last executing test programs:

7m14.27101987s ago: executing program 2 (id=11):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, 0x0, 0x0)
sendmmsg$inet6(r4, 0x0, 0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0xa, 0x0, 0x0)
sendmmsg$inet(r7, &(0x7f00000040c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001f80)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x80)

7m10.703009718s ago: executing program 2 (id=13):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0)
add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4)

7m4.374524714s ago: executing program 2 (id=20):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="3a8d212b0f189489", 0x8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x40)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$adfs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x4002, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB="2c657569c32b", @ANYRESDEC=0x0, @ANYRESDEC], 0x1, 0x9dcf, &(0x7f0000013cc0)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
io_setup(0x3, &(0x7f0000000000)=<r4=>0x0)
io_submit(r4, 0x0, &(0x7f00000009c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_mount_image$udf(&(0x7f0000001a40), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT")
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003}, 0x38)
timer_create(0x2, 0x0, &(0x7f0000000040))

6m58.961363827s ago: executing program 2 (id=28):
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}, {&(0x7f00000001c0)="550bbbec2b28850d", 0x8}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0)
recvmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x13)
ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x20000000)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)

6m55.425792664s ago: executing program 2 (id=33):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
syz_open_dev$ptys(0xc, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r5 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x3}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r8}})
setreuid(0x0, 0x0)
io_uring_enter(r5, 0x4536, 0x6aaf, 0x0, 0x0, 0x0)

6m53.828735126s ago: executing program 2 (id=36):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x1}, 0x0, 0x0, 0x5, {0x4}, 0x0, 0x1})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x1b, r7, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x224b5bee36ba75e4}}, 0x14)
unshare(0x2c020400)
syz_io_uring_setup(0x5080, &(0x7f0000000180)={0x0, 0xdb0d, 0x800, 0xfffffffd, 0x3b5}, 0x0, 0x0)

6m37.149828061s ago: executing program 32 (id=36):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x1}, 0x0, 0x0, 0x5, {0x4}, 0x0, 0x1})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x1b, r7, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x224b5bee36ba75e4}}, 0x14)
unshare(0x2c020400)
syz_io_uring_setup(0x5080, &(0x7f0000000180)={0x0, 0xdb0d, 0x800, 0xfffffffd, 0x3b5}, 0x0, 0x0)

5m52.844450469s ago: executing program 0 (id=104):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_setup(0x30, &(0x7f0000000600)=<r2=>0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r2, 0x2, &(0x7f0000000780)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f00000006c0), 0x0, 0x2, 0x0, 0x2}])
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f0000000000)=ANY=[], 0x1, 0x5505, &(0x7f00000079c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x3}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000002c00000000000008000f0001000000", 0x24)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x3, 0x1, {0x5, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03)

5m49.688399311s ago: executing program 0 (id=110):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000000000000003200"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x10)
r9 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
rmdir(&(0x7f0000000300)='./cgroup/../file0\x00')
write$cgroup_pid(r9, &(0x7f0000000880), 0x12)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4}, {}, {0x0, 0x2, 0xff}, 0x70bd2d, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfcf1}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x70bd27, 0x70bd2d, 0x70bd2b, 0x4, [0x3]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000340)={@remote, @empty}, 0xc)

5m46.035931811s ago: executing program 0 (id=115):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$IPC_RMID(r3, 0x0)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000100)='0', 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x44)
getdents64(r6, 0x0, 0x0)
getdents(r6, 0x0, 0x58)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001100)={r7, 0x8, {0x0, 0x0, 0x0, 0x4000000001000000, 0x0, 0x0, 0x0, 0x1c, 0x1c, "339f020bbe82b3980000000000003b0000000d0ec081b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c783a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "2453335e235a1cc113eb640100000000000400", [0xfffffffffeff7ff9]}})

5m42.746584395s ago: executing program 0 (id=118):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x27, 0x3, 0x80000000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00002c1000/0x2000)=nil, 0x2000}})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)
socket$key(0xf, 0x3, 0x2)
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xa)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)

5m39.763195175s ago: executing program 0 (id=122):
r0 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2018886, &(0x7f0000001c00)=ANY=[@ANYBLOB='nonumtail=0,utf8=0,rodir,nonumtail=0,dmask=00000000000000000000001,usefree,codepage=932,uni_xlate=0,uni_xlate=0,uni_xlate\x00\x00,shortname=winnt,iocharset=iso8859-9,\x00'], 0x1, 0x335, &(0x7f00000001c0)="$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")
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, 0x0, 0x0)
bind$inet6(r3, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280), &(0x7f00000001c0))
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x801053, 0x0, 0xfc, 0x0, &(0x7f0000000100))

5m34.621284095s ago: executing program 0 (id=130):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0)
lseek(r6, 0x5, 0x2)
r7 = socket$inet6(0xa, 0x80002, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x2, 0x1, 0x3, 0x0, 0x7}})
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000340), 0x7, 0x501400)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)

5m18.190491687s ago: executing program 33 (id=130):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0)
lseek(r6, 0x5, 0x2)
r7 = socket$inet6(0xa, 0x80002, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x2, 0x1, 0x3, 0x0, 0x7}})
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000340), 0x7, 0x501400)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)

2m44.676705529s ago: executing program 1 (id=567):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feff000000000000000000008500000087000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m43.613849373s ago: executing program 1 (id=569):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000002480)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="477988f060168fb228463c309ac7c710ed9c43a44b776f6276bdea8b1b8da1f003cd2fda70547c6f3fb3c34ec4091ceb75587dc07f92a47ee02e9459d2d49632121d7ea4cf2af571640eb2c29f7c3261c2ce56d91cd5e6f7fb6d9091652b64a7e4725bcfcea8bfe9a55e5f25a7efb14bd8c418b59a005816850d47cd3b9d2be2626a2b5e21f9d5291ec12cef5f8a86b6dc82", @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES16], 0x1, 0xa53, &(0x7f0000000bc0)="$eJzs3U2MW0cdAPBn73rzWeKUhIa0tAmFtgK62+yG8BFBUzUXoqbiVqniEqVpiUgDIpWgVQ5JTtxoFYUb4kOceqkAIdELinriUolG4tJT4cCBKEiROEBLYhTvjNf+x+6zk9196/XvJ43H783YM8/7/PZ53puZAphY9fZjo/146e2Lh//5yD823Xr+ZCdHs/043bV0K3ctLU+H9/tgajG+cf3s8X5xrZhvP+bl4tlrndduKYriXLGnuFw0i92Xrrzx7vwzR88fubD3vTcPXl2JbQcAgEnz7csH9+/821/u3/7hWw8eKjZ01ufz82Za3prO+w+lE/98/l8vepdrXaHbTMg3nUI95Jvqk6+7nEbOt7H3dbH8mfC+jQH5NpSUP9W1rt92wzjL+3GzqNVne5br9dnZxd/kRft3/Uxt9vTJUy+eqaiiwLL790NFUewRhEkLrW2dL0HldakudH0KAJWK1wtvcy62LNydzrtND1f+tafq/V8Py2C193/lx/fvrcdql1+2/b8574jD8hl+b9q4ovVYbnm78vdoa1qO1xHi/UujHn/y+02F92sMWc9B1xHG5frCoHpOrXI97tSg+sf9Yr36Rorz5/DNkN79/Yl/03H5GwP9/WfNtf9vWqpc5XUZKWwc03oLExxa1Rx2gDEQ75trJTk93tcX0zeUpG8sSd9Ukr65JH1LSTpMst+/8tPi9drS7/z4m/7G9bPtL8uw7WG5ne2eFH9ixPrE9shR2+Pifb+jutvy4/3EsJb98dhzJ776wvNXFu//r3X2/5tpf9+Tlpvpu3U5ZcjthbFdvXPvf7O3nPqAfPeG+tzTJ3/7+Y7efLUdS+9TdB1nbqvHrt7XbRuU74HefM2Qb1MK8SpIPD/ZHF6Xzz/ycTV/XtNhexthO2ZCPfJxZXuKx+tqDGtV3h8H3f+f989dRaP24slTJ55Iy3k//fNUY8Ot9ftWud7A3Ru2/8+uorf/z9bO+ka9+7iwbWl9rfu40Azr5wesX0jL+f/cd6c2tdfPHv/+qReWe+Nhwp159bXvHTt16sQPPfHEE086T6o+MgErbe6Vl38wd+bV1x4/+fKxl068dOL0woEDC/PzB762sH+ufV4/1312D6wnS//0q64JAAAAAAAAAAAAMKwfHTl85a/vfOX9xf7/S/3/cv//fOdv7v//k9D/P/aTz/3gcz/A7X3S23nCAKszIV8jhU+G+u4I5ewMr/tUijvz+KX+/7m4OK5rrs99YX0cvzfnC8MJ3DZeykwYgyTOF/jZFF9I8a8LqFDt5/1Xp7hsfOu8r+fxKYxLMZ7y3y2PZ5LHMcn9vweN65SP/9tXoY4sv9XoTlj1NgL9/WvNjf+93kPXL4bK6yKstXCj1WqtZnmtllk8gLWh6vk/c7tnjk//6Vsbb4Wc7dpTvcfLOH4p3I2q57+srPzcsDip2z9k+cs9/2dn/ruhj39hxrzmnZX7319cfb+r2GL3sOXH7c/jQO8YrfwPU/l5ax4thiu/9atQfrwgNKSPQvmbhyw/bv/FUQtOBf4vlZ8/tsceHrb8xTeo1XvrEduN8/W/2G6c3Qjbn8f2HPnvf4cTNd5M5cMkG5d5Zkc1LvP/DhLvw/hyWs4HwnyfQ5zvZNT65/sr8v+BneH9ayX/38z/O96+nuKy70Oe/zfvj80+y/Wu5Uafz3a9HmtgXH3g+p8w5qF9RrMG6jGOodVqrWyDVolKC6fyz7/q3wlVl1/1518mzv8bz+Hj/L8xPc7/G9Pj/L8xvd2u+NHSpL0xPc7/Gz/POP9vTL8vlBvnB95Vkv7pkvTdJen3l6Q/UJL+mZL0vSXpD5akP1SSfm9J+sMl6Z8rSf98SfojJemPfXz6wo9LXr/e5f4ok7r9MMli/zzff5gc+frPoO//jpJ0YHz97K19Tz//u+80F/v/z3TaQ/J1vENpuZF+O8ffS7H9ZCqlvZOW/x7S13p7B0ySOH5G/P/+aEk6ML7yfV6+3zCBav1H7Bl23KpB5/mMly+k+Isp/lKKH0/xbIrnUrwvxfOrVD9WxtO//cPB12tLv/e3hfRh7yeP/YHiOFELQ9Yntg+Mej97HMdvVHdb/h12BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKhMvf24f/+uWlFcevvi4eeOnpy7tebJTo5m+3G6a6nReV1RPJHiqRT/Mj25cf3s8e74ZoprxXxRK2qd9cWz1zolbSmK4lyxp7hcNIvdl6688e78M0fPH7mw9703D15duU8AAAAA1r//BwAA///3txjh")
truncate(&(0x7f0000000140)='./file2\x00', 0x6)

2m42.33215892s ago: executing program 1 (id=579):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x2, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x7800, 0x8001, 0xe}})

2m41.840255156s ago: executing program 1 (id=582):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

2m41.480916682s ago: executing program 1 (id=588):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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")
open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)

2m40.369404587s ago: executing program 1 (id=594):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x7, @capture={0x0, 0x1, {0x2, 0xfffffdfe}, 0x20000004, 0x200}})

2m25.017529214s ago: executing program 34 (id=594):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x7, @capture={0x0, 0x1, {0x2, 0xfffffdfe}, 0x20000004, 0x200}})

8.562987595s ago: executing program 7 (id=1069):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0x8})

8.137536471s ago: executing program 7 (id=1072):
r0 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2018886, &(0x7f0000001c00)=ANY=[@ANYBLOB='nonumtail=0,utf8=0,rodir,nonumtail=0,dmask=00000000000000000000001,usefree,codepage=932,uni_xlate=0,uni_xlate=0,uni_xlate\x00\x00,shortname=winnt,iocharset=iso8859-9,\x00'], 0x1, 0x335, &(0x7f00000001c0)="$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")
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, 0x0, 0x0)
bind$inet6(r3, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=<r7=>0x0, &(0x7f00000001c0))
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x801053, 0x0, 0xfc, 0x0, &(0x7f0000000100))
renameat2(0xffffffffffffffff, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000480)='./cgroup\x00', 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

7.696565737s ago: executing program 4 (id=1074):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff0000ff1f0100000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

7.633830477s ago: executing program 3 (id=1075):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r1, @ANYRESOCT], 0x0)

7.046498305s ago: executing program 6 (id=1077):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103642, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40186f03, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}})

6.820134809s ago: executing program 7 (id=1079):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0xfffffffffffffef3)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r3, 0x0, 0x7)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x3fe, &(0x7f0000000100)=<r5=>0x0)
io_getevents(r5, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0)
io_submit(r5, 0x1, &(0x7f0000000000)=[0x0])
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x45a, &(0x7f00000005c0)="$eJzs289vFFUcAPDvzLZA+WFXxB/8UKtobPzR0oLKwYtGEy8mJl7wWNtCkIUaWhMhRNAYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1sztDp8tuaZdtF9zPJ5n2vZk3ee+7b97um3m7AQyssexPErEzIn6PiNFmdmWBsea/G9cvzP5z/cJsEvX6O38ljXJ/X78wWxQtztuRZ8bTiPSzJPa3qXfx3PlTM7Xa/Nk8P7l0+oPJxXPnXzh5eubE/In5M9NHjx45PPXyS9Mv9iTO+7O27vt44cDeN9+98tbssSvv/fxtpYi/JY4eGVvt4NP1eo+r669dpXQy1MeGsC7ZGMi6a7gx/kejEsudNxpvfNrXxgEbqp7rcPhSvZ2h0onAPSwxlGFAFR/02f1vsW3e7KP/rr3avAHK4r6Rb80jQ5HmZYZb7m97aSwijl3696tsi415DgEAsML32fzn+XbzvzQeKpW7L18bquZrKbsj4oGI2BMRD0Y0yj4cEY90rmpLu52tiyS3zn/Sq10HtwbZ/O+VfG1r5fyvmP1FtZLndjXiH06On6zNH8pfk/EY3prlp1ap44fXf/ui07Hy/C/bsvqLuWDejqtDW1eeMzezNHMnMZdd+yRi31C7+JObKwFJROyNiH1d1nHy2W8OdDp2+/hX0YN1pvrXEc80+/9StMRfSFZfn5zcFrX5Q5PFVXGrX369/Han+u8o/h7I+n972+v/ZvzVpLxeu7j+Oi7/8XnHe5qJrq7/5R3Fm8pHM0tLZ6citiQnmo0u759ePrfIF+Wz+McPth//u2P5ldgfEdlF/GhEPBYRj+d990REPBkRB1viKt9f//TaU+93iv9u6P+5lv6vRv1iqUhL/y8ntkTrnvaJyqkfv1tRaXU98Wf9f6SRGs/3rOX9by3t6u5qBgAAgHtPGhE7I0knbqZH0omJ5nf498T2tLawuPTc8YUPz8w1fyNQjeG0eNI1WnoeOpXf1hf56Zb84fy58ZeVkUZ+YnahNtfv4GHA7bhl/KeN8Z/5s9Lv1gEbzu+1YHCVxn/Sz3YAm8/nPwwu4x8GV5vxP9KPdgCbr93n/8U+tAPYfC3j37IfDBD3/zC4jH8YXOXx7wsAMDAWR+L2P5Jvl9gW3Zwl8b9JRHpXNKM3iaTLUbDWxM5+B7j+RL/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrjvwAAAP//VObtVQ==")
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xdfb, 0x0, 0x0, 0x0)

6.465751113s ago: executing program 4 (id=1080):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYRES16=r0], 0x21c}}, 0x4004084)

4.675385407s ago: executing program 4 (id=1081):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000440)={0x8, 0xfffffffffffff154, 0x0, 0xfffffffffffffffb, 0xfc, 0x8, 0x7, 0x6c32}, &(0x7f0000000480)={0x7f, 0x2, 0x2, 0x4, 0x4, 0x3ff, 0x3}, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

4.48320448s ago: executing program 7 (id=1083):
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x4, 0x2}, {0x2}], 0x2)
semop(0x0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)

4.421072991s ago: executing program 4 (id=1084):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1000, 0x9, 0x0, 0x1ff, 0x1, 0xfffffff8}, 0x1c)

4.273240073s ago: executing program 7 (id=1085):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
open(0x0, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd)
r5 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r5, r5}, &(0x7f000001f600)=""/105, 0x69, &(0x7f0000000240)={&(0x7f000001f680)={'sha3-224-generic\x00'}})
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r6, r3, &(0x7f00000000c0)=0x58, 0x5)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000110001009000", @ANYBLOB="00000000000000001c001a801800058014000680080001"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000132ae57f60014001a80100005800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r8=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001880)={"9ca61a5935dc0b201481ef3f57e55f3a", r7, r8, {0x2, 0xffff2cc8}, {0xb45, 0xfffffc01}, 0x3, [0xcb5, 0x8d0, 0x9, 0x2, 0x0, 0x8000000000000000, 0x800, 0xffffffff, 0x7, 0x1, 0x6, 0x8000, 0x10, 0x3ff, 0x4, 0x2]})
r9 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f0000000040), 0x4)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r9, 0x10000000)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001300290a0000000000000000070000", @ANYBLOB="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", @ANYBLOB="00000132ae57f60014001a80"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0xffffffffffffffff, &(0x7f00000000c0))

4.272959073s ago: executing program 5 (id=1086):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000020000040"])

4.101843015s ago: executing program 3 (id=1087):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13)
ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xff01, 0xfe, 0xff92, 0xa, 0x34, "000401010100"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa)

4.000715886s ago: executing program 4 (id=1088):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000040)=[{0x9, 0x2000, 0x7, &(0x7f0000000100)="03269c19d0c431"}], 0x1})

3.873603838s ago: executing program 5 (id=1089):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x0, 0x32, 0x0, 0x3}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000240)="48672ba2", 0x4, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @loopback}, 0x1c)

3.862255798s ago: executing program 6 (id=1090):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

3.72393987s ago: executing program 3 (id=1091):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$cont(0x1f, r0, 0x7a, 0x400000000000e5)

3.593479072s ago: executing program 5 (id=1092):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)

3.492090553s ago: executing program 6 (id=1093):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0xfffffffffffffef3)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r3, 0x0, 0x7)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="3f000000010000", 0x7)
io_getevents(0x0, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0)
io_submit(0x0, 0x1, &(0x7f0000000000)=[0x0])
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x45a, &(0x7f00000005c0)="$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")
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xdfb, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

3.421344105s ago: executing program 3 (id=1094):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0xfffffffffffffef3)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r3, 0x0, 0x7)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x3fe, &(0x7f0000000100)=<r5=>0x0)
io_getevents(r5, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0)
io_submit(r5, 0x1, &(0x7f0000000000)=[0x0])
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x45a, &(0x7f00000005c0)="$eJzs289vFFUcAPDvzLZA+WFXxB/8UKtobPzR0oLKwYtGEy8mJl7wWNtCkIUaWhMhRNAYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1sztDp8tuaZdtF9zPJ5n2vZk3ee+7b97um3m7AQyssexPErEzIn6PiNFmdmWBsea/G9cvzP5z/cJsEvX6O38ljXJ/X78wWxQtztuRZ8bTiPSzJPa3qXfx3PlTM7Xa/Nk8P7l0+oPJxXPnXzh5eubE/In5M9NHjx45PPXyS9Mv9iTO+7O27vt44cDeN9+98tbssSvv/fxtpYi/JY4eGVvt4NP1eo+r669dpXQy1MeGsC7ZGMi6a7gx/kejEsudNxpvfNrXxgEbqp7rcPhSvZ2h0onAPSwxlGFAFR/02f1vsW3e7KP/rr3avAHK4r6Rb80jQ5HmZYZb7m97aSwijl3696tsi415DgEAsML32fzn+XbzvzQeKpW7L18bquZrKbsj4oGI2BMRD0Y0yj4cEY90rmpLu52tiyS3zn/Sq10HtwbZ/O+VfG1r5fyvmP1FtZLndjXiH06On6zNH8pfk/EY3prlp1ap44fXf/ui07Hy/C/bsvqLuWDejqtDW1eeMzezNHMnMZdd+yRi31C7+JObKwFJROyNiH1d1nHy2W8OdDp2+/hX0YN1pvrXEc80+/9StMRfSFZfn5zcFrX5Q5PFVXGrX369/Han+u8o/h7I+n972+v/ZvzVpLxeu7j+Oi7/8XnHe5qJrq7/5R3Fm8pHM0tLZ6citiQnmo0u759ePrfIF+Wz+McPth//u2P5ldgfEdlF/GhEPBYRj+d990REPBkRB1viKt9f//TaU+93iv9u6P+5lv6vRv1iqUhL/y8ntkTrnvaJyqkfv1tRaXU98Wf9f6SRGs/3rOX9by3t6u5qBgAAgHtPGhE7I0knbqZH0omJ5nf498T2tLawuPTc8YUPz8w1fyNQjeG0eNI1WnoeOpXf1hf56Zb84fy58ZeVkUZ+YnahNtfv4GHA7bhl/KeN8Z/5s9Lv1gEbzu+1YHCVxn/Sz3YAm8/nPwwu4x8GV5vxP9KPdgCbr93n/8U+tAPYfC3j37IfDBD3/zC4jH8YXOXx7wsAMDAWR+L2P5Jvl9gW3Zwl8b9JRHpXNKM3iaTLUbDWxM5+B7j+RL/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrjvwAAAP//VObtVQ==")
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xdfb, 0x0, 0x0, 0x0)

985.140127ms ago: executing program 7 (id=1095):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x7, 0x211, 0x0, 0x0}], 0x1})

715.864481ms ago: executing program 5 (id=1096):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x18)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

704.756111ms ago: executing program 6 (id=1097):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8)

556.040673ms ago: executing program 3 (id=1098):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"])

501.701054ms ago: executing program 5 (id=1099):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000180)='2', 0x1, 0x8080c61)
fallocate(r0, 0x3, 0x40000, 0x10002)

235.918477ms ago: executing program 4 (id=1100):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0)

171.574108ms ago: executing program 6 (id=1101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x7c}}, 0x0)

130.354129ms ago: executing program 5 (id=1102):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

66.322989ms ago: executing program 3 (id=1103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

0s ago: executing program 6 (id=1104):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000600)={[{@jqfmt_vfsv0}, {@debug}]}, 0x1, 0x439, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

kernel console output (not intermixed with test programs):

 68) failed
[  428.942906][ T7787] FAT-fs (loop6): Directory bread(block 69) failed
[  428.989947][ T7787] FAT-fs (loop6): Directory bread(block 70) failed
[  429.037301][ T7787] FAT-fs (loop6): Directory bread(block 71) failed
[  429.077871][ T7787] FAT-fs (loop6): Directory bread(block 72) failed
[  429.178283][ T7787] FAT-fs (loop6): Directory bread(block 73) failed
[  429.290498][ T5132] hfsplus: b-tree write err: -5, ino 4
[  429.518179][ T7797] loop5: detected capacity change from 0 to 512
[  429.655604][ T7797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  429.902437][ T7797] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.735: bad orphan inode 17
[  429.915586][ T7797] EXT4-fs (loop5): Remounting filesystem read-only
[  429.922196][ T7797] ext4_test_bit(bit=16, block=4) = 1
[  429.927639][ T7797] is_bad_inode(inode)=0
[  429.931855][ T7797] NEXT_ORPHAN(inode)=2147418128
[  429.936823][ T7797] max_ino=32
[  429.940056][ T7797] i_nlink=0
[  429.944810][ T7797] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  430.286324][ T7796] overlayfs: unrecognized mount option "U'" or missing value
[  430.307326][ T4723] EXT4-fs (loop5): unmounting filesystem.
[  430.354021][ T7776] loop7: detected capacity change from 0 to 32768
[  430.399560][ T7779] loop3: detected capacity change from 0 to 32768
[  430.500406][ T7779] XFS: ikeep mount option is deprecated.
[  430.554003][ T7779] XFS: noikeep mount option is deprecated.
[  430.727033][ T7779] XFS (loop3): Mounting V5 Filesystem
[  430.885022][ T7779] XFS (loop3): Ending clean mount
[  430.931628][ T7779] XFS (loop3): Quotacheck needed: Please wait.
[  431.052640][ T7779] XFS (loop3): Quotacheck: Done.
[  431.067432][ T7814] loop5: detected capacity change from 0 to 32768
[  431.233704][ T7814] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11
[  431.346108][ T4266] XFS (loop3): Unmounting Filesystem
[  431.975523][ T7831] xt_CT: You must specify a L4 protocol and not use inversions on it
[  432.364803][ T7832] sctp: failed to load transform for md5: -2
[  432.727321][ T7838] loop6: detected capacity change from 0 to 4096
[  432.774468][ T4708] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11
[  432.807919][ T7838] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  432.901463][ T7838] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  432.902879][ T7817] loop4: detected capacity change from 0 to 32768
[  432.982903][ T7817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.744 (7817)
[  433.077360][ T7817] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  433.124654][ T7817] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  433.163728][ T7850] loop7: detected capacity change from 0 to 4096
[  433.164448][ T7817] BTRFS info (device loop4): using free space tree
[  433.244278][ T7850] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512)
[  433.365255][ T7850] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  433.580126][ T7817] BTRFS info (device loop4): enabling ssd optimizations
[  433.583305][ T5628] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  433.630161][ T7850] ntfs3: loop7: ino=1e, "file1" attr_set_size
[  433.648950][ T7880] loop6: detected capacity change from 0 to 256
[  433.707238][ T4250] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  433.727219][ T7880] FAT-fs (loop6): Directory bread(block 64) failed
[  433.760031][ T7880] FAT-fs (loop6): Directory bread(block 65) failed
[  433.783340][ T5628] usb 4-1: Using ep0 maxpacket: 32
[  433.789090][ T7880] FAT-fs (loop6): Directory bread(block 66) failed
[  433.828753][ T5628] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  433.853320][ T7880] FAT-fs (loop6): Directory bread(block 67) failed
[  433.860347][ T5628] usb 4-1: config 0 has an invalid interface number: 164 but max is 0
[  433.879476][ T7880] FAT-fs (loop6): Directory bread(block 68) failed
[  433.886563][ T5628] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  433.895999][ T7880] FAT-fs (loop6): Directory bread(block 69) failed
[  433.902688][ T5628] usb 4-1: config 0 has no interface number 0
[  433.910290][ T7880] FAT-fs (loop6): Directory bread(block 70) failed
[  433.918522][ T5628] usb 4-1: config 0 has no interface number 1
[  433.926125][ T5628] usb 4-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30
[  433.938113][ T7880] FAT-fs (loop6): Directory bread(block 71) failed
[  433.945635][ T7880] FAT-fs (loop6): Directory bread(block 72) failed
[  433.956460][ T5628] usb 4-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110
[  433.961768][ T7880] FAT-fs (loop6): Directory bread(block 73) failed
[  433.993337][ T5628] usb 4-1: config 0 interface 50 has no altsetting 0
[  434.002445][ T5628] usb 4-1: config 0 interface 164 has no altsetting 0
[  434.053690][ T5628] usb 4-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a
[  434.073050][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.089442][ T5628] usb 4-1: Product: syz
[  434.099438][ T5628] usb 4-1: Manufacturer: syz
[  434.109860][ T5628] usb 4-1: SerialNumber: syz
[  434.125380][ T5628] usb 4-1: config 0 descriptor??
[  434.148678][ T5628] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[  434.235689][ T7886] overlayfs: unrecognized mount option "U'" or missing value
[  434.363488][ T5628] usb 4-1: reset high-speed USB device number 8 using dummy_hcd
[  434.492010][ T4632] ntfs3: loop7: ntfs3_write_inode r=5 failed, -22.
[  434.521519][ T7266] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22.
[  434.790291][ T7891] loop6: detected capacity change from 0 to 512
[  434.819890][ T7891] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  434.826635][ T7888] block nbd7: shutting down sockets
[  434.890515][ T7891] EXT4-fs (loop6): 1 truncate cleaned up
[  434.913433][ T7891] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  435.056004][ T5628] usb 4-1: device descriptor read/64, error -71
[  435.082327][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  435.793456][ T7904] xt_CT: You must specify a L4 protocol and not use inversions on it
[  436.739086][ T7903] sctp: failed to load transform for md5: -2
[  436.739178][ T5628] usb 4-1: reset high-speed USB device number 8 using dummy_hcd
[  437.257940][ T7912] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.023347][ T7916] loop6: detected capacity change from 0 to 1024
[  438.056686][ T7920] sp0: Synchronizing with TNC
[  438.115811][ T7916] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  438.280495][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  438.420234][ T5628] usb 4-1: device descriptor read/64, error -71
[  438.488412][ T7931] loop4: detected capacity change from 0 to 1024
[  438.621745][ T7931] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  438.675977][ T7931] EXT4-fs warning (device loop4): ext4_resize_begin:74: won't resize using backup superblock at 1
[  438.703526][ T5628] usb 4-1: reset high-speed USB device number 8 using dummy_hcd
[  438.743931][ T5628] usb 4-1: device reset changed ep0 maxpacket size!
[  438.790501][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  438.796741][ T5628] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware
[  438.856205][ T5628] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  438.897469][ T5628] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[  438.927666][ T5628] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware
[  438.943334][ T5628] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  439.015514][ T5628] usb 4-1: USB disconnect, device number 8
[  439.061508][ T4639] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[  439.081538][ T4639] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[  439.101846][ T4639] kobject_add_internal failed for firmware (error: -2 parent: 4-1)
[  439.129115][ T4639] firmware ueagle-atm!eagleI.fw: fw_load_sysfs_fallback: device_register failed
[  439.147935][ T5630] usb 4-1: [UEAGLE-ATM] firmware is not available
[  439.154846][ T4639] usb 4-1: [UEAGLE-ATM] firmware is not available
[  439.203286][ T5628] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  439.313335][ T5637] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  439.367631][ T7946] loop5: detected capacity change from 0 to 32768
[  439.394724][ T7946] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  439.403614][ T5628] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  439.412296][ T5628] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  439.424287][ T5628] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  439.434056][ T4639] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  439.446348][ T7946] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  439.449151][ T5628] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  439.470010][ T5628] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  439.498745][ T5630] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  439.527336][ T5628] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  439.536623][ T5637] usb 7-1: Using ep0 maxpacket: 8
[  439.553069][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  439.568172][ T5637] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  439.580611][ T5637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.592669][ T5628] usb 4-1: Product: syz
[  439.600714][ T5628] usb 4-1: Manufacturer: syz
[  439.608907][ T5637] usb 7-1: Product: syz
[  439.613115][ T5637] usb 7-1: Manufacturer: syz
[  439.624496][ T5637] usb 7-1: SerialNumber: syz
[  439.630858][ T5628] cdc_wdm 4-1:1.0: skipping garbage
[  439.645229][ T5628] cdc_wdm 4-1:1.0: skipping garbage
[  439.666178][ T5637] usb 7-1: config 0 descriptor??
[  439.667973][ T4723] ocfs2: Unmounting device (7,5) on (node local)
[  439.683378][ T4639] usb 5-1: Using ep0 maxpacket: 32
[  439.695726][ T4639] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  439.704984][ T5630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  439.719125][ T5637] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  439.731226][ T5630] usb 8-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  439.743791][ T4639] usb 5-1: config 0 has no interface number 0
[  439.750729][ T5628] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  439.757869][ T5637] usb 7-1: setting power ON
[  439.762922][ T5637] dvb-usb: bulk message failed: -22 (2/0)
[  439.770216][ T5630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.778881][ T5628] cdc_wdm 4-1:1.0: Unknown control protocol
[  439.787612][ T4639] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  439.810273][ T5630] usb 8-1: config 0 descriptor??
[  439.816304][ T5637] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  439.841800][ T4639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.863673][ T5637] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  439.874900][ T7067] usb 4-1: USB disconnect, device number 9
[  439.878393][ T7942] dvb-usb: bulk message failed: -22 (3/0)
[  439.898968][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  439.899525][ T4639] usb 5-1: Product: syz
[  439.905416][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  439.910074][ T4639] usb 5-1: Manufacturer: syz
[  439.931017][ T4639] usb 5-1: SerialNumber: syz
[  439.936176][ T5637] usb 7-1: media controller created
[  439.941751][ T7942] usb 7-1: gpio_write failed.
[  439.963474][ T7942] cxusb: i2c rd: len=1792 is too big!
[  439.963474][ T7942] 
[  439.963998][ T4639] usb 5-1: config 0 descriptor??
[  440.001661][ T5637] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  440.016180][ T4639] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  440.033778][ T4639] usb 5-1: selecting invalid altsetting 1
[  440.046390][ T4639] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  440.056497][ T5637] usb 7-1: selecting invalid altsetting 6
[  440.063038][ T5637] usb 7-1: digital interface selection failed (-22)
[  440.073694][ T4639] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  440.084201][ T5637] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  440.092998][ T4639] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  440.102335][ T4639] usb 5-1: media controller created
[  440.109324][ T5637] usb 7-1: setting power OFF
[  440.116911][ T5637] dvb-usb: bulk message failed: -22 (2/0)
[  440.133367][ T5637] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  440.151888][ T4639] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  440.160642][ T5637] (NULL device *): no alternate interface
[  440.203980][ T5637] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  440.229045][ T5637] usb 7-1: USB disconnect, device number 6
[  440.242974][ T4639] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  440.251439][ T4639] zl10353_read_register: readreg error (reg=127, ret==-71)
[  440.264711][ T4639] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  440.277236][ T5630] logitech 0003:046D:C293.0007: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.7-1/input0
[  440.291668][ T5630] logitech 0003:046D:C293.0007: no inputs found
[  440.353606][ T4639] usb 5-1: USB disconnect, device number 7
[  440.518686][ T5637] usb 8-1: USB disconnect, device number 3
[  440.629575][ T7958] loop5: detected capacity change from 0 to 512
[  440.660099][ T7958] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  440.677778][ T7958] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  440.869546][ T7958] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  440.914479][ T7958] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  441.196041][ T7963] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.567958][ T7958] System zones: 0-2, 18-18, 34-35
[  441.629049][ T7958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  441.797691][ T7968] tipc: Started in network mode
[  441.819471][ T7968] tipc: Node identity -:, cluster identity 4711
[  441.903457][ T7968] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  441.986246][ T7970] loop3: detected capacity change from 0 to 4096
[  442.005845][ T4270] Bluetooth: hci5: link tx timeout
[  442.012445][ T4270] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  442.016938][ T4723] EXT4-fs (loop5): unmounting filesystem.
[  442.100481][ T7970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  442.128658][ T7975] loop7: detected capacity change from 0 to 256
[  442.217811][ T7970] fs-verity: sha256 using implementation "sha256-avx2"
[  442.248025][ T7975] FAT-fs (loop7): Directory bread(block 64) failed
[  442.273970][ T7975] FAT-fs (loop7): Directory bread(block 65) failed
[  442.306349][ T7975] FAT-fs (loop7): Directory bread(block 66) failed
[  442.342350][ T7970] fs-verity (loop3, inode 16): fs-verity keyring is empty, rejecting signed file!
[  442.353674][ T7975] FAT-fs (loop7): Directory bread(block 67) failed
[  442.360378][ T7975] FAT-fs (loop7): Directory bread(block 68) failed
[  442.413560][ T7975] FAT-fs (loop7): Directory bread(block 69) failed
[  442.420244][ T7975] FAT-fs (loop7): Directory bread(block 70) failed
[  442.466387][ T7975] FAT-fs (loop7): Directory bread(block 71) failed
[  442.498092][ T7975] FAT-fs (loop7): Directory bread(block 72) failed
[  442.524461][ T7975] FAT-fs (loop7): Directory bread(block 73) failed
[  442.575101][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  442.944208][ T7986] overlayfs: unrecognized mount option "U'" or missing value
[  443.142986][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.278175][ T7995] loop3: detected capacity change from 0 to 512
[  443.342512][ T7998] loop4: detected capacity change from 0 to 256
[  443.348859][ T7995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  443.348962][ T7995] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.414887][ T7995] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.3.791: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  443.420646][ T7998] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097162)
[  443.437729][   T27] audit: type=1800 audit(1747770391.831:7): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.792" name="file1" dev="loop4" ino=1048674 res=0 errno=0
[  443.484508][ T7998] FAT-fs (loop4): Filesystem has been set read-only
[  443.522004][ T7995] EXT4-fs (loop3): Remounting filesystem read-only
[  443.547672][ T7995] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  443.565452][ T7995] EXT4-fs (loop3): Remounting filesystem read-only
[  443.572050][ T7995] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #12: comm syz.3.791: Deleting old file: nlink 2, error=-117
[  443.661941][ T7977] loop6: detected capacity change from 0 to 32768
[  443.681998][ T7977] XFS: ikeep mount option is deprecated.
[  443.735148][ T7977] XFS: noikeep mount option is deprecated.
[  443.779445][ T8004] loop4: detected capacity change from 0 to 2048
[  443.827333][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  443.868139][ T8004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  443.881140][ T7067] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  443.891235][ T8004] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.937522][ T7977] XFS (loop6): Mounting V5 Filesystem
[  444.053436][ T4270] Bluetooth: hci5: command 0x0406 tx timeout
[  444.055024][ T7977] XFS (loop6): Ending clean mount
[  444.073403][ T7067] usb 8-1: Using ep0 maxpacket: 8
[  444.081287][ T7067] usb 8-1: config 0 has no interfaces?
[  444.088834][ T7977] XFS (loop6): Quotacheck needed: Please wait.
[  444.093393][ T1169] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  444.117524][ T7067] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  444.168079][ T7067] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.206428][ T7067] usb 8-1: config 0 descriptor??
[  444.273409][ T7977] XFS (loop6): Quotacheck: Done.
[  444.283586][ T1169] usb 6-1: Using ep0 maxpacket: 16
[  444.293842][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  444.300829][ T1169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  444.358341][ T1169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.417902][ T1169] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  444.427585][ T1169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.625615][ T8024] loop3: detected capacity change from 0 to 512
[  444.643422][ T8024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  444.789899][ T8024] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.798: bad orphan inode 17
[  444.801812][ T8024] EXT4-fs (loop3): Remounting filesystem read-only
[  444.808466][ T8024] ext4_test_bit(bit=16, block=4) = 1
[  444.813986][ T8024] is_bad_inode(inode)=0
[  444.818202][ T8024] NEXT_ORPHAN(inode)=2147418128
[  444.823119][ T8024] max_ino=32
[  444.826431][ T8024] i_nlink=0
[  444.830353][ T8024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  445.108910][ T1169] usb 6-1: config 0 descriptor??
[  445.131039][ T4639] usb 8-1: USB disconnect, device number 4
[  445.173102][ T5841] XFS (loop6): Unmounting Filesystem
[  445.312974][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  445.420585][ T8029] loop3: detected capacity change from 0 to 512
[  445.448948][ T8029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  445.453351][ T5925] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  445.458288][ T8029] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.518832][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  445.547964][ T1169] wacom 0003:056A:0084.0008: unbalanced delimiter at end of report description
[  445.585199][ T1169] wacom 0003:056A:0084.0008: parse failed
[  445.603519][ T1169] wacom: probe of 0003:056A:0084.0008 failed with error -22
[  445.663429][ T5925] usb 5-1: Using ep0 maxpacket: 32
[  445.674973][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  445.692997][ T5925] usb 5-1: config 0 has no interface number 0
[  445.735121][ T5925] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  445.759838][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.773246][ T5925] usb 5-1: Product: syz
[  445.777454][ T5925] usb 5-1: Manufacturer: syz
[  445.792328][ T5925] usb 5-1: SerialNumber: syz
[  445.807273][ T5925] usb 5-1: config 0 descriptor??
[  445.824631][ T1169] usb 6-1: USB disconnect, device number 6
[  445.859895][ T5925] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  445.898010][ T5925] usb 5-1: selecting invalid altsetting 1
[  445.917803][ T5925] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  445.968802][ T5925] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  445.984123][ T5925] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  446.186730][ T8039] loop7: detected capacity change from 0 to 512
[  446.210464][ T8039] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  446.388439][ T8039] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.802: bad orphan inode 17
[  446.401315][ T8039] EXT4-fs (loop7): Remounting filesystem read-only
[  446.408014][ T8039] ext4_test_bit(bit=16, block=4) = 1
[  446.413536][ T8039] is_bad_inode(inode)=0
[  446.417763][ T8039] NEXT_ORPHAN(inode)=2147418128
[  446.422669][ T8039] max_ino=32
[  446.426062][ T8039] i_nlink=0
[  446.429971][ T8039] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  446.643091][ T5925] usb 5-1: media controller created
[  446.662145][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  446.703888][ T5925] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  446.710930][ T5925] zl10353_read_register: readreg error (reg=127, ret==-71)
[  446.729357][ T5925] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  446.770734][ T5925] usb 5-1: USB disconnect, device number 8
[  446.848653][ T7266] EXT4-fs (loop7): unmounting filesystem.
[  447.030951][ T8044] loop7: detected capacity change from 0 to 256
[  447.136417][ T8044] FAT-fs (loop7): Directory bread(block 64) failed
[  447.143098][ T8044] FAT-fs (loop7): Directory bread(block 65) failed
[  447.175807][ T8044] FAT-fs (loop7): Directory bread(block 66) failed
[  447.198284][ T5637] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  447.201647][ T8044] FAT-fs (loop7): Directory bread(block 67) failed
[  447.215885][ T8044] FAT-fs (loop7): Directory bread(block 68) failed
[  447.222471][ T8044] FAT-fs (loop7): Directory bread(block 69) failed
[  447.228078][ T8046] loop3: detected capacity change from 0 to 8192
[  447.273340][ T8044] FAT-fs (loop7): Directory bread(block 70) failed
[  447.300294][ T8044] FAT-fs (loop7): Directory bread(block 71) failed
[  447.323464][ T8044] FAT-fs (loop7): Directory bread(block 72) failed
[  447.330425][ T8044] FAT-fs (loop7): Directory bread(block 73) failed
[  447.395937][ T5637] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.441368][ T5637] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.464926][ T5637] usb 6-1: config 0 interface 0 has no altsetting 0
[  447.480361][ T5637] usb 6-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00
[  447.560503][ T5637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.622022][ T8052] overlayfs: unrecognized mount option "U'" or missing value
[  447.661723][ T5637] usb 6-1: config 0 descriptor??
[  447.917142][   T22] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  448.056410][ T8048] loop4: detected capacity change from 0 to 32768
[  448.114183][ T8048] ERROR: (device loop4): diWrite: ixpxd invalid
[  448.114183][ T8048] 
[  448.141031][   T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  448.142585][ T8048] ERROR: (device loop4): remounting filesystem as read-only
[  448.153318][ T5637] hid-generic 0003:0463:1215.0009: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.5-1/input0
[  448.201985][ T8055] loop3: detected capacity change from 0 to 1024
[  448.208631][   T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.210461][ T8048] ERROR: (device loop4): txCommit: 
[  448.210461][ T8048] 
[  448.233480][   T22] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  448.288828][ T8055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  448.290549][   T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.309145][ T8055] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.370463][ T5637] usb 6-1: USB disconnect, device number 7
[  448.382749][   T22] usb 7-1: config 0 descriptor??
[  448.572660][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  448.593400][    T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  448.630707][ T8060] fido_id[8060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  448.755581][ T8065] loop3: detected capacity change from 0 to 128
[  448.786323][    T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.800680][    T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.804425][ T8065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  448.811462][    T7] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  448.832174][    T7] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  448.849888][    T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.852127][   T22] bigben 0003:146B:0902.000A: unexpected rdesc, please submit for review
[  448.860438][    T7] usb 8-1: config 0 descriptor??
[  448.878311][ T8065] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.909742][   T22] bigben 0003:146B:0902.000A: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.6-1/input0
[  448.929624][ T7067] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  448.965273][   T22] bigben 0003:146B:0902.000A: not enough values in HID_OUTPUT_REPORT 0 field 0
[  449.005082][   T22] bigben 0003:146B:0902.000A: no output report found
[  449.140936][   T22] usb 7-1: USB disconnect, device number 7
[  449.173577][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  449.253717][ T8069] fido_id[8069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  449.268748][ T7067] usb 5-1: Using ep0 maxpacket: 8
[  449.278146][ T7067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.303033][ T7067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.313313][ T7067] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  449.322603][ T7067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.515271][ T8072] loop5: detected capacity change from 0 to 512
[  449.573489][ T8072] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  449.601784][    T7] hid-udraw 0003:20D6:CB17.000B: unbalanced collection at end of report description
[  449.629179][ T7067] usb 5-1: config 0 descriptor??
[  449.654381][ T8072] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.811: bad orphan inode 17
[  449.666236][ T8072] EXT4-fs (loop5): Remounting filesystem read-only
[  449.672840][ T8072] ext4_test_bit(bit=16, block=4) = 1
[  449.678444][ T8072] is_bad_inode(inode)=0
[  449.682919][ T8072] NEXT_ORPHAN(inode)=2147418128
[  449.687970][ T8072] max_ino=32
[  449.691224][ T8072] i_nlink=0
[  449.695223][ T8072] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  449.955088][    T7] hid-udraw 0003:20D6:CB17.000B: parse failed
[  449.964648][    T7] hid-udraw: probe of 0003:20D6:CB17.000B failed with error -22
[  450.005986][    T7] usb 8-1: USB disconnect, device number 5
[  450.145880][ T4723] EXT4-fs (loop5): unmounting filesystem.
[  450.262343][ T8079] loop6: detected capacity change from 0 to 4096
[  450.410491][ T8079] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512)
[  450.714485][ T8088] loop3: detected capacity change from 0 to 512
[  450.733635][ T7067] usb 5-1: string descriptor 0 read error: -71
[  450.740858][ T7067] uclogic 0003:5543:0047.000C: failed retrieving string descriptor #200: -71
[  450.767901][ T7067] uclogic 0003:5543:0047.000C: failed retrieving pen parameters: -71
[  450.887561][ T7067] uclogic 0003:5543:0047.000C: failed probing pen v2 parameters: -71
[  450.988840][ T7067] uclogic 0003:5543:0047.000C: failed probing parameters: -71
[  451.065913][ T7067] uclogic: probe of 0003:5543:0047.000C failed with error -71
[  451.208886][ T7067] usb 5-1: USB disconnect, device number 9
[  451.215063][ T8088] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  451.288846][ T4639] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  451.303895][ T8088] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.815: bad orphan inode 17
[  451.315063][ T8088] EXT4-fs (loop3): Remounting filesystem read-only
[  451.321986][ T8088] ext4_test_bit(bit=16, block=4) = 1
[  451.327491][ T8088] is_bad_inode(inode)=0
[  451.331666][ T8088] NEXT_ORPHAN(inode)=2147418128
[  451.336606][ T8088] max_ino=32
[  451.339827][ T8088] i_nlink=0
[  451.343139][ T8088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  451.473469][ T4639] usb 6-1: Using ep0 maxpacket: 8
[  451.480933][ T4639] usb 6-1: config index 0 descriptor too short (expected 68, got 36)
[  451.516942][ T4639] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  451.543252][ T4639] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  451.673261][ T4639] usb 6-1: config 0 has no interface number 0
[  451.679439][ T4639] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 255, changing to 11
[  451.703266][ T4639] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 59391, setting to 1024
[  451.737391][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  451.745356][ T4639] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  451.773265][ T4639] usb 6-1: config 0 interface 52 has no altsetting 0
[  451.801383][ T4639] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=6d.3f
[  451.832670][ T4639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  451.899633][ T4639] usb 6-1: SerialNumber: syz
[  451.921360][ T4639] usb 6-1: config 0 descriptor??
[  452.152039][ T4639] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input11
[  452.203600][ T8090] loop7: detected capacity change from 0 to 32768
[  452.246315][ T8090] (syz.7.817,8090,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  452.292182][ T8090] (syz.7.817,8090,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  452.351432][ T8090] (syz.7.817,8090,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  452.383512][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  452.391491][   T22] usb 6-1: USB disconnect, device number 8
[  452.391615][    C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  452.424715][ T8090] JBD2: Ignoring recovery information on journal
[  452.558755][ T8090] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  452.582062][ T8098] loop6: detected capacity change from 0 to 32768
[  452.603468][ T8098] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.820 (8098)
[  452.653379][ T5925] usb 4-1: Using ep0 maxpacket: 16
[  452.667315][ T8098] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  452.667318][ T5925] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.667348][ T5925] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.687956][ T8098] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  452.768016][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0
[  452.768996][ T8098] BTRFS info (device loop6): using free space tree
[  452.790532][ T8090] (syz.7.817,8090,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  452.827534][ T8100] loop4: detected capacity change from 0 to 32768
[  452.835847][ T8090] (syz.7.817,8090,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  452.853361][ T5925] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[  452.884514][ T8090] (syz.7.817,8090,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  452.896888][ T8090] (syz.7.817,8090,1):ocfs2_quota_read:201 ERROR: status = -5
[  452.902044][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.951266][ T8090] Quota error (device loop7): find_next_id: Can't read quota tree block 5
[  452.981707][ T5925] usb 4-1: config 0 descriptor??
[  453.017435][ T8109] (syz.7.817,8109,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  453.031364][ T8090] (syz.7.817,8090,1):ocfs2_get_next_id:909 ERROR: status = -5
[  453.042065][ T8109] (syz.7.817,8109,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  453.051961][ T8098] BTRFS info (device loop6): enabling ssd optimizations
[  453.063381][ T8109] (syz.7.817,8109,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  453.072666][ T8109] (syz.7.817,8109,1):ocfs2_quota_read:201 ERROR: status = -5
[  453.084140][ T8100] XFS (loop4): Mounting V5 Filesystem
[  453.124743][ T8109] Quota error (device loop7): find_tree_dqentry: Can't read quota tree block 5
[  453.213797][ T8109] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  453.240641][ T8109] (syz.7.817,8109,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  453.258396][ T8100] XFS (loop4): Ending clean mount
[  453.284590][ T8135] loop5: detected capacity change from 0 to 2048
[  453.294805][ T8100] XFS (loop4): Quotacheck needed: Please wait.
[  453.304931][ T8109] (syz.7.817,8109,1):ocfs2_mknod:314 ERROR: status = -5
[  453.344292][ T8109] (syz.7.817,8109,1):ocfs2_mknod:502 ERROR: status = -5
[  453.359179][ T5841] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  453.392541][ T8100] XFS (loop4): Quotacheck: Done.
[  453.403686][ T8135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  453.417244][ T8109] (syz.7.817,8109,0):ocfs2_mkdir:659 ERROR: status = -5
[  453.490383][ T5925] wacom 0003:056A:00B1.000D: Unknown device_type for 'HID 056a:00b1'. Assuming pen.
[  453.504938][ T5925] wacom 0003:056A:00B1.000D: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.3-1/input0
[  453.546557][ T5925] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B1.000D/input/input12
[  453.554973][ T7266] ocfs2: Unmounting device (7,7) on (node local)
[  453.611092][ T4250] XFS (loop4): Unmounting Filesystem
[  453.795689][ T5925] usb 4-1: USB disconnect, device number 10
[  453.946700][ T4723] EXT4-fs (loop5): unmounting filesystem.
[  454.038641][ T8138] fido_id[8138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  454.714264][ T8150] loop6: detected capacity change from 0 to 512
[  454.766781][ T8150] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  454.948889][ T8150] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.825: bad orphan inode 17
[  454.962076][ T8150] EXT4-fs (loop6): Remounting filesystem read-only
[  454.968918][ T8150] ext4_test_bit(bit=16, block=4) = 1
[  454.974382][ T8150] is_bad_inode(inode)=0
[  454.978608][ T8150] NEXT_ORPHAN(inode)=2147418128
[  454.983594][ T8150] max_ino=32
[  454.986834][ T8150] i_nlink=0
[  454.990787][ T8150] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  455.525349][   T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  455.669127][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  455.733607][   T22] usb 4-1: Using ep0 maxpacket: 16
[  455.956730][ T8160] loop7: detected capacity change from 0 to 512
[  455.972417][ T8160] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  456.104741][ T8160] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.832: bad orphan inode 17
[  456.116953][ T8160] EXT4-fs (loop7): Remounting filesystem read-only
[  456.123614][ T8160] ext4_test_bit(bit=16, block=4) = 1
[  456.129011][ T8160] is_bad_inode(inode)=0
[  456.133745][ T8160] NEXT_ORPHAN(inode)=2147418128
[  456.138655][ T8160] max_ino=32
[  456.141915][ T8160] i_nlink=0
[  456.146047][ T8160] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  456.464123][   T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.482999][ T8163] loop6: detected capacity change from 0 to 512
[  456.493126][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  456.520714][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  456.531144][   T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  456.542306][   T22] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  456.686794][ T7266] EXT4-fs (loop7): unmounting filesystem.
[  456.687163][   T22] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  456.702856][   T22] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  456.711430][   T22] usb 4-1: Manufacturer: syz
[  456.718860][ T8163] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  456.727521][   T22] usb 4-1: config 0 descriptor??
[  456.801050][ T8163] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.973305][ T4639] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  457.261877][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  457.519347][ T8177] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.899960][ T4639] usb 6-1: Using ep0 maxpacket: 32
[  457.905210][   T22] rc_core: IR keymap rc-hauppauge not found
[  457.918105][ T5628] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  457.930131][   T22] Registered IR keymap rc-empty
[  457.937473][ T4639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.949344][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  457.956840][ T4639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.977259][ T4639] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  457.986814][ T4639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.995324][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.043923][ T4639] usb 6-1: config 0 descriptor??
[  458.060732][   T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  458.110476][   T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15
[  458.127245][ T5628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.163125][ T5628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.190265][ T5628] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  458.251018][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.276394][ T5628] usb 8-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[  458.292879][ T8181] loop4: detected capacity change from 0 to 4096
[  458.296071][ T5628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.315164][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.329815][ T5628] usb 8-1: config 0 descriptor??
[  458.363383][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.404557][ T8186] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  458.423452][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.461971][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.492979][ T4639] ft260 0003:0403:6030.000E: item fetching failed at offset 0/2
[  458.513331][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.533929][ T4639] ft260 0003:0403:6030.000E: failed to parse HID
[  458.540388][ T4639] ft260: probe of 0003:0403:6030.000E failed with error -22
[  458.547865][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.623290][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.653679][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.703366][   T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  458.734668][ T4639] usb 6-1: USB disconnect, device number 9
[  458.761942][ T8191] loop3: detected capacity change from 0 to 256
[  458.762808][   T22] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  458.785320][ T5628] betop 0003:11C0:5506.000F: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.7-1/input0
[  458.804242][ T5628] betop 0003:11C0:5506.000F: no inputs found
[  458.810974][   T22] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  458.850101][   T22] usb 4-1: USB disconnect, device number 11
[  458.973502][ T5925] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  459.002527][ T5628] usb 8-1: USB disconnect, device number 6
[  459.128242][ T8192] fido_id[8192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  459.183526][ T5925] usb 5-1: Using ep0 maxpacket: 16
[  459.196505][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  459.214846][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  459.227526][ T5925] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  459.238132][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.250611][ T5925] usb 5-1: config 0 descriptor??
[  459.411077][ T8197] loop6: detected capacity change from 0 to 512
[  459.429356][ T8197] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  459.468397][ T8197] EXT4-fs (loop6): 1 orphan inode deleted
[  459.478864][ T8197] EXT4-fs (loop6): 1 truncate cleaned up
[  459.489987][ T8197] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  461.184038][ T8208] loop3: detected capacity change from 0 to 512
[  461.411666][ T8208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  461.473774][ T4257] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  461.534550][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  461.572693][ T5925] lenovo 0003:17EF:6009.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0
[  461.597692][ T5925] usb 5-1: USB disconnect, device number 10
[  461.874449][ T8208] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.843: bad orphan inode 17
[  461.886453][ T8208] EXT4-fs (loop3): Remounting filesystem read-only
[  461.893008][ T8208] ext4_test_bit(bit=16, block=4) = 1
[  461.898491][ T8208] is_bad_inode(inode)=0
[  461.902663][ T8208] NEXT_ORPHAN(inode)=2147418128
[  461.907574][ T8208] max_ino=32
[  461.910796][ T8208] i_nlink=0
[  461.914545][ T8208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  461.965148][ T4257] usb 6-1: Using ep0 maxpacket: 16
[  462.075672][ T4257] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10
[  462.754538][ T8219] loop7: detected capacity change from 0 to 512
[  462.855022][ T8219] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  462.864144][ T4257] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  462.870370][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  462.883819][ T8219] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.845: bad orphan inode 17
[  462.908186][ T8219] EXT4-fs (loop7): Remounting filesystem read-only
[  462.914875][ T8219] ext4_test_bit(bit=16, block=4) = 1
[  462.920199][ T8219] is_bad_inode(inode)=0
[  462.924456][ T8219] NEXT_ORPHAN(inode)=2147418128
[  462.929330][ T8219] max_ino=32
[  462.932547][ T8219] i_nlink=0
[  462.935980][ T8219] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  463.028854][ T4257] usb 6-1: string descriptor 0 read error: -71
[  463.045881][ T4257] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  463.055225][ T4257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.065929][ T4257] usb 6-1: can't set config #1, error -71
[  463.077201][ T4257] usb 6-1: USB disconnect, device number 10
[  463.409312][ T7266] EXT4-fs (loop7): unmounting filesystem.
[  463.543433][ T4639] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  463.612092][ T8227] fido_id[8227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  463.763394][ T4639] usb 5-1: Using ep0 maxpacket: 8
[  463.770575][ T4639] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  463.793225][ T4639] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  463.813419][ T4639] usb 5-1: config 0 interface 0 has no altsetting 0
[  463.820105][ T4639] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  463.843280][ T4639] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.870987][ T4639] usb 5-1: config 0 descriptor??
[  464.010902][ T8221] loop6: detected capacity change from 0 to 32768
[  464.095225][ T8221] JBD2: Ignoring recovery information on journal
[  464.166077][ T8221] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  464.205265][ T8221] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0
[  464.232582][ T8230] loop7: detected capacity change from 0 to 32768
[  464.232609][ T8221] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  464.254403][ T8230] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.849 (8230)
[  464.322337][ T4639] dragonrise 0003:0079:0006.0011: item fetching failed at offset 2/5
[  464.339656][ T8221] OCFS2: File system is now read-only.
[  464.351835][ T4639] dragonrise 0003:0079:0006.0011: parse failed
[  464.401037][ T8221] (syz.6.844,8221,1):ocfs2_trim_mainbm:7611 ERROR: status = -30
[  464.421747][ T4639] dragonrise: probe of 0003:0079:0006.0011 failed with error -22
[  464.543504][ T4639] usb 5-1: USB disconnect, device number 11
[  464.725712][ T5841] ocfs2: Unmounting device (7,6) on (node local)
[  465.314907][ T8234] loop5: detected capacity change from 0 to 131072
[  465.340724][ T8234] F2FS-fs (loop5): Invalid log sectors per block(570425347) log sectorsize(9)
[  465.340781][ T8230] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  465.350036][ T8234] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  465.396240][ T8230] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  465.406404][ T8234] F2FS-fs (loop5): invalid crc value
[  465.419920][ T8230] BTRFS info (device loop7): turning off barriers
[  465.430017][ T8242] loop4: detected capacity change from 0 to 512
[  465.440377][ T8244] loop3: detected capacity change from 0 to 256
[  465.447289][ T8230] BTRFS info (device loop7): max_inline at 0
[  465.455942][ T8230] BTRFS info (device loop7): enabling all of the rescue options
[  465.473411][ T8230] BTRFS info (device loop7): ignoring data csums
[  465.492662][ T8234] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  465.509610][ T8244] exfat: Deprecated parameter 'namecase'
[  465.516194][ T8230] BTRFS info (device loop7): ignoring bad roots
[  465.522488][ T8230] BTRFS info (device loop7): disabling log replay at mount time
[  465.548519][ T8234] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  465.570986][ T8234] F2FS-fs (loop5): Bad quota inode 2:50331648
[  465.577158][ T8234] F2FS-fs (loop5): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  465.587489][ T8234] F2FS-fs (loop5): Cannot turn on quotas: error -22
[  465.596217][ T8242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  465.608672][ T8234] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  465.615859][ T8234] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b
[  465.633434][ T8244] exfat: Deprecated parameter 'namecase'
[  465.639871][ T8230] BTRFS info (device loop7): force zlib compression, level 3
[  465.647389][ T8242] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.648192][ T8230] BTRFS info (device loop7): allowing degraded mounts
[  465.665644][ T8230] BTRFS info (device loop7): enabling ssd optimizations
[  465.672637][ T8230] BTRFS info (device loop7): using spread ssd allocation scheme
[  465.681061][ T8230] BTRFS info (device loop7): using free space tree
[  465.686692][ T8244] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d)
[  465.688757][ T8230] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512
[  465.713316][ T5925] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  465.723563][ T8230] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512
[  465.763397][ T8230] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  465.830006][ T8230] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512
[  465.893876][ T8230] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  465.929134][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  465.935379][ T5925] usb 7-1: Using ep0 maxpacket: 32
[  465.942217][ T8230] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512
[  465.979554][ T5925] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  466.028432][ T8230] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  466.039193][ T5925] usb 7-1: config 0 has no interface number 0
[  466.058195][ T8230] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  466.067827][ T5925] usb 7-1: config 0 interface 12 has no altsetting 0
[  466.081269][ T8230] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[  466.124755][ T5925] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  466.151788][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.160843][ T5925] usb 7-1: Product: syz
[  466.165768][ T5925] usb 7-1: Manufacturer: syz
[  466.170782][ T4650] BTRFS warning (device loop7: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1
[  466.171103][ T5925] usb 7-1: SerialNumber: syz
[  466.258189][ T5925] usb 7-1: config 0 descriptor??
[  466.388039][ T8273] loop4: detected capacity change from 0 to 256
[  466.446019][ T7266] BTRFS info (device loop7: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  466.636662][ T8273] FAT-fs (loop4): Directory bread(block 64) failed
[  466.663452][ T8277] sp0: Synchronizing with TNC
[  466.688662][ T8273] FAT-fs (loop4): Directory bread(block 65) failed
[  466.787002][ T8273] FAT-fs (loop4): Directory bread(block 66) failed
[  466.794160][ T8273] FAT-fs (loop4): Directory bread(block 67) failed
[  466.816418][ T8273] FAT-fs (loop4): Directory bread(block 68) failed
[  466.823228][ T8273] FAT-fs (loop4): Directory bread(block 69) failed
[  466.897269][ T8273] FAT-fs (loop4): Directory bread(block 70) failed
[  466.966647][ T8273] FAT-fs (loop4): Directory bread(block 71) failed
[  466.992561][ T8273] FAT-fs (loop4): Directory bread(block 72) failed
[  466.999598][ T8273] FAT-fs (loop4): Directory bread(block 73) failed
[  467.404429][ T5925] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  467.411975][ T5925] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  467.443228][ T5925] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  467.450950][ T5925] f81534: probe of 7-1:0.12 failed with error -71
[  467.500016][ T5925] usb 7-1: USB disconnect, device number 8
[  467.676754][ T4708] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by udevd (4708)
[  469.397177][ T8285] loop3: detected capacity change from 0 to 4096
[  469.517842][ T8285] ntfs3: loop3: ino=3, Correct links count -> 2.
[  469.653416][   T14] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  469.749837][ T8285] ntfs3: loop3: failed to convert "0080" to cp874
[  469.793575][ T8285] ntfs3: loop3: failed to convert name for inode 1e.
[  469.853535][   T14] usb 8-1: Using ep0 maxpacket: 16
[  469.869971][   T14] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10
[  469.918338][   T14] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  469.978439][   T14] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  470.033291][   T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.073462][   T14] usb 8-1: Product: syz
[  470.077687][   T14] usb 8-1: Manufacturer: syz
[  470.082313][   T14] usb 8-1: SerialNumber: syz
[  470.183023][ T8306] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  470.190476][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  470.295505][ T8306] vhci_hcd vhci_hcd.0: Device attached
[  470.463260][   T22] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  470.493452][ T7067] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  470.543245][ T4299] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  470.663241][   T22] usb 4-1: Using ep0 maxpacket: 16
[  470.673999][   T22] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  470.689556][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.698668][ T7067] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  470.705219][   T22] usb 4-1: Product: syz
[  470.718389][ T7067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.719461][   T22] usb 4-1: Manufacturer: syz
[  470.735508][   T22] usb 4-1: SerialNumber: syz
[  470.742660][   T22] usb 4-1: config 0 descriptor??
[  470.755020][   T22] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  470.765040][   T22] usb 4-1: Detected FT232H
[  470.812353][ T7067] usb 5-1: Product: syz
[  470.837167][ T7067] usb 5-1: Manufacturer: syz
[  470.866274][ T7067] usb 5-1: SerialNumber: syz
[  470.910233][ T8317] netlink: 228 bytes leftover after parsing attributes in process `syz.5.870'.
[  470.949093][ T7067] usb 5-1: config 0 descriptor??
[  470.973447][ T8319] loop6: detected capacity change from 0 to 256
[  471.035238][ T7067] usbsevseg 5-1:0.0: USB 7 Segment device now attached
[  471.038583][   T22] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  471.056895][ T8321] loop5: detected capacity change from 0 to 64
[  471.063746][   T22] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  471.071273][   T22] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  471.090656][   T22] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  471.096967][ T8307] vhci_hcd: connection closed
[  471.114661][ T5132] vhci_hcd: stop threads
[  471.126124][   T22] usb 4-1: USB disconnect, device number 12
[  471.136035][ T5132] vhci_hcd: release socket
[  471.147064][   T22] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  471.156713][ T5132] vhci_hcd: disconnect device
[  471.162372][   T22] ftdi_sio 4-1:0.0: device disconnected
[  471.183399][ T4299] usb 39-1: device descriptor read/64, error -71
[  471.254117][ T7067] usb 5-1: USB disconnect, device number 12
[  471.261159][ T7067] usbsevseg 5-1:0.0: USB 7 Segment now disconnected
[  471.385709][ T8324] loop5: detected capacity change from 0 to 64
[  471.393416][ T4299] vhci_hcd: vhci_device speed not set
[  471.572130][   T14] cdc_ncm 8-1:1.0: bind() failure
[  471.614348][   T14] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  471.637395][   T14] cdc_ncm 8-1:1.1: bind() failure
[  471.704799][   T14] usb 8-1: USB disconnect, device number 7
[  472.046967][ T8333] loop4: detected capacity change from 0 to 1024
[  472.083704][ T8333] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  472.123391][ T8333] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  472.132630][ T8333] EXT4-fs (loop4): orphan cleanup on readonly fs
[  472.143823][ T8333] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.877: Freeing blocks not in datazone - block = 0, count = 4096
[  472.163272][   T22] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  472.253729][ T8328] loop5: detected capacity change from 0 to 32768
[  472.280555][ T8328] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.875 (8328)
[  472.307340][ T8333] EXT4-fs (loop4): Remounting filesystem read-only
[  472.325576][ T8328] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  472.331654][ T8333] EXT4-fs (loop4): 1 orphan inode deleted
[  472.353371][   T22] usb 7-1: Using ep0 maxpacket: 32
[  472.361989][ T8328] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  472.372943][   T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.378293][ T8333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  472.403707][ T8328] BTRFS info (device loop5): using free space tree
[  472.410424][   T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.439313][   T22] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  472.478902][   T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.500102][   T22] usb 7-1: config 0 descriptor??
[  472.515013][   T22] hub 7-1:0.0: USB hub found
[  472.717398][   T22] hub 7-1:0.0: config failed, hub has too many ports! (err -19)
[  472.734382][ T8328] BTRFS info (device loop5): enabling ssd optimizations
[  472.767134][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  472.930805][   T22] usbhid 7-1:0.0: can't add hid device: -71
[  472.940971][   T22] usbhid: probe of 7-1:0.0 failed with error -71
[  472.976924][ T4723] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  473.004722][   T22] usb 7-1: USB disconnect, device number 9
[  473.045018][ T7067] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  473.233497][ T7067] usb 8-1: Using ep0 maxpacket: 32
[  473.246174][ T7067] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  473.290599][ T7067] usb 8-1: config 0 has no interface number 0
[  473.313480][ T7067] usb 8-1: config 0 interface 12 has no altsetting 0
[  473.332955][ T7067] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  473.387217][ T7067] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.421176][ T7067] usb 8-1: Product: syz
[  473.438040][ T7067] usb 8-1: Manufacturer: syz
[  473.452286][ T7067] usb 8-1: SerialNumber: syz
[  473.480631][ T7067] usb 8-1: config 0 descriptor??
[  475.260186][ T8375] sp0: Synchronizing with TNC
[  475.263331][ T5925] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  475.324240][ T7067] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  475.342071][ T7067] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  475.361071][ T7067] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  475.373310][ T7067] f81534: probe of 8-1:0.12 failed with error -71
[  475.391708][ T7067] usb 8-1: USB disconnect, device number 8
[  475.429428][ T4619] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  475.453268][ T5925] usb 4-1: Using ep0 maxpacket: 32
[  475.464858][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.483250][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.493560][ T5925] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[  475.496158][ T8364] loop5: detected capacity change from 0 to 32768
[  475.502606][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.519023][ T5925] usb 4-1: config 0 descriptor??
[  475.549137][ T8364] XFS (loop5): Mounting V5 Filesystem
[  475.591440][ T8364] XFS (loop5): Ending clean mount
[  475.603437][ T8364] XFS (loop5): Quotacheck needed: Please wait.
[  475.623453][ T4619] usb 7-1: Using ep0 maxpacket: 16
[  475.636435][ T4619] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10
[  475.652539][ T4619] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  475.675857][  T127] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  475.684666][ T4619] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  475.694485][ T4619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.702517][ T4619] usb 7-1: Product: syz
[  475.707135][ T4619] usb 7-1: Manufacturer: syz
[  475.711777][ T4619] usb 7-1: SerialNumber: syz
[  475.712810][ T8364] XFS (loop5): Quotacheck: Done.
[  475.863842][ T4723] XFS (loop5): Unmounting Filesystem
[  475.883466][  T127] usb 5-1: Using ep0 maxpacket: 16
[  475.904188][  T127] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  475.944716][ T5925] apple 0003:05AC:029C.0012: unbalanced delimiter at end of report description
[  475.954017][  T127] usb 5-1: config 0 has no interface number 0
[  475.954060][  T127] usb 5-1: config 0 interface 255 altsetting 121 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.954090][  T127] usb 5-1: config 0 interface 255 altsetting 121 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.954143][  T127] usb 5-1: config 0 interface 255 has no altsetting 0
[  475.954177][  T127] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00
[  475.954209][  T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.994662][  T127] usb 5-1: config 0 descriptor??
[  475.999343][ T5925] apple 0003:05AC:029C.0012: parse failed
[  476.016854][ T5925] apple: probe of 0003:05AC:029C.0012 failed with error -22
[  476.270936][ T5630] usb 4-1: USB disconnect, device number 13
[  476.374470][    C1] hrtimer: interrupt took 78891 ns
[  476.697677][  T127] uclogic 0003:28BD:0934.0013: interface is invalid, ignoring
[  477.045055][   T14] usb 5-1: USB disconnect, device number 13
[  477.349687][ T4619] cdc_ncm 7-1:1.0: bind() failure
[  477.364103][ T4619] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  477.381417][ T4619] cdc_ncm 7-1:1.1: bind() failure
[  477.395822][ T4619] usb 7-1: USB disconnect, device number 10
[  477.882473][ T8393] loop3: detected capacity change from 0 to 32768
[  477.961202][ T8393] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  477.999979][   T27] audit: type=1800 audit(1747770426.411:8): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.891" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  478.063298][   T14] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  478.158791][ T4266] ocfs2: Unmounting device (7,3) on (node local)
[  478.255389][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.283249][   T14] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  478.323086][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.372685][   T14] usb 5-1: config 0 descriptor??
[  478.653849][ T8408] overlayfs: unrecognized mount option "U'" or missing value
[  478.882769][   T14] holtek 0003:1241:5015.0014: invalid report_size 23041
[  478.913277][   T14] holtek 0003:1241:5015.0014: item 0 2 1 7 parsing failed
[  478.941306][   T14] holtek 0003:1241:5015.0014: parse failed
[  478.968743][   T14] holtek: probe of 0003:1241:5015.0014 failed with error -22
[  479.102988][   T14] usb 5-1: USB disconnect, device number 14
[  479.475286][ T8404] loop5: detected capacity change from 0 to 32768
[  479.494000][ T8404] XFS: ikeep mount option is deprecated.
[  479.562515][ T8404] XFS (loop5): Mounting V5 Filesystem
[  479.836333][ T8404] XFS (loop5): Ending clean mount
[  479.885622][ T8436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.903'.
[  479.894807][ T8436] netlink: 2 bytes leftover after parsing attributes in process `syz.4.903'.
[  479.903560][ T8404] XFS (loop5): Quotacheck needed: Please wait.
[  480.614852][ T8404] XFS (loop5): Quotacheck: Done.
[  480.781488][ T8440] loop4: detected capacity change from 0 to 512
[  480.801488][ T4723] XFS (loop5): Unmounting Filesystem
[  480.821698][ T8416] loop7: detected capacity change from 0 to 40427
[  480.856786][ T8421] loop3: detected capacity change from 0 to 32768
[  480.864119][ T8440] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  480.897006][ T8440] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  480.905843][ T8416] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  480.914131][ T8416] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  480.927517][ T8416] F2FS-fs (loop7): invalid crc value
[  480.932156][ T8440] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  480.964137][ T8440] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  480.976187][ T8440] System zones: 0-2, 18-18, 34-35
[  480.989782][ T8440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  481.039704][ T4300] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  481.062405][ T8416] F2FS-fs (loop7): Found nat_bits in checkpoint
[  481.102538][ T8421] XFS (loop3): Mounting V5 Filesystem
[  481.221112][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  481.235269][ T4300] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  481.263023][ T8416] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  481.266483][ T4300] usb 7-1: config 0 interface 0 has no altsetting 0
[  481.280906][ T8416] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  481.330369][ T4300] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  481.349525][ T4300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.448570][ T4300] usb 7-1: config 0 descriptor??
[  481.492465][ T8421] XFS (loop3): Ending clean mount
[  481.524187][ T8421] XFS (loop3): Quotacheck needed: Please wait.
[  481.661458][ T8421] XFS (loop3): Quotacheck: Done.
[  481.725363][ T8462] loop7: detected capacity change from 0 to 256
[  482.028355][ T8465] loop4: detected capacity change from 0 to 512
[  482.041321][ T8465] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  482.190139][ T4300] wacom 0003:056A:0331.0015: unknown main item tag 0x0
[  482.236301][ T8465] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.907: bad orphan inode 17
[  482.249079][ T8465] EXT4-fs (loop4): Remounting filesystem read-only
[  482.255763][ T8465] ext4_test_bit(bit=16, block=4) = 1
[  482.261166][ T8465] is_bad_inode(inode)=0
[  482.265442][ T8465] NEXT_ORPHAN(inode)=2147418128
[  482.270354][ T8465] max_ino=32
[  482.273696][ T8465] i_nlink=0
[  482.279403][ T8465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  482.470792][ T4300] wacom 0003:056A:0331.0015: unknown main item tag 0x0
[  482.501318][ T4300] wacom 0003:056A:0331.0015: unknown main item tag 0x0
[  482.513794][ T8462] FAT-fs (loop7): Directory bread(block 64) failed
[  482.531590][ T4300] wacom 0003:056A:0331.0015: unknown main item tag 0x0
[  482.562109][ T8462] FAT-fs (loop7): Directory bread(block 65) failed
[  482.582445][ T4300] wacom 0003:056A:0331.0015: unknown main item tag 0x0
[  482.618365][ T8468] loop5: detected capacity change from 0 to 2048
[  482.646495][ T8468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  482.695052][ T8462] FAT-fs (loop7): Directory bread(block 66) failed
[  482.702140][ T8462] FAT-fs (loop7): Directory bread(block 67) failed
[  482.709175][ T4300] wacom 0003:056A:0331.0015: unknown main item tag 0x0
[  482.716163][ T4300] wacom 0003:056A:0331.0015: unknown main item tag 0x0
[  482.724190][ T8462] FAT-fs (loop7): Directory bread(block 68) failed
[  482.730771][   T27] audit: type=1800 audit(1747770431.141:9): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.906" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  482.739459][ T8462] FAT-fs (loop7): Directory bread(block 69) failed
[  482.762128][ T4300] wacom 0003:056A:0331.0015: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.6-1/input0
[  482.784241][ T4266] XFS (loop3): Unmounting Filesystem
[  482.837194][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  482.893372][ T8462] FAT-fs (loop7): Directory bread(block 70) failed
[  482.899968][ T8462] FAT-fs (loop7): Directory bread(block 71) failed
[  482.904795][ T4300] usb 7-1: USB disconnect, device number 11
[  482.946397][ T8462] FAT-fs (loop7): Directory bread(block 72) failed
[  482.994284][ T8462] FAT-fs (loop7): Directory bread(block 73) failed
[  483.245564][ T8473] tipc: Started in network mode
[  483.303417][ T1169] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  483.329543][ T8473] tipc: Node identity 000000003a0000000079940000000001, cluster identity 4711
[  483.338866][ T8473] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  483.545989][ T8462] overlayfs: unrecognized mount option "U'" or missing value
[  483.585027][ T1169] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  483.595999][ T1169] usb 5-1: config 0 has no interface number 0
[  483.665227][ T1169] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  483.702777][ T8470] fido_id[8470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  483.740449][ T1169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.783250][ T1169] usb 5-1: Product: syz
[  483.787471][ T1169] usb 5-1: Manufacturer: syz
[  483.811136][ T1169] usb 5-1: SerialNumber: syz
[  483.823522][ T5630] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  483.851062][ T1169] usb 5-1: config 0 descriptor??
[  484.093105][ T1169] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  484.145131][ T1169] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  484.162878][ T1169] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  484.163279][ T5630] usb 7-1: Using ep0 maxpacket: 16
[  484.171778][ T1169] usb 5-1: media controller created
[  484.184969][ T5630] usb 7-1: config 0 has no interfaces?
[  484.190608][ T5630] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  484.228352][ T5630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.369546][ T5630] usb 7-1: config 0 descriptor??
[  484.865016][ T5630] usb 7-1: USB disconnect, device number 12
[  485.027577][ T1169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  485.114198][ T1169] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  485.180221][ T1169] usb 5-1: USB disconnect, device number 15
[  485.390209][ T8494] loop7: detected capacity change from 0 to 8192
[  485.442661][ T8494] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  485.477695][ T8494] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  485.511111][ T8494] REISERFS (device loop7): using ordered data mode
[  485.602607][ T8494] reiserfs: using flush barriers
[  485.624686][ T8494] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  485.699145][ T8500] loop3: detected capacity change from 0 to 64
[  485.715331][ T8494] REISERFS (device loop7): checking transaction log (loop7)
[  485.731658][ T8482] loop5: detected capacity change from 0 to 65536
[  485.786453][ T8494] REISERFS (device loop7): Using r5 hash to sort names
[  485.814141][ T8494] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  486.049809][ T8482] XFS (loop5): Mounting V5 Filesystem
[  486.268630][ T8515] loop4: detected capacity change from 0 to 512
[  486.283009][ T8515] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  486.508829][ T8515] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.920: bad orphan inode 17
[  486.528096][ T8515] EXT4-fs (loop4): Remounting filesystem read-only
[  486.534820][ T8515] ext4_test_bit(bit=16, block=4) = 1
[  486.540203][ T8515] is_bad_inode(inode)=0
[  486.544434][ T8515] NEXT_ORPHAN(inode)=2147418128
[  486.549624][ T8515] max_ino=32
[  486.552872][ T8515] i_nlink=0
[  486.556942][ T8515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  486.851616][ T8482] XFS (loop5): Ending clean mount
[  487.545117][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  487.551536][ T4723] XFS (loop5): Unmounting Filesystem
[  487.895638][ T8535] loop6: detected capacity change from 0 to 64
[  488.043267][   T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  488.069653][ T8537] loop3: detected capacity change from 0 to 4096
[  488.093362][ T1169] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  488.255056][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.276446][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.286754][ T1169] usb 8-1: Using ep0 maxpacket: 32
[  488.304889][ T1169] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  488.317158][ T8540] loop6: detected capacity change from 0 to 1024
[  488.323444][ T1169] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.331784][   T14] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  488.357447][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.373989][ T1169] usb 8-1: config 0 descriptor??
[  488.385779][ T8540] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  488.398619][ T1169] gspca_main: nw80x-2.14.0 probing 055f:d001
[  488.418691][   T14] usb 5-1: config 0 descriptor??
[  488.519322][ T8540] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  488.609860][ T8540] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  488.790585][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  488.923487][ T4300] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  489.043315][ T5630] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  489.044870][   T14] usb 5-1: language id specifier not provided by device, defaulting to English
[  489.125911][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  489.143304][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 544, setting to 64
[  489.173311][ T4300] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00
[  489.183216][ T4300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.197894][ T4300] usb 6-1: config 0 descriptor??
[  489.203078][ T1169] gspca_nw80x: reg_r err -71
[  489.203615][ T8545] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  489.213358][ T1169] nw80x: probe of 8-1:0.0 failed with error -71
[  489.248764][   T14] uclogic 0003:256C:006D.0016: failed retrieving Huion firmware version: -71
[  489.262736][ T5630] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.263777][ T1169] usb 8-1: USB disconnect, device number 9
[  489.279158][   T14] uclogic 0003:256C:006D.0016: failed probing parameters: -71
[  489.286251][ T5630] usb 4-1: config 0 interface 0 has no altsetting 0
[  489.289450][   T14] uclogic: probe of 0003:256C:006D.0016 failed with error -71
[  489.317634][ T5630] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  489.320739][   T14] usb 5-1: USB disconnect, device number 16
[  489.353240][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.382162][ T5630] usb 4-1: Product: syz
[  489.386515][ T5630] usb 4-1: Manufacturer: syz
[  489.391365][ T5630] usb 4-1: SerialNumber: syz
[  489.409280][ T5630] usb 4-1: config 0 descriptor??
[  489.424601][ T5630] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  489.444736][ T5630] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  489.453858][ T8551] loop6: detected capacity change from 0 to 32768
[  489.467224][ T5630] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  489.479586][ T5630] usb 4-1: media controller created
[  489.528606][ T5630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  489.563323][ T8551] XFS (loop6): Mounting V5 Filesystem
[  489.674763][ T5630] DVB: Unable to find symbol tda10046_attach()
[  489.677902][ T8551] XFS (loop6): Ending clean mount
[  489.681317][ T5630] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  489.695284][ T5630] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  489.729981][ T8551] XFS (loop6): Quotacheck needed: Please wait.
[  489.871113][ T8551] XFS (loop6): Quotacheck: Done.
[  489.906091][ T4300] usb 6-1: string descriptor 0 read error: -71
[  489.926059][ T4300] uclogic 0003:5543:006E.0017: failed retrieving string descriptor #200: -71
[  489.951251][ T4300] uclogic 0003:5543:006E.0017: failed retrieving pen parameters: -71
[  489.970089][ T4300] uclogic 0003:5543:006E.0017: failed probing pen v2 parameters: -71
[  489.987434][ T8565] loop7: detected capacity change from 0 to 256
[  489.994161][ T4300] uclogic 0003:5543:006E.0017: failed probing parameters: -71
[  490.001754][ T4300] uclogic: probe of 0003:5543:006E.0017 failed with error -71
[  490.048827][ T8565] FAT-fs (loop7): Directory bread(block 64) failed
[  490.070966][ T4300] usb 6-1: USB disconnect, device number 11
[  490.079921][ T8565] FAT-fs (loop7): Directory bread(block 65) failed
[  490.097538][ T8565] FAT-fs (loop7): Directory bread(block 66) failed
[  490.113296][ T8565] FAT-fs (loop7): Directory bread(block 67) failed
[  490.119997][ T8565] FAT-fs (loop7): Directory bread(block 68) failed
[  490.127177][ T5841] XFS (loop6): Unmounting Filesystem
[  490.173271][ T8565] FAT-fs (loop7): Directory bread(block 69) failed
[  490.179938][ T8565] FAT-fs (loop7): Directory bread(block 70) failed
[  490.254719][ T8565] FAT-fs (loop7): Directory bread(block 71) failed
[  490.261441][ T8565] FAT-fs (loop7): Directory bread(block 72) failed
[  490.300739][ T8565] FAT-fs (loop7): Directory bread(block 73) failed
[  490.330516][ T5630] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71
[  490.348887][ T5630] usb 4-1: USB disconnect, device number 14
[  490.373317][  T127] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  490.527612][ T8567] overlayfs: unrecognized mount option "U'" or missing value
[  490.589241][  T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  490.702918][  T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  490.827911][  T127] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[  490.913567][  T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.950055][ T8569] loop5: detected capacity change from 0 to 256
[  490.987049][  T127] usb 5-1: config 0 descriptor??
[  491.014596][ T8569] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  491.045790][ T8571] loop6: detected capacity change from 0 to 512
[  491.063266][ T8571] EXT4-fs: Ignoring removed mblk_io_submit option
[  491.069832][ T8571] EXT4-fs: Ignoring removed mblk_io_submit option
[  491.117466][ T8571] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  491.192950][ T8571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002]
[  491.245301][ T8571] System zones: 1-12
[  491.269152][ T8571] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.936: corrupted in-inode xattr
[  491.340381][ T8571] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.936: couldn't read orphan inode 15 (err -117)
[  491.379715][ T8571] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  491.415392][  T127] hid-generic 0003:05AC:4262.0018: unbalanced delimiter at end of report description
[  491.444496][  T127] hid-generic: probe of 0003:05AC:4262.0018 failed with error -22
[  491.565409][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  491.622579][ T7067] usb 5-1: USB disconnect, device number 17
[  491.633762][  T127] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  491.837218][ T8587] program syz.5.942 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  491.856694][  T127] usb 4-1: Using ep0 maxpacket: 16
[  491.870894][  T127] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  491.886564][  T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.902535][  T127] usb 4-1: Product: syz
[  491.911515][  T127] usb 4-1: Manufacturer: syz
[  491.921824][  T127] usb 4-1: SerialNumber: syz
[  491.949522][  T127] usb 4-1: config 0 descriptor??
[  492.229608][ T8594] loop7: detected capacity change from 0 to 1024
[  492.431332][  T127] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  492.444890][  T127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  492.454872][  T127] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  492.463271][  T127] usb 4-1: media controller created
[  492.474394][ T8597] loop4: detected capacity change from 0 to 256
[  492.482021][  T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  493.139864][ T8597] FAT-fs (loop4): Directory bread(block 64) failed
[  493.156200][  T127] zl10353_read_register: readreg error (reg=127, ret==0)
[  493.193309][ T8597] FAT-fs (loop4): Directory bread(block 65) failed
[  493.210210][  T127] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  493.239691][ T8597] FAT-fs (loop4): Directory bread(block 66) failed
[  493.303350][ T8597] FAT-fs (loop4): Directory bread(block 67) failed
[  493.310464][ T8597] FAT-fs (loop4): Directory bread(block 68) failed
[  493.310563][  T127] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  493.371489][ T8597] FAT-fs (loop4): Directory bread(block 69) failed
[  493.398493][ T8597] FAT-fs (loop4): Directory bread(block 70) failed
[  493.407721][ T8597] FAT-fs (loop4): Directory bread(block 71) failed
[  493.412671][  T127] usb 4-1: USB disconnect, device number 15
[  493.414472][ T8597] FAT-fs (loop4): Directory bread(block 72) failed
[  493.447369][ T8597] FAT-fs (loop4): Directory bread(block 73) failed
[  493.477473][  T127] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  493.535618][ T8589] loop6: detected capacity change from 0 to 32768
[  493.554874][ T4650] hfsplus: b-tree write err: -5, ino 4
[  493.698776][ T8604] overlayfs: unrecognized mount option "U'" or missing value
[  493.883364][  T127] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  493.910310][ T8607] loop7: detected capacity change from 0 to 256
[  494.064873][ T8607] FAT-fs (loop7): Directory bread(block 64) failed
[  494.073516][  T127] usb 4-1: Using ep0 maxpacket: 32
[  494.096358][  T127] usb 4-1: config index 0 descriptor too short (expected 191, got 36)
[  494.143370][  T127] usb 4-1: config 0 has an invalid interface number: 221 but max is 0
[  494.146063][ T8607] FAT-fs (loop7): Directory bread(block 65) failed
[  494.172718][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  494.180615][ T8607] FAT-fs (loop7): Directory bread(block 66) failed
[  494.191766][ T8607] FAT-fs (loop7): Directory bread(block 67) failed
[  494.198661][ T8607] FAT-fs (loop7): Directory bread(block 68) failed
[  494.205895][ T8607] FAT-fs (loop7): Directory bread(block 69) failed
[  494.212649][ T8607] FAT-fs (loop7): Directory bread(block 70) failed
[  494.219686][ T8607] FAT-fs (loop7): Directory bread(block 71) failed
[  494.226444][  T127] usb 4-1: config 0 has no interface number 0
[  494.226477][  T127] usb 4-1: config 0 interface 221 has no altsetting 0
[  494.226511][  T127] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  494.226537][  T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.235801][  T127] usb 4-1: config 0 descriptor??
[  494.245232][ T1169] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  494.292286][ T8607] FAT-fs (loop7): Directory bread(block 72) failed
[  494.310948][  T127] hub 4-1:0.221: bad descriptor, ignoring hub
[  494.331014][ T8607] FAT-fs (loop7): Directory bread(block 73) failed
[  494.350823][  T127] hub: probe of 4-1:0.221 failed with error -5
[  494.503335][ T1169] usb 6-1: Using ep0 maxpacket: 8
[  494.554734][ T8620] overlayfs: unrecognized mount option "U'" or missing value
[  494.750194][ T1169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  494.762936][ T1169] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  494.772648][ T1169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.794292][ T1169] usb 6-1: config 0 descriptor??
[  494.883580][ T7067] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  495.024405][ T1169] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  495.083324][ T7067] usb 7-1: Using ep0 maxpacket: 8
[  495.090680][ T7067] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  495.097091][  T127] usb 4-1: reset high-speed USB device number 16 using dummy_hcd
[  495.103368][ T7067] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  495.123132][ T7067] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  495.133766][ T7067] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  495.147161][ T7067] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  495.156738][ T7067] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.246517][   T14] usb 6-1: USB disconnect, device number 12
[  495.313443][ T5925] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  495.539494][ T7067] usb 7-1: GET_CAPABILITIES returned 0
[  495.545921][ T7067] usbtmc 7-1:16.0: can't read capabilities
[  495.648711][ T5925] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  495.656948][ T5925] usb 8-1: config 0 has no interface number 0
[  495.670579][ T5925] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  495.679763][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.687972][ T5925] usb 8-1: Product: syz
[  495.692157][ T5925] usb 8-1: Manufacturer: syz
[  495.696833][ T5925] usb 8-1: SerialNumber: syz
[  495.703101][ T5925] usb 8-1: config 0 descriptor??
[  495.772777][ T4300] usb 7-1: USB disconnect, device number 13
[  495.873648][  T127] usb 4-1: USB disconnect, device number 16
[  495.916784][ T5925] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  495.937517][ T5925] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  495.957384][ T5925] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  495.970318][ T5925] usb 8-1: media controller created
[  496.135940][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  496.177816][ T5925] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  496.285911][ T5925] usb 8-1: USB disconnect, device number 10
[  496.542498][ T8645] loop3: detected capacity change from 0 to 256
[  496.546103][ T8646] loop4: detected capacity change from 0 to 256
[  496.596332][ T8645] FAT-fs (loop3): Directory bread(block 64) failed
[  496.637402][ T8645] FAT-fs (loop3): Directory bread(block 65) failed
[  496.653104][ T8646] FAT-fs (loop4): Directory bread(block 64) failed
[  496.656909][ T8645] FAT-fs (loop3): Directory bread(block 66) failed
[  496.684115][ T8646] FAT-fs (loop4): Directory bread(block 65) failed
[  496.690785][ T8646] FAT-fs (loop4): Directory bread(block 66) failed
[  496.701938][ T8645] FAT-fs (loop3): Directory bread(block 67) failed
[  496.740020][ T8646] FAT-fs (loop4): Directory bread(block 67) failed
[  496.745382][ T8645] FAT-fs (loop3): Directory bread(block 68) failed
[  496.747968][ T8646] FAT-fs (loop4): Directory bread(block 68) failed
[  496.756196][ T8645] FAT-fs (loop3): Directory bread(block 69) failed
[  496.774733][ T8646] FAT-fs (loop4): Directory bread(block 69) failed
[  496.791750][ T8646] FAT-fs (loop4): Directory bread(block 70) failed
[  496.808641][ T8645] FAT-fs (loop3): Directory bread(block 70) failed
[  496.815667][ T8646] FAT-fs (loop4): Directory bread(block 71) failed
[  496.822917][ T8645] FAT-fs (loop3): Directory bread(block 71) failed
[  496.823039][ T8645] FAT-fs (loop3): Directory bread(block 72) failed
[  496.823071][ T8645] FAT-fs (loop3): Directory bread(block 73) failed
[  496.842792][ T8646] FAT-fs (loop4): Directory bread(block 72) failed
[  496.842833][ T8646] FAT-fs (loop4): Directory bread(block 73) failed
[  496.853394][  T127] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  497.341509][  T127] usb 7-1: Using ep0 maxpacket: 32
[  498.462938][ T8652] overlayfs: unrecognized mount option "U'" or missing value
[  498.609570][  T127] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  498.705431][  T127] usb 7-1: config 0 has no interface number 0
[  498.760092][ T8645] overlayfs: unrecognized mount option "U'" or missing value
[  498.800556][  T127] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  498.907739][  T127] usb 7-1: config 0 interface 85 has no altsetting 0
[  499.014712][  T127] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  499.060064][  T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.087192][  T127] usb 7-1: Product: syz
[  499.101236][  T127] usb 7-1: Manufacturer: syz
[  499.112992][  T127] usb 7-1: SerialNumber: syz
[  499.162020][  T127] usb 7-1: config 0 descriptor??
[  499.628837][ T8664] loop7: detected capacity change from 0 to 512
[  499.816818][ T8664] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  499.910709][  T127] appletouch 7-1:0.85: Geyser mode initialized.
[  499.953019][ T8664] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.968: bad orphan inode 17
[  499.966252][ T8664] EXT4-fs (loop7): Remounting filesystem read-only
[  499.973008][ T8664] ext4_test_bit(bit=16, block=4) = 1
[  499.978645][ T8664] is_bad_inode(inode)=0
[  499.982862][ T8664] NEXT_ORPHAN(inode)=2147418128
[  499.987812][ T8664] max_ino=32
[  499.991049][ T8664] i_nlink=0
[  499.995080][ T8664] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  500.180186][ T8667] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 424: padding at end of block bitmap is not set
[  500.195386][  T127] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input19
[  500.215150][ T8667] EXT4-fs (loop7): Remounting filesystem read-only
[  500.236706][    C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -1
[  500.381182][ T7266] EXT4-fs (loop7): unmounting filesystem.
[  500.445823][  T127] usb 7-1: USB disconnect, device number 14
[  500.808599][  T127] appletouch 7-1:0.85: input: appletouch disconnected
[  500.907546][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.975'.
[  501.060384][ T5631] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  501.097820][ T5631] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  501.320306][ T8693] loop6: detected capacity change from 0 to 256
[  501.336355][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.342760][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  501.413650][ T5631] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  501.489768][ T8693] FAT-fs (loop6): Directory bread(block 64) failed
[  501.494012][ T8698] loop3: detected capacity change from 0 to 128
[  501.499237][ T8693] FAT-fs (loop6): Directory bread(block 65) failed
[  501.533592][ T8698] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  501.557275][ T8693] FAT-fs (loop6): Directory bread(block 66) failed
[  501.577435][ T8693] FAT-fs (loop6): Directory bread(block 67) failed
[  501.597736][ T8693] FAT-fs (loop6): Directory bread(block 68) failed
[  501.613410][ T4300] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  501.623410][ T5631] usb 6-1: Using ep0 maxpacket: 16
[  501.634636][ T5631] usb 6-1: config 0 has no interfaces?
[  501.651682][ T8693] FAT-fs (loop6): Directory bread(block 69) failed
[  501.656287][ T8698] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  501.671782][ T5631] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  501.692670][ T8693] FAT-fs (loop6): Directory bread(block 70) failed
[  501.718607][ T5631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.727398][ T8693] FAT-fs (loop6): Directory bread(block 71) failed
[  501.747360][ T8693] FAT-fs (loop6): Directory bread(block 72) failed
[  501.756282][ T5631] usb 6-1: Product: syz
[  501.766819][ T5631] usb 6-1: Manufacturer: syz
[  501.770322][ T8693] FAT-fs (loop6): Directory bread(block 73) failed
[  501.786133][ T5631] usb 6-1: SerialNumber: syz
[  501.798978][ T5631] usb 6-1: config 0 descriptor??
[  501.824980][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  501.846393][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  501.878400][ T4300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  501.916706][ T4300] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  501.961074][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.016925][ T4300] usb 5-1: config 0 descriptor??
[  502.097573][ T8704] overlayfs: unrecognized mount option "U'" or missing value
[  502.347978][ T4300] usbhid 5-1:0.0: can't add hid device: -71
[  502.381668][   T27] audit: type=1800 audit(1747770450.791:10): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.979" name="/newroot/49/bus" dev="tmpfs" ino=285 res=0 errno=0
[  502.416466][ T4300] usbhid: probe of 5-1:0.0 failed with error -71
[  502.437267][ T5631] usb 6-1: USB disconnect, device number 13
[  502.485785][ T4300] usb 5-1: USB disconnect, device number 18
[  502.797364][ T8711] loop7: detected capacity change from 0 to 4096
[  503.053335][ T4300] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  503.073314][ T5631] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  503.130728][ T8719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.988'.
[  503.265925][ T4300] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  503.279347][ T5631] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  503.323536][ T5631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.345907][ T4300] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  503.371987][ T8724] loop5: detected capacity change from 0 to 256
[  503.421385][ T5631] usb 7-1: config 0 descriptor??
[  503.439577][ T4300] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  503.473031][ T8724] FAT-fs (loop5): Directory bread(block 64) failed
[  503.490119][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.520802][ T8724] FAT-fs (loop5): Directory bread(block 65) failed
[  503.542966][ T8713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  503.563557][ T8724] FAT-fs (loop5): Directory bread(block 66) failed
[  503.570368][ T8724] FAT-fs (loop5): Directory bread(block 67) failed
[  503.590702][ T8724] FAT-fs (loop5): Directory bread(block 68) failed
[  503.609267][ T8724] FAT-fs (loop5): Directory bread(block 69) failed
[  503.622789][ T8724] FAT-fs (loop5): Directory bread(block 70) failed
[  503.654620][ T8724] FAT-fs (loop5): Directory bread(block 71) failed
[  503.661293][ T8724] FAT-fs (loop5): Directory bread(block 72) failed
[  503.730048][ T8724] FAT-fs (loop5): Directory bread(block 73) failed
[  503.845093][ T8732] loop4: detected capacity change from 0 to 1024
[  503.885892][ T8732] EXT4-fs: Ignoring removed orlov option
[  503.948004][ T8733] overlayfs: unrecognized mount option "U'" or missing value
[  503.990785][ T8732] EXT4-fs: Ignoring removed nomblk_io_submit option
[  504.241119][ T7067] usb 4-1: USB disconnect, device number 17
[  504.263026][ T8732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  504.315354][ T5631] usb 7-1: Cannot set autoneg
[  504.320840][ T5631] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71
[  504.353654][ T5631] usb 7-1: USB disconnect, device number 15
[  504.607801][ T8742] loop7: detected capacity change from 0 to 128
[  504.848379][ T8746] loop5: detected capacity change from 0 to 512
[  504.917722][ T8746] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  505.044075][ T8746] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.995: bad orphan inode 17
[  505.060554][ T8746] EXT4-fs (loop5): Remounting filesystem read-only
[  505.067407][ T8746] ext4_test_bit(bit=16, block=4) = 1
[  505.072775][ T8746] is_bad_inode(inode)=0
[  505.077210][ T8746] NEXT_ORPHAN(inode)=2147418128
[  505.082131][ T8746] max_ino=32
[  505.085410][ T8746] i_nlink=0
[  505.089275][ T8746] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  505.396968][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  505.549063][ T4723] EXT4-fs (loop5): unmounting filesystem.
[  505.702526][ T8755] loop6: detected capacity change from 0 to 2048
[  505.777669][   T27] audit: type=1326 audit(1747770454.191:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.5.1001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b8f38e969 code=0x0
[  505.868456][ T8760] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  505.961571][ T8760] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  505.993025][ T8760] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  506.019821][ T8767] loop3: detected capacity change from 0 to 64
[  506.095629][ T8760] Remounting filesystem read-only
[  506.111039][ T8768] loop7: detected capacity change from 0 to 512
[  506.169339][ T8768] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  506.200169][ T8755] NILFS (loop6): mounting fs with errors
[  506.226765][ T8771] Trying to free block not in datazone
[  506.245316][ T8764] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  506.282897][ T8767] Trying to free block not in datazone
[  506.297653][ T8764] Remounting filesystem read-only
[  506.302207][ T8768] EXT4-fs (loop7): 1 truncate cleaned up
[  506.308504][ T8768] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  506.343558][ T8771] minix_free_inode: bit 5 already cleared
[  506.381653][   T27] audit: type=1800 audit(1747770454.791:12): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1004" name="file2" dev="loop7" ino=16 res=0 errno=0
[  506.389921][ T8768] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.1004: invalid indirect mapped block 6 (level 1)
[  506.515101][ T5841] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  506.559347][ T8775] Illegal XDP return value 4294967294 on prog  (id 79) dev N/A, expect packet loss!
[  506.571315][ T7266] EXT4-fs (loop7): unmounting filesystem.
[  506.749286][ T8777] loop6: detected capacity change from 0 to 524287999
[  507.033540][ T4298] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  507.223620][ T4298] usb 5-1: Using ep0 maxpacket: 16
[  507.234781][ T4298] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  507.258877][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.272977][ T4298] usb 5-1: Product: syz
[  507.287874][ T4298] usb 5-1: Manufacturer: syz
[  507.296400][ T4298] usb 5-1: SerialNumber: syz
[  507.363443][ T4298] usb 5-1: config 0 descriptor??
[  507.441288][ T8797] loop7: detected capacity change from 0 to 512
[  507.559997][ T8797] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  507.570844][ T8797] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  507.764776][ T8797] EXT4-fs error (device loop7): ext4_do_update_inode:5253: inode #2: comm syz.7.1016: corrupted inode contents
[  507.809739][ T4298] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  507.818976][ T8808] EXT4-fs (loop7): shut down requested (1)
[  507.828658][ T4298] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  507.838185][ T8797] EXT4-fs error (device loop7): ext4_dirty_inode:6118: inode #2: comm syz.7.1016: mark_inode_dirty error
[  507.850630][ T4298] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  507.862908][ T4298] usb 5-1: media controller created
[  507.901666][ T4298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  507.930820][   T27] audit: type=1326 audit(1747770456.341:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5438e969 code=0x7fc00000
[  507.968919][ T7266] EXT4-fs (loop7): unmounting filesystem.
[  507.981743][ T4650] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  508.021413][ T4298] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  508.029726][ T8786] loop5: detected capacity change from 0 to 40427
[  508.039605][ T8786] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  508.051212][ T8786] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  508.059445][ T4298] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  508.105660][ T5631] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  508.160075][ T8786] F2FS-fs (loop5): Found nat_bits in checkpoint
[  508.275607][ T4298] usb 5-1: USB disconnect, device number 19
[  508.282246][ T8786] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  508.302512][ T8786] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  508.323998][ T5631] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  508.344038][ T5631] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.365722][ T4298] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  508.391852][ T5631] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.421765][ T5631] usb 7-1: config 0 interface 0 has no altsetting 0
[  508.451598][ T5631] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.466796][   T27] audit: type=1804 audit(1747770456.871:14): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1010" name="/newroot/196/bus/bus" dev="loop5" ino=10 res=1 errno=0
[  508.488571][ T5631] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.500058][ T5631] usb 7-1: config 0 interface 0 has no altsetting 0
[  508.514401][ T5631] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.531209][ T5631] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.557255][ T5631] usb 7-1: config 0 interface 0 has no altsetting 0
[  508.576637][ T5631] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.610450][ T5631] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.622922][ T5631] usb 7-1: config 0 interface 0 has no altsetting 0
[  508.641162][   T27] audit: type=1326 audit(1747770457.051:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a5438e969 code=0x7fc00000
[  508.665316][ T5631] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.683242][ T5631] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.703270][   T27] audit: type=1326 audit(1747770457.051:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5438e969 code=0x7fc00000
[  508.743207][ T5631] usb 7-1: config 0 interface 0 has no altsetting 0
[  508.751594][ T5631] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.761414][   T27] audit: type=1326 audit(1747770457.051:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5438e969 code=0x7fc00000
[  508.778981][ T5631] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.823600][ T5631] usb 7-1: config 0 interface 0 has no altsetting 0
[  508.832734][   T27] audit: type=1326 audit(1747770457.051:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5438e969 code=0x7fc00000
[  508.856446][ T5631] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  508.871038][   T27] audit: type=1326 audit(1747770457.051:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5438e969 code=0x7fc00000
[  508.874223][ T5631] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  508.913740][   T27] audit: type=1326 audit(1747770457.051:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5438e969 code=0x7fc00000
[  508.965977][   T27] audit: type=1326 audit(1747770457.051:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5438e969 code=0x7fc00000
[  508.970897][ T5631] usb 7-1: config 0 interface 0 has no altsetting 0
[  509.055213][ T5631] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  509.074742][ T5631] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  509.123780][ T5631] usb 7-1: config 0 interface 0 has no altsetting 0
[  509.143591][ T5631] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  509.180023][ T5631] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  509.209115][ T5631] usb 7-1: Product: syz
[  509.219226][ T5631] usb 7-1: Manufacturer: syz
[  509.238447][ T5631] usb 7-1: SerialNumber: syz
[  509.275512][ T5631] usb 7-1: config 0 descriptor??
[  509.305462][ T5631] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  509.456862][ T8827] loop3: detected capacity change from 0 to 8192
[  509.588752][ T4300] usb 7-1: USB disconnect, device number 16
[  509.604696][ T4300] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  509.786090][ T8836] loop5: detected capacity change from 0 to 4096
[  509.827501][ T8843] loop4: detected capacity change from 0 to 64
[  509.846139][ T8843] hfs: unable to locate alternate MDB
[  509.851562][ T8843] hfs: continuing without an alternate MDB
[  510.209694][ T8848] loop3: detected capacity change from 0 to 512
[  510.231636][ T8848] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  510.499087][ T8848] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1030: bad orphan inode 17
[  510.514386][ T8848] EXT4-fs (loop3): Remounting filesystem read-only
[  510.521028][ T8848] ext4_test_bit(bit=16, block=4) = 1
[  510.526422][ T8848] is_bad_inode(inode)=0
[  510.530650][ T8848] NEXT_ORPHAN(inode)=2147418128
[  510.535650][ T8848] max_ino=32
[  510.538904][ T8848] i_nlink=0
[  510.542758][ T8848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  510.898434][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  511.033985][ T8854] loop6: detected capacity change from 0 to 512
[  511.097792][ T4300] hid-generic 0000:0004:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  511.146898][ T8854] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  511.216146][ T8859] fido_id[8859]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  511.242764][ T8854] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  511.294037][ T5631] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  511.426185][ T8854] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1035: bg 0: block 248: padding at end of block bitmap is not set
[  511.486192][ T8854] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  511.493332][ T5631] usb 5-1: Using ep0 maxpacket: 8
[  511.512230][ T5631] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  511.540371][ T5631] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  511.563621][ T5631] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  511.577627][ T5631] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  511.592011][ T5631] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  511.625938][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.646836][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  511.863031][ T5631] usb 5-1: GET_CAPABILITIES returned 0
[  511.868733][ T5631] usbtmc 5-1:16.0: can't read capabilities
[  512.105002][ T5631] usb 5-1: USB disconnect, device number 20
[  512.199328][ T8852] loop7: detected capacity change from 0 to 40427
[  512.224980][ T8852] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  512.252339][ T8852] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  512.272693][ T8852] F2FS-fs (loop7): build fault injection attr: rate: 17008, type: 0x3ffff
[  512.292915][ T8852] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x1f8
[  512.387146][ T8852] F2FS-fs (loop7): invalid crc value
[  512.512516][ T8852] F2FS-fs (loop7): Found nat_bits in checkpoint
[  512.741760][ T8893] loop5: detected capacity change from 0 to 512
[  512.820829][ T8893] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  512.919953][ T8893] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1046: bad orphan inode 17
[  512.938363][ T8893] EXT4-fs (loop5): Remounting filesystem read-only
[  512.945130][ T8893] ext4_test_bit(bit=16, block=4) = 1
[  512.950484][ T8893] is_bad_inode(inode)=0
[  512.954803][ T8893] NEXT_ORPHAN(inode)=2147418128
[  512.959711][ T8893] max_ino=32
[  512.962967][ T8893] i_nlink=0
[  512.966849][ T8893] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  513.303480][ T8852] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  513.321848][ T8852] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  513.464881][ T4723] EXT4-fs (loop5): unmounting filesystem.
[  513.735232][ T8908] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  513.763642][   T27] kauditd_printk_skb: 60 callbacks suppressed
[  513.763658][   T27] audit: type=1800 audit(1747770462.181:82): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.1048" name="/newroot/150/bus" dev="tmpfs" ino=836 res=0 errno=0
[  513.806113][ T7266] syz-executor: attempt to access beyond end of device
[  513.806113][ T7266] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  513.856941][ T8911] loop3: detected capacity change from 0 to 256
[  514.007476][ T8911] FAT-fs (loop3): Directory bread(block 64) failed
[  514.024274][ T8911] FAT-fs (loop3): Directory bread(block 65) failed
[  514.030948][ T8911] FAT-fs (loop3): Directory bread(block 66) failed
[  514.096802][ T8911] FAT-fs (loop3): Directory bread(block 67) failed
[  514.123364][ T8911] FAT-fs (loop3): Directory bread(block 68) failed
[  514.129962][ T8911] FAT-fs (loop3): Directory bread(block 69) failed
[  514.163522][ T8911] FAT-fs (loop3): Directory bread(block 70) failed
[  514.187826][ T8911] FAT-fs (loop3): Directory bread(block 71) failed
[  514.215870][ T8911] FAT-fs (loop3): Directory bread(block 72) failed
[  514.222742][ T8911] FAT-fs (loop3): Directory bread(block 73) failed
[  514.503475][ T8924] overlayfs: unrecognized mount option "U'" or missing value
[  515.084450][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1054'.
[  515.433316][ T5925] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  515.783510][ T5925] usb 7-1: Using ep0 maxpacket: 32
[  515.806116][ T5925] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  516.031237][   T27] audit: type=1800 audit(1747770464.441:83): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1060" name="/newroot/224/bus" dev="tmpfs" ino=1265 res=0 errno=0
[  516.064067][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.096300][ T5925] usb 7-1: config 0 descriptor??
[  516.125516][ T5925] gspca_main: nw80x-2.14.0 probing 055f:d001
[  516.897483][ T8972] loop7: detected capacity change from 0 to 256
[  516.959214][ T5925] gspca_nw80x: reg_r err -71
[  516.964292][ T5925] nw80x: probe of 7-1:0.0 failed with error -71
[  517.004860][ T5925] usb 7-1: USB disconnect, device number 17
[  517.028650][ T8972] FAT-fs (loop7): Directory bread(block 64) failed
[  517.057876][ T8972] FAT-fs (loop7): Directory bread(block 65) failed
[  517.094468][ T8972] FAT-fs (loop7): Directory bread(block 66) failed
[  517.132384][   T27] audit: type=1800 audit(1747770465.541:84): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1067" name="/newroot/230/bus" dev="tmpfs" ino=1298 res=0 errno=0
[  517.163266][ T8972] FAT-fs (loop7): Directory bread(block 67) failed
[  517.190449][ T8972] FAT-fs (loop7): Directory bread(block 68) failed
[  517.238044][ T8972] FAT-fs (loop7): Directory bread(block 69) failed
[  517.253339][ T8972] FAT-fs (loop7): Directory bread(block 70) failed
[  517.270173][ T8972] FAT-fs (loop7): Directory bread(block 71) failed
[  517.313965][ T8972] FAT-fs (loop7): Directory bread(block 72) failed
[  517.320556][ T8972] FAT-fs (loop7): Directory bread(block 73) failed
[  517.591239][ T8982] overlayfs: unrecognized mount option "U'" or missing value
[  517.973556][ T4298] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  518.175101][ T4298] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  518.215968][ T4298] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  518.257798][ T4298] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  518.298012][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  518.319469][ T4298] usb 4-1: SerialNumber: syz
[  519.666474][ T8997] loop7: detected capacity change from 0 to 512
[  519.683650][ T8997] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  519.841790][ T8997] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.1079: bad orphan inode 17
[  519.855626][ T8997] EXT4-fs (loop7): Remounting filesystem read-only
[  519.862281][ T8997] ext4_test_bit(bit=16, block=4) = 1
[  519.867765][ T8997] is_bad_inode(inode)=0
[  519.872072][ T8997] NEXT_ORPHAN(inode)=2147418128
[  519.877021][ T8997] max_ino=32
[  519.880277][ T8997] i_nlink=0
[  519.884297][ T8997] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  520.097733][ T4298] usb 4-1: 0:2 : does not exist
[  520.205575][ T4298] usb 4-1: USB disconnect, device number 18
[  520.436926][ T7266] EXT4-fs (loop7): unmounting filesystem.
[  520.522823][ T4708] udevd[4708]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  520.730988][ T8987] loop6: detected capacity change from 0 to 32768
[  520.821974][ T8987] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  520.867026][ T8987] (syz.6.1077,8987,1):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1
[  520.878851][ T8987] (syz.6.1077,8987,1):ocfs2_group_add:503 ERROR: status = -22
[  521.079672][ T5841] ocfs2: Unmounting device (7,6) on (node local)
[  521.343480][ T4298] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  521.516410][   T27] audit: type=1800 audit(1747770469.931:85): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.1085" name="/newroot/74/bus" dev="tmpfs" ino=418 res=0 errno=0
[  521.543286][ T4298] usb 5-1: Using ep0 maxpacket: 8
[  521.550446][ T4298] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  521.561517][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.589225][ T4298] pvrusb2: Hardware description: Terratec Grabster AV400
[  521.801920][ T4298] pvrusb2: **********
[  521.806013][ T4298] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  521.827630][ T4298] pvrusb2: Important functionality might not be entirely working.
[  521.835557][ T4298] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  523.571338][ T9042] loop6: detected capacity change from 0 to 512
[  523.599282][ T4269] Bluetooth: hci6: command 0x1003 tx timeout
[  523.605948][ T4270] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  523.695064][ T9046] loop3: detected capacity change from 0 to 512
[  523.725670][ T9042] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  523.736268][ T9046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  523.855818][ T4298] pvrusb2: **********
[  523.865828][ T2309] pvrusb2: Invalid write control endpoint
[  523.931485][ T9042] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1093: bad orphan inode 17
[  523.931523][ T9046] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1094: bad orphan inode 17
[  523.953579][ T9042] EXT4-fs (loop6): Remounting filesystem read-only
[  523.960135][ T9042] ext4_test_bit(bit=16, block=4) = 1
[  523.965082][ T9046] EXT4-fs (loop3): Remounting filesystem read-only
[  523.965610][ T9042] is_bad_inode(inode)=0
[  523.971961][ T9046] ext4_test_bit(bit=16, block=4) = 1
[  523.976160][ T9042] NEXT_ORPHAN(inode)=2147418128
[  523.976173][ T9042] max_ino=32
[  523.976181][ T9042] i_nlink=0
[  523.976360][ T9042] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  523.981547][ T9046] is_bad_inode(inode)=0
[  524.006699][ T9046] NEXT_ORPHAN(inode)=2147418128
[  524.011577][ T9046] max_ino=32
[  524.014863][ T9046] i_nlink=0
[  524.018187][ T9046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  524.066971][  T127] usb 5-1: USB disconnect, device number 21
[  524.219774][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  524.339989][ T2309] pvrusb2: Invalid write control endpoint
[  524.380808][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  524.404439][ T9057] loop5: detected capacity change from 0 to 512
[  524.412458][ T9057] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  524.420585][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  524.454497][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  524.465273][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  524.475656][ T2309] pvrusb2: Device being rendered inoperable
[  524.486449][ T2309] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  524.494288][ T2309] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  524.499325][ T9057] EXT4-fs (loop5): 1 truncate cleaned up
[  524.503984][   T14] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  524.528014][ T2309] pvrusb2: Attached sub-driver cx25840
[  524.534121][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  524.544646][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  524.553911][ T9057] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  524.705840][   T14] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  524.736960][   T14] usb 8-1: config 0 has no interface number 0
[  524.768277][   T14] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  524.792035][   T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.811416][   T14] usb 8-1: Product: syz
[  524.831639][   T14] usb 8-1: Manufacturer: syz
[  524.841772][   T14] usb 8-1: SerialNumber: syz
[  524.871177][ T4723] EXT4-fs (loop5): unmounting filesystem.
[  524.872065][   T14] usb 8-1: config 0 descriptor??
[  525.001157][ T9072] loop6: detected capacity change from 0 to 512
[  525.017102][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'.
[  525.020506][   T28] INFO: task syz-executor:4253 blocked for more than 143 seconds.
[  525.042501][ T9072] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  525.050319][   T28]       Not tainted 6.1.139-syzkaller #0
[  525.071977][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  525.090107][   T28] task:syz-executor    state:D stack:22560 pid:4253  ppid:1      flags:0x00004004
[  525.116690][ T9072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  525.128012][   T28] Call Trace:
[  525.131344][   T28]  <TASK>
[  525.134468][   T28]  __schedule+0x10e9/0x40d0
[  525.137899][   T14] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  525.139017][   T28]  ? release_firmware_map_entry+0x18a/0x18a
[  525.153764][   T28]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  525.159798][   T28]  ? lock_chain_count+0x20/0x20
[  525.165061][   T28]  ? _raw_spin_lock_irq+0xab/0xe0
[  525.170138][   T28]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  525.175834][   T28]  schedule+0xb9/0x180
[  525.179954][   T28]  io_schedule+0x7c/0xd0
[  525.184299][   T28]  folio_wait_bit_common+0x6e1/0xf60
[  525.185677][   T14] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  525.189626][   T28]  ? folio_wait_bit+0x30/0x30
[  525.189665][   T28]  ? migration_entry_wait_on_locked+0xe50/0xe50
[  525.211066][   T28]  ? folio_mapping+0x1ba/0x4d0
[  525.215919][   T28]  truncate_inode_pages_range+0x9a2/0xff0
[  525.221695][   T28]  ? mapping_evict_folio+0x520/0x520
[  525.227089][   T28]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  525.230216][ T9072] System zones: 
[  525.233108][   T28]  ? _raw_spin_unlock_irq+0x1f/0x40
[  525.233239][  T127] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  525.247191][ T9072] 1-12
[  525.249935][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  525.258660][   T28]  evict+0x498/0x870
[  525.261347][ T9072] 
[  525.262611][   T28]  ? proc_nr_inodes+0x2f0/0x2f0
[  525.269948][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  525.275262][   T28]  ? _raw_spin_unlock+0x24/0x40
[  525.275747][   T14] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  525.280221][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  525.295296][   T28]  evict_inodes+0x604/0x690
[  525.295358][ T9072] EXT4-fs (loop6): ext4_process_orphan: truncating inode 15 to 10 bytes
[  525.308507][   T28]  ? clear_inode+0x150/0x150
[  525.313447][   T28]  ? dput+0x1c9/0x1d0
[  525.317717][ T9072] EXT4-fs (loop6): 1 truncate cleaned up
[  525.323814][   T28]  ? sync_filesystem+0x103/0x220
[  525.328941][ T9072] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  525.332519][   T14] usb 8-1: media controller created
[  525.338006][   T28]  generic_shutdown_super+0x93/0x340
[  525.355740][   T28]  kill_block_super+0x7c/0xe0
[  525.369654][   T28]  deactivate_locked_super+0x93/0xf0
[  525.382711][   T28]  cleanup_mnt+0x463/0x4f0
[  525.387486][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  525.392973][   T28]  task_work_run+0x1ca/0x250
[  525.394805][   T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  525.397888][   T28]  ? task_work_cancel+0x230/0x230
[  525.411582][   T28]  ? exit_to_user_mode_loop+0x3b/0x110
[  525.417679][   T28]  exit_to_user_mode_loop+0xe6/0x110
[  525.423805][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  525.429480][   T28]  syscall_exit_to_user_mode+0x16/0x40
[  525.443301][  T127] usb 5-1: Using ep0 maxpacket: 8
[  525.448531][   T28]  do_syscall_64+0x58/0xa0
[  525.455290][  T127] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  525.467364][   T28]  ? clear_bhb_loop+0x60/0xb0
[  525.475538][  T127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  525.486674][   T28]  ? clear_bhb_loop+0x60/0xb0
[  525.496572][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  525.502979][  T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  525.513515][   T28] RIP: 0033:0x7f6bd1b8fc97
[  525.518005][   T28] RSP: 002b:00007fff640dd688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  525.524471][   T14] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  525.526966][  T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  525.549312][   T28] RAX: 0000000000000000 RBX: 00007f6bd1c1089d RCX: 00007f6bd1b8fc97
[  525.558299][   T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff640dd740
[  525.567784][  T127] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  525.581131][   T28] RBP: 00007fff640dd740 R08: 0000000000000000 R09: 0000000000000000
[  525.589468][  T127] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  525.599401][   T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff640de7d0
[  525.607749][  T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.615912][   T14] usb 8-1: USB disconnect, device number 11
[  525.623533][   T28] R13: 00007f6bd1c1089d R14: 0000000000058f75 R15: 00007fff640de810
[  525.632339][   T28]  </TASK>
[  525.660620][   T28] 
[  525.660620][   T28] Showing all locks held in the system:
[  525.682472][   T28] 1 lock held by rcu_tasks_kthre/12:
[  525.684550][ T5841] EXT4-fs (loop6): unmounting filesystem.
[  525.696838][   T28]  #0: ffffffff8c92b4b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  525.744498][   T28] 1 lock held by rcu_tasks_trace/13:
[  525.768283][   T28]  #0: ffffffff8c92bcd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  525.805448][   T28] 3 locks held by kworker/0:1/14:
[  525.812057][   T28]  #0: ffff8881432b4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  525.823668][   T28]  #1: ffffc90000137d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  525.835136][   T28]  #2: ffff888027bdb190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210
[  525.845323][   T28] 1 lock held by khungtaskd/28:
[  525.850315][   T28]  #0: ffffffff8c92ab20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  525.860827][   T28] 5 locks held by kworker/1:2/127:
[  525.866398][  T127] usb 5-1: usb_control_msg returned -32
[  525.872035][  T127] usbtmc 5-1:16.0: can't read capabilities
[  525.878300][   T28] 2 locks held by klogd/3612:
[  525.883117][   T28]  #0: ffff8880b8e3aa58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  525.901923][   T28]  #1: ffff8880b8e27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0
[  525.915270][   T28] 2 locks held by getty/4018:
[  525.919995][   T28]  #0: ffff888030104098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  525.930013][   T28]  #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380
[  525.940232][   T28] 1 lock held by syz-executor/4253:
[  525.945512][   T28]  #0: ffff88807c83a0e0 (&type->s_umount_key#87){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0
[  525.956126][   T28] 2 locks held by kworker/u4:13/4533:
[  525.961519][   T28]  #0: ffff8880b8e3aa58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  525.971515][   T28]  #1: ffff8880b8e27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x312/0x6d0
[  525.983817][   T28] 2 locks held by kworker/0:14/5925:
[  525.989443][   T28]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  526.000193][   T28]  #1: ffffc9000451fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  526.012898][   T28] 2 locks held by kworker/0:16/7067:
[  526.033212][   T28]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  526.052072][   T28]  #1: ffffc9000480fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  526.064022][   T28] 1 lock held by syz-executor/7266:
[  526.069260][   T28] 2 locks held by dhcpcd/9076:
[  526.082200][   T28]  #0: ffff88807b3e0130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0
[  526.092001][   T28]  #1: ffffffff8c9307f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830
[  526.103801][   T28] 2 locks held by dhcpcd/9077:
[  526.108592][   T28]  #0: ffff88804f7ea130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0
[  526.118682][   T28]  #1: ffffffff8c9307f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830
[  526.129710][   T28] 
[  526.132064][   T28] =============================================
[  526.132064][   T28] 
[  526.140778][   T28] NMI backtrace for cpu 1
[  526.145153][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.139-syzkaller #0
[  526.153088][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  526.163168][   T28] Call Trace:
[  526.166456][   T28]  <TASK>
[  526.169390][   T28]  dump_stack_lvl+0x168/0x22e
[  526.174084][   T28]  ? irq_work_queue+0xb8/0x140
[  526.178900][   T28]  ? show_regs_print_info+0x12/0x12
[  526.184111][   T28]  ? load_image+0x3b0/0x3b0
[  526.188642][   T28]  ? vprintk_emit+0x571/0x680
[  526.193334][   T28]  ? printk_sprint+0x460/0x460
[  526.198111][   T28]  nmi_cpu_backtrace+0x3f4/0x470
[  526.203066][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  526.209229][   T28]  ? _printk+0xcc/0x110
[  526.213390][   T28]  ? load_image+0x3b0/0x3b0
[  526.217897][   T28]  ? load_image+0x3b0/0x3b0
[  526.222403][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  526.228485][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  526.234476][   T28]  watchdog+0xeee/0xf30
[  526.238638][   T28]  ? watchdog+0x1ed/0xf30
[  526.242986][   T28]  kthread+0x29d/0x330
[  526.247076][   T28]  ? hungtask_pm_notify+0x40/0x40
[  526.252101][   T28]  ? kthread_blkcg+0xd0/0xd0
[  526.256707][   T28]  ret_from_fork+0x1f/0x30
[  526.261166][   T28]  </TASK>
[  526.264596][   T28] Sending NMI from CPU 1 to CPUs 0:
[  526.269836][    C0] NMI backtrace for cpu 0
[  526.269847][    C0] CPU: 0 PID: 4354 Comm: kworker/u4:9 Not tainted 6.1.139-syzkaller #0
[  526.269865][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  526.269876][    C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  526.269905][    C0] RIP: 0010:check_preemption_disabled+0x1/0x110
[  526.269926][    C0] Code: 00 91 9c 8c 4c 89 f6 e8 4d d6 1f fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 c0 0f bf 8a 48 c7 c6 00 10 bf 8a eb 00 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24
[  526.269941][    C0] RSP: 0018:ffffc9000460f910 EFLAGS: 00000046
[  526.269954][    C0] RAX: 1ffff110052ef512 RBX: d899f4a50d7e7cc5 RCX: 0000000000000001
[  526.269967][    C0] RDX: 0000000000000003 RSI: ffffffff8a6c1180 RDI: ffffffff8abf1020
[  526.269979][    C0] RBP: ffffc9000460fa30 R08: dffffc0000000000 R09: fffffbfff1bfcfb6
[  526.269992][    C0] R10: fffffbfff1bfcfb6 R11: 1ffffffff1bfcfb5 R12: ffff88802977a918
[  526.270005][    C0] R13: dffffc0000000000 R14: ffff88802977a890 R15: 1ffff920008c1f30
[  526.270019][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  526.270034][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  526.270047][    C0] CR2: 00007f33cf14cd58 CR3: 000000007e502000 CR4: 00000000003506f0
[  526.270063][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  526.270072][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  526.270083][    C0] Call Trace:
[  526.270088][    C0]  <TASK>
[  526.270094][    C0]  lock_release+0x54f/0x910
[  526.270119][    C0]  ? batadv_iv_ogm_schedule+0x3ef/0xe90
[  526.270142][    C0]  ? __lock_acquire+0x7c50/0x7c50
[  526.270170][    C0]  batadv_iv_ogm_schedule+0x6cd/0xe90
[  526.270196][    C0]  ? batadv_iv_ogm_schedule+0x3ef/0xe90
[  526.270216][    C0]  ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840
[  526.270244][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840
[  526.270272][    C0]  ? process_one_work+0x7a1/0x1160
[  526.270289][    C0]  process_one_work+0x898/0x1160
[  526.270313][    C0]  ? worker_detach_from_pool+0x240/0x240
[  526.270333][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  526.270357][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  526.270389][    C0]  ? kthread_data+0x4b/0xc0
[  526.270414][    C0]  worker_thread+0xaa2/0x1250
[  526.270443][    C0]  kthread+0x29d/0x330
[  526.270466][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  526.270483][    C0]  ? kthread_blkcg+0xd0/0xd0
[  526.270507][    C0]  ret_from_fork+0x1f/0x30
[  526.270536][    C0]  </TASK>
[  526.275847][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  526.275863][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.139-syzkaller #0
[  526.275886][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  526.275900][   T28] Call Trace:
[  526.275907][   T28]  <TASK>
[  526.275915][   T28]  dump_stack_lvl+0x168/0x22e
[  526.275950][   T28]  ? memcpy+0x3c/0x60
[  526.275974][   T28]  ? show_regs_print_info+0x12/0x12
[  526.276005][   T28]  ? load_image+0x3b0/0x3b0
[  526.276043][   T28]  panic+0x2c9/0x710
[  526.276077][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  526.276108][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  526.276148][   T28]  ? __irq_work_queue_local+0x12c/0x190
[  526.276186][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  526.276219][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  526.276253][   T28]  watchdog+0xf2d/0xf30
[  526.276282][   T28]  ? watchdog+0x1ed/0xf30
[  526.276318][   T28]  kthread+0x29d/0x330
[  526.276349][   T28]  ? hungtask_pm_notify+0x40/0x40
[  526.276372][   T28]  ? kthread_blkcg+0xd0/0xd0
[  526.276406][   T28]  ret_from_fork+0x1f/0x30
[  526.276451][   T28]  </TASK>
[  526.277834][   T28] Kernel Offset: disabled
[  526.631830][   T28] Rebooting in 86400 seconds..