.571263][ T2515] EXT4-fs (loop0): Unsupported blocksize for fs encryption
[  132.286455][ T2538] incfs: ino conflict with backing FS 1
[  132.561159][  T561] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  132.664502][ T2551] FAT-fs (loop4): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  133.001199][  T561] usb 3-1: not running at top speed; connect to a high speed hub
[  133.014190][ T2551] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  133.022579][ T2551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  133.033130][ T2551] F2FS-fs (loop4): invalid crc value
[  133.039822][ T2551] F2FS-fs (loop4): Found nat_bits in checkpoint
[  133.064675][ T2551] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  133.071792][ T2551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  133.081712][  T561] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  133.097144][  T561] usb 3-1: config 1 interface 0 has no altsetting 0
[  133.107706][  T357] attempt to access beyond end of device
[  133.107706][  T357] loop4: rw=2049, want=45104, limit=40427
[  133.271234][  T561] usb 3-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  133.299447][  T561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.339085][  T561] usb 3-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  133.441294][  T561] usb 3-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  133.457918][ T2571] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  133.471116][  T561] usb 3-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  133.489121][ T2571] overlayfs: missing 'workdir'
[  133.570965][ T2571] EXT4-fs (loop4): re-mounted. Opts: (null)
[  133.571224][ T2536] raw-gadget gadget: fail, usb_ep_enable returned -22
[  134.007457][ T2585] EXT4-fs (loop0): Test dummy encryption mode enabled
[  134.016506][ T2585] EXT4-fs (loop0): Ignoring removed orlov option
[  134.032364][ T2585] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  134.055885][ T2585] EXT4-fs (loop0): Unsupported blocksize for fs encryption
[  134.174253][ T2589] incfs: ino conflict with backing FS 1
[  134.261232][  T561] usbhid 3-1:1.0: can't add hid device: -71
[  134.267714][  T561] usbhid: probe of 3-1:1.0 failed with error -71
[  134.275230][  T561] usb 3-1: USB disconnect, device number 17
[  134.353294][ T2598] FAT-fs (loop4): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  134.805249][ T2598] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  134.896614][ T2598] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  134.917406][ T2607] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  134.925015][ T2607] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  134.942563][ T2598] F2FS-fs (loop4): invalid crc value
[  134.963784][ T2607] F2FS-fs (loop3): Found nat_bits in checkpoint
[  134.964105][ T2598] F2FS-fs (loop4): Found nat_bits in checkpoint
[  135.008616][ T2607] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  135.015624][ T2607] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.123114][ T2598] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  135.139175][ T2598] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  135.260357][ T2625] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  135.397121][ T2625] overlayfs: missing 'workdir'
[  135.411399][ T2625] EXT4-fs (loop1): re-mounted. Opts: (null)
[  136.090129][ T2642] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  136.153359][ T2642] overlayfs: missing 'workdir'
[  136.159994][ T2642] EXT4-fs (loop4): re-mounted. Opts: (null)
[  136.191399][  T644] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  136.459650][  T644] usb 3-1: Using ep0 maxpacket: 32
[  136.492678][ T2654] EXT4-fs (loop0): Test dummy encryption mode enabled
[  136.499578][ T2654] EXT4-fs (loop0): Ignoring removed orlov option
[  136.506058][ T2654] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  136.530157][ T2654] EXT4-fs (loop0): Unsupported blocksize for fs encryption
[  136.581222][  T644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  136.592675][  T644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  136.605404][  T644] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  136.615033][  T644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.623335][  T704] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  136.636882][  T644] usb 3-1: config 0 descriptor??
[  136.662104][ T2637] raw-gadget gadget: fail, usb_ep_enable returned -22
[  136.681989][  T644] hub 3-1:0.0: USB hub found
[  137.009377][  T644] hub 3-1:0.0: 2 ports detected
[  137.051185][  T704] usb 4-1: Using ep0 maxpacket: 16
[  137.141685][ T2637] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  137.251255][  T704] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  137.260864][  T704] usb 4-1: config 1 interface 0 has no altsetting 0
[  137.421275][  T704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  137.430197][  T704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.437999][  T704] usb 4-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  137.460614][  T704] usb 4-1: Manufacturer: я
[  137.464977][  T704] usb 4-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  137.511220][ T2651] raw-gadget gadget: fail, usb_ep_enable returned -22
[  137.775151][ T2651] FAT-fs (loop3): Directory bread(block 64) failed
[  137.781583][ T2651] FAT-fs (loop3): Directory bread(block 65) failed
[  137.787908][ T2651] FAT-fs (loop3): Directory bread(block 66) failed
[  137.794215][ T2651] FAT-fs (loop3): Directory bread(block 67) failed
[  137.800737][ T2651] FAT-fs (loop3): Directory bread(block 68) failed
[  137.807067][ T2651] FAT-fs (loop3): Directory bread(block 69) failed
[  137.814125][ T2651] FAT-fs (loop3): Directory bread(block 70) failed
[  137.820513][ T2651] FAT-fs (loop3): Directory bread(block 71) failed
[  137.827143][ T2651] FAT-fs (loop3): Directory bread(block 72) failed
[  137.833775][ T2651] FAT-fs (loop3): Directory bread(block 73) failed
[  137.980643][  T704] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8
[  137.995125][  T704] usb 4-1: USB disconnect, device number 9
[  138.001650][  T704] usblp0: removed
[  138.802946][  T569] usb 3-1: USB disconnect, device number 18
[  139.426741][ T2687] overlayfs: missing 'workdir'
[  139.883377][ T2696] overlayfs: missing 'workdir'
[  141.913087][ T2731] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  141.961123][   T13] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  142.027175][ T2731] overlayfs: missing 'workdir'
[  142.034147][ T2740] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  142.036404][ T2731] EXT4-fs (loop0): re-mounted. Opts: (null)
[  142.062153][ T2740] overlayfs: missing 'workdir'
[  142.069953][ T2740] EXT4-fs (loop1): re-mounted. Opts: (null)
[  142.271747][   T13] usb 3-1: Using ep0 maxpacket: 32
[  142.731231][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  142.751126][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  142.771296][   T13] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  142.791015][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.829105][   T13] usb 3-1: config 0 descriptor??
[  142.861200][ T2723] raw-gadget gadget: fail, usb_ep_enable returned -22
[  142.881891][   T13] hub 3-1:0.0: USB hub found
[  143.402451][   T13] hub 3-1:0.0: 2 ports detected
[  143.501625][ T2723] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  143.596444][ T2763] EXT4-fs (loop1): Test dummy encryption mode enabled
[  143.605622][ T2761] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  143.625618][ T2763] EXT4-fs (loop1): Ignoring removed orlov option
[  143.632398][ T2763] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  143.645332][ T2761] overlayfs: missing 'workdir'
[  143.651727][ T2763] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[  143.659319][ T2761] EXT4-fs (loop4): re-mounted. Opts: (null)
[  145.040413][    T5] usb 3-1: USB disconnect, device number 19
[  145.051151][   T13] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  145.415228][ T2799] FAT-fs (loop4): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  145.671489][ T2804] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  145.671539][ T2810] FAT-fs (loop0): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  145.982815][ T2804] overlayfs: missing 'workdir'
[  146.004375][ T2804] EXT4-fs (loop1): re-mounted. Opts: (null)
[  146.238240][ T2799] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  146.261134][ T2799] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  146.287844][ T2799] F2FS-fs (loop4): invalid crc value
[  146.325624][ T2799] F2FS-fs (loop4): Found nat_bits in checkpoint
[  146.374237][ T2810] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24)
[  146.437009][ T2810] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  146.459753][ T2810] F2FS-fs (loop0): invalid crc value
[  146.473982][ T2810] F2FS-fs (loop0): Found nat_bits in checkpoint
[  146.500739][ T2799] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  146.507751][ T2799] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  146.584381][  T357] attempt to access beyond end of device
[  146.584381][  T357] loop4: rw=2049, want=45104, limit=40427
[  146.638225][ T2810] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  146.651909][ T2810] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  146.735166][  T355] attempt to access beyond end of device
[  146.735166][  T355] loop0: rw=2049, want=45104, limit=40427
[  148.185368][ T2866] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  148.192681][ T2866] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  148.203947][ T2866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  148.218275][ T2866] System zones: 1-12
[  148.223543][ T2866] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.599: corrupted in-inode xattr
[  148.236185][ T2866] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.599: couldn't read orphan inode 15 (err -117)
[  148.254214][ T2866] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  148.772562][ T2872] incfs: ino conflict with backing FS 1
[  148.813204][ T2879] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  148.850117][ T2879] overlayfs: missing 'workdir'
[  148.856244][ T2879] EXT4-fs (loop0): re-mounted. Opts: (null)
[  149.031301][    T5] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  149.071109][  T377] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  149.301123][    T5] usb 4-1: Using ep0 maxpacket: 32
[  149.481187][  T377] usb 5-1: not running at top speed; connect to a high speed hub
[  149.581187][    T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  149.592432][    T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  149.603526][    T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  149.612511][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.616263][  T377] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  149.628373][    T5] usb 4-1: config 0 descriptor??
[  149.631021][  T377] usb 5-1: config 1 interface 0 has no altsetting 0
[  149.642539][ T2892] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  149.650101][ T2892] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  149.660242][ T2866] raw-gadget gadget: fail, usb_ep_enable returned -22
[  149.671781][    T5] hub 4-1:0.0: USB hub found
[  149.678489][ T2892] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.728910][ T2892] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  149.736115][ T2892] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.996360][ T2908] cannot load conntrack support for proto=3
[  150.031688][  T377] usb 5-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  150.048801][  T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.099436][    T5] hub 4-1:0.0: 2 ports detected
[  150.112310][  T377] usb 5-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  150.142987][  T377] usb 5-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  150.149814][  T377] usb 5-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  150.231723][ T2872] raw-gadget gadget: fail, usb_ep_enable returned -22
[  150.281860][ T2866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  150.897443][  T377] usbhid 5-1:1.0: can't add hid device: -71
[  150.904703][  T377] usbhid: probe of 5-1:1.0 failed with error -71
[  150.929555][  T377] usb 5-1: USB disconnect, device number 10
[  152.855862][   T13] usb 4-1: USB disconnect, device number 10
[  154.221135][ T2956] EXT4-fs (loop0): Test dummy encryption mode enabled
[  154.232654][ T2956] EXT4-fs (loop0): Ignoring removed orlov option
[  154.238906][ T2956] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  154.340896][ T2956] EXT4-fs (loop0): Unsupported blocksize for fs encryption
[  154.416628][ T2957] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  154.448881][ T2957] overlayfs: missing 'workdir'
[  154.462218][ T2957] EXT4-fs (loop1): re-mounted. Opts: (null)
[  155.321158][  T569] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  155.377991][ T2969] F2FS-fs (loop3): Found nat_bits in checkpoint
[  155.404332][ T2969] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[  155.438451][ T2982] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  155.446045][ T2982] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  155.459229][ T2982] F2FS-fs (loop4): Found nat_bits in checkpoint
[  155.499076][ T2982] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  155.506229][ T2982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  155.561174][  T569] usb 3-1: Using ep0 maxpacket: 32
[  155.600552][ T2994] cannot load conntrack support for proto=3
[  155.681231][  T569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  155.692644][  T569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  155.704103][  T569] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  155.713603][  T569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.736568][  T569] usb 3-1: config 0 descriptor??
[  155.761239][ T2977] raw-gadget gadget: fail, usb_ep_enable returned -22
[  155.781969][  T569] hub 3-1:0.0: USB hub found
[  156.111214][  T569] hub 3-1:0.0: 2 ports detected
[  156.378056][ T2977] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  156.476938][ T3000] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  156.737024][ T3000] overlayfs: missing 'workdir'
[  157.158485][ T3000] EXT4-fs (loop1): re-mounted. Opts: (null)
[  158.044354][ T3019] FAT-fs (loop1): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  158.155754][ T1525] usb 3-1: USB disconnect, device number 20
[  158.673585][ T3019] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (67108865, 24)
[  158.681757][ T3019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  158.695345][ T3019] F2FS-fs (loop1): invalid crc value
[  158.702220][ T3019] F2FS-fs (loop1): Found nat_bits in checkpoint
[  158.727369][ T3019] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  158.734457][ T3019] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  158.755512][  T353] attempt to access beyond end of device
[  158.755512][  T353] loop1: rw=2049, want=45104, limit=40427
[  160.187943][ T3049] F2FS-fs (loop1): Found nat_bits in checkpoint
[  160.237473][ T3061] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  160.252467][ T3049] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[  160.274350][ T3061] overlayfs: missing 'workdir'
[  160.280757][ T3061] EXT4-fs (loop0): re-mounted. Opts: (null)
[  160.333177][  T377] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  160.463903][ T3072] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  160.531835][ T3072] overlayfs: missing 'workdir'
[  160.537960][ T3072] EXT4-fs (loop3): re-mounted. Opts: (null)
[  160.861186][  T377] usb 3-1: not running at top speed; connect to a high speed hub
[  161.011230][  T377] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  161.022108][  T377] usb 3-1: config 1 interface 0 has no altsetting 0
[  161.414620][ T3090] FAT-fs (loop4): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  161.481222][  T377] usb 3-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  161.490150][  T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.498013][  T377] usb 3-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  161.528337][  T377] usb 3-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  161.540465][  T377] usb 3-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  161.591457][ T3059] raw-gadget gadget: fail, usb_ep_enable returned -22
[  161.757037][ T3093] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  161.764256][ T3093] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  161.782094][ T3090] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  161.784820][ T3093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  161.790470][ T3090] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  161.863047][ T3093] System zones: 1-12
[  161.867709][ T3093] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.650: corrupted in-inode xattr
[  161.880196][ T3093] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.650: couldn't read orphan inode 15 (err -117)
[  161.899323][ T3090] F2FS-fs (loop4): invalid crc value
[  161.910795][ T3093] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  161.912935][ T3090] F2FS-fs (loop4): Found nat_bits in checkpoint
[  161.979521][ T3090] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  161.986965][ T3090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  162.131580][  T377] usbhid 3-1:1.0: can't add hid device: -71
[  162.172003][  T377] usbhid: probe of 3-1:1.0 failed with error -71
[  162.325434][  T377] usb 3-1: USB disconnect, device number 21
[  162.334387][  T357] attempt to access beyond end of device
[  162.334387][  T357] loop4: rw=2049, want=45104, limit=40427
[  162.361112][  T108] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  162.611128][  T108] usb 4-1: Using ep0 maxpacket: 32
[  162.877663][  T377] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  162.908839][ T3113] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  162.916439][ T3113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  162.926279][  T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  162.937354][  T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  162.949754][ T3113] F2FS-fs (loop1): Found nat_bits in checkpoint
[  163.010039][ T3113] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  163.016926][ T3113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  163.121135][  T377] usb 3-1: Using ep0 maxpacket: 32
[  163.241230][  T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  163.252317][  T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  163.255843][  T108] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  163.272104][  T108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.279988][  T377] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  163.289235][  T108] usb 4-1: config 0 descriptor??
[  163.292659][ T3118] EXT4-fs (loop4): Test dummy encryption mode enabled
[  163.300935][ T3118] EXT4-fs (loop4): Ignoring removed orlov option
[  163.307144][  T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.310898][ T3118] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  163.315001][ T3093] raw-gadget gadget: fail, usb_ep_enable returned -22
[  163.329657][  T377] usb 3-1: config 0 descriptor??
[  163.331682][  T108] hub 4-1:0.0: USB hub found
[  163.335343][ T3118] EXT4-fs (loop4): Unsupported blocksize for fs encryption
[  163.361217][ T3110] raw-gadget gadget: fail, usb_ep_enable returned -22
[  163.382651][  T377] hub 3-1:0.0: USB hub found
[  163.477176][ T3129] cannot load conntrack support for proto=3
[  163.626776][  T108] hub 4-1:0.0: 2 ports detected
[  163.631200][  T377] hub 3-1:0.0: 2 ports detected
[  163.812281][ T3093] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  163.836331][ T3110] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  164.202934][  T377] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  164.209121][  T377] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  164.288638][ T3136] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  164.322808][ T3136] overlayfs: missing 'workdir'
[  164.328522][ T3136] EXT4-fs (loop4): re-mounted. Opts: (null)
[  164.371210][  T377] usbhid 3-1:0.0: can't add hid device: -71
[  164.377038][  T377] usbhid: probe of 3-1:0.0 failed with error -71
[  164.421467][  T377] usb 3-1: USB disconnect, device number 22
[  165.161888][ T3158] FAT-fs (loop4): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  165.515058][ T3158] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  165.534209][ T3158] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  165.552168][ T3163] incfs: ino conflict with backing FS 1
[  165.561485][ T3158] F2FS-fs (loop4): invalid crc value
[  165.568364][ T3158] F2FS-fs (loop4): Found nat_bits in checkpoint
[  165.613263][ T3158] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  165.620122][ T3158] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  165.642623][  T357] attempt to access beyond end of device
[  165.642623][  T357] loop4: rw=2049, want=45104, limit=40427
[  165.723189][ T3175] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  165.748077][ T3175] overlayfs: missing 'workdir'
[  165.754157][ T3175] EXT4-fs (loop0): re-mounted. Opts: (null)
[  165.763600][   T13] usb 4-1: USB disconnect, device number 11
[  165.821213][  T377] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  166.258854][  T377] usb 2-1: not running at top speed; connect to a high speed hub
[  166.531254][  T377] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  166.542708][  T377] usb 2-1: config 1 interface 0 has no altsetting 0
[  166.602428][ T3196] cannot load conntrack support for proto=3
[  166.721366][  T377] usb 2-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  166.734460][  T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.743296][  T377] usb 2-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  166.743457][ T3193] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  166.773720][  T377] usb 2-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  166.788000][  T377] usb 2-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  166.812788][ T3193] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  166.841185][ T3163] raw-gadget gadget: fail, usb_ep_enable returned -22
[  166.849081][ T3193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  166.857533][ T3193] System zones: 1-12
[  166.862916][ T3193] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.671: corrupted in-inode xattr
[  166.875133][ T3193] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.671: couldn't read orphan inode 15 (err -117)
[  166.887793][   T23] kauditd_printk_skb: 59 callbacks suppressed
[  166.887805][   T23] audit: type=1400 audit(1738131889.980:478): avc:  denied  { unlink } for  pid=146 comm="syslogd" name="messages.0" dev="tmpfs" ino=10841 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  166.888542][ T3193] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  167.529077][  T377] usbhid 2-1:1.0: can't add hid device: -71
[  167.542982][  T377] usbhid: probe of 2-1:1.0 failed with error -71
[  167.548766][ T3205] overlayfs: missing 'workdir'
[  167.551721][  T377] usb 2-1: USB disconnect, device number 7
[  167.963307][  T569] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  168.231369][  T569] usb 4-1: Using ep0 maxpacket: 32
[  168.591206][  T569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  168.611167][  T569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  168.641142][  T569] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  168.650736][  T569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.660556][ T3224] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  168.672369][  T569] usb 4-1: config 0 descriptor??
[  168.694564][ T3224] overlayfs: missing 'workdir'
[  168.700451][ T3224] EXT4-fs (loop0): re-mounted. Opts: (null)
[  168.711294][ T3193] raw-gadget gadget: fail, usb_ep_enable returned -22
[  168.731750][  T569] hub 4-1:0.0: USB hub found
[  168.951226][  T569] hub 4-1:0.0: 2 ports detected
[  168.991164][  T377] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  169.151678][ T3193] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  169.171232][  T569] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  169.177414][  T569] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  169.241201][  T377] usb 3-1: Using ep0 maxpacket: 16
[  169.274839][ T3240] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  169.282087][  T569] usbhid 4-1:0.0: can't add hid device: -71
[  169.285871][ T3240] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  169.292378][  T569] usbhid: probe of 4-1:0.0 failed with error -71
[  169.333565][ T3240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  169.335899][  T569] usb 4-1: USB disconnect, device number 12
[  169.341800][ T3240] System zones: 1-12
[  169.354563][ T3240] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2227: inode #15: comm syz.0.681: corrupted in-inode xattr
[  169.366555][ T3240] EXT4-fs error (device loop0): ext4_orphan_get:1242: comm syz.0.681: couldn't read orphan inode 15 (err -117)
[  169.379115][ T3240] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  169.435528][ T3244] FAT-fs (loop4): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  169.451362][  T377] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  169.460907][  T377] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.473720][  T377] usb 3-1: config 1 interface 0 has no altsetting 0
[  169.631228][  T377] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  169.640831][  T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.656097][  T377] usb 3-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  169.688827][  T377] usb 3-1: Manufacturer: я
[  169.693460][  T377] usb 3-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  169.701159][  T108] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  169.731395][ T3230] raw-gadget gadget: fail, usb_ep_enable returned -22
[  169.762609][ T3251] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  169.769929][ T3251] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  169.779009][ T3251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  169.786939][ T3251] System zones: 1-12
[  169.791628][ T3251] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2227: inode #15: comm syz.1.685: corrupted in-inode xattr
[  169.808714][ T3251] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.685: couldn't read orphan inode 15 (err -117)
[  169.820587][ T3251] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  170.011127][  T108] usb 1-1: Using ep0 maxpacket: 32
[  170.032198][  T377] usb 3-1: USB disconnect, device number 23
[  170.043240][ T3257] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  170.051350][ T3257] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  170.064032][ T3257] F2FS-fs (loop3): Found nat_bits in checkpoint
[  170.088781][ T3257] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  170.095675][ T3257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  170.111122][  T644] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  170.142438][  T108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  170.156817][  T108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  170.168292][  T108] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  170.177293][  T108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.180160][ T3263] cannot load conntrack support for proto=3
[  170.186941][  T108] usb 1-1: config 0 descriptor??
[  170.251180][ T3240] raw-gadget gadget: fail, usb_ep_enable returned -22
[  170.296004][  T108] hub 1-1:0.0: USB hub found
[  170.351720][  T644] usb 2-1: Using ep0 maxpacket: 32
[  170.542635][  T644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  170.556415][  T108] hub 1-1:0.0: 2 ports detected
[  170.567581][  T644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  170.589286][  T644] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  170.599793][  T644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.689484][ T3270] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  170.689494][  T644] usb 2-1: config 0 descriptor??
[  170.746674][ T3240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  170.751217][ T3251] raw-gadget gadget: fail, usb_ep_enable returned -22
[  170.766842][ T3270] overlayfs: missing 'workdir'
[  170.775083][   T23] audit: type=1400 audit(1738131893.870:479): avc:  denied  { write } for  pid=3269 comm="syz.4.690" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  170.791746][  T644] hub 2-1:0.0: USB hub found
[  170.804992][   T23] audit: type=1400 audit(1738131893.890:480): avc:  denied  { add_name } for  pid=3269 comm="syz.4.690" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  171.145728][  T644] hub 2-1:0.0: 2 ports detected
[  171.312185][ T3251] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  171.468602][ T3281] overlayfs: missing 'workdir'
[  172.443533][    T5] usb 1-1: USB disconnect, device number 12
[  172.473193][ T3301] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  172.500516][ T3301] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  172.531140][ T3301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  172.538929][ T3301] System zones: 1-12
[  172.552040][ T3301] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2227: inode #15: comm syz.4.696: corrupted in-inode xattr
[  172.581291][ T3301] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.696: couldn't read orphan inode 15 (err -117)
[  172.601261][ T3301] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  172.951291][  T569] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  173.182981][  T108] usb 2-1: USB disconnect, device number 8
[  173.191164][  T569] usb 5-1: Using ep0 maxpacket: 32
[  173.241125][  T377] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  173.311195][  T569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  173.322508][  T569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  173.334420][  T569] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  173.343362][  T569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.351917][  T569] usb 5-1: config 0 descriptor??
[  173.371381][ T3301] raw-gadget gadget: fail, usb_ep_enable returned -22
[  173.391705][  T569] hub 5-1:0.0: USB hub found
[  173.481161][  T377] usb 1-1: Using ep0 maxpacket: 16
[  173.601118][  T644] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  173.611221][  T569] hub 5-1:0.0: 2 ports detected
[  173.681240][  T377] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  173.690902][  T377] usb 1-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.704216][  T377] usb 1-1: config 1 interface 0 has no altsetting 0
[  173.801455][ T3320] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  173.821594][ T3301] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  173.824430][ T3325] EXT4-fs (loop3): Test dummy encryption mode enabled
[  173.836329][ T3325] EXT4-fs (loop3): Ignoring removed orlov option
[  173.842720][  T569] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  173.848865][  T569] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  173.856512][ T3325] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  173.857651][ T3320] overlayfs: missing 'workdir'
[  173.871549][ T3325] EXT4-fs (loop3): Unsupported blocksize for fs encryption
[  173.879043][ T3320] EXT4-fs (loop1): re-mounted. Opts: (null)
[  173.891122][  T644] usb 3-1: Using ep0 maxpacket: 32
[  173.891207][  T377] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  173.905207][  T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.913164][  T377] usb 1-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  173.936551][  T377] usb 1-1: Manufacturer: я
[  173.940993][  T377] usb 1-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  173.981170][  T569] usbhid 5-1:0.0: can't add hid device: -71
[  173.991256][ T3313] raw-gadget gadget: fail, usb_ep_enable returned -22
[  174.027817][  T569] usbhid: probe of 5-1:0.0 failed with error -71
[  174.042199][  T644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  174.053488][  T644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  174.061374][  T569] usb 5-1: USB disconnect, device number 11
[  174.065191][  T644] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  174.079826][  T644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.090404][  T644] usb 3-1: config 0 descriptor??
[  174.111175][ T3317] raw-gadget gadget: fail, usb_ep_enable returned -22
[  174.132979][  T644] hub 3-1:0.0: USB hub found
[  174.294835][  T377] usb 1-1: USB disconnect, device number 13
[  174.353798][  T644] hub 3-1:0.0: 2 ports detected
[  174.482458][ T3333] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  174.508322][ T3333] overlayfs: missing 'workdir'
[  174.552733][ T3317] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  174.914488][ T3342] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  174.937162][ T3342] overlayfs: missing 'workdir'
[  174.945433][ T3342] EXT4-fs (loop3): re-mounted. Opts: (null)
[  175.282441][ T3354] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  175.335789][ T3354] overlayfs: missing 'workdir'
[  175.348595][ T3354] EXT4-fs (loop1): re-mounted. Opts: (null)
[  175.856099][ T3372] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  175.863487][ T3372] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  175.875862][ T3372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  175.883809][ T3372] System zones: 1-12
[  175.888534][ T3372] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2227: inode #15: comm syz.0.713: corrupted in-inode xattr
[  175.900893][ T3372] EXT4-fs error (device loop0): ext4_orphan_get:1242: comm syz.0.713: couldn't read orphan inode 15 (err -117)
[  175.912795][ T3372] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  176.074896][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): gre6: link becomes ready
[  176.187403][ T3379] EXT4-fs (loop4): Test dummy encryption mode enabled
[  176.241255][  T377] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  176.257559][ T3379] EXT4-fs (loop4): Ignoring removed orlov option
[  176.263877][ T3379] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  176.282184][ T3379] EXT4-fs (loop4): Unsupported blocksize for fs encryption
[  176.531157][  T377] usb 1-1: Using ep0 maxpacket: 32
[  176.651247][  T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  176.662294][  T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  176.673206][  T377] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  176.682033][  T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.690691][  T377] usb 1-1: config 0 descriptor??
[  176.711241][ T3372] raw-gadget gadget: fail, usb_ep_enable returned -22
[  176.731656][  T377] hub 1-1:0.0: USB hub found
[  176.951248][  T377] hub 1-1:0.0: 2 ports detected
[  176.985240][   T74] usb 3-1: USB disconnect, device number 24
[  177.004191][ T3396] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  177.033919][ T3396] overlayfs: missing 'workdir'
[  177.121086][  T108] hub 3-1:0.0: activate --> -19
[  177.151967][ T3372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  178.293387][    T5] usb 1-1: USB disconnect, device number 14
[  178.311121][  T377] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  178.504640][ T3426] overlayfs: missing 'workdir'
[  178.632739][ T3428] EXT4-fs (loop1): Test dummy encryption mode enabled
[  178.640135][ T3428] EXT4-fs (loop1): Ignoring removed orlov option
[  178.647182][ T3428] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  178.701791][ T3428] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[  178.781584][ T3432] incfs: ino conflict with backing FS 1
[  179.061125][    T5] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  179.528360][    T5] usb 5-1: not running at top speed; connect to a high speed hub
[  179.605466][ T3455] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  179.621195][    T5] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  179.646068][    T5] usb 5-1: config 1 interface 0 has no altsetting 0
[  179.658620][ T3455] overlayfs: missing 'workdir'
[  179.667796][ T3455] EXT4-fs (loop1): re-mounted. Opts: (null)
[  179.821215][    T5] usb 5-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  179.847311][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.872154][    T5] usb 5-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  179.991798][ T3471] FAT-fs (loop0): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  180.019563][    T5] usb 5-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  180.042167][    T5] usb 5-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  180.121179][ T3432] raw-gadget gadget: fail, usb_ep_enable returned -22
[  180.475736][ T3475] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  180.483360][ T3475] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  180.496654][ T3475] F2FS-fs (loop0): Found nat_bits in checkpoint
[  180.539329][ T3475] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  180.546326][ T3475] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  180.581114][  T377] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  180.665890][ T3487] cannot load conntrack support for proto=3
[  180.879176][    T5] usbhid 5-1:1.0: can't add hid device: -71
[  181.120460][ T3490] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  181.124211][    T5] usbhid: probe of 5-1:1.0 failed with error -71
[  181.128177][ T3490] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  181.142519][  T377] usb 4-1: Using ep0 maxpacket: 16
[  181.153850][ T3490] F2FS-fs (loop1): Found nat_bits in checkpoint
[  181.156822][    T5] usb 5-1: USB disconnect, device number 12
[  181.199818][ T3490] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  181.206808][ T3490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  181.323746][ T3500] cannot load conntrack support for proto=3
[  181.371304][  T377] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  181.388052][  T377] usb 4-1: config 1 interface 0 has no altsetting 0
[  181.551567][  T377] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  181.560708][  T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.570628][  T377] usb 4-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  181.593514][  T377] usb 4-1: Manufacturer: я
[  181.597918][  T377] usb 4-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  181.651317][ T3477] raw-gadget gadget: fail, usb_ep_enable returned -22
[  181.806912][ T3503] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  181.871370][ T3506] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  181.879588][ T3506] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  181.890303][ T3503] EXT4-fs (loop4): re-mounted. Opts: (null)
[  181.896472][ T3506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  181.903704][ T3512] overlayfs: missing 'workdir'
[  181.904682][ T3506] System zones: 1-12
[  181.926280][ T3477] FAT-fs (loop3): Directory bread(block 64) failed
[  181.927078][ T3506] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2227: inode #15: comm syz.0.744: corrupted in-inode xattr
[  181.933302][ T3477] FAT-fs (loop3): Directory bread(block 65) failed
[  181.945318][ T3506] EXT4-fs error (device loop0): ext4_orphan_get:1242: comm syz.0.744: couldn't read orphan inode 15 (err -117)
[  181.951242][ T3477] FAT-fs (loop3): Directory bread(block 66) failed
[  181.963285][ T3506] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  181.969371][ T3477] FAT-fs (loop3): Directory bread(block 67) failed
[  181.999204][ T3477] FAT-fs (loop3): Directory bread(block 68) failed
[  182.008037][ T3477] FAT-fs (loop3): Directory bread(block 69) failed
[  182.015153][ T3477] FAT-fs (loop3): Directory bread(block 70) failed
[  182.022094][ T3477] FAT-fs (loop3): Directory bread(block 71) failed
[  182.028826][ T3477] FAT-fs (loop3): Directory bread(block 72) failed
[  182.035297][ T3477] FAT-fs (loop3): Directory bread(block 73) failed
[  182.130918][ T3477] netlink: 'syz.3.739': attribute type 6 has an invalid length.
[  182.381288][   T13] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  182.502745][  T377] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8
[  182.522558][  T377] usb 4-1: USB disconnect, device number 13
[  182.529140][  T377] usblp0: removed
[  182.641101][   T13] usb 1-1: Using ep0 maxpacket: 32
[  182.761275][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  182.775674][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  182.786844][   T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  182.795736][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.807615][   T13] usb 1-1: config 0 descriptor??
[  182.831200][ T3506] raw-gadget gadget: fail, usb_ep_enable returned -22
[  182.851706][   T13] hub 1-1:0.0: USB hub found
[  182.945510][ T3530] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  182.955617][ T3530] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  182.965719][ T3530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  182.974285][ T3530] System zones: 1-12
[  182.979525][ T3530] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2227: inode #15: comm syz.4.751: corrupted in-inode xattr
[  182.991710][ T3530] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.751: couldn't read orphan inode 15 (err -117)
[  183.003690][ T3530] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  183.061264][   T13] hub 1-1:0.0: 2 ports detected
[  183.261967][ T3506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  183.372675][ T3546] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  183.379803][ T3546] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  183.389352][ T3546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  183.397332][  T377] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  183.404889][ T3546] System zones: 1-12
[  183.409415][ T3546] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.755: corrupted in-inode xattr
[  183.422952][ T3546] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.755: couldn't read orphan inode 15 (err -117)
[  183.435105][ T3546] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  183.651078][  T377] usb 5-1: Using ep0 maxpacket: 32
[  183.741121][  T108] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  183.771150][  T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  183.782134][  T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  183.793235][  T377] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  183.802323][  T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.811873][  T377] usb 5-1: config 0 descriptor??
[  183.841194][ T3530] raw-gadget gadget: fail, usb_ep_enable returned -22
[  183.852215][  T377] hub 5-1:0.0: USB hub found
[  183.967584][ T3551] incfs: ino conflict with backing FS 1
[  183.981395][  T108] usb 4-1: Using ep0 maxpacket: 32
[  184.061237][  T377] hub 5-1:0.0: 2 ports detected
[  184.101325][  T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  184.112612][  T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  184.123650][  T108] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  184.132547][  T108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.141652][  T108] usb 4-1: config 0 descriptor??
[  184.161243][ T3546] raw-gadget gadget: fail, usb_ep_enable returned -22
[  184.181684][  T108] hub 4-1:0.0: USB hub found
[  184.241176][   T13] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  184.261569][ T3530] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  184.401172][  T108] hub 4-1:0.0: 2 ports detected
[  184.601530][ T3546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  184.641218][   T13] usb 2-1: not running at top speed; connect to a high speed hub
[  184.721316][   T13] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  184.732189][   T13] usb 2-1: config 1 interface 0 has no altsetting 0
[  184.793970][  T125] usb 1-1: USB disconnect, device number 15
[  184.891501][   T13] usb 2-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  184.901781][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.909766][   T13] usb 2-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  184.941121][   T13] usb 2-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  184.947886][   T13] usb 2-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  184.991536][ T3551] raw-gadget gadget: fail, usb_ep_enable returned -22
[  185.413238][  T704] usb 5-1: USB disconnect, device number 13
[  185.431115][  T377] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  185.510532][ T3566] cannot load conntrack support for proto=3
[  185.519846][ T3564] FAT-fs (loop0): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  185.634025][   T13] usbhid 2-1:1.0: can't add hid device: -71
[  185.646517][   T13] usbhid: probe of 2-1:1.0 failed with error -71
[  185.716020][   T13] usb 2-1: USB disconnect, device number 9
[  185.790487][ T3564] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24)
[  185.809924][ T3564] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  185.821727][ T3564] F2FS-fs (loop0): invalid crc value
[  185.834285][ T3564] F2FS-fs (loop0): Found nat_bits in checkpoint
[  185.886628][ T3564] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  185.893783][ T3564] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  186.007634][ T3575] 9pnet: Insufficient options for proto=fd
[  186.050378][  T355] attempt to access beyond end of device
[  186.050378][  T355] loop0: rw=2049, want=45104, limit=40427
[  187.459423][  T377] usb 4-1: USB disconnect, device number 14
[  187.591113][  T704] hub 4-1:0.0: activate --> -19
[  187.809878][ T3615] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  187.880684][ T3615] overlayfs: missing 'workdir'
[  187.902805][ T3615] EXT4-fs (loop4): re-mounted. Opts: (null)
[  187.914379][ T3620] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  187.943036][ T3623] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  187.952102][ T3623] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  187.957044][ T3620] overlayfs: missing 'workdir'
[  187.962006][ T3623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  187.982084][ T3623] System zones: 1-12
[  187.985378][ T3620] EXT4-fs (loop1): re-mounted. Opts: (null)
[  187.987448][ T3623] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2227: inode #15: comm syz.0.774: corrupted in-inode xattr
[  188.006410][ T3623] EXT4-fs error (device loop0): ext4_orphan_get:1242: comm syz.0.774: couldn't read orphan inode 15 (err -117)
[  188.019835][ T3623] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  188.421205][  T377] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  188.601673][ T3631] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  188.609272][ T3631] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  188.625766][ T3631] F2FS-fs (loop3): Found nat_bits in checkpoint
[  188.651756][ T3631] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  188.659465][ T3631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  188.790645][ T3642] cannot load conntrack support for proto=3
[  188.811583][  T377] usb 1-1: Using ep0 maxpacket: 32
[  188.961582][  T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  189.029341][  T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  189.099729][  T377] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  189.154675][  T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.207857][  T377] usb 1-1: config 0 descriptor??
[  189.311172][ T3623] raw-gadget gadget: fail, usb_ep_enable returned -22
[  189.327564][ T3652] FAT-fs (loop1): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  189.331725][  T377] hub 1-1:0.0: USB hub found
[  189.491501][  T561] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  189.551245][  T377] hub 1-1:0.0: 2 ports detected
[  189.552051][ T3652] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (67108865, 24)
[  189.565284][ T3652] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  189.597748][ T3652] F2FS-fs (loop1): invalid crc value
[  189.604359][ T3652] F2FS-fs (loop1): Found nat_bits in checkpoint
[  189.731089][  T561] usb 5-1: Using ep0 maxpacket: 16
[  189.758286][ T3623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  189.861204][  T561] usb 5-1: unable to get BOS descriptor or descriptor too short
[  189.902217][ T3652] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  189.909141][ T3652] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  189.921256][  T561] usb 5-1: unable to read config index 0 descriptor/start: -71
[  189.930941][  T561] usb 5-1: can't read configurations, error -71
[  189.941745][  T353] attempt to access beyond end of device
[  189.941745][  T353] loop1: rw=2049, want=45104, limit=40427
[  189.993987][ T3663] incfs: ino conflict with backing FS 1
[  190.315755][   T74] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  190.339999][ T3670] 9pnet: Insufficient options for proto=fd
[  190.732238][ T3677] incfs: ino conflict with backing FS 1
[  190.991236][   T74] usb 4-1: not running at top speed; connect to a high speed hub
[  191.120514][   T74] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  191.134569][   T74] usb 4-1: config 1 interface 0 has no altsetting 0
[  191.176952][  T704] usb 1-1: USB disconnect, device number 16
[  191.184512][ T3682] EXT4-fs (loop1): Test dummy encryption mode enabled
[  191.191194][  T569] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  191.200953][ T3682] EXT4-fs (loop1): Ignoring removed orlov option
[  191.207559][ T3682] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  191.221282][  T561] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  191.229539][ T3682] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[  191.301176][   T74] usb 4-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  191.310245][   T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.318146][   T74] usb 4-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  191.387391][   T74] usb 4-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  191.394289][   T74] usb 4-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  191.441235][ T3663] raw-gadget gadget: fail, usb_ep_enable returned -22
[  191.721273][  T561] usb 5-1: not running at top speed; connect to a high speed hub
[  191.801218][  T561] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  191.812282][  T561] usb 5-1: config 1 interface 0 has no altsetting 0
[  191.842719][ T3690] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  191.867166][ T3690] overlayfs: missing 'workdir'
[  191.874087][ T3690] EXT4-fs (loop0): re-mounted. Opts: (null)
[  191.915208][ T3699] 9pnet: Insufficient options for proto=fd
[  192.023225][  T561] usb 5-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  192.032253][  T561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.040044][  T561] usb 5-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  192.073661][  T561] usb 5-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  192.080543][  T561] usb 5-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  192.141152][   T74] usbhid 4-1:1.0: can't add hid device: -71
[  192.146992][   T74] usbhid: probe of 4-1:1.0 failed with error -71
[  192.153273][ T3677] raw-gadget gadget: fail, usb_ep_enable returned -22
[  192.175001][   T74] usb 4-1: USB disconnect, device number 15
[  192.204381][ T3705] FAT-fs (loop1): Unrecognized mount option "�3&�w��бx��F���������" or missing value
[  192.442671][ T3707] cannot load conntrack support for proto=3
[  192.663592][ T3704] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (67108865, 24)
[  192.691592][ T3704] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  192.717946][ T3704] F2FS-fs (loop1): invalid crc value
[  192.742573][ T3704] F2FS-fs (loop1): Found nat_bits in checkpoint
[  192.761206][  T561] usbhid 5-1:1.0: can't add hid device: -71
[  192.767070][  T561] usbhid: probe of 5-1:1.0 failed with error -71
[  192.803967][  T561] usb 5-1: USB disconnect, device number 15
[  192.859819][ T3704] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  192.881869][ T3704] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  192.999472][  T353] attempt to access beyond end of device
[  192.999472][  T353] loop1: rw=2049, want=45104, limit=40427
[  193.247679][  T569] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  193.442056][ T3722] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  193.449661][ T3722] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  193.478449][ T3722] F2FS-fs (loop3): Found nat_bits in checkpoint
[  193.491192][  T569] usb 1-1: Using ep0 maxpacket: 16
[  193.516047][ T3729] EXT4-fs (loop4): Test dummy encryption mode enabled
[  193.519449][ T3722] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  193.529543][ T3722] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  193.532846][ T3729] EXT4-fs (loop4): Ignoring removed orlov option
[  193.574163][ T3729] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  193.666866][ T3729] EXT4-fs (loop4): Unsupported blocksize for fs encryption
[  193.682540][ T3739] cannot load conntrack support for proto=3
[  193.691280][  T569] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  193.705079][  T569] usb 1-1: config 1 interface 0 has no altsetting 0
[  194.060934][  T569] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  194.081250][  T569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.096347][  T569] usb 1-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  194.124507][  T569] usb 1-1: Manufacturer: я
[  194.129157][  T569] usb 1-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  194.157465][ T3744] overlayfs: missing 'workdir'
[  194.221845][ T3719] raw-gadget gadget: fail, usb_ep_enable returned -22
[  194.642934][  T569] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8
[  194.666641][  T569] usb 1-1: USB disconnect, device number 17
[  194.677479][  T569] usblp0: removed
[  194.833720][ T3751] EXT4-fs (loop1): Test dummy encryption mode enabled
[  194.850830][ T3751] EXT4-fs (loop1): Ignoring removed orlov option
[  194.865328][ T3751] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  194.892639][ T3757] 9pnet: Insufficient options for proto=fd
[  194.893468][ T3751] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[  194.945690][ T3755] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  195.076768][ T3755] EXT4-fs (loop3): re-mounted. Opts: (null)
[  195.668720][ T3790] overlayfs: missing 'workdir'
[  196.008283][ T3797] 9pnet: Insufficient options for proto=fd
[  196.216552][ T3802] EXT4-fs (loop3): Test dummy encryption mode enabled
[  196.223598][ T3802] EXT4-fs (loop3): Ignoring removed orlov option
[  196.229925][ T3802] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  196.242363][ T3802] EXT4-fs (loop3): Unsupported blocksize for fs encryption
[  196.361120][  T125] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  196.891110][  T125] usb 3-1: Using ep0 maxpacket: 32
[  196.975080][ T3808] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  196.982730][ T3808] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  197.011404][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  197.032999][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  197.047267][  T125] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  197.058498][ T3808] F2FS-fs (loop1): Found nat_bits in checkpoint
[  197.101919][  T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.113076][ T3808] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  197.119930][ T3808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  197.163304][  T125] usb 3-1: config 0 descriptor??
[  197.182096][ T3800] raw-gadget gadget: fail, usb_ep_enable returned -22
[  197.242668][ T3824] cannot load conntrack support for proto=3
[  197.244248][  T125] hub 3-1:0.0: USB hub found
[  197.431929][  T644] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  197.510100][  T125] hub 3-1:0.0: 2 ports detected
[  197.569489][ T3827] EXT4-fs (loop3): Test dummy encryption mode enabled
[  197.580819][ T3827] EXT4-fs (loop3): Ignoring removed orlov option
[  197.587575][ T3827] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  197.607392][ T3827] EXT4-fs (loop3): Unsupported blocksize for fs encryption
[  197.681681][ T3800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  197.801098][  T644] usb 5-1: Using ep0 maxpacket: 16
[  197.961191][  T644] usb 5-1: unable to get BOS descriptor or descriptor too short
[  197.983711][ T3832] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  198.013387][ T3832] overlayfs: missing 'workdir'
[  198.019092][ T3832] EXT4-fs (loop1): re-mounted. Opts: (null)
[  198.041290][  T644] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  198.051246][  T644] usb 5-1: config 1 interface 0 has no altsetting 0
[  198.211401][  T644] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  198.220989][  T644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.229547][  T644] usb 5-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  198.252589][  T644] usb 5-1: Manufacturer: я
[  198.256995][  T644] usb 5-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  198.301162][ T3815] raw-gadget gadget: fail, usb_ep_enable returned -22
[  198.475216][ T3840] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  198.482833][ T3840] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  198.491659][ T3840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  198.499495][ T3840] System zones: 1-12
[  198.504675][ T3840] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.823: corrupted in-inode xattr
[  198.517827][ T3840] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.823: couldn't read orphan inode 15 (err -117)
[  198.532323][ T3840] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  198.607117][ T3844] incfs: ino conflict with backing FS 1
[  198.632993][  T644] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8
[  198.652533][  T644] usb 5-1: USB disconnect, device number 16
[  198.661443][  T644] usblp0: removed
[  198.841107][  T561] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  198.881097][  T704] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  199.081089][  T561] usb 4-1: Using ep0 maxpacket: 32
[  199.105392][ T3854] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  199.134344][ T3854] overlayfs: missing 'workdir'
[  199.140183][ T3854] EXT4-fs (loop4): re-mounted. Opts: (null)
[  199.201196][  T561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  199.212566][  T561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  199.224053][  T561] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  199.234864][  T561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.249049][  T561] usb 4-1: config 0 descriptor??
[  199.281150][ T3840] raw-gadget gadget: fail, usb_ep_enable returned -22
[  199.281270][  T704] usb 1-1: not running at top speed; connect to a high speed hub
[  199.301500][  T561] hub 4-1:0.0: USB hub found
[  199.371464][  T704] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  199.384932][  T704] usb 1-1: config 1 interface 0 has no altsetting 0
[  199.521128][  T561] hub 4-1:0.0: 2 ports detected
[  199.551281][  T704] usb 1-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  199.560329][  T704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.568117][  T704] usb 1-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  199.598579][  T704] usb 1-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  199.605358][  T704] usb 1-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  199.661194][ T3844] raw-gadget gadget: fail, usb_ep_enable returned -22
[  199.721647][ T3840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  199.732708][ T3862] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  199.739853][ T3862] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  199.748669][ T3862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  199.757268][ T3862] System zones: 1-12
[  199.762551][ T3862] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2227: inode #15: comm syz.4.828: corrupted in-inode xattr
[  199.774657][ T3862] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.828: couldn't read orphan inode 15 (err -117)
[  199.786496][ T3862] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  199.879082][ T3866] FAT-fs (loop1): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  199.953502][  T125] usb 3-1: USB disconnect, device number 25
[  200.081139][   T74] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  200.081144][  T644] hub 3-1:0.0: activate --> -19
[  200.100737][ T3866] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (67108865, 24)
[  200.109114][ T3866] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  200.119302][ T3866] F2FS-fs (loop1): invalid crc value
[  200.126442][ T3866] F2FS-fs (loop1): Found nat_bits in checkpoint
[  200.150798][ T3866] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  200.157933][ T3866] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  200.191403][  T353] attempt to access beyond end of device
[  200.191403][  T353] loop1: rw=2049, want=45104, limit=40427
[  200.261236][  T704] usbhid 1-1:1.0: can't add hid device: -71
[  200.267089][  T704] usbhid: probe of 1-1:1.0 failed with error -71
[  200.274685][  T704] usb 1-1: USB disconnect, device number 18
[  200.331149][   T74] usb 5-1: Using ep0 maxpacket: 32
[  200.451195][   T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  200.466582][   T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  200.491241][   T74] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  200.500167][   T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.510061][   T74] usb 5-1: config 0 descriptor??
[  200.531149][ T3862] raw-gadget gadget: fail, usb_ep_enable returned -22
[  200.551753][   T74] hub 5-1:0.0: USB hub found
[  200.761943][ T3884] FAT-fs (loop0): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  200.773126][   T74] hub 5-1:0.0: 2 ports detected
[  200.825839][ T3891] overlayfs: missing 'workdir'
[  200.903488][ T3888] EXT4-fs (loop1): Test dummy encryption mode enabled
[  200.910297][ T3888] EXT4-fs (loop1): Ignoring removed orlov option
[  200.916595][ T3888] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  200.941294][ T3888] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[  200.973657][ T3862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  201.263555][ T3884] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24)
[  201.276908][ T3884] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  201.288931][ T3884] F2FS-fs (loop0): invalid crc value
[  201.302792][ T3884] F2FS-fs (loop0): Found nat_bits in checkpoint
[  201.366967][ T3884] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  201.374449][ T3884] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  201.410076][  T355] attempt to access beyond end of device
[  201.410076][  T355] loop0: rw=2049, want=45104, limit=40427
[  201.493931][ T3908] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  201.515859][ T3908] overlayfs: missing 'workdir'
[  201.521905][ T3908] EXT4-fs (loop1): re-mounted. Opts: (null)
[  201.622680][  T644] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  201.813755][  T561] usb 4-1: USB disconnect, device number 16
[  201.821283][ T1525] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  201.951146][  T644] usb 3-1: Using ep0 maxpacket: 32
[  202.071328][  T644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  202.085150][  T644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  202.098442][  T644] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  202.110697][  T644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.123272][  T644] usb 3-1: config 0 descriptor??
[  202.128371][  T125] usb 5-1: USB disconnect, device number 17
[  202.141177][ T3904] raw-gadget gadget: fail, usb_ep_enable returned -22
[  202.163994][  T644] hub 3-1:0.0: USB hub found
[  202.216069][   T74] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  202.264333][ T3919] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  202.271935][ T3919] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  202.283923][ T3919] F2FS-fs (loop1): Found nat_bits in checkpoint
[  202.308236][ T3919] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  202.315155][ T3919] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  202.388473][ T3928] cannot load conntrack support for proto=3
[  202.413925][  T644] hub 3-1:0.0: 2 ports detected
[  202.478183][ T3927] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  202.485464][ T3927] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  202.505744][ T3927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  202.517090][ T3927] System zones: 1-12
[  202.535777][ T3927] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.840: corrupted in-inode xattr
[  202.558283][ T3927] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.840: couldn't read orphan inode 15 (err -117)
[  202.625196][ T3904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  202.629884][ T3927] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  202.959289][   T74] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  203.271332][   T74] usb 4-1: Using ep0 maxpacket: 32
[  203.427245][   T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  203.442256][   T74] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  203.459570][   T74] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  203.473672][   T74] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.527675][   T74] usb 4-1: config 0 descriptor??
[  203.586822][ T3927] raw-gadget gadget: fail, usb_ep_enable returned -22
[  203.621820][   T74] hub 4-1:0.0: USB hub found
[  203.679041][ T3947] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  203.708387][ T3947] overlayfs: missing 'workdir'
[  203.720414][ T3947] EXT4-fs (loop0): re-mounted. Opts: (null)
[  203.771537][ T3954] FAT-fs (loop4): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  203.841150][   T74] hub 4-1:0.0: 2 ports detected
[  204.041548][ T3927] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  204.152645][ T3958] EXT4-fs (loop1): Test dummy encryption mode enabled
[  204.167973][ T3958] EXT4-fs (loop1): Ignoring removed orlov option
[  204.174383][ T3958] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  204.191786][ T3958] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[  204.250813][ T3954] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  204.259545][ T3954] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  204.260300][   T13] usb 3-1: USB disconnect, device number 26
[  204.272941][ T3954] F2FS-fs (loop4): invalid crc value
[  204.292336][ T3954] F2FS-fs (loop4): Found nat_bits in checkpoint
[  204.341461][ T3954] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  204.348322][ T3954] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  204.466865][  T357] attempt to access beyond end of device
[  204.466865][  T357] loop4: rw=2049, want=45104, limit=40427
[  204.470396][ T3971] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  204.512639][ T3971] overlayfs: missing 'workdir'
[  204.519917][ T3971] EXT4-fs (loop0): re-mounted. Opts: (null)
[  204.862607][ T3979] incfs: ino conflict with backing FS 1
[  205.141160][  T561] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  205.169335][ T3989] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  205.206272][ T3997] cannot load conntrack support for proto=3
[  205.208706][ T3989] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  205.212347][ T1525] usb 4-1: USB disconnect, device number 17
[  205.226476][   T74] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  205.253750][ T3989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  205.261708][ T3989] System zones: 1-12
[  205.267781][ T3989] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2227: inode #15: comm syz.4.850: corrupted in-inode xattr
[  205.290932][ T3989] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.850: couldn't read orphan inode 15 (err -117)
[  205.305025][ T3989] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  205.561161][  T561] usb 2-1: not running at top speed; connect to a high speed hub
[  205.601137][   T74] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  205.641259][  T561] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  205.652336][  T561] usb 2-1: config 1 interface 0 has no altsetting 0
[  205.812166][  T561] usb 2-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40
[  205.821730][  T561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.829830][  T561] usb 2-1: Product: 턺懁듃ᝡ岹쳲⃤…鲩ᝣ㟲쾖䁶봤뼶䛂癈⿆눃䬣窌⚆ꆐ㤐〟꺮县콻蟩ᮼở浵錁㒀喾ﰈ笕᧻ᩖ㍡즤鑮ᄛ醭꾆挾럝㭢⍻볲蓐ᥔ领쭶걱⫪憠㮱㡕Ꚓ༂덂껏἖꼌候✜对悹꧛๵呶뾤ꢻＩ紳Ⲑꚋ⨗忴烑쪕ㄸ咤靯ᤈ燾쵤紞繁曰羙
[  205.860458][   T74] usb 5-1: Using ep0 maxpacket: 32
[  205.866058][  T561] usb 2-1: Manufacturer: 笃♏㋤쉛埪橬娱縶棟
[  205.873425][  T561] usb 2-1: SerialNumber: 䎦矿ꊵ爅暳㴭ሬ煫抃茳䥿䕙隝矔䎤ﻒ㵒ᴵ੊녃ꄟ뒯刻鑲⨻痍䏐䴃벸뀌⏩챍ᰶ뉟萘캖忨䑹蠳㛝꧷ᅾ᭏ゴ댮祧桂圧⫑耥⛮䕢♫挅甅⚅⁧妡쀱霛鄾뮛뎕韶釒싣黬箼뫊騎쮙뿿㪯鰃∣䣂祢누℞Ⓐ⫟⬤⤯퐤컉픈璉
[  205.921449][ T3979] raw-gadget gadget: fail, usb_ep_enable returned -22
[  205.977398][ T4004] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  206.011380][   T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  206.023001][   T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  206.024029][ T4004] overlayfs: missing 'workdir'
[  206.042644][   T74] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  206.052168][   T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.060364][ T4004] EXT4-fs (loop3): re-mounted. Opts: (null)
[  206.062014][ T4009] overlayfs: missing 'workdir'
[  206.076682][   T74] usb 5-1: config 0 descriptor??
[  206.101158][ T3989] raw-gadget gadget: fail, usb_ep_enable returned -22
[  206.121714][   T74] hub 5-1:0.0: USB hub found
[  206.341165][   T74] hub 5-1:0.0: 2 ports detected
[  206.381896][ T4013] FAT-fs (loop0): Unrecognized mount option "�3&�w��бx��F�����" or missing value
[  206.541458][ T3989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  206.551153][  T561] usbhid 2-1:1.0: can't add hid device: -71
[  206.562250][  T561] usbhid: probe of 2-1:1.0 failed with error -71
[  206.864768][  T561] usb 2-1: USB disconnect, device number 10
[  206.900392][ T4013] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24)
[  206.915799][ T4013] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  206.927612][ T4013] F2FS-fs (loop0): invalid crc value
[  206.934690][ T4013] F2FS-fs (loop0): Found nat_bits in checkpoint
[  206.978606][ T4013] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  206.985669][ T4013] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  207.108454][ T4020] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (67108865, 24)
[  207.118961][ T4029] EXT4-fs (loop1): Test dummy encryption mode enabled
[  207.125740][ T4020] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  207.135101][ T4029] EXT4-fs (loop1): Ignoring removed orlov option
[  207.141683][ T4029] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  207.146510][ T4020] F2FS-fs (loop3): invalid crc value
[  207.155795][ T4020] F2FS-fs (loop3): Found nat_bits in checkpoint
[  207.161457][ T4029] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[  207.169744][  T355] attempt to access beyond end of device
[  207.169744][  T355] loop0: rw=2049, want=45104, limit=40427
[  207.193432][ T4020] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  207.200286][ T4020] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  207.417954][  T356] attempt to access beyond end of device
[  207.417954][  T356] loop3: rw=2049, want=45104, limit=40427
[  207.604856][ T4047] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  207.646418][ T4055] cannot load conntrack support for proto=3
[  207.676145][ T4047] overlayfs: missing 'workdir'
[  207.683375][ T4047] EXT4-fs (loop0): re-mounted. Opts: (null)
[  207.726138][ T4054] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  207.804460][ T4054] overlayfs: missing 'workdir'
[  207.832022][ T4054] EXT4-fs (loop1): re-mounted. Opts: (null)
[  208.111098][  T569] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  208.266978][ T4065] 9pnet: Insufficient options for proto=fd
[  208.431155][  T569] usb 4-1: Using ep0 maxpacket: 16
[  208.682593][ T4073] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  208.723535][ T4073] overlayfs: missing 'workdir'
[  208.729457][ T4073] EXT4-fs (loop1): re-mounted. Opts: (null)
[  208.731224][  T569] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  208.738727][  T644] usb 5-1: USB disconnect, device number 18
[  208.749758][  T569] usb 4-1: config 1 interface 0 has no altsetting 0
[  208.757095][ T1525] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  208.941175][  T569] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  208.950099][  T569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.957900][  T569] usb 4-1: Product: ♜᭵鈱踉➐妤蕡竤똶☂ӿ欪钽糯煉婄嶓簃됋ꇰ斚䜜в榮濫촐饢ƍ抡ꪗ﷧퐄褣褃䄳↠鹎攢켶㝪᧗犓专惘鑕勆峺픇몄청첣塅옐浕疊০湃퀒婬嘐㚧랞밿
[  208.983810][  T569] usb 4-1: Manufacturer: я
[  208.992817][  T569] usb 4-1: SerialNumber: 묚㋶ᚇ㪔齦䨕튚㶌䔲쿍褩ჵ쎇쩀匄䪿윤ࢶ䐮栰亞挹炴橴퇣寇㯡ꅒ粴⨎㩋賨ᯔⓆꄂ恴쯑֡龣㭜﯒嗾䡦㥄ժ챃⴦별⓶뒑꒻ﺵꊥ⋾쐎݁ﻱ୤洢堭еﵗ먋͘刪퓼陼❩굱ୁ芨켛폅鬌≧읷뺇꼭輊악諛
[  209.131518][ T4061] raw-gadget gadget: fail, usb_ep_enable returned -22
[  209.425439][ T4061] FAT-fs (loop3): Directory bread(block 64) failed
[  209.451155][ T4061] FAT-fs (loop3): Directory bread(block 65) failed
[  209.457656][ T4061] FAT-fs (loop3): Directory bread(block 66) failed
[  209.471438][ T4061] FAT-fs (loop3): Directory bread(block 67) failed
[  209.478110][ T4061] FAT-fs (loop3): Directory bread(block 68) failed
[  209.484535][ T4061] FAT-fs (loop3): Directory bread(block 69) failed
[  209.490840][ T4061] FAT-fs (loop3): Directory bread(block 70) failed
[  209.521942][ T4061] FAT-fs (loop3): Directory bread(block 71) failed
[  209.535502][ T4061] FAT-fs (loop3): Directory bread(block 72) failed
[  209.542284][ T4061] FAT-fs (loop3): Directory bread(block 73) failed
[  209.942337][  T569] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8
[  209.955423][ T4098] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  209.964073][ T4098] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  209.966371][  T569] usb 4-1: USB disconnect, device number 18
[  209.974940][ T4098] F2FS-fs (loop4): invalid crc value
[  209.986216][ T4098] F2FS-fs (loop4): Found nat_bits in checkpoint
[  209.988529][  T569] usblp0: removed
[  210.018826][ T4098] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  210.025859][ T4098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  210.058074][  T357] attempt to access beyond end of device
[  210.058074][  T357] loop4: rw=2049, want=45104, limit=40427
[  210.190042][ T4117] cannot load conntrack support for proto=3
[  210.286649][ T4119] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  210.297617][ T4119] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  210.332517][ T4119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  210.340587][ T4119] System zones: 1-12
[  210.362725][ T4119] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2227: inode #15: comm syz.1.884: corrupted in-inode xattr
[  210.377637][ T4119] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.884: couldn't read orphan inode 15 (err -117)
[  210.399358][ T4119] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  210.739780][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready
[  212.041082][ T1525] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  212.054449][ T4129] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  212.062089][ T4129] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  212.083938][ T4129] F2FS-fs (loop0): Found nat_bits in checkpoint
[  212.128117][ T4129] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  212.135200][ T4129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  212.235756][ T4135] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (67108865, 24)
[  212.244067][ T4135] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  212.254260][ T4129] cannot load conntrack support for proto=3
[  212.256328][ T4135] F2FS-fs (loop3): invalid crc value
[  212.267224][ T4135] F2FS-fs (loop3): Found nat_bits in checkpoint
[  212.291123][ T1525] usb 2-1: Using ep0 maxpacket: 32
[  212.370104][ T4135] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  212.377241][ T4135] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  212.416982][  T356] attempt to access beyond end of device
[  212.416982][  T356] loop3: rw=2049, want=45104, limit=40427
[  212.533212][ T1525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  212.544199][ T1525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  212.555264][ T1525] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  212.564106][ T1525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.572827][ T1525] usb 2-1: config 0 descriptor??
[  212.591150][ T4119] raw-gadget gadget: fail, usb_ep_enable returned -22
[  212.611766][ T1525] hub 2-1:0.0: USB hub found
[  212.831286][ T1525] hub 2-1:0.0: 2 ports detected
[  213.044785][ T4119] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  213.162773][ T4157] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24)
[  213.170999][ T4157] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  213.191545][ T4157] F2FS-fs (loop0): invalid crc value
[  213.202370][ T4157] F2FS-fs (loop0): Found nat_bits in checkpoint
[  213.246897][ T4157] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  213.254793][ T4157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.274731][  T355] attempt to access beyond end of device
[  213.274731][  T355] loop0: rw=2049, want=45104, limit=40427
[  214.075114][ T4180] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  214.082319][ T4180] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  214.090228][ T4183] EXT4-fs (loop0): Test dummy encryption mode enabled
[  214.091778][ T4180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  214.096939][ T4175] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  214.104946][ T4180] System zones: 1-12
[  214.112201][ T4175] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  214.116730][ T4180] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.896: corrupted in-inode xattr
[  214.127801][ T4183] EXT4-fs (loop0): Ignoring removed orlov option
[  214.146322][ T4183] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  214.161825][ T4180] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.896: couldn't read orphan inode 15 (err -117)
[  214.163259][ T4183] EXT4-fs (loop0): Unsupported blocksize for fs encryption
[  214.174434][ T4175] F2FS-fs (loop4): Found nat_bits in checkpoint
[  214.180812][ T4180] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  214.217824][ T4175] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  214.224766][ T4175] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  214.270485][ T4175] cannot load conntrack support for proto=3
[  214.446504][  T125] usb 2-1: USB disconnect, device number 11
[  214.461115][ T1525] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  214.682557][ T4194] cannot load conntrack support for proto=3
[  214.863256][  T644] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  214.922777][ T4198] 9pnet: Insufficient options for proto=fd
[  215.072930][ T4204] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  215.093743][ T4201] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  215.101094][  T644] usb 4-1: Using ep0 maxpacket: 32
[  215.135402][ T4204] overlayfs: missing 'workdir'
[  215.145280][ T4204] EXT4-fs (loop0): re-mounted. Opts: (null)
[  215.155532][ T4211] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  215.164117][ T4201] overlayfs: missing 'workdir'
[  215.168530][ T4211] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  215.178957][ T4211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  215.179352][ T4201] EXT4-fs (loop4): re-mounted. Opts: (null)
[  215.190578][ T4211] System zones: 1-12
[  215.197270][ T4211] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2227: inode #15: comm syz.1.901: corrupted in-inode xattr
[  215.209744][ T4211] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.901: couldn't read orphan inode 15 (err -117)
[  215.222485][ T4211] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue
[  215.242441][  T644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  215.284505][  T644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  215.296019][  T644] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  215.305307][  T644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.344749][  T644] usb 4-1: config 0 descriptor??
[  215.372907][ T4180] raw-gadget gadget: fail, usb_ep_enable returned -22
[  215.411373][  T644] hub 4-1:0.0: USB hub found
[  215.511772][  T125] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  215.561096][  T561] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  215.611212][  T644] hub 4-1:0.0: 2 ports detected
[  215.751126][  T125] usb 3-1: Using ep0 maxpacket: 32
[  215.811529][ T4180] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  215.816557][  T561] usb 2-1: Using ep0 maxpacket: 32
[  215.830971][ T4219] EXT4-fs (loop4): Test dummy encryption mode enabled
[  215.839010][ T4219] EXT4-fs (loop4): Ignoring removed orlov option
[  215.845266][ T4219] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  215.861842][ T4219] EXT4-fs (loop4): Unsupported blocksize for fs encryption
[  215.871177][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  215.882370][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  215.893373][  T125] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  215.902180][  T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.910943][  T125] usb 3-1: config 0 descriptor??
[  215.931307][ T4215] raw-gadget gadget: fail, usb_ep_enable returned -22
[  215.951932][  T125] hub 3-1:0.0: USB hub found
[  216.014402][  T561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  216.025908][  T561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  216.037097][  T561] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  216.046120][  T561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.055460][  T561] usb 2-1: config 0 descriptor??
[  216.071253][ T4211] raw-gadget gadget: fail, usb_ep_enable returned -22
[  216.091515][  T561] hub 2-1:0.0: USB hub found
[  216.161132][  T125] hub 3-1:0.0: 2 ports detected
[  216.301150][  T561] hub 2-1:0.0: 2 ports detected
[  216.374770][ T4231] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24)
[  216.384079][ T4231] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  216.395015][ T4231] F2FS-fs (loop4): invalid crc value
[  216.401954][ T4231] F2FS-fs (loop4): Found nat_bits in checkpoint
[  216.425976][ T4231] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  216.432933][ T4231] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  216.452535][  T357] attempt to access beyond end of device
[  216.452535][  T357] loop4: rw=2049, want=45104, limit=40427
[  216.501644][ T4211] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  217.452351][    T5] usb 4-1: USB disconnect, device number 19
[  217.461414][  T644] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  217.676497][ T4248] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,sysvgroups,noload,usrquota,noauto_da_alloc,,errors=continue
[  217.713708][ T4248] overlayfs: missing 'workdir'
[  217.719556][ T4248] EXT4-fs (loop0): re-mounted. Opts: (null)
[  218.375563][  T355] ==================================================================
[  218.383452][  T355] BUG: KASAN: use-after-free in kthread_stop+0x37/0x4a0
[  218.390216][  T355] Write of size 4 at addr ffff8881e14a8020 by task syz-executor/355
[  218.398019][  T355] 
[  218.400197][  T355] CPU: 0 PID: 355 Comm: syz-executor Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0
[  218.409914][  T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  218.419814][  T355] Call Trace:
[  218.422944][  T355]  dump_stack+0x1d8/0x241
[  218.427104][  T355]  ? prepare_exit_to_usermode+0x199/0x200
[  218.432669][  T355]  ? nf_ct_l4proto_log_invalid+0x258/0x258
[  218.438297][  T355]  ? printk+0xd1/0x111
[  218.442207][  T355]  ? kthread_stop+0x37/0x4a0
[  218.446637][  T355]  print_address_description+0x8c/0x600
[  218.452038][  T355]  ? kthread_stop+0x37/0x4a0
[  218.456440][  T355]  __kasan_report+0xf3/0x120
[  218.460871][  T355]  ? kthread_stop+0x37/0x4a0
[  218.465295][  T355]  kasan_report+0x30/0x60
[  218.469471][  T355]  check_memory_region+0x272/0x280
[  218.474411][  T355]  kthread_stop+0x37/0x4a0
[  218.478673][  T355]  ext4_put_super+0x790/0xbb0
[  218.483177][  T355]  ? ext4_drop_inode+0x1f0/0x1f0
[  218.487950][  T355]  generic_shutdown_super+0x120/0x300
[  218.493158][  T355]  kill_block_super+0x7a/0xe0
[  218.497687][  T355]  deactivate_locked_super+0xa8/0x110
[  218.502880][  T355]  deactivate_super+0x1e2/0x2a0
[  218.507566][  T355]  ? vfs_submount+0xb0/0xb0
[  218.511908][  T355]  ? deactivate_locked_super+0x110/0x110
[  218.517395][  T355]  ? fast_dput+0x7a/0x280
[  218.521542][  T355]  cleanup_mnt+0x44e/0x500
[  218.525797][  T355]  task_work_run+0x140/0x170
[  218.530222][  T355]  exit_to_usermode_loop+0x190/0x1a0
[  218.535342][  T355]  prepare_exit_to_usermode+0x199/0x200
[  218.540726][  T355]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[  218.546451][  T355] RIP: 0033:0x7ff9f610d0d7
[  218.550703][  T355] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  218.570147][  T355] RSP: 002b:00007ffd5dcf2d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  218.578390][  T355] RAX: 0000000000000000 RBX: 00007ff9f618d08c RCX: 00007ff9f610d0d7
[  218.586209][  T355] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5dcf2e00
[  218.594012][  T355] RBP: 00007ffd5dcf2e00 R08: 0000000000000000 R09: 0000000000000000
[  218.601829][  T355] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5dcf3e90
[  218.609725][  T355] R13: 00007ff9f618d08c R14: 0000000000035499 R15: 00007ffd5dcf3ed0
[  218.617538][  T355] 
[  218.619708][  T355] Allocated by task 2:
[  218.623620][  T355]  __kasan_kmalloc+0x171/0x210
[  218.628213][  T355]  kmem_cache_alloc+0xd9/0x250
[  218.632817][  T355]  dup_task_struct+0x4f/0x600
[  218.637331][  T355]  copy_process+0x56d/0x3230
[  218.641755][  T355]  _do_fork+0x197/0x900
[  218.645844][  T355]  kernel_thread+0x16a/0x1d0
[  218.650264][  T355]  kthreadd+0x3b1/0x4f0
[  218.654254][  T355]  ret_from_fork+0x1f/0x30
[  218.658502][  T355] 
[  218.660673][  T355] Freed by task 17:
[  218.664324][  T355]  __kasan_slab_free+0x1b5/0x270
[  218.669096][  T355]  kmem_cache_free+0x10b/0x2c0
[  218.673696][  T355]  rcu_do_batch+0x492/0xa00
[  218.678035][  T355]  rcu_core+0x4c8/0xcb0
[  218.682035][  T355]  __do_softirq+0x23b/0x6b7
[  218.686363][  T355] 
[  218.688537][  T355] The buggy address belongs to the object at ffff8881e14a8000
[  218.688537][  T355]  which belongs to the cache task_struct of size 3904
[  218.702515][  T355] The buggy address is located 32 bytes inside of
[  218.702515][  T355]  3904-byte region [ffff8881e14a8000, ffff8881e14a8f40)
[  218.715883][  T355] The buggy address belongs to the page:
[  218.721354][  T355] page:ffffea0007852a00 refcount:1 mapcount:0 mapping:ffff8881f5cf0500 index:0x0 compound_mapcount: 0
[  218.732114][  T355] flags: 0x8000000000010200(slab|head)
[  218.737413][  T355] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5cf0500
[  218.745832][  T355] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  218.754251][  T355] page dumped because: kasan: bad access detected
[  218.760493][  T355] page_owner tracks the page as allocated
[  218.766054][  T355] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL)
[  218.782303][  T355]  prep_new_page+0x18f/0x370
[  218.786715][  T355]  get_page_from_freelist+0x2d13/0x2d90
[  218.792098][  T355]  __alloc_pages_nodemask+0x393/0x840
[  218.797297][  T355]  alloc_slab_page+0x39/0x3c0
[  218.801816][  T355]  new_slab+0x97/0x440
[  218.805726][  T355]  ___slab_alloc+0x2fe/0x490
[  218.810145][  T355]  __slab_alloc+0x62/0xa0
[  218.814310][  T355]  kmem_cache_alloc+0x109/0x250
[  218.819000][  T355]  dup_task_struct+0x4f/0x600
[  218.823510][  T355]  copy_process+0x56d/0x3230
[  218.827941][  T355]  _do_fork+0x197/0x900
[  218.831939][  T355]  __x64_sys_clone+0x26b/0x2c0
[  218.836535][  T355]  do_syscall_64+0xca/0x1c0
[  218.840971][  T355]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[  218.846692][  T355] page last free stack trace:
[  218.851206][  T355]  __free_pages_ok+0x847/0x950
[  218.855909][  T355]  __free_pages+0x91/0x140
[  218.860180][  T355]  __free_slab+0x221/0x2e0
[  218.864414][  T355]  unfreeze_partials+0x14e/0x180
[  218.869197][  T355]  put_cpu_partial+0x44/0x180
[  218.873702][  T355]  __slab_free+0x297/0x360
[  218.878038][  T355]  qlist_free_all+0x43/0xb0
[  218.882380][  T355]  quarantine_reduce+0x1d9/0x210
[  218.887153][  T355]  __kasan_kmalloc+0x41/0x210
[  218.891809][  T355]  kmem_cache_alloc+0xd9/0x250
[  218.896357][  T355]  getname_flags+0xb8/0x4e0
[  218.900793][  T355]  user_path_at_empty+0x28/0x50
[  218.905467][  T355]  ksys_chdir+0xa7/0x1f0
[  218.909553][  T355]  __x64_sys_chdir+0x34/0x40
[  218.913976][  T355]  do_syscall_64+0xca/0x1c0
[  218.918462][  T355]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[  218.924183][  T355] 
[  218.926349][  T355] Memory state around the buggy address:
[  218.931820][  T355]  ffff8881e14a7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  218.939717][  T355]  ffff8881e14a7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  218.947637][  T355] >ffff8881e14a8000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.955598][  T355]                                ^
[  218.960552][  T355]  ffff8881e14a8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.968449][  T355]  ffff8881e14a8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.976344][  T355] ==================================================================
[  218.984243][  T355] Disabling lock debugging due to kernel taint
[  218.998944][  T355] ------------[ cut here ]------------
[  219.004617][  T355] refcount_t: addition on 0; use-after-free.
[  219.010672][  T355] WARNING: CPU: 1 PID: 355 at lib/refcount.c:25 refcount_warn_saturate+0x132/0x1a0
[  219.019759][  T355] Modules linked in:
[  219.023601][  T355] CPU: 1 PID: 355 Comm: syz-executor Tainted: G    B             5.4.289-syzkaller-00025-g49530c73f82d #0
[  219.034701][  T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  219.044603][  T355] RIP: 0010:refcount_warn_saturate+0x132/0x1a0
[  219.050594][  T355] Code: 04 01 48 c7 c7 a0 1c fa 84 e8 8a 8f 0d ff 0f 0b eb a9 e8 11 ed 36 ff c6 05 f6 0f 1d 04 01 48 c7 c7 20 1d fa 84 e8 6e 8f 0d ff <0f> 0b eb 8d e8 f5 ec 36 ff c6 05 db 0f 1d 04 01 48 c7 c7 80 1d fa
[  219.070042][  T355] RSP: 0018:ffff8881d723fc30 EFLAGS: 00010246
[  219.075926][  T355] RAX: 77316b238a3c7100 RBX: 0000000000000002 RCX: ffff8881f31d9f80
[  219.083738][  T355] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  219.091553][  T355] RBP: 0000000000000002 R08: ffffffff814d6d92 R09: ffffed103ede5262
[  219.099364][  T355] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  219.107175][  T355] R13: ffff8881e14a8000 R14: dffffc0000000000 R15: ffff8881e14a8020
[  219.114991][  T355] FS:  0000555576aa9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  219.123927][  T355] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  219.130357][  T355] CR2: 0000001b31e0bff8 CR3: 00000001d7235000 CR4: 00000000003406a0
[  219.138183][  T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  219.145974][  T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  219.153788][  T355] Call Trace:
[  219.156919][  T355]  ? __warn+0x162/0x250
[  219.160915][  T355]  ? report_bug+0x3a1/0x4e0
[  219.165247][  T355]  ? refcount_warn_saturate+0x132/0x1a0
[  219.170625][  T355]  ? refcount_warn_saturate+0x132/0x1a0
[  219.176008][  T355]  ? do_invalid_op+0x6e/0x110
[  219.180520][  T355]  ? invalid_op+0x1e/0x30
[  219.184706][  T355]  ? wake_up_klogd+0xb2/0xf0
[  219.189114][  T355]  ? refcount_warn_saturate+0x132/0x1a0
[  219.194496][  T355]  kthread_stop+0x1a5/0x4a0
[  219.199147][  T355]  ext4_put_super+0x790/0xbb0
[  219.203655][  T355]  ? ext4_drop_inode+0x1f0/0x1f0
[  219.208433][  T355]  generic_shutdown_super+0x120/0x300
[  219.213634][  T355]  kill_block_super+0x7a/0xe0
[  219.218138][  T355]  deactivate_locked_super+0xa8/0x110
[  219.223355][  T355]  deactivate_super+0x1e2/0x2a0
[  219.228036][  T355]  ? vfs_submount+0xb0/0xb0
[  219.232372][  T355]  ? deactivate_locked_super+0x110/0x110
[  219.237841][  T355]  ? fast_dput+0x7a/0x280
[  219.242016][  T355]  cleanup_mnt+0x44e/0x500
[  219.246268][  T355]  task_work_run+0x140/0x170
[  219.250707][  T355]  exit_to_usermode_loop+0x190/0x1a0
[  219.255808][  T355]  prepare_exit_to_usermode+0x199/0x200
[  219.261196][  T355]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[  219.266944][  T355] RIP: 0033:0x7ff9f610d0d7
[  219.271172][  T355] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  219.290614][  T355] RSP: 002b:00007ffd5dcf2d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  219.298862][  T355] RAX: 0000000000000000 RBX: 00007ff9f618d08c RCX: 00007ff9f610d0d7
[  219.306672][  T355] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5dcf2e00
[  219.314484][  T355] RBP: 00007ffd5dcf2e00 R08: 0000000000000000 R09: 0000000000000000
[  219.322294][  T355] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5dcf3e90
[  219.330110][  T355] R13: 00007ff9f618d08c R14: 0000000000035499 R15: 00007ffd5dcf3ed0
[  219.337920][  T355] ---[ end trace 43ea1d138dc9fda9 ]---
[  219.347052][  T125] usb 3-1: USB disconnect, device number 27
[  219.361251][    T5] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  220.073112][    T5] usb 2-1: USB disconnect, device number 12
[  220.211244][  T569] hub 2-1:0.0: activate --> -19