last executing test programs:

10m8.667671818s ago: executing program 32 (id=1199):
setuid(0xee00)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48)

8m51.469922805s ago: executing program 33 (id=2142):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_clone(0x104080, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)

7m59.024443507s ago: executing program 0 (id=2739):
r0 = socket(0x2000000000000021, 0x2, 0x2)
shutdown(r0, 0x2)

7m58.792588241s ago: executing program 0 (id=2743):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00')
read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39)

7m58.557639655s ago: executing program 0 (id=2748):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x7fffffff, @mcast1, 0x7ff}}, 0x4, 0xa4bd}, 0x90)

7m58.28045949s ago: executing program 0 (id=2753):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

7m57.402469945s ago: executing program 0 (id=2763):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
fchdir(r0)

7m56.472380021s ago: executing program 0 (id=2772):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10)

7m56.039918728s ago: executing program 34 (id=2772):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10)

6m41.522543459s ago: executing program 7 (id=3697):
r0 = socket(0x25, 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0)

6m41.305575413s ago: executing program 7 (id=3699):
r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000400)=""/12, 0xc)

6m41.079901757s ago: executing program 7 (id=3703):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getitimer(0x0, &(0x7f0000000200))

6m40.776160612s ago: executing program 7 (id=3707):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

6m40.373017059s ago: executing program 7 (id=3714):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x20, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c018}, 0x4000080)

6m39.784845169s ago: executing program 7 (id=3724):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000002b00), 0x4)

6m39.335454726s ago: executing program 35 (id=3724):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000002b00), 0x4)

5m37.428281471s ago: executing program 2 (id=4527):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)

5m37.214018245s ago: executing program 2 (id=4530):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100))

5m36.995495128s ago: executing program 2 (id=4532):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000b00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

5m36.694739184s ago: executing program 2 (id=4536):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0xb}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp775'}}, {@uid}, {@type={'type', 0x3d, "0ff88dbf"}}, {@nobarrier}]}, 0x20, 0x6e7, &(0x7f00000006c0)="$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")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)

5m36.31820812s ago: executing program 2 (id=4539):
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000280)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

5m35.72244765s ago: executing program 2 (id=4542):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x0)

5m35.052833512s ago: executing program 36 (id=4542):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x0)

5m31.024137221s ago: executing program 3 (id=4597):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")

5m28.605895793s ago: executing program 3 (id=4616):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f00000000c0))

5m28.368381027s ago: executing program 3 (id=4620):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x2, "fc19"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5m26.606434057s ago: executing program 3 (id=4631):
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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")
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0)

5m26.42030289s ago: executing program 3 (id=4632):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000380)={0x101, 0x80000001, 0x1, {0x9, 0xfffffffc}, 0x4, 0xfb})

5m25.626994334s ago: executing program 3 (id=4636):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x81, @mcast2, 0x1}, 0x1c)

5m25.032543804s ago: executing program 37 (id=4636):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x81, @mcast2, 0x1}, 0x1c)

43.227474847s ago: executing program 5 (id=8293):
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f0000000300)=ANY=[], 0x8b, 0x2a0, &(0x7f0000000640)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)

42.924245063s ago: executing program 5 (id=8295):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0x4d)
recvfrom(r0, 0x0, 0x0, 0x40000063, 0x0, 0x0)

42.798659844s ago: executing program 5 (id=8297):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000180)={[{@gid}]})

42.572574119s ago: executing program 5 (id=8299):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4c5, &(0x7f0000000ec0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0)

41.840063731s ago: executing program 5 (id=8309):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000780)={[{@norecovery}, {@order_relaxed}, {}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xeec, &(0x7f0000000f40)="$eJzs3U9sHNX9APA3a6+dxE68Bn5g4EdIoRWBgh2SVE1vQaAeEZfeQSGhEYbShh6I+BN6QFRCFAlxqjhQcaFUSpFaCVSpQj21PbXqrSfUC62qVArqpUiJq9jvrXdfPN312J717n4+0tfPb97sfL/jtayZ8eybAIytxurX48cXihDe+eTtR156svj1tWV3ttc4tPq1iL1WCKHZ0S+y7X0WF1y5/OKpjdoiHF39mvrh0Uvt186EEC6EQ+HT0AofLi1/8cG7Dx/+6LU9N795/umXd2j32/L9AACAUXTxj8t/vffvf7h//suLB0+G6fbydHzeiv2ZeNx/JB4op+PlRujuFx3RaSpbbyJGI1tvIltvMsszWZKvmW2nWbLeVI98Ex3LNtpPAAAAGEbpvLYVisZiV7/RWFxcO++/5rO5qWLx2bPLZ84NqFAAAACgsn+/snrTrRBCCCGEEEIIIUY4VuYGfQUCAAAAGDed84Xt2WiFC9s7U1d7a63r82+0/qWHGhu/HrZBr9+/7f79l3+48r//qr84AABUN6pHk2m/0nF0mscgn0dwInvdZo//G9l2JjdZZ9m8gsMy32BZnfnPdbcqq3+z7+OglNWfz4e5W5XVn8/TuVuV1T9dcx1VldW/4bXXXais/r0111FVWf37aq6jqrL6Z2quo6qy+mdrrqOqsvr311xHVWX1H6i5jqrK6h+W22rL6m/VXEdVZfXP11xHVWX139Dfy/+xnbVUUVb/jTXXUVVZ/TfVXMeg3BHb9HM4mI13nj/n53TDco4HAAAA4+4/5v8TQgghhBBCCCFGPl4Z9AUIAAAAYODS5wLSp95XojQ+0WN8ssd4s8f4VI/x6R7jAAAAQAi/ef3MrW8V65/z3+p8eGneqDT/0mbnMcrnI9xs/q3Oe7bV/MMybxkAAADjpfj2p1fve+S95+e/vHjwZMfZ79V4vpvmAZ2M1wY+jv10X8Bs1i/SOfTJ7jyNkvXy6wP7y7b32BZ3FAAAAMZYOn9vhaKx2HHe3QqNxuLi+vn4QmgWZ84unz4S++n5LL+fa05fW/5gX9mG5alkAAAAMFrWz/c3Pv9Pz/FdCFPF4rNnl8+cW+vPtpc3G53XBebWlxed1wVa2fKjJcuPxX56fud35/auLl889b3lJ7d75wEAAGBMnHvh/NNPLC+f/oFvfDOe3+zbHWXstm8G/ZcJAADYbp9//nbzh8dmf7v2+f/1+e/S5/8PxX4rzu33p7hCuk8gfQ7gus/rP96dZ65svee612tl603EmM7q3tOxndAx32B63XxZvlb3dqZK8s1k+WazfPk8BZPZ+infgWx5/gmItN5ctjyfh3Eyy1Fk+e8KAAAAUG7p+WeeWzr3wvkHzj7zxFOnnzr97LGjJ7514sSRB7/54NLqff1LnXf3AwAAAMNo/abfQVcCAAAAAAAAAAAAAAAAAAAA46uOx4kNeh8BAABg3P3rlRDCBSFESaw9AnPwdQghhBCbi/Sw5EHXIeqNiV1Qg4jRWD/pGngtQqzFykr+pHkAAACAnXXl8ounOtvrXCi2NV97a6215mrMm9rZB/4yfy3Sapce6r5esm9bq2Hc1f37L/9w5X//1e3Nn/412P/fv0b3Bk5Wy3vP0s8XOvPfNtln/nz/H6uW/3CW/57QX/6V97L8j1fLf2+Wf1+f+a/b/+eq5b8v5l+I/cN395u/+/2fjm3aj7195v96tv9Phn7zZ/vf6jNh5v6YHwDGUWPQBeyQdJSQjqNnYj/tbzzcDPndD5s9/m9k25nccuXd203HQbfEfjpems3yJputfybb3v71oeZm6swNy10lZfVv1/u408rq7+vN2wXK6p+quY6qyuqfrrmOqsrq31NzHVWV1d/veeigldU/LNeVy+qfqbmOqsrqn625jqrK6t9fcx1VldV/oOY6qiqrf67mOqoqq7/iZbXaldU/X3MdVZXVf0PNdVRVVv+NNddRVVn9N9Vcx6DcHtuy8+F0/jkXx1K/lfWnN/hZjuq1BQAAABg2/zT/nxBCCCGEEEIIsRPx/W8MvoZ2rKwM+goEg7Szn2YGYLfy93+8ef/Hm/d/vHn/+V/SPfxF1k8meoxP9hhv9hifysbz39fpHuM3ZttdidL4TT3G/6/H+IEe47f0GF/oMX5rj/Hbeozf3mMcAACA8XBzbJ0fAgAAwOh66Rcfv/Grex6/PP/lxYMnw9R1884fif3p+L/112M/n/c+acb/+f8o9n8W29/F9m/Z+u4/AQAAgJ2XnhPj//8AAAAwutJzSp3/AwAAwOiaj63zfwAAABhdN8TW+T8AAACMsGLPxotjm64L3BXbfuf1AwB2v/+P7R2xPRjbO2P7ldim44C7Y/vVmuoDALbPT7/z4xNvFevz/R/Lxq/E5am9zoW1KwVFo3sm/72x3Rfbr/VZT/48gH7zJwf6zLNT+ee2mB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGB2N1a/Hjy8UIbzzyduP/GTqjT9fW3Zne41Dq1+L2GuFEJrt16XR9f4v44pXLr94qrO9GtsiHA1FKNrLw6OX2plmQggXwqHwaWiFD5eWv/jg3YcPf/TanpvfPP/0yzv4I+jaPwAAABhF/w0AAP//8RcdlQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40106e80, 0x0)

41.292224991s ago: executing program 5 (id=8317):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}})

40.996772185s ago: executing program 38 (id=8317):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}})

4.871804486s ago: executing program 8 (id=8732):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000002c0)="ec", 0x1)
setsockopt$inet_buf(r0, 0x0, 0x27, 0x0, 0x0)

4.438548833s ago: executing program 8 (id=8738):
r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000580)={0x0, 0xfffffffd, 0x80}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0), 0x1000000000000276}, 0x0, 0x80840, 0x1})
io_uring_enter(r0, 0x1d2d, 0x0, 0x8, 0x0, 0x0)

4.168766058s ago: executing program 8 (id=8733):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0)

3.946677982s ago: executing program 6 (id=8739):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

3.664160607s ago: executing program 6 (id=8741):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x28, r1, 0x1, 0xfffffffe, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0)

3.519068219s ago: executing program 6 (id=8743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3.272172024s ago: executing program 6 (id=8745):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
fchdir(r0)
rmdir(&(0x7f0000000100)='./file0\x00')

3.098361306s ago: executing program 6 (id=8747):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x8080, 0x40)
open_by_handle_at(r0, &(0x7f0000000000)=@reiserfs_2={0x8, 0x2, {0x2, 0x5}}, 0x202400)

2.428412248s ago: executing program 4 (id=8752):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0)

2.31218697s ago: executing program 1 (id=8754):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48)

2.186092483s ago: executing program 8 (id=8755):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x325, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x40, 0x8e, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240448c1}, 0x4800)

2.080172924s ago: executing program 4 (id=8757):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x38)

1.912089637s ago: executing program 8 (id=8758):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)={0x1c, 0x5e, 0x1, 0x70bd2b, 0xfffffffe, "", [@nested={0xc, 0xe2, 0x0, 0x1, [@nested={0x6, 0x12b, 0x0, 0x1, [@generic="9b37"]}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.825387899s ago: executing program 1 (id=8760):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000600000001000084020000000600000001000000000000000030615f5f002e305f"], &(0x7f0000000340)=""/152, 0x46, 0x98, 0x1}, 0x28)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)

1.684300111s ago: executing program 4 (id=8761):
prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x248}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1.627263292s ago: executing program 1 (id=8762):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
io_setup(0x9, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000002540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

1.578563203s ago: executing program 8 (id=8763):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

1.457415765s ago: executing program 4 (id=8765):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010327bd7000fddbdf2501000000080003"], 0x34}, 0x1, 0x0, 0x0, 0x44011}, 0x800)

1.259672478s ago: executing program 6 (id=8766):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0)

1.247641109s ago: executing program 1 (id=8767):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES16, @ANYRESDEC], 0x1, 0x2a2, &(0x7f0000001140)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x58)

1.130273791s ago: executing program 4 (id=8768):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$notify(r0, 0x402, 0x0)

1.050043482s ago: executing program 4 (id=8770):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0xa, 0xe8}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.049841232s ago: executing program 1 (id=8771):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

828.433036ms ago: executing program 9 (id=8772):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0)

790.342167ms ago: executing program 1 (id=8773):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2061, 0x0)

707.322538ms ago: executing program 9 (id=8774):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24)

568.27079ms ago: executing program 9 (id=8775):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002b40), r0)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x20, r1, 0x805, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44881}, 0x4)

505.451891ms ago: executing program 9 (id=8776):
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108)

215.110216ms ago: executing program 9 (id=8777):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 9 (id=8778):
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x1, 0x306, &(0x7f0000000800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

kernel console output (not intermixed with test programs):

as an invalid length.
[  673.078696][ T6696] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  673.091751][ T4325] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 10
[  673.117181][ T6696] gspca_stv06xx: st6422 sensor detected
[  673.127840][ T4325] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  673.160856][ T4325] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  673.177502][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.182658][T22190] netlink: 'syz.9.7324': attribute type 2 has an invalid length.
[  673.196992][ T4325] usb 6-1: Product: syz
[  673.201798][ T4325] usb 6-1: Manufacturer: syz
[  673.211727][ T4325] usb 6-1: SerialNumber: syz
[  673.222738][ T4325] usb 6-1: config 0 descriptor??
[  673.253074][ T4325] cdc_ncm 6-1:0.0: skipping garbage
[  673.279963][ T4325] cdc_ncm 6-1:0.0: CDC Union missing and no IAD found
[  673.300938][ T4325] cdc_ncm 6-1:0.0: bind() failure
[  673.479750][ T4325] usb 6-1: USB disconnect, device number 20
[  673.613655][ T6696] STV06xx: probe of 9-1:0.0 failed with error -71
[  673.642113][ T6696] usb 9-1: USB disconnect, device number 15
[  673.648153][T22202] libceph: resolve 'c' (ret=-3): failed
[  674.964254][T22241] Cannot find del_set index 2 as target
[  675.998392][T22274] netlink: 'syz.5.7365': attribute type 32 has an invalid length.
[  676.252019][T22277] loop4: detected capacity change from 0 to 4096
[  676.354387][   T52] block nbd8: Attempted send on invalid socket
[  676.360693][   T52] I/O error, dev nbd8, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  676.370633][T22287] REISERFS warning (device nbd8): sh-2006 read_super_block: bread failed (dev nbd8, block 2, size 4096)
[  676.456022][   T52] block nbd8: Attempted send on invalid socket
[  676.462484][   T52] I/O error, dev nbd8, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  676.476115][T22287] REISERFS warning (device nbd8): sh-2006 read_super_block: bread failed (dev nbd8, block 16, size 4096)
[  677.499717][T22286] loop5: detected capacity change from 0 to 40427
[  677.544244][T22318] kAFS: unable to lookup cell '.,'
[  677.581699][T22286] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  677.594208][T22286] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  677.661353][T22286] F2FS-fs (loop5): build fault injection attr: rate: 1, type: 0x3ffff
[  677.669736][T22286] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x700
[  677.750306][T22286] F2FS-fs (loop5): inline encryption not supported
[  677.811561][T22286] F2FS-fs (loop5): invalid crc value
[  677.846608][T22327] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  677.856891][T22286] F2FS-fs (loop5): Found nat_bits in checkpoint
[  678.069523][T22286] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  678.088371][T22286] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  678.088523][T22335] xt_CT: You must specify a L4 protocol and not use inversions on it
[  678.139912][T22326] nvme_fabrics: missing parameter 'transport=%s'
[  678.190789][T22286] F2FS-fs (loop5) : inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xd6/0x1c0
[  678.212043][T22326] nvme_fabrics: missing parameter 'nqn=%s'
[  678.270703][T22286] F2FS-fs (loop5) : inject evict_inode fail in f2fs_evict_inode of evict+0x485/0x870
[  678.646196][   T27] audit: type=1326 audit(1753310721.340:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22344 comm="syz.4.7398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd35dd8e9a9 code=0x0
[  678.672274][T22343] loop9: detected capacity change from 0 to 4096
[  678.758890][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffc0c00
[  678.778692][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffc0c00
[  678.823943][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffc0c00
[  678.850408][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffc0c00
[  678.859413][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffc1c00
[  678.950977][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffc2c00
[  678.958947][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffc4c00
[  679.000463][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffc8c00
[  679.020422][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffd0c00
[  679.067571][T22343] ntfs3: loop9: try to read out of volume at offset 0x3fffffe0c00
[  680.375149][T22391] netlink: 'syz.9.7418': attribute type 13 has an invalid length.
[  680.403279][T22391] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7418'.
[  680.441217][T22391] syz_tun: refused to change device tx_queue_len
[  680.448849][T22391] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  680.510257][   T22] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  680.715621][   T22] usb 5-1: Using ep0 maxpacket: 16
[  680.724584][   T22] usb 5-1: config 1 interface 1 has no altsetting 0
[  680.776769][   T22] usb 5-1: string descriptor 0 read error: -22
[  680.788847][   T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  680.828895][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.884596][   T22] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  680.917819][T22407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7427'.
[  681.321935][ T4325] usb 5-1: USB disconnect, device number 18
[  681.997097][T22439] Cannot find del_set index 286 as target
[  682.027936][T22424] loop5: detected capacity change from 0 to 32768
[  682.058852][T22424] 
[  682.058852][T22424]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  682.058852][T22424] 
[  682.388007][T10576] 
[  682.388007][T10576]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  682.388007][T10576] 
[  682.417940][T10576] 
[  682.417940][T10576]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  682.417940][T10576] 
[  682.438700][  T107] 
[  682.438700][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  682.438700][  T107] 
[  682.457050][ T7038] 
[  682.457050][ T7038]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  682.457050][ T7038] 
[  682.498832][ T7038] 
[  682.498832][ T7038]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  682.498832][ T7038] 
[  682.970538][ T4347] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  683.170411][ T4347] usb 10-1: Using ep0 maxpacket: 8
[  683.189969][ T4347] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  683.209811][ T4347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.229218][ T4347] usb 10-1: Product: syz
[  683.241953][ T4347] usb 10-1: Manufacturer: syz
[  683.257894][ T4347] usb 10-1: SerialNumber: syz
[  683.281103][ T4347] usb 10-1: config 0 descriptor??
[  683.315962][ T4347] gspca_main: se401-2.14.0 probing 047d:5003
[  683.433806][   T27] audit: type=1326 audit(1753310726.130:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17738e9a9 code=0x7ffc0000
[  683.497691][   T27] audit: type=1326 audit(1753310726.170:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fe17738e9a9 code=0x7ffc0000
[  683.540898][T22485] netlink: 'syz.8.7457': attribute type 2 has an invalid length.
[  683.687904][   T27] audit: type=1326 audit(1753310726.170:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.6.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17738e9a9 code=0x7ffc0000
[  683.732155][ T4347] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  683.739675][ T4347] se401: probe of 10-1:0.0 failed with error -71
[  683.783580][ T4347] usb 10-1: USB disconnect, device number 8
[  683.827778][T22491] loop4: detected capacity change from 0 to 2048
[  683.877799][T22491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  683.935858][   T27] audit: type=1800 audit(1753310726.630:228): pid=22491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7459" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  684.231391][T22504] netdevsim netdevsim8: Firmware load for './file0/../file0' refused, path contains '..' component
[  684.303886][T22506] loop5: detected capacity change from 0 to 1764
[  684.394637][T22506] iso9660: Corrupted directory entry in block 2 of inode 1920
[  684.457523][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7469'.
[  684.485163][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7469'.
[  684.556583][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7469'.
[  685.330076][T22508] loop4: detected capacity change from 0 to 32768
[  685.385551][T22508] JBD2: Ignoring recovery information on journal
[  685.496584][T22546] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7487'.
[  685.497901][T22545] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  685.524259][T22508] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  685.636353][T22508] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  685.636538][T22508] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  685.685747][T22508] OCFS2: Returning error to the calling process.
[  685.714678][T22508] (syz.4.7468,22508,0):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  685.809376][T22508] (syz.4.7468,22508,1):ocfs2_mknod:334 ERROR: status = -117
[  685.824497][T22554] xt_time: invalid argument - start or stop time greater than 23:59:59
[  685.870445][T22508] (syz.4.7468,22508,1):ocfs2_mknod:502 ERROR: status = -117
[  685.888142][T22508] (syz.4.7468,22508,1):ocfs2_create:676 ERROR: status = -117
[  685.912667][T22557] CIFS mount error: No usable UNC path provided in device string!
[  685.912667][T22557] 
[  685.926866][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.927028][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.028979][T22557] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  686.052972][T15581] ocfs2: Unmounting device (7,4) on (node local)
[  686.179819][T22566] netlink: 'syz.9.7496': attribute type 9 has an invalid length.
[  686.220280][T22566] netlink: 'syz.9.7496': attribute type 7 has an invalid length.
[  686.228175][T22566] netlink: 'syz.9.7496': attribute type 8 has an invalid length.
[  686.664591][T22582] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7503'.
[  687.230677][T22606] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7515'.
[  687.360529][ T4325] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  687.562397][ T4325] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  687.587086][ T4325] usb 7-1: config 0 interface 0 has no altsetting 0
[  687.612807][ T4325] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  687.642635][ T4325] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  687.685163][ T4325] usb 7-1: Product: syz
[  687.706384][ T4325] usb 7-1: Manufacturer: syz
[  687.716116][T22626] tipc: Can't bind to reserved service type 0
[  687.716126][ T4325] usb 7-1: SerialNumber: syz
[  687.722919][ T4325] usb 7-1: config 0 descriptor??
[  687.739420][ T4325] usb 7-1: selecting invalid altsetting 0
[  687.767226][T22628] overlayfs: failed to resolve './file0': -2
[  687.997076][ T4325] usb 7-1: USB disconnect, device number 23
[  688.123059][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7532'.
[  688.401726][ T4258] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  688.467735][T22650] loop9: detected capacity change from 0 to 4096
[  688.575050][T22656] SET target dimension over the limit!
[  688.606893][ T4258] usb 6-1: unable to get BOS descriptor or descriptor too short
[  688.640237][T22650] ntfs3: loop9: Failed to load $Extend.
[  688.663699][ T4258] usb 6-1: not running at top speed; connect to a high speed hub
[  688.692738][ T4258] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.725023][ T4258] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  688.790215][ T4258] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  688.856563][ T4258] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  688.898803][T22664] netlink: 'syz.4.7543': attribute type 29 has an invalid length.
[  688.907048][ T4258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.935927][ T4258] usb 6-1: Product: syz
[  688.941717][T22664] netlink: 'syz.4.7543': attribute type 29 has an invalid length.
[  688.964046][ T4258] usb 6-1: Manufacturer: syz
[  688.968803][ T4258] usb 6-1: SerialNumber: syz
[  689.302865][ T4258] usb 6-1: USB disconnect, device number 21
[  689.551279][T20759] udevd[20759]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  689.747540][T22692] loop9: detected capacity change from 0 to 256
[  689.869114][T22692] FAT-fs (loop9): Directory bread(block 64) failed
[  689.931076][T22692] FAT-fs (loop9): Directory bread(block 65) failed
[  689.938295][T22692] FAT-fs (loop9): Directory bread(block 66) failed
[  690.036141][T22692] FAT-fs (loop9): Directory bread(block 67) failed
[  690.064128][T22692] FAT-fs (loop9): Directory bread(block 68) failed
[  690.138580][T22692] FAT-fs (loop9): Directory bread(block 69) failed
[  690.160356][T22692] FAT-fs (loop9): Directory bread(block 70) failed
[  690.167408][T22692] FAT-fs (loop9): Directory bread(block 71) failed
[  690.205862][T22692] FAT-fs (loop9): Directory bread(block 72) failed
[  690.236545][T22692] FAT-fs (loop9): Directory bread(block 73) failed
[  690.980203][ T4258] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  691.190057][ T4258] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  691.221261][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.245849][ T4258] usb 5-1: Product: syz
[  691.256012][ T4258] usb 5-1: Manufacturer: syz
[  691.271323][ T4258] usb 5-1: SerialNumber: syz
[  691.292259][ T4258] usb 5-1: config 0 descriptor??
[  691.312527][ T4258] gspca_main: sunplus-2.14.0 probing 055f:c230
[  691.460293][ T4325] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  691.472258][ T4348] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  691.660302][ T4325] usb 7-1: Using ep0 maxpacket: 8
[  691.667362][ T4325] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  691.681147][ T4348] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  691.697117][ T4348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.708132][ T4325] usb 7-1: config 179 has no interface number 0
[  691.721483][ T4258] usb 5-1: USB disconnect, device number 19
[  691.727539][ T4348] usb 6-1: Product: syz
[  691.740276][ T4325] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  691.769038][ T4348] usb 6-1: Manufacturer: syz
[  691.783232][ T4348] usb 6-1: SerialNumber: syz
[  691.790261][ T4325] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  691.815924][ T4348] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  691.825437][ T4325] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  691.853019][ T4325] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  691.865418][ T4325] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  691.879523][ T4325] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  691.888978][ T4325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.910501][T22743] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  691.951306][ T4348] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  692.026485][T22748] loop9: detected capacity change from 0 to 32768
[  692.178288][ T4258] usb 7-1: USB disconnect, device number 24
[  692.178392][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  692.192790][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  692.474862][ T6696] usb 6-1: USB disconnect, device number 22
[  692.864164][T22783] sctp: [Deprecated]: syz.4.7600 (pid 22783) Use of int in max_burst socket option.
[  692.864164][T22783] Use struct sctp_assoc_value instead
[  693.045657][ T4348] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  693.065450][ T4348] ath9k_htc: Failed to initialize the device
[  693.078990][ T6696] usb 6-1: ath9k_htc: USB layer deinitialized
[  693.714463][T22804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7611'.
[  693.782476][T22804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7611'.
[  694.056048][T22786] loop9: detected capacity change from 0 to 32768
[  694.184895][T22786] XFS (loop9): Mounting V5 Filesystem
[  694.265145][T22786] XFS (loop9): Ending clean mount
[  694.311692][T22786] XFS (loop9): Quotacheck needed: Please wait.
[  694.457276][T22786] XFS (loop9): Quotacheck: Done.
[  694.625883][T15361] XFS (loop9): Unmounting Filesystem
[  695.423059][T22850] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7631'.
[  695.461517][T22824] loop4: detected capacity change from 0 to 32768
[  695.513635][T22824] 
[  695.513635][T22824]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  695.513635][T22824] 
[  695.715470][T10549] read_mapping_page failed!
[  695.747694][T10549] ERROR: (device loop4): txCommit: 
[  695.747694][T10549] 
[  695.775368][T10549] ERROR: (device loop4): remounting filesystem as read-only
[  695.783631][T10549] jfs_write_inode: jfs_commit_inode failed!
[  695.789667][T15581] 
[  695.789667][T15581]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  695.789667][T15581] 
[  695.819075][T15581] 
[  695.819075][T15581]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  695.819075][T15581] 
[  695.828153][T22863] loop9: detected capacity change from 0 to 128
[  695.904088][T22863] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  695.976886][T22868] loop5: detected capacity change from 0 to 256
[  696.027426][T22863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  696.030832][T22869] loop4: detected capacity change from 0 to 512
[  696.083803][T22868] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f9e2fc, utbl_chksum : 0xe619d30d)
[  696.164258][T22869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  696.173552][T22863] UDF-fs: bad mount option "*��7d���~\��%��;������L�߮�M����خMWl�p��Lg�\+Ս��~��m�{��uj����������+�/���d�`�6J[}gB#���g�" or missing value
[  696.201038][T22869] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  696.347113][T22869] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz.4.7638: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  696.422074][T22869] EXT4-fs (loop4): Remounting filesystem read-only
[  696.428763][T22869] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz.4.7638: directory missing '.'
[  696.474833][T22878] netlink: 'syz.8.7644': attribute type 7 has an invalid length.
[  696.508163][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7644'.
[  696.625512][T15581] EXT4-fs (loop4): unmounting filesystem.
[  697.571230][ T4347] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  697.817390][ T4347] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  697.821024][   T14] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  697.850178][ T4347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.858464][ T4347] usb 9-1: Product: syz
[  697.864323][ T4347] usb 9-1: Manufacturer: syz
[  697.869260][ T4347] usb 9-1: SerialNumber: syz
[  697.936726][ T4347] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  698.008354][ T4258] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  698.062616][   T14] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  698.080071][   T14] usb 10-1: config 0 interface 0 has no altsetting 0
[  698.132546][   T14] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  698.179985][   T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.202868][   T14] usb 10-1: Product: syz
[  698.207184][   T14] usb 10-1: Manufacturer: syz
[  698.260925][   T14] usb 10-1: SerialNumber: syz
[  698.277037][   T14] usb 10-1: config 0 descriptor??
[  698.305459][   T14] usb 10-1: selecting invalid altsetting 0
[  698.482156][ T4347] usb 9-1: USB disconnect, device number 16
[  698.547360][T22924] loop5: detected capacity change from 0 to 4096
[  698.565311][   T14] usb 10-1: USB disconnect, device number 9
[  698.599359][T22924] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  698.728271][T22924] ntfs3: loop5: failed to convert "c46c" to cp737
[  698.926106][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7670'.
[  699.280258][ T4258] usb 9-1: Service connection timeout for: 256
[  699.287258][ T4258] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services
[  699.326721][ T4258] ath9k_htc: Failed to initialize the device
[  699.345823][ T4347] usb 9-1: ath9k_htc: USB layer deinitialized
[  699.428351][   T93] block nbd8: Attempted send on invalid socket
[  699.435697][   T93] I/O error, dev nbd8, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  699.490239][   T93] gfs2: error 10 reading superblock
[  700.083564][T22974] loop9: detected capacity change from 0 to 512
[  700.083647][T22977] loop5: detected capacity change from 0 to 64
[  700.099877][T22974] EXT4-fs: Ignoring removed mblk_io_submit option
[  700.152032][T22974] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 2: comm syz.9.7689: invalid block
[  700.176002][T22974] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.7689: invalid indirect mapped block 10 (level 1)
[  700.191133][T22974] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.7689: invalid indirect mapped block 8 (level 1)
[  700.266850][T22974] EXT4-fs (loop9): 1 truncate cleaned up
[  700.280389][T22974] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  700.377796][T15361] EXT4-fs (loop9): unmounting filesystem.
[  700.620391][ T4347] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  700.820588][ T4347] usb 9-1: Using ep0 maxpacket: 32
[  700.827837][ T4347] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  700.860225][ T4347] usb 9-1: config 0 has no interface number 0
[  700.871130][ T4347] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  700.887165][ T4347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.901389][ T4347] usb 9-1: Product: syz
[  700.916833][ T4347] usb 9-1: Manufacturer: syz
[  700.928461][ T4347] usb 9-1: SerialNumber: syz
[  700.943857][ T4347] usb 9-1: config 0 descriptor??
[  700.957133][ T4347] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  701.165155][ T4347] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  701.184082][ T4347] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  701.252441][   T14] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  701.283496][T23027] loop4: detected capacity change from 0 to 256
[  701.298563][T23027] exfat: Deprecated parameter 'utf8'
[  701.322191][T23027] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  701.445389][   T14] usb 6-1: Using ep0 maxpacket: 16
[  701.458052][T23029] loop9: detected capacity change from 0 to 2048
[  701.468910][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.493471][T23029] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  701.500329][   T14] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  701.518712][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.542107][   T14] usb 6-1: config 0 descriptor??
[  701.611194][    C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[  701.620004][ T4347] usb 9-1: USB disconnect, device number 17
[  701.641324][ T4347] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  701.721514][ T4347] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  701.760754][ T4347] quatech2 9-1:0.51: device disconnected
[  701.799560][T15361] EXT4-fs (loop9): unmounting filesystem.
[  701.987780][   T14] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0
[  702.005169][   T14] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0
[  702.014505][   T14] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0
[  702.022368][   T14] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0
[  702.029601][   T14] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0
[  702.109730][   T14] corsair 0003:1B1C:1B3E.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0
[  702.190808][ T4347] usb 6-1: USB disconnect, device number 23
[  702.640358][ T4258] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  702.848288][ T4258] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  702.875182][ T4258] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.904478][ T4258] usb 10-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  702.942277][ T4258] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.964877][ T4258] usb 10-1: config 0 descriptor??
[  703.374944][T23094] nbd: must specify at least one socket
[  703.388426][ T4258] elo 0003:04E7:0030.0002: item fetching failed at offset 0/3
[  703.406088][ T4258] elo 0003:04E7:0030.0002: parse failed
[  703.407423][T23096] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7744'.
[  703.421932][ T4258] elo: probe of 0003:04E7:0030.0002 failed with error -22
[  703.556112][T23102] CIFS: Unable to determine destination address
[  703.596763][   T14] usb 10-1: USB disconnect, device number 10
[  703.676555][T23108] loop5: detected capacity change from 0 to 64
[  703.734032][T23108] syz.5.7750: attempt to access beyond end of device
[  703.734032][T23108] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  703.796381][T23108] Buffer I/O error on dev loop5, logical block 134217734, async page read
[  703.859056][T23108] Trying to free block not in datazone
[  704.201424][T23134] CUSE: unknown device info "�KJ�H+��ۤ2Lh��nL�1�`�Cc��n�����8���0���(�3նi��>f���_ٮ,��
�<�_e�F��"
[  704.277535][T23134] CUSE: unknown device info "3�ܟ�,��̘�"
[  704.283886][T23134] CUSE: unknown device info "J���2SZ�� !e/��������J�+-n��a4����D�|G$��5O~�q	��
[  704.283886][T23134] f����z��X�SA�x��j��T�ǔ��w���xR�ɐQ��(hҏj	p�VdY0��|M?2J��I�v�^
R�@��"
[  704.312186][T23134] CUSE: unknown device info "!To�}ݝ&|L+U��o��ϲ���"��FstV�:׌E�gJ�����<@c�����4�T�M�M|�����"
[  704.334307][T23134] CUSE: DEVNAME unspecified
[  705.170280][   T14] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  705.180473][ T6696] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  705.200358][ T7060] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  705.385611][   T14] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  705.396641][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.405106][ T7060] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  705.414536][ T6696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  705.426018][   T14] usb 6-1: Product: syz
[  705.430667][ T7060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.439520][   T14] usb 6-1: Manufacturer: syz
[  705.444364][ T6696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  705.455042][   T14] usb 6-1: SerialNumber: syz
[  705.461690][ T7060] usb 5-1: config 0 descriptor??
[  705.466947][ T6696] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  705.483483][   T14] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  705.497233][ T6696] usb 10-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  705.512393][ T6696] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.536515][ T6696] usb 10-1: config 0 descriptor??
[  705.542487][   T14] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  705.902033][ T7060] [drm:udl_init] *ERROR* Selecting channel failed
[  705.951166][ T7060] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  705.964031][ T6696] ortek 0003:1223:3F07.0003: unknown main item tag 0x6
[  705.976260][ T6696] ortek 0003:1223:3F07.0003: unknown global tag 0xc
[  705.984452][ T7060] [drm] Initialized udl on minor 2
[  705.998950][ T7060] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  706.009623][ T6696] ortek 0003:1223:3F07.0003: item 0 1 1 12 parsing failed
[  706.017920][ T7060] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  706.040989][ T6696] ortek: probe of 0003:1223:3F07.0003 failed with error -22
[  706.062540][ T7060] usb 5-1: USB disconnect, device number 20
[  706.071878][ T6696] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  706.091918][ T6696] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  706.114403][ T6696] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  706.192548][ T6696] usb 6-1: USB disconnect, device number 24
[  706.202519][ T4325] usb 10-1: USB disconnect, device number 11
[  706.430961][T23186] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7783'.
[  706.581640][   T27] audit: type=1400 audit(1753310749.280:229): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626207DFF2B7FFDF1F77FF9D5F77FF7F9DB7F9EFBFBB5EFA6CD1ACBD6EDCDA317BB3D6ED74EBDD0FA5974E42362F338C1CEB0A12C9FC2A01B02 pid=23189 comm="syz.8.7785"
[  706.641138][   T14] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  706.657196][   T14] ath9k_htc: Failed to initialize the device
[  706.670854][T23194] loop4: detected capacity change from 0 to 512
[  706.692423][ T6696] usb 6-1: ath9k_htc: USB layer deinitialized
[  706.700061][T23194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  706.789252][T23194] EXT4-fs (loop4): 1 orphan inode deleted
[  706.807097][T23194] EXT4-fs (loop4): 1 truncate cleaned up
[  706.832194][T23194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  706.837313][T23202] loop5: detected capacity change from 0 to 16
[  706.848540][T23202] erofs: (device loop5): mounted with root inode @ nid 36.
[  707.036674][T15581] EXT4-fs (loop4): unmounting filesystem.
[  707.145488][T23216] loop5: detected capacity change from 0 to 128
[  707.623676][ T4347] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  707.795949][T23248] loop5: detected capacity change from 0 to 256
[  707.814228][ T4347] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  707.830172][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.871221][ T4347] usb 5-1: Product: syz
[  707.875546][ T4347] usb 5-1: Manufacturer: syz
[  707.900401][ T4347] usb 5-1: SerialNumber: syz
[  707.909653][ T4347] usb 5-1: config 0 descriptor??
[  708.177918][   T14] usb 5-1: USB disconnect, device number 21
[  708.407184][T23271] tipc: Started in network mode
[  708.423249][T23271] tipc: Node identity , cluster identity 4711
[  708.429493][T23271] tipc: Failed to obtain node identity
[  708.445737][T23271] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  708.562467][T23274] loop9: detected capacity change from 0 to 1024
[  708.637079][T10584] hfsplus: b-tree write err: -5, ino 4
[  709.244584][   T14] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[  709.297139][T23266] loop5: detected capacity change from 0 to 65536
[  709.320834][T23284] loop4: detected capacity change from 0 to 32768
[  709.329646][T23284] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  709.448293][   T14] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  709.486154][   T14] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  709.511442][   T14] usb 9-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  709.546125][   T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.566517][   T14] usb 9-1: config 0 descriptor??
[  709.573009][T23290] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  709.690329][T14681] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  709.892126][T14681] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[  709.907849][T14681] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  709.918790][T14681] usb 10-1: config 0 has no interface number 0
[  709.949441][T14681] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  709.966889][T14681] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.975269][T14681] usb 10-1: Product: syz
[  709.979576][T14681] usb 10-1: Manufacturer: syz
[  709.990926][T14681] usb 10-1: SerialNumber: syz
[  710.001382][   T14] lenovo 0003:17EF:6009.0004: report_id 1754907481 is invalid
[  710.005098][T14681] usb 10-1: config 0 descriptor??
[  710.014261][ T4347] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  710.019346][   T14] lenovo 0003:17EF:6009.0004: item 0 4 1 8 parsing failed
[  710.045486][T14681] usb 10-1: Found UVC 0.00 device syz (046d:0823)
[  710.051295][   T14] lenovo 0003:17EF:6009.0004: hid_parse failed
[  710.059070][   T14] lenovo: probe of 0003:17EF:6009.0004 failed with error -22
[  710.076758][T14681] usb 10-1: No valid video chain found.
[  710.192073][T23317] use of bytesused == 0 is deprecated and will be removed in the future,
[  710.202486][T23317] use the actual size instead.
[  710.210716][ T4347] usb 5-1: config 0 interface 0 has no altsetting 0
[  710.219235][   T14] usb 9-1: USB disconnect, device number 18
[  710.223349][ T4347] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  710.259972][ T6696] usb 10-1: USB disconnect, device number 12
[  710.265943][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.292040][ T4347] usb 5-1: config 0 descriptor??
[  710.648527][T23328] Bluetooth: MGMT ver 1.22
[  710.933653][ T4347] video4linux radio48: keene_cmd_set failed (-71)
[  710.950193][ T4347] radio-keene 5-1:0.0: V4L2 device registered as radio48
[  710.968462][ T4347] usb 5-1: USB disconnect, device number 22
[  711.335264][T23347] netlink: 100 bytes leftover after parsing attributes in process `syz.9.7861'.
[  711.590814][T23333] loop5: detected capacity change from 0 to 32768
[  711.646763][T23333] XFS (loop5): Mounting V5 Filesystem
[  711.705641][T23333] XFS (loop5): Ending clean mount
[  711.967804][ T7038] XFS (loop5): Unmounting Filesystem
[  712.179754][T23388] loop4: detected capacity change from 0 to 256
[  712.486255][T23394] loop9: detected capacity change from 0 to 4096
[  712.563983][T23394] ntfs: volume version 3.1.
[  712.632911][T23394] ntfs: (device loop9): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-14.  You might want to try to use the mount option nls=utf8.
[  712.696649][T23394] ntfs: (device loop9): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  713.006491][T23416] comedi comedi3: pcl726: I/O port conflict (0x101,16)
[  713.160499][   T14] usb 6-1: new low-speed USB device number 25 using dummy_hcd
[  713.355036][   T14] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  713.372677][   T14] usb 6-1: config 0 has no interface number 0
[  713.389266][   T14] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  713.425569][   T14] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  713.457155][   T14] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  713.477359][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.499191][   T14] usb 6-1: config 0 descriptor??
[  713.504994][T23409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  713.530981][   T14] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  713.543286][T23413] loop9: detected capacity change from 0 to 32768
[  713.578615][T23434] device veth1_macvtap left promiscuous mode
[  713.629596][T23434] device veth1_macvtap entered promiscuous mode
[  713.652078][T10559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  713.741736][   T14] usb 6-1: USB disconnect, device number 25
[  714.090680][T23432] loop4: detected capacity change from 0 to 32768
[  714.206614][T23432] XFS (loop4): Mounting V5 Filesystem
[  714.381214][T23432] XFS (loop4): Ending clean mount
[  714.390609][T23440] loop9: detected capacity change from 0 to 32768
[  714.407895][T23440] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.7898 (23440)
[  714.432497][T23440] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  714.448262][T23440] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  714.458202][T23440] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8)
[  714.480195][T23440] BTRFS info (device loop9): use lzo compression, level 0
[  714.487639][T23440] BTRFS info (device loop9): using free space tree
[  714.613830][T15581] XFS (loop4): Unmounting Filesystem
[  714.820282][T23440] BTRFS info (device loop9): enabling ssd optimizations
[  715.131285][T15361] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  715.168657][T23494] loop5: detected capacity change from 0 to 4096
[  715.176976][T23494] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  715.239477][T23494] ntfs3: loop5: Failed to load $Extend.
[  715.745400][T23514] nbd: couldn't find a device at index 1996488704
[  715.770720][T18490] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  715.970321][T18490] usb 5-1: Using ep0 maxpacket: 16
[  715.989625][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7930'.
[  715.991913][T18490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.005925][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7930'.
[  716.040166][T18490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.070206][T18490] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  716.106663][T18490] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  716.130197][T18490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.156873][T18490] usb 5-1: config 0 descriptor??
[  716.507339][T23536] tipc: Started in network mode
[  716.512541][T23536] tipc: Node identity ac1414aa, cluster identity 4711
[  716.535498][T23536] tipc: Enabled bearer <udp:syz2>, priority 10
[  716.583295][T18490] HID 045e:07da: Invalid code 65791 type 1
[  716.619281][T18490] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input27
[  716.667864][T18490] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  716.773839][T23528] loop5: detected capacity change from 0 to 32768
[  716.787073][T18490] usb 5-1: USB disconnect, device number 23
[  716.810398][T23528] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.7931 (23528)
[  716.847100][T23528] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  716.868286][T23528] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  716.885313][T23528] BTRFS info (device loop5): setting nodatacow, compression disabled
[  716.901201][T23528] BTRFS info (device loop5): enabling ssd optimizations
[  716.918615][T23528] BTRFS info (device loop5): setting datacow
[  716.925390][T23528] BTRFS info (device loop5): doing ref verification
[  716.936974][T23528] BTRFS info (device loop5): force clearing of disk cache
[  716.946345][T23528] BTRFS info (device loop5): turning off barriers
[  716.957527][T23528] BTRFS info (device loop5): using spread ssd allocation scheme
[  716.967211][T23528] BTRFS info (device loop5): using free space tree
[  717.021238][ T4348] kernel write not supported for file /1308/net/rt_cache (pid: 4348 comm: kworker/0:6)
[  717.171680][T23528] BTRFS info (device loop5): rebuilding free space tree
[  717.203171][T23569] loop9: detected capacity change from 0 to 64
[  717.388705][ T7038] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  717.679893][T23579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7949'.
[  717.892318][ T6694] tipc: Node number set to 2886997162
[  718.285142][T23600] loop4: detected capacity change from 0 to 512
[  718.334789][T23600] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  718.392256][T23600] EXT4-fs (loop4): orphan cleanup on readonly fs
[  718.452929][T23600] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present
[  718.511520][T23600] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  718.563054][T23600] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.7958: Failed to acquire dquot type 1
[  718.590966][T23600] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7958: bg 0: block 40: padding at end of block bitmap is not set
[  718.633864][T23600] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  718.662432][T23600] EXT4-fs (loop4): 1 truncate cleaned up
[  718.688278][T23600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  718.729750][T23600] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.7958: bad symlink.
[  718.792843][T15581] EXT4-fs (loop4): unmounting filesystem.
[  718.940548][T18490] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  719.140244][T18490] usb 10-1: Using ep0 maxpacket: 16
[  719.147663][T18490] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  719.189660][T18490] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  719.210432][T18490] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  719.241574][T18490] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  719.283990][T18490] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  719.310205][T18490] usb 10-1: Manufacturer: syz
[  719.322127][T18490] usb 10-1: config 0 descriptor??
[  719.334271][T23628] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  719.551857][T23637] loop4: detected capacity change from 0 to 2048
[  719.584605][T23637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  719.699005][T15581] EXT4-fs (loop4): unmounting filesystem.
[  719.883467][T23646] loop4: detected capacity change from 0 to 256
[  719.914505][T23646] FAT-fs (loop4): Directory bread(block 64) failed
[  719.929277][T23646] FAT-fs (loop4): Directory bread(block 65) failed
[  719.936175][T23646] FAT-fs (loop4): Directory bread(block 66) failed
[  719.949829][T23646] FAT-fs (loop4): Directory bread(block 67) failed
[  719.956839][T23646] FAT-fs (loop4): Directory bread(block 68) failed
[  719.971329][T23646] FAT-fs (loop4): Directory bread(block 69) failed
[  719.978919][T23646] FAT-fs (loop4): Directory bread(block 70) failed
[  719.990756][T23646] FAT-fs (loop4): Directory bread(block 71) failed
[  719.997683][T23646] FAT-fs (loop4): Directory bread(block 72) failed
[  720.018161][T23646] FAT-fs (loop4): Directory bread(block 73) failed
[  720.287506][T23642] loop5: detected capacity change from 0 to 32768
[  720.351547][T23642] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  720.366282][T23642] XFS (loop5): Mounting V5 Filesystem
[  720.422947][T23667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7981'.
[  720.462305][T23642] XFS (loop5): Ending clean mount
[  720.469938][T23667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7981'.
[  720.493296][T23642] XFS (loop5): Quotacheck needed: Please wait.
[  720.508225][T23660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7981'.
[  720.530673][T23660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7981'.
[  720.549597][T23660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7981'.
[  720.598063][T23642] XFS (loop5): Quotacheck: Done.
[  720.662719][ T7038] XFS (loop5): Unmounting Filesystem
[  720.766884][   T27] audit: type=1326 audit(1753310763.460:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23677 comm="syz.4.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35dd8e9a9 code=0x7ffc0000
[  720.823632][   T27] audit: type=1326 audit(1753310763.460:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23677 comm="syz.4.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd35dd8e9a9 code=0x7ffc0000
[  720.874845][   T27] audit: type=1326 audit(1753310763.470:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23677 comm="syz.4.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35dd8e9a9 code=0x7ffc0000
[  720.914689][   T27] audit: type=1326 audit(1753310763.470:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23677 comm="syz.4.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fd35dd8e9a9 code=0x7ffc0000
[  720.937447][    C0] vkms_vblank_simulate: vblank timer overrun
[  720.952916][   T27] audit: type=1326 audit(1753310763.470:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23677 comm="syz.4.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35dd8e9a9 code=0x7ffc0000
[  720.975730][    C0] vkms_vblank_simulate: vblank timer overrun
[  721.631822][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8002'.
[  721.670391][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8002'.
[  721.679530][T23704] netlink: 'syz.4.8002': attribute type 29 has an invalid length.
[  721.712026][T18490] usb 10-1: USB disconnect, device number 13
[  722.336989][T23728] loop9: detected capacity change from 0 to 4096
[  722.363693][T23728] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512)
[  722.397937][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8015'.
[  722.919764][T23756] loop9: detected capacity change from 0 to 256
[  723.371399][T23776] loop9: detected capacity change from 0 to 1024
[  723.656458][ T6696] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  723.756065][T23786] loop5: detected capacity change from 0 to 4096
[  723.801754][T23774] loop4: detected capacity change from 0 to 32768
[  723.810760][T23774] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.8035 (23774)
[  723.828647][T23774] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  723.839225][T23774] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  723.848098][T23774] BTRFS info (device loop4): using free space tree
[  723.860838][ T6696] usb 9-1: Using ep0 maxpacket: 16
[  723.868045][ T6696] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  723.880732][ T6696] usb 9-1: config 0 has no interface number 0
[  723.890078][ T6696] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  723.900763][ T6696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.908932][ T6696] usb 9-1: Product: syz
[  723.913607][ T6696] usb 9-1: Manufacturer: syz
[  723.918244][ T6696] usb 9-1: SerialNumber: syz
[  723.926239][ T6696] usb 9-1: config 0 descriptor??
[  723.935948][ T6696] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  724.070322][T23774] BTRFS info (device loop4): enabling ssd optimizations
[  724.101305][T23784] loop9: detected capacity change from 0 to 32768
[  724.128493][T15581] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  724.155268][T23784] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  724.166288][T23784] XFS (loop9): Mounting V5 Filesystem
[  724.380532][ T4395] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  724.438335][    C0] vkms_vblank_simulate: vblank timer overrun
[  724.447823][T23784] XFS (loop9): Ending clean mount
[  724.456920][T23784] XFS (loop9): Quotacheck needed: Please wait.
[  724.531752][T23784] XFS (loop9): Quotacheck: Done.
[  724.550021][ T6696] gspca_spca1528: reg_w err -71
[  724.570342][ T4395] usb 6-1: Using ep0 maxpacket: 32
[  724.580419][ T6696] spca1528: probe of 9-1:0.1 failed with error -71
[  724.581760][ T4395] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  724.592937][ T6696] usb 9-1: USB disconnect, device number 19
[  724.621207][ T4395] usb 6-1: New USB device strings: Mfr=249, Product=255, SerialNumber=3
[  724.631987][ T4395] usb 6-1: Product: syz
[  724.636948][ T4395] usb 6-1: Manufacturer: syz
[  724.642191][ T4395] usb 6-1: SerialNumber: syz
[  724.648777][ T4395] usb 6-1: config 0 descriptor??
[  724.658583][T15361] XFS (loop9): Unmounting Filesystem
[  724.865989][ T4395] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  724.884546][T23821] netlink: 'syz.6.8047': attribute type 28 has an invalid length.
[  724.980429][  T952] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  725.170261][  T952] usb 5-1: Using ep0 maxpacket: 32
[  725.187362][  T952] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  725.199014][  T952] usb 5-1: config 0 has no interface number 0
[  725.216373][  T952] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  725.229516][  T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.245681][  T952] usb 5-1: Product: syz
[  725.251358][  T952] usb 5-1: Manufacturer: syz
[  725.256151][  T952] usb 5-1: SerialNumber: syz
[  725.267438][  T952] usb 5-1: config 0 descriptor??
[  725.276786][  T952] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  725.286080][  T952] usb 5-1: selecting invalid altsetting 1
[  725.291943][  T952] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  725.303864][  T952] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  725.314677][  T952] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  725.323411][  T952] usb 5-1: media controller created
[  725.339363][  T952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  725.560236][ T4395] usb 6-1: reset high-speed USB device number 26 using dummy_hcd
[  726.024935][ T4395] usb 6-1: [UEAGLE-ATM] interface 1 not found
[  726.037303][ T4395] ueagle-atm 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  726.057387][ T4395] usb 6-1: USB disconnect, device number 26
[  726.279345][T23842] loop9: detected capacity change from 0 to 4096
[  726.401151][  T952] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  726.417270][  T952] zl10353_read_register: readreg error (reg=127, ret==-110)
[  726.443414][T23817] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  726.503780][  T952] usb 5-1: USB disconnect, device number 24
[  727.089935][T23862] loop5: detected capacity change from 0 to 8192
[  727.320247][   T22] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  727.487842][T23876] loop4: detected capacity change from 0 to 4096
[  727.516167][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  727.536838][   T22] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  727.558619][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.583868][   T22] usb 9-1: config 0 descriptor??
[  727.586958][T23878] loop9: detected capacity change from 0 to 4096
[  727.600824][ T4395] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  727.632632][T23878] ntfs: (device loop9): ntfs_read_locked_inode(): $DATA attribute is missing.
[  727.649444][T23878] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  727.669404][T23878] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  727.696198][T23878] ntfs: volume version 3.1.
[  727.820256][ T4395] usb 6-1: Using ep0 maxpacket: 32
[  727.833063][ T4395] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.860213][ T4395] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  727.890392][ T4395] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  727.899644][ T4395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.927385][T15361] ntfs: (device loop9): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  727.937613][ T4395] usb 6-1: config 0 descriptor??
[  728.011613][   T22] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.8-1/input0
[  728.210921][  T952] usb 9-1: USB disconnect, device number 20
[  728.301024][T23903] loop9: detected capacity change from 0 to 256
[  728.324664][T23903] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  728.369064][T23903] exFAT-fs (loop9): error, invalid size(size(6940) > aligned(9223372036854777344)
[  728.369064][T23903] 
[  728.381314][ T4395] smartjoyplus 0003:0925:8866.0007: item fetching failed at offset 3/5
[  728.387958][T23903] exFAT-fs (loop9): Filesystem has been set read-only
[  728.402660][ T4395] smartjoyplus 0003:0925:8866.0007: parse failed
[  728.430415][ T4395] smartjoyplus: probe of 0003:0925:8866.0007 failed with error -22
[  728.582860][ T4395] usb 6-1: USB disconnect, device number 27
[  728.628788][T23916] loop4: detected capacity change from 0 to 256
[  728.639723][T23917] netlink: 'syz.6.8089': attribute type 1 has an invalid length.
[  728.656735][T23916] exfat: Deprecated parameter 'utf8'
[  728.662341][T23917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8089'.
[  728.676365][T23916] exfat: Deprecated parameter 'utf8'
[  728.703449][T23916] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  728.988213][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8097'.
[  729.013264][T23932] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8097'.
[  729.290794][T23942] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48423)
[  729.312432][T23942] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  729.326047][   T27] audit: type=1326 audit(1753310772.020:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23943 comm="syz.8.8103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f742d38e9a9 code=0x0
[  729.348066][    C0] vkms_vblank_simulate: vblank timer overrun
[  729.423959][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8104'.
[  729.906074][ T4395] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  730.050553][T23973] loop5: detected capacity change from 0 to 2048
[  730.057901][T23973] EXT4-fs: Ignoring removed mblk_io_submit option
[  730.073140][T23973] EXT4-fs: Ignoring removed i_version option
[  730.100405][ T4395] usb 10-1: Using ep0 maxpacket: 16
[  730.111685][T23973] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  730.124467][ T4395] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  730.140399][ T4395] usb 10-1: config 0 has no interface number 0
[  730.178936][ T4395] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  730.199892][ T7038] EXT4-fs (loop5): unmounting filesystem.
[  730.217582][ T4395] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  730.248735][ T4395] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  730.268243][ T4395] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  730.297113][ T4395] usb 10-1: Product: syz
[  730.304464][ T4395] usb 10-1: SerialNumber: syz
[  730.323072][ T4395] usb 10-1: config 0 descriptor??
[  730.334692][ T4395] cm109 10-1:0.8: invalid payload size 0, expected 4
[  730.342818][ T4395] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input28
[  730.480669][T23989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  730.547180][    C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  730.547469][  T952] usb 10-1: USB disconnect, device number 14
[  730.554362][    C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  730.578859][  T952] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  730.620301][   T22] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  730.818443][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  730.834046][   T22] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  730.844380][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  730.854757][   T22] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  730.877002][   T22] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  730.896525][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.908312][   T22] usb 6-1: Product: syz
[  730.913066][   T22] usb 6-1: Manufacturer: syz
[  730.918643][   T22] usb 6-1: SerialNumber: syz
[  730.938526][   T22] usb 6-1: config 0 descriptor??
[  730.949606][   T22] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  730.977461][T24008] loop4: detected capacity change from 0 to 1024
[  731.168143][   T22] scsi host1: usb-storage 6-1:0.0
[  731.196551][T24021] loop4: detected capacity change from 0 to 64
[  731.270978][T24024] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8140'.
[  731.288175][T24024] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  731.374719][   T22] usb 6-1: USB disconnect, device number 28
[  731.420459][  T952] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[  731.621910][  T952] usb 10-1: config 0 has an invalid interface number: 133 but max is 0
[  731.643909][  T952] usb 10-1: config 0 has no interface number 0
[  731.654938][  T952] usb 10-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  731.664983][  T952] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.684710][  T952] usb 10-1: Product: syz
[  731.689038][  T952] usb 10-1: Manufacturer: syz
[  731.700802][  T952] usb 10-1: SerialNumber: syz
[  731.715894][  T952] usb 10-1: config 0 descriptor??
[  731.824544][ T6696] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  731.836383][ T6696] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  731.844002][ T6696] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  731.867586][ T6696] hid-generic 0000:0004:0000.0008: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  731.933270][  T952] keyspan 10-1:0.133: Keyspan 1 port adapter converter detected
[  731.945300][  T952] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 81
[  731.969123][  T952] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 1
[  731.987742][  T952] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 2
[  732.008051][  T952] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  732.189736][T24059] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8156'.
[  732.220290][T24059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8156'.
[  732.355617][  T952] usb 10-1: USB disconnect, device number 15
[  732.378887][  T952] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  732.411846][  T952] keyspan 10-1:0.133: device disconnected
[  732.550533][T24074] loop5: detected capacity change from 0 to 256
[  732.590735][T24076] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  732.603741][T24074] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  733.095382][T24101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8177'.
[  733.364091][T24112] IPVS: stopping backup sync thread 24116 ...
[  733.364468][T24116] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  733.451091][T24118] program syz.9.8185 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  733.853688][   T22] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  734.013373][T24146] loop9: detected capacity change from 0 to 4096
[  734.080984][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  734.114875][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  734.140791][   T22] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  734.154588][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.181085][   T22] usb 6-1: config 0 descriptor??
[  734.616457][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.636567][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.650244][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.667781][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.675069][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.691599][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.699756][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.720248][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.742514][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.749685][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.770759][   T22] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0
[  734.792533][   T22] hid-rmi 0003:0461:4E72.0009: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.5-1/input0
[  734.821820][   T22] usb 6-1: USB disconnect, device number 29
[  735.055555][T24177] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[  735.063337][T24177] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  735.106703][T24177] vhci_hcd vhci_hcd.0: Device attached
[  735.116653][T24179] vhci_hcd: connection closed
[  735.126455][T10559] vhci_hcd: stop threads
[  735.127924][T10559] vhci_hcd: release socket
[  735.127998][T10559] vhci_hcd: disconnect device
[  735.396562][T24171] loop9: detected capacity change from 0 to 32768
[  735.422015][T24173] loop4: detected capacity change from 0 to 32768
[  735.444484][T24173] (syz.4.8212,24173,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  735.473001][T24171] XFS (loop9): Mounting V5 Filesystem
[  735.518028][T24173] (syz.4.8212,24173,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  735.544233][T24171] XFS (loop9): Ending clean mount
[  735.562832][T24199] loop5: detected capacity change from 0 to 16
[  735.575505][T24199] erofs: (device loop5): mounted with root inode @ nid 36.
[  735.591257][T24199] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36
[  735.603549][T24199] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36
[  735.608901][T24173] (syz.4.8212,24173,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  735.613342][T24199] syz.5.8219: attempt to access beyond end of device
[  735.613342][T24199] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16
[  735.644443][T24199] syz.5.8219: attempt to access beyond end of device
[  735.644443][T24199] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[  735.658879][T24199] syz.5.8219: attempt to access beyond end of device
[  735.658879][T24199] loop5: rw=524288, sector=67108880, nr_sectors = 16 limit=16
[  735.697952][T24173] JBD2: Ignoring recovery information on journal
[  735.721137][T15361] XFS (loop9): Unmounting Filesystem
[  735.844802][T24173] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  735.886188][T24207] loop5: detected capacity change from 0 to 128
[  735.969883][T24173] (syz.4.8212,24173,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  736.015711][T24173] (syz.4.8212,24173,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  736.058513][T24173] (syz.4.8212,24173,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  736.089049][T24173] (syz.4.8212,24173,0):ocfs2_quota_read:201 ERROR: status = -5
[  736.110803][T24173] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5
[  736.150553][T24173] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  736.204346][T24212] (syz.4.8212,24212,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  736.239437][T24173] (syz.4.8212,24173,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  736.280433][T24212] (syz.4.8212,24212,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  736.330712][T24173] (syz.4.8212,24173,0):ocfs2_mknod:314 ERROR: status = -5
[  736.337986][T24173] (syz.4.8212,24173,0):ocfs2_mknod:502 ERROR: status = -5
[  736.373662][T24212] (syz.4.8212,24212,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  736.400406][T24173] (syz.4.8212,24173,0):ocfs2_mkdir:659 ERROR: status = -5
[  736.435658][T24212] (syz.4.8212,24212,0):ocfs2_quota_read:201 ERROR: status = -5
[  736.470666][T24212] Quota error (device loop4): find_next_id: Can't read quota tree block 5
[  736.479562][T24212] (syz.4.8212,24212,0):ocfs2_get_next_id:909 ERROR: status = -5
[  736.649934][T15581] ocfs2: Unmounting device (7,4) on (node local)
[  737.025912][T24231] loop4: detected capacity change from 0 to 16
[  737.066741][T24231] erofs: (device loop4): mounted with root inode @ nid 36.
[  737.276433][T24239] loop4: detected capacity change from 0 to 256
[  737.303871][T24240] loop9: detected capacity change from 0 to 1764
[  737.321171][T24239] exfat: Deprecated parameter 'utf8'
[  737.374837][T24239] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  737.574903][T24248] loop9: detected capacity change from 0 to 128
[  737.814321][T24261] netlink: 'syz.9.8247': attribute type 10 has an invalid length.
[  737.842430][T24261] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.849821][T24261] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.894452][T24261] bridge0: port 2(bridge_slave_1) entered blocking state
[  737.901692][T24261] bridge0: port 2(bridge_slave_1) entered listening state
[  737.909068][T24261] bridge0: port 1(bridge_slave_0) entered blocking state
[  737.916286][T24261] bridge0: port 1(bridge_slave_0) entered listening state
[  737.955435][T24261] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  738.056196][T24262] device bridge_slave_1 left promiscuous mode
[  738.066317][T24262] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.096396][T24262] device bridge_slave_0 left promiscuous mode
[  738.107388][T24262] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.194928][T24262] bond0: (slave bridge0): Releasing backup interface
[  738.579449][T24253] loop5: detected capacity change from 0 to 40427
[  738.625515][T24253] F2FS-fs (loop5): invalid crc value
[  738.654115][T24253] F2FS-fs (loop5): Found nat_bits in checkpoint
[  738.748833][T24264] loop4: detected capacity change from 0 to 32768
[  738.786977][T24253] F2FS-fs (loop5): recover fsync data on readonly fs
[  738.817824][T24253] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  738.838360][T24253] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  739.227086][T24270] loop9: detected capacity change from 0 to 32768
[  739.258092][T24279] loop4: detected capacity change from 0 to 16
[  739.285671][T24279] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  739.290360][T24270] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.8251 (24270)
[  739.330913][T24270] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  739.352358][T24270] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  739.370305][T24270] BTRFS info (device loop9): use no compression
[  739.376682][T24270] BTRFS info (device loop9): doing ref verification
[  739.402570][T24270] BTRFS info (device loop9): force clearing of disk cache
[  739.425565][T24270] BTRFS info (device loop9): turning off barriers
[  739.442694][T24270] BTRFS info (device loop9): setting nodatasum
[  739.448946][T24270] BTRFS info (device loop9): enabling ssd optimizations
[  739.486714][T24270] BTRFS info (device loop9): using spread ssd allocation scheme
[  739.526299][T24270] BTRFS info (device loop9): not using ssd optimizations
[  739.558352][T24270] BTRFS info (device loop9): not using spread ssd allocation scheme
[  739.594897][T24270] BTRFS info (device loop9): using free space tree
[  739.614618][   T27] audit: type=1326 audit(1753310782.310:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.5.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9c38e9a9 code=0x7ffc0000
[  739.655147][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8258'.
[  739.713002][   T27] audit: type=1326 audit(1753310782.310:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.5.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5e9c38e9a9 code=0x7ffc0000
[  739.752514][T24287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8258'.
[  739.858335][   T27] audit: type=1326 audit(1753310782.310:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.5.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e9c38e9e3 code=0x7ffc0000
[  739.985967][   T27] audit: type=1326 audit(1753310782.310:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.5.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e9c38e9e3 code=0x7ffc0000
[  740.023985][T24270] BTRFS info (device loop9): rebuilding free space tree
[  740.057903][   T27] audit: type=1326 audit(1753310782.310:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.5.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9c38e9a9 code=0x7ffc0000
[  740.150223][   T27] audit: type=1326 audit(1753310782.310:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.5.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5e9c38e9a9 code=0x7ffc0000
[  740.220560][   T27] audit: type=1326 audit(1753310782.310:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.5.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9c38e9a9 code=0x7ffc0000
[  740.297636][T24316] usb usb6: usbfs: process 24316 (syz.5.8265) did not claim interface 63 before use
[  740.452586][T15361] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  740.602799][T24324] loop5: detected capacity change from 0 to 64
[  740.966460][ T7038] Trying to free block not in datazone
[  740.980834][ T7038] Trying to free block not in datazone
[  741.008247][ T7038] Trying to free block not in datazone
[  741.025735][ T7038] Trying to free block not in datazone
[  741.050638][ T7038] Trying to free block not in datazone
[  741.070334][ T7038] Trying to free block not in datazone
[  741.076127][ T7038] Trying to free block not in datazone
[  741.110449][ T7038] Trying to free block not in datazone
[  741.116045][ T7038] Trying to free block not in datazone
[  741.154394][ T7038] Trying to free block not in datazone
[  741.160819][ T7038] Trying to free block not in datazone
[  741.176911][ T7038] Trying to free block not in datazone
[  741.194778][ T7038] Trying to free block not in datazone
[  741.225313][T24314] loop4: detected capacity change from 0 to 32768
[  741.233617][ T7038] Trying to free block not in datazone
[  741.291151][T24314] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  741.342582][T24314] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  741.394476][T24314] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71)
[  741.415602][T24314] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  741.426041][T24314] OCFS2: File system is now read-only.
[  741.431851][T24314] (syz.4.8264,24314,0):ocfs2_trim_mainbm:7611 ERROR: status = -30
[  741.478551][T15581] ocfs2: Unmounting device (7,4) on (node local)
[  741.580307][T18486] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  741.790222][T18486] usb 10-1: Using ep0 maxpacket: 32
[  741.797503][T18486] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  741.830194][T18486] usb 10-1: config 0 has no interface number 0
[  741.838997][T18486] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  741.868708][T18486] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.899073][T18486] usb 10-1: Product: syz
[  741.911357][T18486] usb 10-1: Manufacturer: syz
[  741.916238][T18486] usb 10-1: SerialNumber: syz
[  741.945475][T18486] usb 10-1: config 0 descriptor??
[  741.968193][T18486] smsc95xx v2.0.0
[  742.108622][T24350] vivid-007: =================  START STATUS  =================
[  742.130756][T24350] vivid-007: Enable Output Cropping: true
[  742.149938][T24350] vivid-007: Enable Output Composing: true
[  742.160669][T24350] vivid-007: Enable Output Scaler: true
[  742.181320][T24350] vivid-007: Tx RGB Quantization Range: Automatic
[  742.200268][T24350] vivid-007: Transmit Mode: HDMI
[  742.215897][T24350] vivid-007: Display Present: true inactive
[  742.239822][T24350] vivid-007: Hotplug Present: 0x00000001
[  742.248516][T24350] vivid-007: RxSense Present: 0x00000001
[  742.264905][T24350] vivid-007: EDID Present: 0x00000001
[  742.284281][T24350] vivid-007: ==================  END STATUS  ==================
[  742.575656][T18486] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  742.611551][T18486] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  742.642206][T18486] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  742.656822][T24368] loop5: detected capacity change from 0 to 512
[  742.673772][T18486] smsc95xx: probe of 10-1:0.67 failed with error -71
[  742.700384][T18486] usb 10-1: USB disconnect, device number 16
[  742.716201][T24368] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:164: inode #12: comm syz.5.8288: inline data xattr refers to an external xattr inode
[  742.734556][T24368] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.8288: couldn't read orphan inode 12 (err -117)
[  742.760699][T24368] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  742.796120][T24368] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.8288: Directory hole found for htree leaf block 0
[  742.913839][ T7038] EXT4-fs (loop5): unmounting filesystem.
[  743.042264][T24381] loop5: detected capacity change from 0 to 64
[  743.236264][T24383] Bluetooth: MGMT ver 1.22
[  743.628513][T24377] loop4: detected capacity change from 0 to 40427
[  743.645172][T24377] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  743.668963][T24377] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4
[  743.682066][T24394] loop5: detected capacity change from 0 to 512
[  743.706308][T24377] F2FS-fs (loop4): invalid crc value
[  743.741407][T24394] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  743.777320][T24377] F2FS-fs (loop4): Found nat_bits in checkpoint
[  743.782160][T24403] loop9: detected capacity change from 0 to 512
[  743.808519][   T27] audit: type=1326 audit(1753310786.500:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24405 comm="syz.6.8303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17738e9a9 code=0x7ffc0000
[  743.852358][T24394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  743.871362][T24403] EXT4-fs: Ignoring removed i_version option
[  743.879232][   T27] audit: type=1326 audit(1753310786.510:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24405 comm="syz.6.8303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe17738e9a9 code=0x7ffc0000
[  743.882543][T24394] ext4 filesystem being mounted at /1438/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  743.913678][   T27] audit: type=1326 audit(1753310786.510:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24405 comm="syz.6.8303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17738e9a9 code=0x7ffc0000
[  743.937142][T24403] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  743.946929][   T27] audit: type=1326 audit(1753310786.510:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24405 comm="syz.6.8303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe17738e9a9 code=0x7ffc0000
[  743.990739][T24377] F2FS-fs (loop4): Start checkpoint disabled!
[  744.001212][T24403] EXT4-fs (loop9): orphan cleanup on readonly fs
[  744.028850][T24377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  744.029678][T24394] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  744.056760][T24403] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6).
[  744.086398][T24403] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  744.087170][   T27] audit: type=1326 audit(1753310786.510:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24405 comm="syz.6.8303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17738e9a9 code=0x7ffc0000
[  744.142885][T24403] EXT4-fs (loop9): Cannot turn on quotas: error -117
[  744.155206][T24403] EXT4-fs error (device loop9): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  744.200614][T24403] EXT4-fs (loop9): Remounting filesystem read-only
[  744.210230][T24403] EXT4-fs (loop9): 1 truncate cleaned up
[  744.228482][T24403] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  744.258980][ T7038] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  744.276110][T24403] EXT4-fs warning (device loop9): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  744.296430][ T7038] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  744.410489][T15361] EXT4-fs (loop9): unmounting filesystem.
[  744.754655][ T7038] EXT4-fs (loop5): unmounting filesystem.
[  745.060758][T10549] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.235365][T10549] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.404293][T10549] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.524655][T10549] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.879420][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  745.883407][T24465] loop4: detected capacity change from 0 to 256
[  745.910495][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  745.924334][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  745.933525][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  745.942607][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  745.950342][T24466] [U] ��M٭��Q&�� K�4
[  745.955777][T24466] [U] [�)�U�}��ǔ��JϬ}N�SEF*�	�����NZ��F[F_H��'��W"�X�~����;VA�)^�`�1C':Z�������FOB�	*?۟C�Z�S��<8ZNѷ���ј��EY�	T�T<$C�R�Ɩ�/VG���{Y�~Y5\�
;ƃZ��DX���Y�A��"XI�F�{��`A$í�55?�
��S�A�M��O����ͻ*K��
[  745.979101][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  745.993705][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  746.003680][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  746.011157][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  746.022506][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  746.030471][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  746.040326][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  746.135914][T24464] [U] �
[  746.211394][T24472] loop9: detected capacity change from 0 to 128
[  746.214688][T24465] FAT-fs (loop4): Directory bread(block 64) failed
[  746.229049][T24465] FAT-fs (loop4): Directory bread(block 65) failed
[  746.236252][T24465] FAT-fs (loop4): Directory bread(block 66) failed
[  746.243201][T24465] FAT-fs (loop4): Directory bread(block 67) failed
[  746.249977][T24465] FAT-fs (loop4): Directory bread(block 68) failed
[  746.256764][T24465] FAT-fs (loop4): Directory bread(block 69) failed
[  746.269310][T24465] FAT-fs (loop4): Directory bread(block 70) failed
[  746.269317][T24472] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  746.297292][T24465] FAT-fs (loop4): Directory bread(block 71) failed
[  746.307900][T24465] FAT-fs (loop4): Directory bread(block 72) failed
[  746.319445][T24465] FAT-fs (loop4): Directory bread(block 73) failed
[  746.336786][T24472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  746.874605][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8342'.
[  747.337261][T24461] chnl_net:caif_netlink_parms(): no params data found
[  747.364179][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.370857][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  747.453227][T24504] loop9: detected capacity change from 0 to 256
[  747.483486][T24504] exfat: Deprecated parameter 'namecase'
[  747.489342][T24504] exfat: Deprecated parameter 'utf8'
[  747.554243][T24504] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  747.639464][T24492] loop4: detected capacity change from 0 to 32768
[  747.734173][T24492] (syz.4.8343,24492,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  747.793089][T24492] (syz.4.8343,24492,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  747.871807][T24492] JBD2: Ignoring recovery information on journal
[  748.025775][T24492] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  748.091314][ T4279] Bluetooth: hci3: command 0x0409 tx timeout
[  748.140364][T24492] (syz.4.8343,24492,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  748.209742][T15581] ocfs2: Unmounting device (7,4) on (node local)
[  748.246834][T24461] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.262869][T24461] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.273247][T24461] device bridge_slave_0 entered promiscuous mode
[  748.342851][T10549] device hsr_slave_0 left promiscuous mode
[  748.370168][T10549] device hsr_slave_1 left promiscuous mode
[  748.376986][T10549] device dummy0 left promiscuous mode
[  748.400387][T10549] bridge0: port 1(dummy0) entered disabled state
[  748.491326][T10549] device veth0_macvtap left promiscuous mode
[  748.497724][T10549] device veth1_vlan left promiscuous mode
[  748.531075][T10549] device veth0_vlan left promiscuous mode
[  748.892100][T10549] bond2 (unregistering): Released all slaves
[  749.228770][T24542] loop4: detected capacity change from 0 to 8192
[  749.259195][T24542] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  749.280333][T24542] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  749.289901][T24542] REISERFS (device loop4): using ordered data mode
[  749.340210][T24542] reiserfs: using flush barriers
[  749.350326][T24542] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  749.428096][T24542] REISERFS (device loop4): checking transaction log (loop4)
[  749.664755][T24542] REISERFS (device loop4): Using tea hash to sort names
[  749.680808][T24542] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  749.692097][T10549] bond1 (unregistering): Released all slaves
[  750.076291][T24560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8373'.
[  750.160399][ T4279] Bluetooth: hci3: command 0x041b tx timeout
[  750.197142][T10549] device macvlan0 left promiscuous mode
[  750.214771][T10549] team0 (unregistering): Port device macvlan0 removed
[  750.627143][T24575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8379'.
[  750.769793][T24579] tmpfs: Bad value for 'mpol'
[  750.775378][T24579] cgroup: noprefix used incorrectly
[  752.249367][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  752.353004][T10549] bond0 (unregistering): Released all slaves
[  752.446864][T24461] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.454644][T24461] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.463852][T24461] device bridge_slave_1 entered promiscuous mode
[  752.602394][T24461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  752.657417][T24461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  752.795667][T24461] team0: Port device team_slave_0 added
[  752.838552][T24461] team0: Port device team_slave_1 added
[  752.992587][T24461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  753.023309][T24461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  753.093573][T24461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  753.122266][T24461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  753.132939][T24461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  753.175037][T24461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  753.332017][T24461] device hsr_slave_0 entered promiscuous mode
[  753.374593][T24461] device hsr_slave_1 entered promiscuous mode
[  753.390587][T24461] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  753.411601][T24461] Cannot create hsr debugfs directory
[  753.412575][T24620] loop4: detected capacity change from 0 to 4096
[  753.503992][T24620] ntfs: volume version 3.1.
[  753.565326][T24620] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp857.  You might want to try to use the mount option nls=utf8.
[  753.628922][T24620] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  754.046985][T24643] usb usb8: usbfs: process 24643 (syz.6.8410) did not claim interface 5 before use
[  754.240794][T24639] netlink: 'syz.4.8406': attribute type 2 has an invalid length.
[  754.320197][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  755.360198][ T6696] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  755.442077][T24684] loop4: detected capacity change from 0 to 4096
[  755.555280][ T6696] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  755.581459][ T6696] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  755.635202][ T6696] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  755.664608][T24461] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  755.682625][ T6696] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  755.701033][ T6696] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  755.724223][T24461] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  755.735769][ T6696] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  755.745853][ T6696] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  755.756600][ T6696] usb 10-1: Product: syz
[  755.761043][ T6696] usb 10-1: Manufacturer: syz
[  755.769674][ T6696] cdc_wdm 10-1:1.0: skipping garbage
[  755.775601][ T6696] cdc_wdm 10-1:1.0: skipping garbage
[  755.782272][ T6696] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  755.792032][T24461] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  755.804096][ T6696] cdc_wdm 10-1:1.0: Unknown control protocol
[  755.824704][T24461] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  755.930020][T24461] 8021q: adding VLAN 0 to HW filter on device bond0
[  755.947188][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  755.965692][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  755.978757][  T952] usb 10-1: USB disconnect, device number 17
[  756.015062][T24461] 8021q: adding VLAN 0 to HW filter on device team0
[  756.038675][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  756.058744][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  756.078885][T10576] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.086212][T10576] bridge0: port 1(bridge_slave_0) entered forwarding state
[  756.124844][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  756.139376][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  756.166938][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  756.183932][T10576] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.191268][T10576] bridge0: port 2(bridge_slave_1) entered forwarding state
[  756.220004][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  756.240654][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  756.256873][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  756.281194][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  756.303783][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  756.316958][T24715] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8433'.
[  756.342338][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  756.372141][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  756.404186][T24461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  756.433893][T24461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  756.467264][T24715] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8433'.
[  756.481387][T24714] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8433'.
[  756.507699][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  756.569173][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  756.589568][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  756.621082][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  756.654049][T24714] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8433'.
[  756.682080][T24714] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8433'.
[  756.701207][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  757.007620][T24732] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  757.023990][T24712] loop4: detected capacity change from 0 to 32768
[  757.080459][T24712] 
[  757.080459][T24712]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  757.080459][T24712] 
[  757.128860][T24712] ERROR: (device loop4): diWrite: ixpxd invalid
[  757.128860][T24712] 
[  757.171711][T24712] ERROR: (device loop4): txCommit: 
[  757.171711][T24712] 
[  757.342350][T15581] 
[  757.342350][T15581]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  757.342350][T15581] 
[  757.394939][T15581] 
[  757.394939][T15581]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  757.394939][T15581] 
[  757.586756][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  757.620436][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  757.634895][T24461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  757.702480][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  757.741118][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  757.760546][ T4279] Bluetooth: hci3: command 0x0405 tx timeout
[  757.836647][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  757.857737][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  757.869648][T24461] device veth0_vlan entered promiscuous mode
[  757.887308][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  757.906003][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  757.949149][T24461] device veth1_vlan entered promiscuous mode
[  758.043647][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  758.074702][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  758.117532][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  758.156630][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  758.188766][T24461] device veth0_macvtap entered promiscuous mode
[  758.225169][T24461] device veth1_macvtap entered promiscuous mode
[  758.305795][T24461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  758.346779][T24746] loop9: detected capacity change from 0 to 32768
[  758.359050][T24461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.391989][T24461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  758.414738][T24461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.425532][T24746] syz.9.8442: attempt to access beyond end of device
[  758.425532][T24746] loop9: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  758.447588][T24461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  758.478977][T24746] metapage_write_end_io: I/O error
[  758.484299][T24461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.498391][  T108] blkno = 8ed2c, nblocks = 1
[  758.498716][T24746] blkno = 8ed2c, nblocks = 1
[  758.508139][  T108] ERROR: (device loop9): dbUpdatePMap: blocks are outside the map
[  758.508139][  T108] 
[  758.513979][T24461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  758.537568][T24746] ERROR: (device loop9): dbUpdatePMap: blocks are outside the map
[  758.537568][T24746] 
[  758.554360][  T108] ERROR: (device loop9): remounting filesystem as read-only
[  758.566845][T24746] ERROR: (device loop9): remounting filesystem as read-only
[  758.574499][T24461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  758.574523][T24461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.574536][T24461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  758.574551][T24461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.574564][T24461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  758.574578][T24461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.574591][T24461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  758.574606][T24461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  758.576161][T24461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  758.669382][T24746] ERROR: (device loop9): dtSearch: DT_GETPAGE: dtree page corrupt
[  758.669382][T24746] 
[  758.688461][T24746] jfs_mkdir: dtSearch returned -5
[  758.708800][T24755] loop4: detected capacity change from 0 to 32768
[  758.762385][T15361] syz-executor: attempt to access beyond end of device
[  758.762385][T15361] loop9: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  758.786236][T15361] metapage_write_end_io: I/O error
[  758.793470][T15361] JFS: metapage_get_blocks failed
[  758.799039][T15361] JFS: metapage_get_blocks failed
[  758.807239][T15361] JFS: metapage_get_blocks failed
[  758.820644][T15361] JFS: metapage_get_blocks failed
[  758.837260][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  758.855345][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  758.877010][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  758.907989][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  758.928218][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  758.948598][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  758.981365][T24461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  758.995267][T24461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  759.007934][T24461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  759.026141][T24461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  759.246706][T10574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  759.288599][T10574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  759.347613][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  759.367889][T10549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  759.393124][T10549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  759.445463][T10565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  759.560701][T24784] loop4: detected capacity change from 0 to 1024
[  759.930726][T10563] hfsplus: b-tree write err: -5, ino 4
[  760.758021][T24796] loop9: detected capacity change from 0 to 32768
[  760.808171][T24796] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 scanned by syz.9.8457 (24796)
[  760.855094][T24796] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  760.900585][T24796] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm
[  760.909083][T24836] mkiss: ax0: crc mode is auto.
[  760.940633][T24796] BTRFS info (device loop9): using free space tree
[  761.307708][T24796] BTRFS info (device loop9): enabling ssd optimizations
[  761.445720][T15361] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  761.723599][T24870] loop1: detected capacity change from 0 to 8192
[  761.781105][T24831] loop4: detected capacity change from 0 to 40427
[  761.819123][T24870] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  761.840665][T24831] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  761.847692][T24831] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  761.944942][T24870] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  762.001886][T24870] REISERFS (device loop1): using writeback data mode
[  762.008736][T24870] reiserfs: using flush barriers
[  762.020716][T24831] F2FS-fs (loop4): invalid crc value
[  762.044923][T24831] F2FS-fs (loop4): Found nat_bits in checkpoint
[  762.049256][T24870] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  762.144002][T24870] REISERFS (device loop1): checking transaction log (loop1)
[  762.159566][T24870] REISERFS (device loop1): Using r5 hash to sort names
[  762.235153][T24831] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  762.253044][T24831] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  762.606133][T24903] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  763.310584][   T27] audit: type=1326 audit(1753310805.990:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24925 comm="syz.4.8489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd35dd8e9a9 code=0x0
[  763.519168][T24936] sp0: Synchronizing with TNC
[  763.570445][T24934] [U] �
[  764.419236][   T22] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  764.585589][T24980] loop4: detected capacity change from 0 to 512
[  764.610345][   T22] usb 10-1: Using ep0 maxpacket: 32
[  764.619179][   T22] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[  764.648433][   T22] usb 10-1: config 0 has no interface number 0
[  764.658425][   T22] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  764.668287][   T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.668297][T24980] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.8516: casefold flag without casefold feature
[  764.668582][T24980] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8516: couldn't read orphan inode 15 (err -117)
[  764.676913][   T22] usb 10-1: Product: syz
[  764.676938][   T22] usb 10-1: Manufacturer: syz
[  764.676954][   T22] usb 10-1: SerialNumber: syz
[  764.689766][T24986] CIFS: Unable to determine destination address
[  764.724182][   T22] usb 10-1: config 0 descriptor??
[  764.731898][   T22] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  764.770659][T24980] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  764.797900][   T27] audit: type=1326 audit(1753310807.490:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24987 comm="syz.8.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d38e9a9 code=0x7ffc0000
[  764.831521][   T27] audit: type=1326 audit(1753310807.520:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24987 comm="syz.8.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d38e9a9 code=0x7ffc0000
[  764.919441][   T27] audit: type=1326 audit(1753310807.550:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24987 comm="syz.8.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f742d38e9a9 code=0x7ffc0000
[  764.951647][   T22] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  764.979617][T15581] EXT4-fs (loop4): unmounting filesystem.
[  764.990424][   T22] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  765.023878][   T27] audit: type=1326 audit(1753310807.550:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24987 comm="syz.8.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d38e9a9 code=0x7ffc0000
[  765.075373][   T27] audit: type=1326 audit(1753310807.550:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24987 comm="syz.8.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d38e9a9 code=0x7ffc0000
[  765.121281][   T27] audit: type=1326 audit(1753310807.560:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24987 comm="syz.8.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f742d38e9a9 code=0x7ffc0000
[  765.128900][T24993] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8522'.
[  765.159936][   T27] audit: type=1326 audit(1753310807.560:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24987 comm="syz.8.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d38e9a9 code=0x7ffc0000
[  765.192144][T24995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8524'.
[  765.226131][   T27] audit: type=1326 audit(1753310807.560:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24987 comm="syz.8.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742d38e9a9 code=0x7ffc0000
[  765.240247][T24995] tipc: Invalid UDP bearer configuration
[  765.269110][T24995] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  765.408378][    C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[  765.417982][T18486] usb 10-1: USB disconnect, device number 18
[  765.431645][T18486] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  765.451927][T25003] nbd: must specify at least one socket
[  765.460874][T18486] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  765.513959][T18486] quatech2 10-1:0.51: device disconnected
[  765.541132][T25005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8537'.
[  766.186017][T25030] loop4: detected capacity change from 0 to 64
[  766.827849][T25043] loop4: detected capacity change from 0 to 4096
[  766.899086][T25043] ntfs: volume version 3.1.
[  767.097365][T25056] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8544'.
[  767.118975][T25018] loop1: detected capacity change from 0 to 32768
[  767.259499][T25018] ERROR: (device loop1): diWrite: ixpxd invalid
[  767.259499][T25018] 
[  767.316851][T25018] ERROR: (device loop1): remounting filesystem as read-only
[  767.348087][T25018] ERROR: (device loop1): txCommit: 
[  767.348087][T25018] 
[  767.620425][T18478] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  767.810327][T18478] usb 5-1: Using ep0 maxpacket: 32
[  767.817734][T18478] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  767.847896][T18478] usb 5-1: config 0 has no interface number 0
[  767.874599][T18478] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  767.904246][T18478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.924492][T18478] usb 5-1: Product: syz
[  767.928989][T18478] usb 5-1: Manufacturer: syz
[  767.939153][T18478] usb 5-1: SerialNumber: syz
[  767.968303][T18478] usb 5-1: config 0 descriptor??
[  767.987070][T18478] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  768.193039][T18478] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  768.240384][T18478] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  768.615779][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  768.616530][  T952] usb 5-1: USB disconnect, device number 25
[  768.649531][  T952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  768.711140][  T952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  768.747955][  T952] quatech2 5-1:0.51: device disconnected
[  768.755561][T25108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8561'.
[  769.925360][T25154] trusted_key: encrypted_key: key user:syz not found
[  769.927796][T25156] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8581'.
[  770.240002][T25162] loop9: detected capacity change from 0 to 8192
[  770.576892][T25176] loop4: detected capacity change from 0 to 4096
[  770.776484][T15581] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  770.796811][T15581] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  771.360719][T25203] loop9: detected capacity change from 0 to 4096
[  771.419707][T25203] ntfs: (device loop9): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  771.450444][T25203] ntfs: (device loop9): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  771.487473][T25203] ntfs: (device loop9): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  771.529829][T25203] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  771.563518][T25203] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  771.606042][T25203] ntfs: volume version 3.1.
[  771.627680][T25203] ntfs: (device loop9): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident.
[  771.658252][T25203] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x5 as bad.  Run chkdsk.
[  771.690346][T25203] ntfs: (device loop9): load_system_files(): Failed to load root directory.
[  771.728801][T25203] ntfs: (device loop9): ntfs_fill_super(): Failed to load system files.
[  771.841094][T25203] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  771.994864][T25216] loop1: detected capacity change from 0 to 4096
[  772.283533][T25238] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8610'.
[  772.315994][T25238] netlink: 'syz.8.8610': attribute type 2 has an invalid length.
[  772.325362][T25238] netlink: 'syz.8.8610': attribute type 1 has an invalid length.
[  772.339428][T25238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8610'.
[  772.530748][  T952] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  772.720543][  T952] usb 10-1: Using ep0 maxpacket: 8
[  772.727857][  T952] usb 10-1: config 0 has an invalid interface number: 31 but max is 0
[  772.754820][  T952] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  772.777835][  T952] usb 10-1: config 0 has no interface number 0
[  772.793776][  T952] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  772.815494][  T952] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.834043][  T952] usb 10-1: Product: syz
[  772.844146][  T952] usb 10-1: Manufacturer: syz
[  772.856996][  T952] usb 10-1: SerialNumber: syz
[  772.873055][  T952] usb 10-1: config 0 descriptor??
[  773.091723][  T952] usb 10-1: Found UVC 0.04 device syz (046d:08c3)
[  773.098339][  T952] usb 10-1: No valid video chain found.
[  773.298930][T18478] usb 10-1: USB disconnect, device number 19
[  774.624291][T25286] loop4: detected capacity change from 0 to 32768
[  774.690635][T25286] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  774.741779][T25289] loop1: detected capacity change from 0 to 32768
[  774.805605][T25289] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  775.190325][T18478] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  775.390401][T18478] usb 10-1: Using ep0 maxpacket: 16
[  775.403572][T18478] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  775.423004][T18478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.447676][T18478] usb 10-1: Product: syz
[  775.460313][T18478] usb 10-1: Manufacturer: syz
[  775.470576][T18478] usb 10-1: SerialNumber: syz
[  775.491018][T18478] usb 10-1: config 0 descriptor??
[  775.515720][T18478] appledisplay 10-1:0.0: Could not find int-in endpoint
[  775.529498][T25349] loop4: detected capacity change from 0 to 2048
[  775.559347][T18478] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  775.578941][T25349] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051
[  775.604891][T25349] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  775.736596][T18478] usb 10-1: USB disconnect, device number 20
[  775.815678][T25357] loop1: detected capacity change from 0 to 512
[  775.846484][T25357] EXT4-fs: Ignoring removed nobh option
[  775.858174][T25357] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  775.883237][T25357] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.8654: iget: bad i_size value: 38620345925642
[  775.902372][T25357] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.8654: couldn't read orphan inode 15 (err -117)
[  775.915630][T25357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  775.964513][T25357] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.8654: bg 0: block 5: invalid block bitmap
[  776.071323][T25357] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  776.137564][T24461] EXT4-fs (loop1): unmounting filesystem.
[  776.183113][T25373] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.8668' resets device
[  776.689108][T25398] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8664'.
[  776.796946][T25394] loop1: detected capacity change from 0 to 8192
[  777.415551][T25424] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  777.453517][T25428] loop4: detected capacity change from 0 to 512
[  777.473215][T25424] batman_adv: batadv0: Adding interface: gretap1
[  777.490267][T25424] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  777.523134][T25424] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  777.585540][T25428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  777.607492][T25428] ext4 filesystem being mounted at /714/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  777.669044][   T27] audit: type=1400 audit(1753310820.360:257): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626207DFF2B7FFDF1F77FF9D5F77FF7F9DB7F9EFBFBB5EFA6CD1ACBD6EDCDA317BB3D6ED74EBDD0FA5974E42362F338C1CEB0A12C9FC2A01B02 pid=25425 comm="syz.4.8678"
[  777.738587][T25440] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8683'.
[  777.810027][T15581] EXT4-fs (loop4): unmounting filesystem.
[  778.781907][T25485] loop1: detected capacity change from 0 to 512
[  778.867166][T25485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  778.882773][T25485] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  778.965790][   T27] audit: type=1400 audit(1753310821.660:258): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626207DFF2B7FFDF1F77FF9D5F77FF7F9DB7F9EFBFBB5EFA6CD1ACBD6EDCDA317BB3D6ED74EBDD0FA5974E42362F338C1CEB0A12C9FC2A01B02 pid=25484 comm="syz.1.8699"
[  779.013189][T25471] loop4: detected capacity change from 0 to 32768
[  779.031042][T25471] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  779.050669][T10563] (kworker/u4:14,10563,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  779.067301][T25471] (syz.4.8694,25471,0):ocfs2_verify_group_and_input:422 ERROR: input chain exceeds the limit.
[  779.067451][T25471] (syz.4.8694,25471,0):ocfs2_group_add:503 ERROR: status = -22
[  779.128234][T15581] ocfs2: Unmounting device (7,4) on (node local)
[  779.152509][T24461] EXT4-fs (loop1): unmounting filesystem.
[  779.440955][T25506] loop9: detected capacity change from 0 to 128
[  779.823845][  T952] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  780.030291][  T952] usb 2-1: Using ep0 maxpacket: 32
[  780.046465][  T952] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.068013][  T952] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  780.088719][  T952] usb 2-1: config 0 interface 0 has no altsetting 0
[  780.088761][  T952] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  780.088788][  T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.091192][  T952] usb 2-1: config 0 descriptor??
[  780.481811][T25540] loop9: detected capacity change from 0 to 512
[  780.499609][T25542] xt_socket: unknown flags 0x8
[  780.512262][  T952] asus 0003:048D:CE50.000A: item fetching failed at offset 0/2
[  780.546186][  T952] asus 0003:048D:CE50.000A: Asus hid parse failed: -22
[  780.558748][T25540] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  780.566000][  T952] asus: probe of 0003:048D:CE50.000A failed with error -22
[  780.609110][T25540] ext4 filesystem being mounted at /796/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  780.676402][   T27] audit: type=1400 audit(1753310823.370:259): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626207DFF2B7FFDF1F77FF9D5F77FF7F9DB7F9EFBFBB5EFA6CD1ACBD6EDCDA317BB3D6ED74EBDD0FA5974E42362F338C1CEB0A12C9FC2A01B02 pid=25539 comm="syz.9.8716"
[  780.712758][  T952] usb 2-1: USB disconnect, device number 8
[  780.810945][T15361] EXT4-fs (loop9): unmounting filesystem.
[  781.339604][T25569] loop4: detected capacity change from 0 to 256
[  781.557187][T25576] netlink: 'syz.6.8735': attribute type 2 has an invalid length.
[  782.284518][ T6698] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0
[  782.300526][ T6698] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0
[  782.318388][ T6698] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0
[  782.332051][ T6698] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  782.350458][   T22] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  782.550283][   T22] usb 9-1: Using ep0 maxpacket: 16
[  782.557463][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  782.596232][   T22] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  782.636047][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.669936][   T22] usb 9-1: config 0 descriptor??
[  783.106933][   T22] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  783.135325][   T22] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  783.155213][   T22] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  783.175583][   T22] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  783.206045][   T22] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  783.225125][   T22] corsair 0003:1B1C:1B3E.000C: hidraw0: USB HID v0.05 Device [HID 1b1c:1b3e] on usb-dummy_hcd.8-1/input0
[  783.276518][T25614] loop4: detected capacity change from 0 to 32768
[  783.289215][T25644] loop9: detected capacity change from 0 to 512
[  783.313152][T25644] EXT4-fs: Ignoring removed mblk_io_submit option
[  783.319938][T25614] 
[  783.319938][T25614]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  783.319938][T25614] 
[  783.333100][   T22] usb 9-1: USB disconnect, device number 21
[  783.345187][T25644] EXT4-fs: inline encryption not supported
[  783.356114][T25614] non-latin1 character 0x3ff found in JFS file name
[  783.373202][T25614] mount with iocharset=utf8 to access
[  783.379371][T25644] EXT4-fs (loop9): Test dummy encryption mode enabled
[  783.398986][T25644] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  783.411161][T25614] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  783.411161][T25614] 
[  783.430010][T25614] ERROR: (device loop4): remounting filesystem as read-only
[  783.485543][T25644] EXT4-fs (loop9): 1 truncate cleaned up
[  783.507982][T25644] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  783.712556][T15361] EXT4-fs (loop9): unmounting filesystem.
[  783.766919][T25656] loop4: detected capacity change from 0 to 16
[  783.790466][T25656] erofs: (device loop4): mounted with root inode @ nid 36.
[  784.024932][T15581] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  784.086420][T15581] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  784.105618][T25664] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  784.137996][T25666] tipc: Enabled bearer <eth:vlan0>, priority 18
[  784.143427][T15581] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  784.367897][T25673] loop9: detected capacity change from 0 to 128
[  784.425796][T25673] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  784.516713][T25673] ext4 filesystem being mounted at /806/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  784.591637][T25673] EXT4-fs warning (device loop9): verify_group_input:151: Cannot add at group 49 (only 1 groups)
[  784.633430][T15361] EXT4-fs (loop9): unmounting filesystem.
[  784.774080][T25688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8765'.
[  784.793195][T25690] loop9: detected capacity change from 0 to 512
[  784.812225][T25690] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  784.898731][T25690] EXT4-fs (loop9): 1 orphan inode deleted
[  784.905454][T25690] EXT4-fs (loop9): 1 truncate cleaned up
[  784.911337][T25690] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  784.990604][ T6698] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  784.994876][T25697] loop1: detected capacity change from 0 to 128
[  785.087569][T15361] EXT4-fs (loop9): unmounting filesystem.
[  785.176542][T25702] netlink: 'syz.1.8771': attribute type 10 has an invalid length.
[  785.196552][T25702] device syz_tun entered promiscuous mode
[  785.210447][ T6698] usb 9-1: Using ep0 maxpacket: 16
[  785.232563][ T6698] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.253302][T25702] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  785.280271][ T6698] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  785.300294][ T6698] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  785.320424][ T6698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.337603][ T6698] usb 9-1: config 0 descriptor??
[  785.462778][T18478] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  785.660362][T18478] usb 5-1: Using ep0 maxpacket: 32
[  785.669333][T18478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.690931][T18478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  785.706737][T18478] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  785.722488][T18478] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  785.739651][T18478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.755558][T18478] usb 5-1: config 0 descriptor??
[  785.978794][ T6698] usb 9-1: string descriptor 0 read error: -71
[  786.023549][ T6698] usb 9-1: Max retries (5) exceeded reading string descriptor 200
[  786.040794][ T6698] letsketch: probe of 0003:6161:4D15.000D failed with error -32
[  786.071309][ T6698] usb 9-1: USB disconnect, device number 22
[  786.151889][T25734] loop9: detected capacity change from 0 to 64
[  786.179790][T18478] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0
[  786.193490][T25734] 
[  786.194528][T18478] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0
[  786.195963][T25734] ======================================================
[  786.195973][T25734] WARNING: possible circular locking dependency detected
[  786.195991][T25734] 6.1.146-syzkaller #0 Not tainted
[  786.203952][T18478] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0
[  786.210246][T25734] ------------------------------------------------------
[  786.210260][T25734] syz.9.8778/25734 is trying to acquire lock:
[  786.210272][T25734] ffff888053a327f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280
[  786.217862][T18478] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0
[  786.222482][T25734] 
[  786.222482][T25734] but task is already holding lock:
[  786.222493][T25734] ffff88807840a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  786.222560][T25734] 
[  786.222560][T25734] which lock already depends on the new lock.
[  786.222560][T25734] 
[  786.222566][T25734] 
[  786.222566][T25734] the existing dependency chain (in reverse order) is:
[  786.222574][T25734] 
[  786.222574][T25734] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  786.222612][T25734]        __mutex_lock+0x120/0xaf0
[  786.222635][T25734]        hfs_find_init+0x15b/0x1d0
[  786.222658][T25734]        hfs_extend_file+0x2eb/0x1280
[  786.222684][T25734]        hfs_bmap_reserve+0x103/0x420
[  786.222709][T25734]        hfs_cat_move+0x18a/0xc80
[  786.222734][T25734]        hfs_rename+0x22c/0x320
[  786.222760][T25734]        vfs_rename+0xbbf/0x10d0
[  786.222780][T25734]        do_renameat2+0x89d/0xc70
[  786.222798][T25734]        __x64_sys_rename+0x82/0x90
[  786.222825][T25734]        do_syscall_64+0x4c/0xa0
[  786.222844][T25734]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  786.222876][T25734] 
[  786.222876][T25734] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  786.222907][T25734]        __lock_acquire+0x2cf8/0x7c50
[  786.222934][T25734]        lock_acquire+0x1b4/0x490
[  786.222958][T25734]        __mutex_lock+0x120/0xaf0
[  786.222978][T25734]        hfs_extend_file+0xd7/0x1280
[  786.223005][T25734]        hfs_bmap_reserve+0x103/0x420
[  786.223030][T25734]        __hfs_ext_write_extent+0x1fa/0x470
[  786.223057][T25734]        __hfs_ext_cache_extent+0x6b/0x9b0
[  786.223085][T25734]        hfs_extend_file+0x313/0x1280
[  786.223112][T25734]        hfs_get_block+0x3d4/0xbd0
[  786.223137][T25734]        __block_write_begin_int+0x54b/0x1a70
[  786.223165][T25734]        block_write_begin+0x96/0x1e0
[  786.223190][T25734]        cont_write_begin+0x5c4/0x7d0
[  786.223216][T25734]        hfs_write_begin+0x87/0xd0
[  786.231234][T18478] cypress 0003:04B4:07B1.000E: unknown main item tag 0x0
[  786.237343][T25734]        generic_perform_write+0x2db/0x560
[  786.237381][T25734]        __generic_file_write_iter+0x172/0x430
[  786.257990][T18478] cypress 0003:04B4:07B1.000E: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.4-1/input0
[  786.261265][T25734]        generic_file_write_iter+0xab/0x2e0
[  786.261301][T25734]        vfs_write+0x44c/0x960
[  786.485473][T25734]        ksys_write+0x143/0x240
[  786.490537][T25734]        do_syscall_64+0x4c/0xa0
[  786.495628][T25734]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  786.502179][T25734] 
[  786.502179][T25734] other info that might help us debug this:
[  786.502179][T25734] 
[  786.512462][T25734]  Possible unsafe locking scenario:
[  786.512462][T25734] 
[  786.519923][T25734]        CPU0                    CPU1
[  786.525315][T25734]        ----                    ----
[  786.530803][T25734]   lock(&tree->tree_lock#2/1);
[  786.535684][T25734]                                lock(&HFS_I(tree->inode)->extents_lock);
[  786.544197][T25734]                                lock(&tree->tree_lock#2/1);
[  786.551690][T25734]   lock(&HFS_I(tree->inode)->extents_lock);
[  786.557684][T25734] 
[  786.557684][T25734]  *** DEADLOCK ***
[  786.557684][T25734] 
[  786.566016][T25734] 5 locks held by syz.9.8778/25734:
[  786.571411][T25734]  #0: ffff88807ac2d768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360
[  786.580853][T25734]  #1: ffff888027030460 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x256/0x960
[  786.589866][T25734]  #2: ffff888053a33028 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0
[  786.601212][T25734]  #3: ffff888053a32e78 (&HFS_I(inode)->extents_lock#2){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280
[  786.612202][T25734]  #4: ffff88807840a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  786.622324][T25734] 
[  786.622324][T25734] stack backtrace:
[  786.628237][T25734] CPU: 0 PID: 25734 Comm: syz.9.8778 Not tainted 6.1.146-syzkaller #0
[  786.636419][T25734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  786.646601][T25734] Call Trace:
[  786.649905][T25734]  <TASK>
[  786.653125][T25734]  dump_stack_lvl+0x168/0x22e
[  786.657835][T25734]  ? load_image+0x3b0/0x3b0
[  786.662356][T25734]  ? show_regs_print_info+0x12/0x12
[  786.667575][T25734]  ? print_circular_bug+0x12b/0x1a0
[  786.672810][T25734]  check_noncircular+0x274/0x310
[  786.677804][T25734]  ? add_chain_block+0x940/0x940
[  786.682763][T25734]  ? lockdep_lock+0xdc/0x1e0
[  786.687645][T25734]  ? _find_first_zero_bit+0xcf/0x100
[  786.692987][T25734]  __lock_acquire+0x2cf8/0x7c50
[  786.698141][T25734]  ? kernel_text_address+0x9c/0xd0
[  786.703278][T25734]  ? unwind_get_return_address+0x49/0x80
[  786.708930][T25734]  ? arch_stack_walk+0xf2/0x140
[  786.713816][T25734]  ? verify_lock_unused+0x140/0x140
[  786.719206][T25734]  ? stack_trace_save+0x98/0xe0
[  786.724162][T25734]  ? stack_trace_snprint+0xf0/0xf0
[  786.729381][T25734]  ? check_noncircular+0x16f/0x310
[  786.734523][T25734]  lock_acquire+0x1b4/0x490
[  786.739148][T25734]  ? hfs_extend_file+0xd7/0x1280
[  786.744121][T25734]  ? __might_sleep+0xd0/0xd0
[  786.748783][T25734]  ? __lock_acquire+0x28b5/0x7c50
[  786.754008][T25734]  ? read_lock_is_recursive+0x10/0x10
[  786.759408][T25734]  __mutex_lock+0x120/0xaf0
[  786.763937][T25734]  ? hfs_extend_file+0xd7/0x1280
[  786.768984][T25734]  ? hfs_extend_file+0xd7/0x1280
[  786.773944][T25734]  ? verify_lock_unused+0x140/0x140
[  786.779247][T25734]  ? mutex_lock_nested+0x10/0x10
[  786.784209][T25734]  hfs_extend_file+0xd7/0x1280
[  786.788996][T25734]  ? hfs_get_block+0xbd0/0xbd0
[  786.793779][T25734]  ? __generic_file_write_iter+0x172/0x430
[  786.799604][T25734]  ? __mutex_trylock_common+0x14f/0x250
[  786.805182][T25734]  ? trace_raw_output_contention_end+0xd0/0xd0
[  786.811350][T25734]  ? rcu_is_watching+0x11/0xa0
[  786.816144][T25734]  ? trace_contention_end+0x5f/0x170
[  786.821447][T25734]  ? hfs_brec_find+0x18b/0x500
[  786.826667][T25734]  ? __mutex_lock+0x19e/0xaf0
[  786.831363][T25734]  hfs_bmap_reserve+0x103/0x420
[  786.836245][T25734]  __hfs_ext_write_extent+0x1fa/0x470
[  786.841811][T25734]  __hfs_ext_cache_extent+0x6b/0x9b0
[  786.847117][T25734]  ? hfs_find_init+0x15b/0x1d0
[  786.851991][T25734]  hfs_extend_file+0x313/0x1280
[  786.856951][T25734]  ? filemap_get_folios+0xe6/0x750
[  786.862260][T25734]  ? hfs_get_block+0xbd0/0xbd0
[  786.867044][T25734]  ? filemap_get_folios+0xe6/0x750
[  786.872176][T25734]  ? find_lock_entries+0xb90/0xb90
[  786.877327][T25734]  ? clean_bdev_aliases+0x649/0x730
[  786.882981][T25734]  hfs_get_block+0x3d4/0xbd0
[  786.887687][T25734]  ? hfs_free_extents+0x430/0x430
[  786.892941][T25734]  ? do_raw_spin_unlock+0x11d/0x230
[  786.898253][T25734]  ? create_page_buffers+0x24f/0x4a0
[  786.903580][T25734]  __block_write_begin_int+0x54b/0x1a70
[  786.909146][T25734]  ? filemap_add_folio+0x188/0x3c0
[  786.914359][T25734]  ? xas_load+0x119/0x140
[  786.918914][T25734]  ? hfs_free_extents+0x430/0x430
[  786.924058][T25734]  ? page_zero_new_buffers+0x650/0x650
[  786.929536][T25734]  ? mark_lock+0x94/0x320
[  786.933983][T25734]  ? PageHeadHuge+0x8f/0x1c0
[  786.938605][T25734]  ? hfs_free_extents+0x430/0x430
[  786.943864][T25734]  block_write_begin+0x96/0x1e0
[  786.948820][T25734]  ? hfs_free_extents+0x430/0x430
[  786.953863][T25734]  cont_write_begin+0x5c4/0x7d0
[  786.958827][T25734]  ? generic_cont_expand_simple+0x1f0/0x1f0
[  786.964843][T25734]  ? fault_in_readable+0x139/0x1f0
[  786.970074][T25734]  ? fault_in_readable+0x13e/0x1f0
[  786.975292][T25734]  hfs_write_begin+0x87/0xd0
[  786.979906][T25734]  ? hfs_free_extents+0x430/0x430
[  786.984948][T25734]  generic_perform_write+0x2db/0x560
[  786.990342][T25734]  ? atime_needs_update+0x780/0x780
[  786.995574][T25734]  ? generic_file_direct_write+0x660/0x660
[  787.001439][T25734]  ? __file_remove_privs+0x5b0/0x5b0
[  787.006934][T25734]  ? preempt_count_add+0x8d/0x190
[  787.012066][T25734]  ? rwsem_write_trylock+0x12f/0x1b0
[  787.017539][T25734]  ? clear_nonspinnable+0x60/0x60
[  787.022581][T25734]  ? generic_write_checks_count+0x3d9/0x4c0
[  787.028497][T25734]  __generic_file_write_iter+0x172/0x430
[  787.034151][T25734]  generic_file_write_iter+0xab/0x2e0
[  787.039567][T25734]  vfs_write+0x44c/0x960
[  787.043828][T25734]  ? file_end_write+0x250/0x250
[  787.048705][T25734]  ? __fget_files+0x44a/0x4d0
[  787.053421][T25734]  ? __fdget_pos+0x2ae/0x360
[  787.058029][T25734]  ? ksys_write+0x71/0x240
[  787.062492][T25734]  ksys_write+0x143/0x240
[  787.066843][T25734]  ? __ia32_sys_read+0x80/0x80
[  787.071624][T25734]  ? lockdep_hardirqs_on+0x94/0x140
[  787.076875][T25734]  do_syscall_64+0x4c/0xa0
[  787.081319][T25734]  ? clear_bhb_loop+0x60/0xb0
[  787.086019][T25734]  ? clear_bhb_loop+0x60/0xb0
[  787.090712][T25734]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  787.096731][T25734] RIP: 0033:0x7f4f2eb8e9a9
[  787.101782][T25734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  787.121759][T25734] RSP: 002b:00007f4f2faeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  787.130190][T25734] RAX: ffffffffffffffda RBX: 00007f4f2edb5fa0 RCX: 00007f4f2eb8e9a9
[  787.138360][T25734] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000004
[  787.146344][T25734] RBP: 00007f4f2ec10d69 R08: 0000000000000000 R09: 0000000000000000
[  787.154425][T25734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  787.162519][T25734] R13: 0000000000000000 R14: 00007f4f2edb5fa0 R15: 00007ffd9c5a0ee8
[  787.170643][T25734]  </TASK>
[  787.192523][  T952] usb 5-1: USB disconnect, device number 26