last executing test programs:

6m6.292628343s ago: executing program 0 (id=26):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000240)={@multicast1, @multicast1, 0xffffffffffffffff, "12684183f3a7d8429bff6a8ed6383b0be4c20337bcfb3adebe55b8f113e1fa82", 0x6, 0x0, 0x4, 0x7}, 0x3c)
ftruncate(r0, 0xf4ff)

6m4.014788193s ago: executing program 0 (id=37):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080088ca0303ff7fc30909000900aaaaaaaaaa33aa"], 0x27)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @remote}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private2, 0x0, r8})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@private2, r8}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="3a8d04005a1000000800040044"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r10, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000100)=0x4c, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r11, 0x20, &(0x7f00000005c0)={&(0x7f0000000640)=""/190, 0xbe, 0x0, &(0x7f0000000500)=""/141, 0x8d}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r12=>0x0}, 0x6)
r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r12, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r13, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x6016})
io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

6m3.426716834s ago: executing program 0 (id=41):
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
lseek(r0, 0x2000, 0x0)

6m3.32483217s ago: executing program 0 (id=43):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x808080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x252, &(0x7f0000000880)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
socket$netlink(0x10, 0x3, 0x0)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

6m1.960198912s ago: executing program 0 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
read(r0, &(0x7f0000000240)=""/28, 0xffd2)

6m0.873944709s ago: executing program 0 (id=57):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

6m0.567847555s ago: executing program 32 (id=57):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

3m3.245289481s ago: executing program 5 (id=1403):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$eJzs3N9rHNUeAPDvbJJNe9vc7O291x/9YVerGPyRNGnVPgj+QKEvgqAP9TGmaalNG2ki2BJsFKmP0r+g+ij4F/ikL6KCoPiqj4IIRfLS2gcZmd2dZLPZjZs0m22Tzwe2OWfOzJxzZubMnjmnswFsW+XsnyRid0T8HBGD1ejyFcrVPzcX5ib+XJibSCJNX/sjqax3Y2FuIl81325XLTJUiCh8mMS+JvnOXLx0dnxqavJCLT4ye+7tkZmLl548c2789OTpyfNjx44dPTL6zNNjT21IPQeysu59b3r//cffuPrKxImrb377eVbe3bX0GwtzxeVblPLA3ohIG/f3fBt5lqO8/FjWeWRtxb/jDdSFk94uFoQ16YmI7HT1Vdr/YPTE0skbjJc/iCh0tXxA56RpmvavWJrdFXZmgfkU2MKS6HYJgO7Iv/Gz5/j8s8ldkK66/kL1ASir983ap5rSW3nyKZeqz0YDHcq/HAcj4ta1E/O3rkXDeAoAQCd8mfV/nmjW/yvEPXXr/bs2N1SKiP9ExJ6I+G9E/C8i/h9RWffeiLiv3YyT5lMjK/s/P+5cZ9XakvX/nq3NbS3v/y2Oe5d6arGBSv37klNnpiYP147JUPT1Z/HRVfL46qWfPm6VVo6IrO+Xf7L8875grRy/9zYM0J0cnx2/nTrXu34wYm9vs/onizMBSexY9/4HihFnHvtsf6v0f67/KjZgnin9NOLR6vmfj4b655LV5ydHdsTU5OGR/KpY6bsfrrzaKv/bqv8GuP5+xL+aXv+L9S8l9fO1M2vOovfKLx+1fKZZ7/VfTF6vhPNJ23fHZ2cvjEYUk/mVy8eWts3j+fpZ/YcONW//eyL++qS23b6IyC7iAxHxQETlqS0r+4MR8VBEHFrlAHzz4sNvZX+/X1f9Oyur/8k1nf/6QF80LmkW6Dn79Ret8m/v/B+thIZqS5buf2lPq/1WM8/vW60LeFsHDwAAAO4Shcr/gU+SiOq4ye66tGL2HD09M/v4qel3zp+sppWir5CPdA3WjYeO1saG8/hYQ/xIZdw4TdN0ZyU+PDE91ak5daA9u6rtvzC8eC8oFIaHq2m/NYyuPdeVEgIdtaZ5tFZvtAF3pfbav4YPW9Fi+1/5JmBO44ctqtr+ewa7XQ5g8/m9Fti+mrX/yxE3u1AUYJP5/oftS/uH7Wut7b/UoXIAm8/3P2xLy1+JL0Ybr/O3FdhzfGP2szUDkSwd+Z5ul6d/fZtH4Q45mPWBpElSYXHJgV/zH4YotL3n4oYULFZbpz8i2t3h5disg9ntOxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDG+DsAAP//KI/hOg==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m58.390310346s ago: executing program 5 (id=1417):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0x401, 0x9cdeff16}}], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x0, 0xffffffa5, 0x1, 0x6, 0x37292093, 0xffff7fff, 0x7}, {0xc0000001, 0x8, 0x2, 0x7f7f, 0xc, 0x5, 0x2}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m57.646235955s ago: executing program 5 (id=1421):
socket$kcm(0x23, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff000000000000000058000b4824ca945f64009400", 0x2a}], 0x1)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000200)={'ip6gre0\x00', 0xdc6})

2m55.66326748s ago: executing program 5 (id=1428):
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x400)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x210000, &(0x7f0000001100)={[{@nobarrier}, {@barrier}, {@commit={'commit', 0x3d, 0x5}}, {@i_version}, {@resuid={'resuid', 0x3d, r0}}, {@init_itable}, {@errors_remount}, {@nobh}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402280a, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x0, 0x1, 0x0, 0x0)

2m53.841625425s ago: executing program 5 (id=1434):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x5522, &(0x7f0000000b40)="$eJzs3L1vW1UUAPDjpOk3JUIMbH1SVSmRalOnH4KtQCs+RKuqwMAEju1abm2/KHadkImBETHwnyCQmBj5GxiY2RADiA0J5HdfSgNUqhQnJsnvJz2fd6+vzzvXqiqd9yIHcGQtZr//WolzcSoi5iPibERxXimPwo0UXoqI8xEx98RRKecfTxyPiNMRcW6SPOWslG99eWl84dov7/z23Q8njp356tsfZ7drYNYuRkR/LZ1v9FPMOyk+KOcb424R+1fHZUxv9B+W4zzFjfZqkWGjsb2uUcQrnbQ+X3s0nMT7vUZzEjvd+8X82iBdcDjubOcpPvCgsV6MW+3VInaHeRE7W6muza30f9vWcJTytMp8nxTpYzTajml9e7Od9rP2sIjNwaicT3nzVntzEsdlLC8XzbzXKupY3cUX/T/3bnfwaDMbt9eH3XyQXavVX6nVr1fr63mrPWpfrTb6retXs6VOb7KsOmo3+jc6ed7ptWvNvL+cLXWazWq9ni3dbK92G4OsXq9dqV2uXlsuzy5lb975IOu1sqVJfL07eDTq9obZ/Xw9S59YzlZqV15dzi7Us/du383u3rt16/bd9z+6+eGd126//Ua56F9lZUsrl1dWqvXL1ZX68hHa/2dl0VPcP+xKZdYFABw8+n9gFi7GwuPz6fb/6/ci9r7/j2fq/9O8/v/pDlT/e/j6/42XI2a6f9gV/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJH108LXbxUni2l8ppx/rpx6oRxXImIuIv78D/NxfEfO+TLPwlPWL/yjhu8rUWSYXONEeZyOiBvl8cfze/0tAAAAwOH1zafnv0jdenpZnHVB7Kd002bu7MdTyleJiIXFn6eUbW7y8uKUkhX/vo/F5pSyFTewTk4pWbrldmxa2Z7J/I5w8olQSWFuX8sBAAD2xc5OYH+7EAAAAPbT57MugNmoxPajzO1nwcVf3v/9QPDUjhEAAABwAFVmXQAAAACw54r+3+//AQAAwOGWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C927uc2cSCKA/CzwQv7T4tWe99W9gZlbAl73GNEAWmCAnIgLaQBaiC3lBBBhMchEHGI5LGtRN8nOZOxzI83CA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn9ucdBUIgDMJg7/rOZO5/WGnQ1NSkCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuZ/XOKo4AODf2d3Z2FYxRskhIgoe9GLTbW3tTTwowYN/ghDSbY3d+qMNYksRc/EmOfciehQRlHjr/9BzC73UWw85VPCsvNmZ7DQNuCqd2SafD7x5350M875vhoR8500CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUdt6ZxN20mR/HnXLf7QfX11J/Z0+f3Ny6u5RairMmk34yvFT/kC1GxLH2kgEAAOBw6Fb1fUTcy7dXUt+ZL+r/vDom1fzfPzOOy3r+i6pk3Vv/V7V/ar/9ev+F3YHmx+Okk55fHw1PPJpK73HNcdY9+49H9IorXzx76RY3pPP+5vM7eXE9s29v3Xq3X4RzTWQLAPwXx6u+DKrfh1I/aDMxAA6NXq3wrur/7ny7OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0YWczjlVxFhFLvUmc3HlwfW2//ubW3aWqnblxYyu+npwznSKPiPPro+GJRmcz265cvXZxdTQaXm4+eDki2hr97XL6Fz+c4uCIVq7PAQmy8vu2kUHn0j3d+6VOebNn4Wo8OUFrP5IAADig8rKl+uBevr2S9mULEX/98HD9/1otjinr//sfnbldH6te/w8am+HsW9649NnylavX3li/tHpheGH4yZsnB28NTp09ffrscvGsZNkTEwAAAP6fftnq9X9n4dH1/6O1OKas/z//bvBVfayu+n9fk0W/tjMBAAA43J575c8/sn32Z/1+fLm6sXF5MN7ufj453raQ6r82V7Z6/d9daDsrAAAAoAk7m9lD6//nanFMuf7/9I8v/lw/ZzcijpTr/8fXPh2da246M62JPydue44AAAC060jZ6uv/efH+f2f3lYdORLz+6jgu/w3gVPV/971vfqqPVX///1RzU5xJncXx9Sj6xYjeYtsZAQAAcJA9VbZU7P+eb698/MvRD/re/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo2t8BAAD//1IGNfA=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
fallocate(r0, 0x10, 0xf, 0x2000402)

2m48.193943852s ago: executing program 5 (id=1456):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
r0 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x49, &(0x7f00000002c0)=""/73, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_usb_connect(0x1, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101d684"], 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000d00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64, @ANYBLOB=',discard,allow_utime=00000000000000000000153,discard,iocharset=iso8859-3,dmask=00000000000000000130667,codepage=iso8859-15,time_offset=0x00000000000000e5,umask=00000000000000000200001,\x00', @ANYRESHEX=r2], 0x1, 0x152b, &(0x7f0000003300)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FRp87/nPM7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ86+mcP+zN+7//1nBv7IR9z974/5nV7FXugD2X4Df/9lBjn+4hvufvXH/GcvOrvT95yu9QOS/7Dk4kvNCY/6q42eMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxv4Cp/1lCgAuja90XYwxxhhjjDHGGPvz+BxXugLGGGOMMcYYY4z970MQIEFBADGQA2IhJ+QCAQBXQx7ICxG4BuLgWsgH10F+KAAFoRDEQ2EoAhoMWCAIoSgUgyhcD8XhBigBJaEUlAYHZSABboSycBOUg5uhPNwCFeBWqAiVoDJUgdugKtwO1eAOqA53Qg2oCbWgNtwFdeBuqAv3QD24F+rDfdAA7oeG8AA0ggehMTwETeBhaAqPQDNoDi2gJbT6H+U/Dz3hBegFvSEJ+kBfeBH6QX8YAC/BQHgZBsErMBhehWQYAkPhNRgGr8NweANGwEgYBW9CLLwFY2AsjIPxkAITYCK8DZPgHZgM78IUmAqpMA2mw3swA2bCLHgfZsMHMAfmwjyYD2nwISyAhZAOH8Ei+BgyYDEsgaWwDJbDClgJq2A1rIG1sA7WwwbYCJtgM2yBrbANtsMO+AR2wqewC3bDHvgM9sLn/2b+qb/L74aAgAIFKlQYgzEYi7GYC3NhbsyNeTAPRjCCcRiH+TAf5sf8WBALYjzGYxEsggYNEhIWxaIYxSgWx+JYAktgKSyFDh0mYAKWxZuwHJbD8lgeK2AFrIiVsBJWwSpYFatiNayG1bE61sAaWAtr4V14F/bBulgX62E9rI/1L92ewkbYCBtjY2yCTbApNsVm2AxbYAtsha2wNbbGNtgG22E7bI/tsQN2wERMxI7YETthJ+yMnbELdsGu2BW7YXfsnvl8DsAX8AXsjTVEH+yLfbEfJucYgC/hS/gyDsJX8BV8FZNxCA7F1/A1fB2H40kcgSNxFI7CquItHINjkcR4TMEUnIgTcRJOwqxC38WpmIrTcDpOxxk4E2fi+zgbP8APcC7OxfmYhmm4ABdiOqbjIjyFGbgYl+BSXIbLcRmuxFW4EtfgWlyD63E9bsSNuBk341bcittxO36CCgA/xd24G5NxL+7FfbgP9+N+PIAHMBMz8SAexEN4CA/jYTyCR/AoHsPjeAxP4Ak8iafwNJ7Gs3gWz+Gz8V83/qTk6mQQWZRQIkbEiFgRK3KJXCK3yC3yiDwiIiIiTsSJfCKfyC/yi4KioIgX8aKIKCKMMIJEGAMAIiqiorgoLkqIEqKUKCWccCJBJIiyoqwoJ8qJ8uIWUUHcKiqKSqKtqyKqiKqinasm7hDVRXVRQ9QUtURtUVvUEXVEXVFX1BP1RH1RXzQQ94uGog8OwAdFVmeaiCHYVAzFZqK5kBc/wVqL4dhGtBXtxONiJI7ADqK1SxRPiY5iDHYSfxNj8RnRRYzHruI50U10Fz3E86KnaON6id5iMvYRfcVU7Cf6iwHiJTEDa4r3cXbOWuJVkSyGiKHiNTEfXxfDxRtihBgpRok3xWjxlhgjxopxYrxIERPERPG2mCTeEZPFu2KKmCpSxTQxXbwnZoiZYpZ4X8wWH4g5Yq6YJ+aLNPGhWCAWinTxkVgkPhYZYrFYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghPhE7xadil9gt9ojPxF7xudgnvhD7xZfigPhKZIqvxUHxjTgkvhWHxXfiiPheHBXHxHHxgzghfhQnxSlxWpwRZ8VP4pz4WZwXXoBEKaSUSgYyRuaQsTKnzCWvkrllcPHZvUbGyWtlPnmdzC8LyIKykIyXhWURqaWRVpIMZVFZTEbl9bK4vEGWkCVlKVlaOllGJsgbZVl5kywnb5bl5S2ygrxVVpSVZGVZRd4mq8rbJUQu7KOGrClrydryLpkEd8u68h5ZT94r68v7ZAN5v2woH5CN5IOysXxINpEPy6byEdlMNpctZEvZSj4qW8vHZBvZVraTj8v28gnZQT4pE+VTsqP0F18iz8gu8lnZVT4nu8nusof8WZ6XXvaSvSX0AdlXvij7yf5yQCwAyJflIPmKHCxflclyiBwqX5PD5OtyuHxDjpAj5Sj5phwt35Jj5Fg5To6XKXKCnCjflpPkO3KyfFdOkVNlqpwmB8iBv8w0S8p/mv/2H+QP/mXvG+UmuVlukVvlNrld7pCfyJ1yp9wld8k9co/cK/fKfXKf3C/3ywPygMyUmfKgPCgPyUPysDwsj8gj8qg8Js/IH+QJ+aM8KU/JU/KMPCvPynMXnwNQqISSSqlAxagcKlblVLnUVSq3ulrlUXlVRF2j4tS1Kp+6TuVXBVRBVUjFq8KqiNLKKKtIhaqoKqai6nq8+IJRpVRp5VQZlaBu/HfyVXF1gyqhSv4m/1J9Sf+gvlaqlWqtWqs2qo1qp9qp9qq96qA6qESVqDqqjqqT6qQ6q86qi+qiuqquqpvqpnqoHqqn6ql6qV4qSSWpvupF1U/1VwPUS2qgelkNUoPUYDVYJatkNVQNVcPUMDVcDVcj1Ag1So1So9VoNUaNUePUOJWiUtRENVFNUpPUZDVZTVFTVKpKVdPVdDVDzVCz1Cw1W81Wc9QcNU/NU2kqTS1QC1S6SleL1CKVoRarxWqpWqqWq+VqpVqpVqvVaq1aq9ar9SpDbVKb1Ba1RW1T29QOtUPtVDvVLrVL7VF71F61V+1T+9R+tV8dUAdUpspUB9VBdUgdUofVYXVEHVFH1VF1XB1XJ9QJdVKdVKfVaXVWnVXn1Dl1Xp3POu0LRCACFaggJogJYoPYIFeQK8gd5A7yBHmCSBAJ4oK4IF9wXZA/KBAUDAoF8UHhoEigAxPYQFxsejS4Pige3BCUCEoGpYLSgQvKBAnBjUHZ4KagXHBzUD64JagQ3BpUDCoFlYMqwW1B1eD2oFpwR1A9uDOoEdQMagW1g7uCOsHdQd3gnqBecG9QP7gvaBDcHzQMHggaBQ8GjYOHgibBw0HT4JGgWdA8aBG0DFr9qfN7f7LAY66X7q2TdB/dV7+o++n+eoB+SQ/UL+tB+hU9WL+qk/UQPVS/pofp1/Vw/YYeoUfqUfpNPVq/pcfosXqcHq9T9AQ9Ub+tJ+l39GT9rp6ip+pUPU1P1+/pGXqmnqXf17P1B3qOnqvn6fk6TX+oF+iFOl1/pBfpj3WGXqyX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfoT/RO/anepXfrPfozvVd/rvfpL/R+/aU+oL/SmfprfVB/ow/pb/Vh/Z0+or/XR/UxfVz/oE/oH/VJfUqf1mf0Wf2TPqd/1ue1zzq5z/p6N8ooE2NiTKyJNblMLpPb5DZ5TB4TMRETZ+JMPpPP5Df5TUFT0MSbeFPEFDFZyJApaoqaqIma4qa4KWFKmFKmlHHGmQSTYMqasqacKWfKm/KmgqlgKpqKprKpbG4zt5nbze3mDnOHudPcaWqamqa2qW3qmDqmrqlr6pl6pr6pbxqYBqahaWgamUamsWlsmpgmpqlpapqZZqaFaWFamVamtWlt2pg2pp1pZ9qb9qaD6WASTaLpaDqaTqaT6Ww6my6mi+lquppuppvpYXqYnqan6WV6mSSTZPqavqaf6WcGmAFmoBloBplBZrAZbJJNshlqhpphZpgZboabEWakGZV1omreMmPMWDPOjDcpJsVMNBPNJDPJTDaTzRQzxaSaVDPdTDczzAwzy8wys81sM8fMMfPMPJNm0swCs8Ckm3SzyCwyGSbDLDFLzDKzzKwwK8wqs8qsMWvMOlhnNpgNZpPZZLaYLWab2WZ2mB1mp9lpdpldZo/ZY/aavWaf2Wf2m/3mgDlgMk2mOWgOmkPmkDlsDpsj5og5ao6a4+a4OWFOmJPmpDltTpuzpsDF70tvYm1Om8teZXPbq20em9f+fVzQFrLxtrAtYrXNbwv8JjbW2hK2pC1lS1tny9gEe+Pv4oq2kq1sq9jbbFV7u632u7iOvdvWtffYevZeW9ve9Zu4vr3PNrAP24aIALa5bWxb2ib2YdvUPmKb2ea2hW1p29snbAf7pE20T2Ud0K9j29E+bRfYhXaVXW3X2LV2l91tT9sz9pD91p61P9letrcdaF+2g+wrdrB91SbbIb+LR9k37Wj7lh1jx9pxdvzv4il2qk210+x0+56dYWf+Lk6zH9rZNt3OsXPtPDv/lzirpnT7kV1kP7YZNoAldqldZpfbFXblpVp9XrvebrAb7U77qd1it9ptdrvdcelE2O62e+xndq/93B6039j99kt7wB62mfbrX+Ks4ztsv7NH7Pf2qD1mj9sf7An7o7qUnXXsP9if7XnrLRASkCRFAcVQDoqlnJSLrqLcdDXlobwUoWsojq6lfHQd5acCVJAKUTwVpiKkyZAlopCKUjGK0vV0qbxSVJoclaEEupHK0k1Ujm6m8nQLVaBbqSJVospUhW6jqnQ7VaM7qDrdSTWoJtWi2nQX1aG7qS7dQ/XoXqpP91EDup8a0gPUiB6kxvQQNaGHqSk9Qs2oObWgltSKHqXW9Bi1obbUjh6n9vQEdaAnKZGeoo70NHWiv1Fneoa60LPUlZ6jbtSdetDz1JNeoF7Um5KoD/WlF6kf9acB9BINpJdpEL1Cg+lVSqYhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSeUmgCTaS3aRK9Q5PpXZpCUymVptF0eo9m0EyaRe/TbPqA5tBcmkfzKY0+pAW0kNLpI1pEH1MGLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBn9BO+pR20W7aQ5/RXvqc9tEXtJ++pAP0FWXS13SQvqFD9C0dpu98b/qejtIxOk4/0An6kU7SKTpNZ+gs/UTn6Gc6T54gxFCEMlRhEMaEOcLYMGeYK7wqzB1eHeYJ84aR8JowLrw2zBdeF+YPC4QFw0JhfFg4LBLq0IQ2pDAMi4bFwmh4fVg8vCEsEZYMS4WlQxeWCRPCG8Oy4U1hufDmsHx4S1ghvDWsGFYKH763SnhbWDW8PawW3hFWD+8Ma4Q1w1ph7fCusE54d1g3vCesF94blgvvCxuE94cNwwfCRuGDYePwobBJ+HDYNHwkbBY2D1uELcNW4aNh6/CxsE3YNmwXPh62D58IO4RPhonhU2HH8Olf1t+38B+vTwr7hH3DF8MXQ+/vkfOi86Np0Q+jC6ILo+nRj6KLoh9HM6KLo0uiS6PLosujK6Iro6uiq6Nromuj66LroxuiG6Pe184BDp1w0ikXuBiXw8W6nC6Xu8rldle7PC6vi7hrXJy71uVz17n8roAr6Aq5eFfYFXHaGWcdudAVdcVc1F3virsbXAlX0pVypZ1zZVyCa+lauVautXvMtXFtXTv3uHvcPeGecE+6J91TrqN72nVyf3Od3TOui3vWPeuec91cd9fDPe96ugl5Lrwnk1xf19f1c/3cADfADXQD3SA3yA12g12yS3ZD3VA3zA1zw91wN8KNcKPcKDfajXZj3Bg3zo1zKS7FTXQT3SQ3yU12k90UN8WlulQ33U13M9wMV3Xmhb3McXPcPDfPpbk0t8BlnTOmu0VukctwGW6JW+KWuWVuhVvhVrlVbo1b49a5dW6D2+A2uU1ui9vitrltbofb4Xa6nW6Xz3thUrfX7XP73H633x1wX7lM97U76L5xh9y37rD7zh1x37uj7pg77n5wJ9yP7qQ75U67M+6s+8mdcz+78867lMiEyMTI25FJkXcikyPvRqZEpkZSI9Mi0yPvRWZEZkZmRd6PzI58EJkTmRuZF5kfSYt8GFkQWRhJj3wUWRT5OJIRWRxZElkaWRZZHvG+8JbQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+Ga+uW/hW/pW/lHf2j/m2/i2vp1/3Lf3T/gO/kmf6J/yHf3TvpP/m+/sn/Fd/LO+q3/Od/PdfQ//vO/pX/C9fG+f5Pv4vv5F38/39wP8S36gf9kP8q/4wf5Vn+yH+KH+NT/Mv+6H+zf8CD/Sj4p504++dIkM432Kn+An+rf9JP+On+zf9VP8VJ/qp/np/j0/w8/0s/z7frb/wM/xc/08P9+n+Q/9Ar/Qp/uP/CL/sc/wiy/dVPYr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/wnfqf/1O/yu/0e/5nf6z/3+/wXfr//0h/wX/lM/7U/6L/xh/y3/rD/zh/x3/uj/pg/7n/wJ/yP/qQ/5U/7M/6s/8mf8z/78/w7a4wxxhhj/5IJl4fit2su3M7v8wc54lcb9wWAq7cWyvz1+qwzynX5L4z7i/j2EQB4qnfXBy8tNWokJSVd3DZDQlBsLsCl/wnKEgOX48XQDp6ARGgLZf+w/v6i+1n6J/NHbwHI9aucWLgcX57/CwBM+oP5H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Qf4HW/6T+nF+mALT5VU5uuBxfrj8BHoOnIfE3WzLGGGOMMcYYYxf0F5U7X7r+vPQTn390fR6vLufkgMvxP7s+Z4wxxhhjjDHG2JX3TPceTz6amNi2878/qPY/yvqXB03hf2tmHvzhwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vn7VcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/t4+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//Q478+g==")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0)

2m48.036908221s ago: executing program 33 (id=1456):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
r0 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x49, &(0x7f00000002c0)=""/73, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_usb_connect(0x1, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101d684"], 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000d00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64, @ANYBLOB=',discard,allow_utime=00000000000000000000153,discard,iocharset=iso8859-3,dmask=00000000000000000130667,codepage=iso8859-15,time_offset=0x00000000000000e5,umask=00000000000000000200001,\x00', @ANYRESHEX=r2], 0x1, 0x152b, &(0x7f0000003300)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0)

2m41.624741718s ago: executing program 3 (id=1492):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x200400, &(0x7f0000000100)={[{@fsync_mode_strict}, {@noquota, 0x0}, {@checkpoint_merge}, {@noquota}, {@background_gc_off}, {@user_xattr}, {@lazytime}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@test_dummy_encryption}, {@nouser_xattr}, {@checkpoint_merge}, {@noinline_xattr}, {@user_xattr}]}, 0x1, 0x5533, &(0x7f0000000200)="$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")

2m40.002938863s ago: executing program 3 (id=1502):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x62)
mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
chdir(&(0x7f0000000000)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0)

2m39.779611565s ago: executing program 3 (id=1505):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r1, 0x943f29b85d1e0907, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x40000)

2m39.522302208s ago: executing program 3 (id=1506):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f00000002c0)={[{@utf8no}, {@utf8}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@rodir}, {@fat=@flush}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@shortname_win95}]}, 0x0, 0x2ce, &(0x7f0000000700)="$eJzs3UFPE00YwPGHFtpSAu2BvMn7Jm98ohe9bKB+gsZAYmyiAWrEg8kiW226tqRbMTVGuHn1E/gBiN48aaLeDRdv3o0XLiZeOIhrut21pSyhjYGt8P8lZIaZfbozzJQ83cDuzq3nDyolxyiZDYmlVGIim7Irkm3VfCN+GfPqCem2KZcmvn/+f3H59rV8oTC3oDqfX7qcU9Wpc+8ePXl5/kNj4ubrqbdJ2c7e2fmW+7L9z/a/Oz+XgleviZi6Uqs1zBXb0tWyUzFUb9iW6VharjpWvaFd/SW7trbWVLO6Opleq1uOo2a1qRWrqY2aNupNNe+Z5aoahqGT6d7hn3rxgSOKewmR/LEMBlEYD2us1/NmPLSzuHUSgwIAAMMlqvz/ftnRsqPVWiu/b73wIfl/TAbI/0XC8n8cqri1sGCS/59yrfw/7b9/9yP/BwAAAAAAAAAAAAAAAAAAAADgb7ArknFdN7Prul4ZfCVFJCUiwfdRjxPHI1h31v9sWlweEf8f91Ii9rP1YkLaZbs/X5Ky2GLJzJjID28/+Nr1+auFuRn1ZOW9vbFebEW2yrgkg/hANjx+th2v3fEbMibp7vPnJCPT4fG5kPjWPC5ecJP+mS0xJCOf7kpNbFn19nUn/ums6pXrhZ74ce84AAAAAABOA0N/O/D53es3NLhtSE9/u7FzfUAynesDc2HXB3o+X4/Kf6PRzRsAAAAAgLPEaT6umLZt1Y+qpDotH/uPGqpK8PyDgcPjIV3BX8REN51UvwePiojf8mZY1qKfSuwPfrzxAVZ57OB+TojIvpbpk9/zr14M8Pbsr/L1Yf+bNqrfSAAAAACOS5D0n5mHZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMIT6vXlYcPyBrj3XdY8I7zpdPJpZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPhVwAAAP//ZXYNzw==")
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

2m39.167284107s ago: executing program 3 (id=1510):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

2m38.327733431s ago: executing program 3 (id=1513):
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
renameat2(r1, &(0x7f0000000040)='./bus\x00', r1, &(0x7f00000001c0)='./bus\x00', 0x5)

2m38.065807165s ago: executing program 34 (id=1513):
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
renameat2(r1, &(0x7f0000000040)='./bus\x00', r1, &(0x7f00000001c0)='./bus\x00', 0x5)

7.829764578s ago: executing program 4 (id=2195):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080))

7.718107964s ago: executing program 4 (id=2198):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.61227204s ago: executing program 4 (id=2201):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31116b876c1d0000007ea60864160af36514001ac00800020007000200050007c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

6.418340402s ago: executing program 4 (id=2205):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584"], 0x0)

6.239307342s ago: executing program 7 (id=2208):
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9)

6.093859379s ago: executing program 7 (id=2211):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='stack :'], 0xf6)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.291712224s ago: executing program 7 (id=2215):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="00300100000044"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

3.069416959s ago: executing program 1 (id=2230):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20)

2.27205684s ago: executing program 1 (id=2232):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)

2.248928072s ago: executing program 4 (id=2233):
open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)

2.134311348s ago: executing program 2 (id=2234):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
shutdown(r0, 0x1)

2.125115278s ago: executing program 4 (id=2235):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000003c0)={0x40, 0x15, 0x3, "00e0df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.013401154s ago: executing program 2 (id=2236):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
rmdir(0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800)
sendmsg$key(0xffffffffffffffff, 0x0, 0x24000000)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16)

1.674286302s ago: executing program 6 (id=2238):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fdfffffffedbdf256600000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&'], 0x34}}, 0x402)

1.662100802s ago: executing program 1 (id=2239):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8001000000000000f9ffffffffffffff020000000000000002000000000000000200000000000000fc0000000000000000000000060000000600000000000000ffffffffffffffff0000000000000000ff0000000000008004000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0100000000000000000000000600000000000000370500000000000036000000050000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b080000bbca826fa0f2e341d1b7d7000003000000000000000100000000000000ff03000000000000000000000000c00105000000bd0000000300000000000000040000000000000001000000000000800000000000000000080000000000000006000000000000000000000005000000700000000040000000080000", @ANYRES32=r2, @ANYBLOB="fbffffff0b0000ac53dc8f0002000000000000000700000000000000020000000100"], 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000100)=""/134, 0x86)
syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.604179305s ago: executing program 2 (id=2240):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2c, 0x1000000, {0x1, 0x0, 0xfc}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000)

1.572181657s ago: executing program 1 (id=2241):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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")
ioprio_get$pid(0x3, r0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000380)={0x428c5200, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.544236759s ago: executing program 6 (id=2242):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f00000041c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x10)

1.424123005s ago: executing program 6 (id=2243):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1000000f, 0x1, 0xa251, 0x36}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.3141047s ago: executing program 2 (id=2244):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xec, 0x8, 0xc4, 0x2, 0x5, 0x2}}, {0x4}}]}]}, 0x68}}, 0x8000)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x3, 0x0, [0x0, 0xa49, 0x2, 0x4], &(0x7f0000000040)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x143, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x83, 0x10, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x9a}, {0x2000, 0xdddd0000, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x3, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x6}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x8, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.288029272s ago: executing program 7 (id=2245):
open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)

1.287625582s ago: executing program 2 (id=2246):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000eeb9800000c00f3235001000000f306c2f800000c00f3266bac0001f1066b808008ed0660f38806f008ee0", 0x47}], 0x1, 0x8, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r0, 0xe29, 0x30bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}]}, 0x28}, 0x1, 0x0, 0x0, 0x60044095}, 0x24040044)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.182743818s ago: executing program 7 (id=2247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22)

1.029843636s ago: executing program 2 (id=2248):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0xb1, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x28501)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, 0x0)
syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11f0, &(0x7f0000002440)="$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")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)

1.018273776s ago: executing program 6 (id=2249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40040)

928.287131ms ago: executing program 7 (id=2250):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab408090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

829.223506ms ago: executing program 6 (id=2251):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x8, 0x3, 0x80, 0x6}, @ipv6=@dccp_packet={0x2, 0x6, 'ZEq', 0x61, 0x21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x7, 0x6, "63b6b9", 0x40, "5b832e"}, "860b52d6a3d7f02fa55ba26d4809d9ae0b17ef7fcd8ccabbabfa513f437c8e9e32aeb425bbbf9a94d41f683da92694dd7ba476a3918239379d8c8b92ae39a3ce11cad347a6f19af7a973faf629ee10ad16"}}}}, 0x97)

712.115402ms ago: executing program 6 (id=2252):
syz_usb_connect$uac1(0x2, 0xa9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010351214804000010003010902970003010e00080904000000010100000a240103000a000201020904010000010200000904010101010200000905010940000003"], 0x0)
close(0x4)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

604.392148ms ago: executing program 1 (id=2253):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40010, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setxattr(0x0, 0x0, 0x0, 0x0, 0x2)
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

0s ago: executing program 1 (id=2254):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})

kernel console output (not intermixed with test programs):

ered promiscuous mode
[  212.044759][ T8132] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  212.292902][ T8141] loop5: detected capacity change from 0 to 512
[  212.467438][  T144] attempt to access beyond end of device
[  212.467438][  T144] loop4: rw=2049, want=45104, limit=40427
[  212.483411][ T8141] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #3: comm syz.5.1183: corrupted inode contents
[  212.502340][ T8141] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #3: comm syz.5.1183: mark_inode_dirty error
[  212.550413][ T8155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1188'.
[  212.563989][ T8141] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #3: comm syz.5.1183: corrupted inode contents
[  212.587347][ T8141] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.1183: mark_inode_dirty error
[  212.607551][ T8141] Quota error (device loop5): write_blk: dquota write failed
[  212.610106][ T8157] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  212.616602][ T8141] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  212.634885][ T8141] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1183: Failed to acquire dquot type 0
[  212.655779][ T8141] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.1183: corrupted inode contents
[  212.672839][ T8141] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #16: comm syz.5.1183: mark_inode_dirty error
[  212.685057][ T8141] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.1183: corrupted inode contents
[  212.698088][ T8141] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.1183: mark_inode_dirty error
[  212.722063][ T8141] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.1183: corrupted inode contents
[  212.738830][ T8141] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  212.748402][ T8141] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.1183: corrupted inode contents
[  212.763239][ T8141] EXT4-fs error (device loop5): ext4_truncate:4286: inode #16: comm syz.5.1183: mark_inode_dirty error
[  212.778347][ T8141] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  212.805005][ T8141] EXT4-fs (loop5): 1 truncate cleaned up
[  212.816494][ T8141] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  212.840775][ T8141] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.914145][ T8141] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 14037762 out of range 0-7
[  212.926243][ T8141] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  212.937261][ T8141] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1183: Failed to acquire dquot type 1
[  213.198346][ T8174] device syzkaller0 entered promiscuous mode
[  213.312667][ T8181] loop4: detected capacity change from 0 to 256
[  213.765817][ T8193] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  213.871420][ T8194] overlayfs: failed to clone upperpath
[  215.504321][ T8176] loop5: detected capacity change from 0 to 40427
[  215.558907][ T8176] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  215.609003][ T8176] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  215.671839][ T8176] F2FS-fs (loop5): invalid crc value
[  215.744348][ T8176] F2FS-fs (loop5): Found nat_bits in checkpoint
[  215.962092][ T8176] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  215.982102][ T8176] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  216.140761][   T26] audit: type=1800 audit(1776963387.598:47): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1192" name="file1" dev="loop5" ino=10 res=0 errno=0
[  216.202837][    T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  216.593112][    T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  216.617071][    T7] usb 5-1: config 0 has no interface number 0
[  216.651474][    T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.716996][    T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.757732][    T7] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  216.777165][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.805639][    T7] usb 5-1: config 0 descriptor??
[  216.837132][    T7] usb 5-1: can't set config #0, error -71
[  216.865666][    T7] usb 5-1: USB disconnect, device number 4
[  216.931136][ T8238] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  218.417111][ T8259] loop3: detected capacity change from 0 to 512
[  218.566810][   T26] audit: type=1800 audit(1776963389.998:48): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1217" name="file1" dev="loop3" ino=1048641 res=0 errno=0
[  218.730784][ T8271] device syzkaller0 entered promiscuous mode
[  218.879090][ T8277] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.174332][ T8290] loop5: detected capacity change from 0 to 512
[  219.300441][ T8296] loop3: detected capacity change from 0 to 256
[  219.363119][ T8290] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,acl,,errors=continue. Quota mode: writeback.
[  219.417471][ T8290] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.522957][ T8305] loop4: detected capacity change from 0 to 4096
[  219.693609][ T8305] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  219.756109][ T8314] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.913099][ T8316] EXT4-fs warning (device loop4): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 3457771641129661933
[  220.035989][ T8321] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  220.257240][ T8323] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1239'.
[  221.207202][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'.
[  221.838105][ T8347] loop4: detected capacity change from 0 to 512
[  222.007589][ T8347] EXT4-fs (loop4): orphan cleanup on readonly fs
[  222.063776][ T8347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1245: inode #1: comm syz.4.1245: iget: illegal inode #
[  222.118899][ T8353] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  222.156402][ T8347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1245: error while reading EA inode 1 err=-117
[  222.208715][ T8347] EXT4-fs (loop4): 1 orphan inode deleted
[  222.216203][ T8347] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  222.319522][ T8347] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1245: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  222.420843][ T8368] device gretap0 entered promiscuous mode
[  222.477064][ T8367] device gretap0 left promiscuous mode
[  222.485149][ T8374] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  222.807341][ T8381] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.894299][ T8381] device syzkaller0 entered promiscuous mode
[  224.117352][ T8381] tipc: Resetting bearer <eth:syzkaller0>
[  224.217087][ T8380] tipc: Resetting bearer <eth:syzkaller0>
[  224.288132][ T8380] tipc: Disabling bearer <eth:syzkaller0>
[  224.313092][ T8396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.339184][ T8396] device syzkaller0 entered promiscuous mode
[  224.395873][ T8396] tipc: Resetting bearer <eth:syzkaller0>
[  224.450403][ T8395] tipc: Resetting bearer <eth:syzkaller0>
[  224.473322][ T8395] tipc: Disabling bearer <eth:syzkaller0>
[  224.495719][ T8402] loop4: detected capacity change from 0 to 256
[  224.541881][ T8402] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  224.672879][  T154] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  224.864526][ T8412] device syzkaller0 entered promiscuous mode
[  225.273460][ T8420] loop4: detected capacity change from 0 to 2048
[  225.442430][ T8420] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec028, mo2=0002]
[  225.467309][ T8420] System zones: 0-4
[  225.524190][ T8420] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,debug,barrier,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback.
[  225.573774][ T8420] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.648341][ T8434] loop5: detected capacity change from 0 to 512
[  225.665142][ T8436] overlayfs: failed to resolve './file0': -2
[  225.698426][ T8438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.708990][ T8439] xt_hashlimit: size too large, truncated to 1048576
[  225.719645][ T8434] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (800000)
[  225.767442][ T8438] device syzkaller0 entered promiscuous mode
[  225.810655][ T8438] tipc: Resetting bearer <eth:syzkaller0>
[  225.833283][ T8435] tipc: Resetting bearer <eth:syzkaller0>
[  225.857977][ T8435] tipc: Disabling bearer <eth:syzkaller0>
[  226.207844][ T8451] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  226.317021][ T8453] ptrace attach of "./syz-executor exec"[8454] was attempted by "./syz-executor exec"[8453]
[  226.820603][ T8461] device syzkaller0 entered promiscuous mode
[  229.187523][ T8490] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  230.602841][ T8507] loop4: detected capacity change from 0 to 2048
[  230.694329][ T8507] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled
[  230.863551][ T8507] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[  230.939344][ T8507] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.623711][ T8513] device syzkaller0 entered promiscuous mode
[  232.555504][ T8538] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  233.894060][ T8520] loop5: detected capacity change from 0 to 40427
[  234.141396][ T8520] F2FS-fs (loop5): invalid crc value
[  234.227150][ T8561] loop3: detected capacity change from 0 to 128
[  234.348571][ T8561] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  234.415228][ T8561] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  234.517255][   T26] audit: type=1800 audit(1776963405.928:49): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1309" name="file1" dev="loop3" ino=1048643 res=0 errno=0
[  234.664290][ T8520] F2FS-fs (loop5): Found nat_bits in checkpoint
[  237.469559][ T8592] loop3: detected capacity change from 0 to 256
[  237.626857][ T4227] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  238.046852][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.082956][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.217093][ T4227] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  238.239388][ T4227] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  238.270408][ T4227] usb 5-1: Manufacturer: syz
[  238.288795][ T4227] usb 5-1: config 0 descriptor??
[  239.135101][ T8607] tipc: Started in network mode
[  239.170765][ T8607] tipc: Node identity ac14140f, cluster identity 4711
[  239.213538][ T4227] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input6
[  239.227915][ T8607] tipc: New replicast peer: 172.20.20.187
[  239.234591][ T8607] tipc: Enabled bearer <udp:syz2>, priority 10
[  239.312126][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1326'.
[  239.328802][ T4227] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input7
[  239.372168][ T4227] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0
[  239.435203][ T4227] usb 5-1: USB disconnect, device number 5
[  239.532378][ T8614] loop5: detected capacity change from 0 to 512
[  239.567347][ T8610] fido_id[8610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  239.690078][ T8614] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1327: iget: bad i_size value: 38620345925642
[  239.734285][ T8614] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1327: couldn't read orphan inode 15 (err -117)
[  239.785745][ T8614] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  239.904701][ T8614] Invalid argument reading file caps for ./file0
[  240.077757][ T5568] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:13: bg 0: block 5: invalid block bitmap
[  240.126458][ T5568] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  240.173453][ T5568] EXT4-fs (loop5): This should not happen!! Data will be lost
[  240.173453][ T5568] 
[  240.224956][ T5568] EXT4-fs (loop5): Total free blocks count 0
[  240.287151][ T5568] EXT4-fs (loop5): Free/Dirty block details
[  240.293177][ T5568] EXT4-fs (loop5): free_blocks=0
[  240.308925][ T5568] EXT4-fs (loop5): dirty_blocks=1
[  240.314018][ T5568] EXT4-fs (loop5): Block reservation details
[  240.407257][ T5568] EXT4-fs (loop5): i_reserved_data_blocks=1
[  240.558039][ T6563] tipc: Node number set to 2886997007
[  240.715506][ T8633] loop4: detected capacity change from 0 to 256
[  242.767020][ T4231] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  242.848806][ T8637] ipt_CLUSTERIP: Please specify destination IP
[  243.006774][ T4231] usb 6-1: Using ep0 maxpacket: 8
[  243.166989][ T4231] usb 6-1: unable to get BOS descriptor or descriptor too short
[  243.417016][ T4231] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  243.441714][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.470311][ T4231] usb 6-1: Product: syz
[  243.474533][ T4231] usb 6-1: Manufacturer: syz
[  243.499945][ T4231] usb 6-1: SerialNumber: syz
[  243.980936][ T4231] usb 6-1: USB disconnect, device number 6
[  244.743022][ T4227] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  245.157101][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.192993][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.222896][ T4227] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  245.270555][ T4227] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  245.285162][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.323471][ T4227] usb 6-1: config 0 descriptor??
[  245.815473][ T4227] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  245.883385][ T4227] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  246.108799][    T7] usb 6-1: USB disconnect, device number 7
[  246.374842][ T8683] xt_hashlimit: size too large, truncated to 1048576
[  246.952974][ T8701] overlayfs: failed to clone upperpath
[  247.003837][ T8698] loop5: detected capacity change from 0 to 512
[  247.750349][ T8698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  247.766837][ T8698] System zones: 1-12
[  247.786597][ T8677] loop3: detected capacity change from 0 to 40427
[  247.920140][ T8677] F2FS-fs (loop3): invalid crc value
[  247.983564][ T8677] F2FS-fs (loop3): Found nat_bits in checkpoint
[  247.990334][ T8698] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1358: missing EA_INODE flag
[  248.045681][ T8698] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1358: error while reading EA inode 12 err=-117
[  248.084067][ T8698] EXT4-fs (loop5): 1 orphan inode deleted
[  248.103684][ T8677] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  248.123789][ T8698] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback.
[  248.392474][ T4195] attempt to access beyond end of device
[  248.392474][ T4195] loop3: rw=2049, want=45112, limit=40427
[  248.432825][ T8711] loop5: detected capacity change from 0 to 256
[  248.520027][ T8711] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d)
[  248.800133][ T8715] input: syz1 as /devices/virtual/input/input8
[  249.165050][ T8733] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  250.081167][ T8768] loop5: detected capacity change from 0 to 512
[  250.307056][ T4173] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  250.350462][ T8778] loop3: detected capacity change from 0 to 256
[  250.373947][ T8778] exfat: Bad value for 'dmask'
[  250.387401][ T8768] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  250.437690][ T8768] ext4 filesystem being mounted at /189/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.012162][ T4173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.022546][ T4173] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  251.057022][ T4173] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  251.378622][ T4173] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  251.394768][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.404418][ T4173] usb 5-1: Product: syz
[  251.414871][ T4173] usb 5-1: Manufacturer: syz
[  251.421632][ T4173] usb 5-1: SerialNumber: syz
[  251.799767][ T8817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  252.245613][ T8825] loop5: detected capacity change from 0 to 4096
[  252.297127][ T8825] EXT4-fs (loop5): Test dummy encryption mode enabled
[  252.344580][ T8825] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003]
[  252.398814][ T8825] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,bsdgroups,test_dummy_encryption,errors=continue,bsddf,noauto_da_alloc,noblock_validity,,errors=continue. Quota mode: writeback.
[  252.596864][ T4173] cdc_ncm 5-1:1.0: bind() failure
[  252.665899][ T4173] cdc_ncm: probe of 5-1:1.1 failed with error -71
[  252.726886][ T4173] cdc_mbim: probe of 5-1:1.1 failed with error -71
[  252.773113][ T4173] usbtest: probe of 5-1:1.1 failed with error -71
[  252.815347][ T4173] usb 5-1: USB disconnect, device number 6
[  252.823270][ T8843] loop5: detected capacity change from 0 to 512
[  252.905691][ T8843] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1403: bad orphan inode 13
[  252.927986][ T8843] ext4_test_bit(bit=12, block=4) = 1
[  252.933385][ T8843] is_bad_inode(inode)=0
[  252.938203][ T8843] NEXT_ORPHAN(inode)=0
[  252.942304][ T8843] max_ino=32
[  252.945519][ T8843] i_nlink=1
[  252.949319][ T8843] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  253.318123][ T8859] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.1403: Hash code is SIPHASH, but hash not in dirent
[  253.373565][ T8859] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1403: Corrupt directory, running e2fsck is recommended
[  253.460650][ T8859] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  254.960997][ T8885] loop3: detected capacity change from 0 to 8192
[  255.121665][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'.
[  256.027451][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  256.033864][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  257.843483][ T8894] xt_hashlimit: size too large, truncated to 1048576
[  258.141973][ T8901] loop3: detected capacity change from 0 to 4096
[  258.186214][ T8901] EXT4-fs (loop3): inline encryption not supported
[  258.198885][ T8901] EXT4-fs (loop3): Test dummy encryption mode enabled
[  258.211064][ T8901] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled
[  258.230671][ T8901] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  258.244921][ T8901] System zones: 0-5
[  258.256148][ T8901] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,grpjquota=./file0,,errors=continue. Quota mode: writeback.
[  258.286075][ T8901] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.1418: iget: bad i_size value: -4294967286
[  258.519670][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.527327][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.220256][ T8887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.278523][ T8887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.793460][ T8917] kvm: MWAIT instruction emulated as NOP!
[  259.819309][ T8915] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  259.834083][ T8915] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  259.916558][ T8887] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.925775][ T8887] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.934808][ T8887] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.943776][ T8887] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.159323][ T8923] loop4: detected capacity change from 0 to 256
[  260.309492][ T8928] loop5: detected capacity change from 0 to 1024
[  260.393262][ T8928] EXT4-fs (loop5): Ignoring removed nobh option
[  260.453278][ T8928] EXT4-fs (loop5): Ignoring removed bh option
[  260.830745][ T8928] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,barrier,commit=0x0000000000000005,i_version,resuid=0x0000000000000000,init_itable,errors=remount-ro,nobh,bh,inode_readahead_blks=0x0000000001000000,. Quota mode: none.
[  261.684105][ T8928] EXT4-fs (loop5): Unrecognized mount option "ext4" or missing value
[  261.971013][ T8950] loop4: detected capacity change from 0 to 1024
[  262.018373][ T8950] EXT4-fs (loop4): Ignoring removed oldalloc option
[  262.025264][ T8950] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.039408][ T5290] EXT4-fs error (device loop5): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /196/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  262.122564][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.148725][ T5290] EXT4-fs error (device loop5): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /196/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  262.148843][ T8950] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,nogrpid,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[  262.199240][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.206237][ T5290] EXT4-fs error (device loop5): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  262.251835][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.261973][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  262.287153][ T5290] EXT4-fs error (device loop5): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /196/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  262.347240][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.358008][ T5290] EXT4-fs error (device loop5): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /196/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  262.421912][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.441145][ T5290] EXT4-fs error (device loop5): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  262.506719][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.527544][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  262.557065][ T5290] EXT4-fs error (device loop5): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /196/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  262.580148][ T8958] mmap: syz.1.1437 (8958): VmData 49217536 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  262.634436][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.643187][ T5290] EXT4-fs error (device loop5): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /196/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  262.727524][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.751509][ T5290] EXT4-fs error (device loop5): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  262.853708][ T5290] EXT4-fs (loop5): Remounting filesystem read-only
[  262.902360][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  262.934169][ T5290] EXT4-fs error (device loop5): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /196/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  263.020294][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  263.057117][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  263.105124][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  263.395166][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  263.731467][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  264.032883][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  264.134000][ T5290] EXT4-fs warning (device loop5): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  266.855735][ T9003] loop4: detected capacity change from 0 to 1024
[  266.915442][ T9003] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  266.946834][ T2303] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  266.998218][ T9003] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  267.041475][ T9003] EXT4-fs (loop4): orphan cleanup on readonly fs
[  267.052648][ T9003] Quota error (device loop4): v2_read_file_info: Can't read info structure
[  267.074729][ T9003] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  267.125408][ T9003] EXT4-fs (loop4): Cannot turn on quotas: error -5
[  267.161287][ T9003] EXT4-fs (loop4): 1 truncate cleaned up
[  267.183551][ T9003] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,jqfmt=vfsold,init_itable,,errors=continue. Quota mode: writeback.
[  267.276325][ T9003] EXT4-fs (loop4): shut down requested (0)
[  267.477038][ T2303] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  267.646972][ T2303] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  267.656434][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.665648][ T2303] usb 4-1: Product: syz
[  267.671715][ T2303] usb 4-1: Manufacturer: syz
[  267.676422][ T2303] usb 4-1: SerialNumber: syz
[  267.970714][ T9001] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  268.769887][ T9046] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  268.881630][ T9031] chnl_net:caif_netlink_parms(): no params data found
[  269.026856][ T2303] cdc_ncm 4-1:1.0: failed to get mac address
[  269.046938][ T9050] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  269.047079][ T2303] cdc_ncm 4-1:1.0: bind() failure
[  269.168976][ T9035] loop4: detected capacity change from 0 to 40427
[  269.176915][ T2303] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  269.197556][ T2303] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  269.226798][ T2303] usbtest: probe of 4-1:1.1 failed with error -71
[  269.252243][ T2303] usb 4-1: USB disconnect, device number 3
[  269.265138][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.279776][ T9035] F2FS-fs (loop4): invalid crc value
[  269.286752][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.294978][ T9031] device bridge_slave_0 entered promiscuous mode
[  269.304049][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.313705][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.375063][ T9031] device bridge_slave_1 entered promiscuous mode
[  269.379339][ T9035] F2FS-fs (loop4): Found nat_bits in checkpoint
[  269.475800][ T9031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.518510][ T9031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.554320][ T9035] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  269.641138][ T9031] team0: Port device team_slave_0 added
[  269.675476][ T9031] team0: Port device team_slave_1 added
[  269.872605][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.879678][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.906588][ T9031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.921117][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.938642][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.660567][   T26] audit: type=1326 audit(1776963441.878:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eff784819 code=0x7ffc0000
[  270.806473][ T4173] Bluetooth: hci1: command 0x0409 tx timeout
[  270.813469][ T9031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.848009][   T26] audit: type=1326 audit(1776963441.878:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eff784819 code=0x7ffc0000
[  270.889885][   T26] audit: type=1326 audit(1776963441.898:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f3eff784819 code=0x7ffc0000
[  270.919620][ T9031] device hsr_slave_0 entered promiscuous mode
[  270.952740][ T9031] device hsr_slave_1 entered promiscuous mode
[  270.978629][   T26] audit: type=1326 audit(1776963441.898:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eff784819 code=0x7ffc0000
[  271.005961][ T9031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.031390][ T9031] Cannot create hsr debugfs directory
[  271.056770][   T26] audit: type=1326 audit(1776963441.898:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eff784819 code=0x7ffc0000
[  271.123660][   T26] audit: type=1326 audit(1776963441.908:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3eff784819 code=0x7ffc0000
[  271.338688][ T9075] device syzkaller0 entered promiscuous mode
[  271.820406][ T9031] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  271.890944][ T9031] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  271.911258][ T9031] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  272.172540][ T9031] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  272.880717][ T9091] loop4: detected capacity change from 0 to 256
[  272.906909][ T4227] Bluetooth: hci1: command 0x041b tx timeout
[  272.937865][ T9091] exfat: Deprecated parameter 'utf8'
[  272.943297][ T9091] exfat: Deprecated parameter 'namecase'
[  273.018180][ T9091] exfat: Deprecated parameter 'namecase'
[  273.023904][ T9091] exfat: Deprecated parameter 'utf8'
[  273.042872][ T9094] loop3: detected capacity change from 0 to 256
[  273.124609][ T9031] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.163885][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  273.182188][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  273.211816][ T9031] 8021q: adding VLAN 0 to HW filter on device team0
[  273.289297][ T9091] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  273.312392][ T9094] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d)
[  273.325649][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  273.339385][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  273.374107][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.381337][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.456052][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  273.482617][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  273.503307][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  273.521324][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.528493][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.542623][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  273.602800][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  273.657713][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  273.723162][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  273.761061][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  273.777313][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  273.786347][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  273.820123][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  273.851042][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  273.880625][ T9031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  273.903413][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  273.917485][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  273.938186][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  274.000416][ T9106] device syzkaller0 entered promiscuous mode
[  274.525839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  274.537151][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  274.570550][ T9031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.976966][ T4227] Bluetooth: hci1: command 0x040f tx timeout
[  275.208517][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  275.224528][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  275.286573][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  275.317391][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  275.358537][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  275.387675][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  275.417638][ T9145] loop4: detected capacity change from 0 to 512
[  275.428568][ T9031] device veth0_vlan entered promiscuous mode
[  275.462980][ T9031] device veth1_vlan entered promiscuous mode
[  275.478064][ T9119] loop3: detected capacity change from 0 to 40427
[  275.547579][ T9119] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[  275.584825][ T9119] F2FS-fs (loop3): invalid crc value
[  275.611409][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  275.617102][ T9145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  275.620595][ T9119] F2FS-fs (loop3): invalid crc value
[  275.660355][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  275.696381][ T9119] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  275.750231][ T9031] device veth0_macvtap entered promiscuous mode
[  275.763132][ T9145] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #12: comm syz.4.1499: Directory block failed checksum
[  275.800054][ T9031] device veth1_macvtap entered promiscuous mode
[  275.894961][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.940516][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.959706][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.975606][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.006814][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.030075][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.097881][ T9031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.105998][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  276.118559][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  276.162114][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  276.237863][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  276.278318][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.307788][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.320932][ T9166] loop3: detected capacity change from 0 to 128
[  276.336455][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.383637][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.430278][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.470168][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.498320][ T9031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.508402][ T9171] netlink: 'syz.4.1508': attribute type 16 has an invalid length.
[  276.530298][ T9171] netlink: 'syz.4.1508': attribute type 17 has an invalid length.
[  276.547029][ T9166] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  276.588040][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  276.634256][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  276.656300][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  276.687065][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  276.708548][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  276.724403][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  276.735071][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  276.745113][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready
[  276.759446][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready
[  276.775720][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready
[  276.827594][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  276.865329][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready
[  276.890187][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  276.919739][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  276.937665][ T9171] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.955185][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  276.964625][ T9171] 8021q: adding VLAN 0 to HW filter on device team0
[  276.993933][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  277.015817][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready
[  277.047019][ T9171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.063555][ T4260] Bluetooth: hci1: command 0x0419 tx timeout
[  277.077492][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  277.104706][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  277.127063][ T9031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.151097][ T9031] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.174056][ T9031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.203709][ T9031] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.463145][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.510909][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.523979][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.548574][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  277.616364][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.655612][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.673318][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.715558][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.744214][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  277.785250][ T9184] IPv6: Can't replace route, no match found
[  277.831322][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.299393][    T9] tipc: Left network mode
[  278.353871][ T9196] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  278.562858][ T9181] loop4: detected capacity change from 0 to 40427
[  278.600192][ T9192] chnl_net:caif_netlink_parms(): no params data found
[  278.674731][ T9181] F2FS-fs (loop4): invalid crc value
[  278.708667][ T9181] F2FS-fs (loop4): Found nat_bits in checkpoint
[  278.866977][ T9181] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  278.925068][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.932526][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.941795][ T9192] device bridge_slave_0 entered promiscuous mode
[  278.958147][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.965523][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.998376][ T9192] device bridge_slave_1 entered promiscuous mode
[  279.419166][ T9220] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  279.816437][ T9192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.825885][ T9223] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  279.837296][ T9192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.866581][ T9192] team0: Port device team_slave_0 added
[  279.875415][ T9192] team0: Port device team_slave_1 added
[  279.949002][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.986542][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.031801][ T9192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.128549][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.155048][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.226498][ T9192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.326872][ T4173] Bluetooth: hci4: command 0x0409 tx timeout
[  280.404345][ T9192] device hsr_slave_0 entered promiscuous mode
[  280.647141][ T9192] device hsr_slave_1 entered promiscuous mode
[  280.660644][ T9192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.668715][ T9192] Cannot create hsr debugfs directory
[  281.090257][    T9] device hsr_slave_0 left promiscuous mode
[  281.190628][    T9] device hsr_slave_1 left promiscuous mode
[  281.207372][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.236795][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.296184][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.301468][ T4173] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  281.339553][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.358728][    T9] device veth1_vlan left promiscuous mode
[  281.365099][    T9] device veth0_vlan left promiscuous mode
[  281.774178][ T4173] usb 5-1: unable to get BOS descriptor or descriptor too short
[  281.800687][    T9] team0 (unregistering): Port device team_slave_1 removed
[  281.840880][    T9] team0 (unregistering): Port device team_slave_0 removed
[  281.874803][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.889509][ T4173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.909044][ T4173] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.959932][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.107042][ T4173] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40
[  282.116178][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.136730][ T4173] usb 5-1: Product: syz
[  282.142803][ T4173] usb 5-1: Manufacturer: syz
[  282.148735][ T4173] usb 5-1: SerialNumber: syz
[  282.171045][    T9] bond0 (unregistering): Released all slaves
[  282.274123][ T9283] tipc: Started in network mode
[  282.306802][ T9283] tipc: Node identity 26e9cf303901, cluster identity 4711
[  282.318852][ T9283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.407116][ T9281] tipc: Resetting bearer <eth:syzkaller0>
[  282.426875][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[  282.524986][ T9280] tipc: Disabling bearer <eth:syzkaller0>
[  282.721783][ T9293] device syzkaller0 entered promiscuous mode
[  282.884015][ T9192] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  282.967412][ T9192] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  282.993119][ T9192] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  283.041960][ T9192] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  283.119074][ T4173] usb 5-1: USB disconnect, device number 7
[  283.462538][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.506545][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  283.534148][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  283.577541][ T9192] 8021q: adding VLAN 0 to HW filter on device team0
[  283.610137][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  283.675538][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  283.720840][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.728235][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.963076][ T4173] Bluetooth: hci4: command 0x040f tx timeout
[  284.966917][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.027519][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  285.058359][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  285.068599][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.075693][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.134689][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  285.158867][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  285.218004][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.273405][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.311482][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  285.347628][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  285.377033][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  285.444044][ T9192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  285.499678][ T9192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  285.543446][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  285.558641][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  285.579689][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  285.600219][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  285.617872][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.176771][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.184389][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  286.232063][ T9192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.007477][ T9378] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1537'.
[  287.836378][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[  288.239287][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1547'.
[  289.864670][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  289.902776][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  290.049481][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  290.074106][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  290.138879][ T9192] device veth0_vlan entered promiscuous mode
[  290.187551][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  290.217960][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  290.233270][ T9192] device veth1_vlan entered promiscuous mode
[  290.435606][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  290.467569][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  290.534879][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  290.612052][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.687839][ T9192] device veth0_macvtap entered promiscuous mode
[  290.765380][ T9192] device veth1_macvtap entered promiscuous mode
[  290.869450][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  290.893030][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  290.937259][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.008258][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.026677][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.046729][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.072599][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.106818][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.160901][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.190514][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  291.210646][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  291.231516][ T9414] xt_hashlimit: size too large, truncated to 1048576
[  291.270461][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.306102][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.369674][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.412707][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.453511][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.488140][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.524711][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.543555][ T9417] loop4: detected capacity change from 0 to 8192
[  291.578418][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  291.612675][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  291.639389][ T9192] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.671211][ T4391]  loop4: p1 < > p2 < > p3 p4 < >
[  291.676862][ T4391] loop4: partition table partially beyond EOD, truncated
[  291.683203][ T9192] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.724482][ T9192] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.754653][ T9192] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.766987][ T4391] loop4: p1 start 67108864 is beyond EOD, truncated
[  291.806362][ T4391] loop4: p3 start 100859904 is beyond EOD, truncated
[  291.856414][ T9417]  loop4: p1 < > p2 < > p3 p4 < >
[  291.899209][ T9417] loop4: partition table partially beyond EOD, truncated
[  291.938284][ T9417] loop4: p1 start 67108864 is beyond EOD, truncated
[  291.981740][ T9417] loop4: p3 start 100859904 is beyond EOD, truncated
[  292.130247][ T3057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.157690][ T3057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.207430][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  292.282819][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.327154][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.334757][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  292.548024][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  292.571882][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  292.684970][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  292.709182][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  292.762397][ T9438] loop7: detected capacity change from 0 to 512
[  292.836734][ T4260] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  292.911905][ T9438] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled
[  293.032298][ T9438] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,usrjquota=./file1,,errors=continue. Quota mode: writeback.
[  293.047574][ T9438] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.126927][ T4260] usb 5-1: Using ep0 maxpacket: 8
[  293.310328][ T4260] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  293.501821][ T9456] loop7: detected capacity change from 0 to 4096
[  293.538273][ T4260] usb 5-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40
[  293.567168][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.606177][ T4260] usb 5-1: Product: syz
[  293.628921][ T4260] usb 5-1: Manufacturer: syz
[  293.633939][ T4260] usb 5-1: SerialNumber: syz
[  293.674449][ T9456] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled
[  293.707235][ T9456] EXT4-fs (loop7): Test dummy encryption mode enabled
[  293.737079][ T9456] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5
[  293.737079][ T9456] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  293.737079][ T9456] 
[  293.833943][ T9456] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a8428018, mo2=0003]
[  293.846851][ T9456] System zones: 0-5
[  293.893201][ T9456] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,usrjquota=./file0,test_dummy_encryption,errors=continue,errors=continue,delalloc,nouser_xattr,,errors=continue. Quota mode: writeback.
[  293.933366][ T9456] EXT4-fs (loop7): shut down requested (2)
[  294.127113][ T4260] usb 5-1: 1:1 : incorrect wMaxPacketSize for BADD profile
[  294.162650][ T4260] usb 5-1: incorrect wMaxPacketSize 0x40 for BADD profile
[  294.280743][ T4260] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  294.325740][ T4260] usb 5-1: USB disconnect, device number 8
[  294.638496][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  295.053796][ T9488] overlayfs: failed to resolve './file0': -2
[  295.082381][ T9496] loop6: detected capacity change from 0 to 256
[  296.961910][ T9503] loop6: detected capacity change from 0 to 40427
[  296.984006][ T9503] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64)
[  297.007417][ T9503] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  297.015898][ T9503] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x6
[  297.036756][ T9503] F2FS-fs (loop6): invalid crc value
[  297.082894][ T9503] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  297.242658][ T9513] loop7: detected capacity change from 0 to 40427
[  297.406353][ T9503] F2FS-fs (loop6): Start checkpoint disabled!
[  297.413017][ T9513] F2FS-fs (loop7): invalid crc value
[  297.454048][ T9503] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  297.485326][ T9513] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  297.516736][ T9503] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  297.761073][ T9513] F2FS-fs (loop7): Start checkpoint disabled!
[  297.815585][ T9513] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  297.977579][    T9] attempt to access beyond end of device
[  297.977579][    T9] loop6: rw=2049, want=45120, limit=40427
[  297.999934][   T26] audit: type=1804 audit(1776963469.458:56): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1574" name="/newroot/6/bus/bus" dev="loop7" ino=10 res=1 errno=0
[  298.037267][ T9513] attempt to access beyond end of device
[  298.037267][ T9513] loop7: rw=2049, want=45104, limit=40427
[  298.100836][ T9572] attempt to access beyond end of device
[  298.100836][ T9572] loop7: rw=2049, want=45104, limit=40427
[  298.121978][   T26] audit: type=1804 audit(1776963469.488:57): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1574" name="/newroot/6/bus/bus" dev="loop7" ino=10 res=1 errno=0
[  298.178824][ T9571] device syzkaller0 entered promiscuous mode
[  298.201681][ T9571] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  298.213985][ T4351] attempt to access beyond end of device
[  298.213985][ T4351] loop7: rw=2049, want=45112, limit=40427
[  299.011446][ T9606] overlayfs: failed to clone upperpath
[  299.174379][ T9611] loop6: detected capacity change from 0 to 256
[  299.366401][ T9611] FAT-fs (loop6): Directory bread(block 64) failed
[  299.386836][ T9611] FAT-fs (loop6): Directory bread(block 65) failed
[  299.393724][ T9611] FAT-fs (loop6): Directory bread(block 66) failed
[  299.428481][ T9611] FAT-fs (loop6): Directory bread(block 67) failed
[  299.465832][ T9611] FAT-fs (loop6): Directory bread(block 68) failed
[  299.486053][ T9611] FAT-fs (loop6): Directory bread(block 69) failed
[  299.507622][ T9611] FAT-fs (loop6): Directory bread(block 70) failed
[  299.537005][ T9611] FAT-fs (loop6): Directory bread(block 71) failed
[  299.553871][ T9611] FAT-fs (loop6): Directory bread(block 72) failed
[  299.578643][ T9611] FAT-fs (loop6): Directory bread(block 73) failed
[  299.897112][ T9619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1599'.
[  300.230034][ T9627] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  300.532928][ T9636] loop6: detected capacity change from 0 to 4096
[  300.649802][ T9636] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  300.789463][   T26] audit: type=1804 audit(1776963472.248:58): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1606" name="/newroot/18/file0/bus" dev="loop6" ino=18 res=1 errno=0
[  300.952248][ T9659] loop7: detected capacity change from 0 to 256
[  301.081927][ T9652] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1606: Invalid inode table block 17005502575612209679 in block_group 0
[  301.236783][ T9636] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1606: Invalid inode table block 17005502575612209679 in block_group 0
[  301.302597][ T9665] overlayfs: failed to get inode (-116)
[  301.331234][ T9665] overlayfs: failed to get inode (-116)
[  301.344440][ T9652] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1606: Invalid inode table block 17005502575612209679 in block_group 0
[  301.357467][ T9665] overlayfs: failed to get inode (-116)
[  301.386462][ T9665] overlayfs: failed to get inode (-116)
[  301.425802][ T9636] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1606: Invalid inode table block 17005502575612209679 in block_group 0
[  301.531560][ T9652] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  301.672355][ T9636] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  301.697402][ T9652] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #18: comm syz.6.1606: mark_inode_dirty error
[  301.746109][ T9671] loop4: detected capacity change from 0 to 512
[  301.754979][ T9636] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.1606: mark_inode_dirty error
[  301.787431][ T9672] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  301.846256][ T9671] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  301.960996][ T4273] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm kworker/u4:6: Invalid inode table block 17005502575612209679 in block_group 0
[  301.985951][ T9671] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1615: iget: bad extra_isize 90 (inode size 256)
[  302.019971][ T4273] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm kworker/u4:6: Invalid inode table block 17005502575612209679 in block_group 0
[  302.038118][ T9671] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1615: error while reading EA inode 11 err=-117
[  302.052092][ T9671] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1615: iget: bad extra_isize 90 (inode size 256)
[  302.107128][ T9671] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1615: error while reading EA inode 11 err=-117
[  302.133236][ T9671] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1615: iget: bad extra_isize 90 (inode size 256)
[  302.157666][ T9671] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1615: error while reading EA inode 18 err=-117
[  302.176471][ T9679] device syzkaller0 entered promiscuous mode
[  302.182776][ T9671] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1615: iget: bad extra_isize 90 (inode size 256)
[  302.214260][ T9671] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1615: error while reading EA inode 18 err=-117
[  302.230787][ T9683] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  302.251203][ T9671] EXT4-fs (loop4): 1 orphan inode deleted
[  302.258357][ T9671] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,dioread_nolock,debug_want_extra_isize=0x000000000000005a,prjquota,init_itable=0x000000000000000a,auto_da_alloc=0x0000000000000005,min_batch_time=0x0000000000008000,usrquota,journal_ioprio=0x0000000000000003,,errors=continue. Quota mode: writeback.
[  302.452608][ T9671] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1615: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  302.889372][ T9711] loop4: detected capacity change from 0 to 128
[  303.047090][ T9711] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  303.108884][ T9711] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  303.744643][ T9696] loop6: detected capacity change from 0 to 40427
[  303.831754][ T9696] F2FS-fs (loop6): invalid crc value
[  303.895025][ T9696] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  304.097345][ T9696] F2FS-fs (loop6): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix.
[  304.149451][ T9696] F2FS-fs (loop6): Failed to read root inode
[  304.671621][ T2303] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  305.056846][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.074220][ T9767] loop7: detected capacity change from 0 to 512
[  305.086715][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.104249][ T2303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  305.126019][ T2303] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  305.145633][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.156398][ T2303] usb 5-1: config 0 descriptor??
[  305.226014][ T9767] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  305.255043][ T9767] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  305.316885][ T4231] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  305.343590][ T9767] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  305.374231][ T9767] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1639: Corrupt directory, running e2fsck is recommended
[  305.398077][ T9767] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  305.398844][ T9756] overlayfs: failed to clone upperpath
[  305.407070][ T9767] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.1639: corrupted in-inode xattr
[  305.464652][ T9767] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1639: couldn't read orphan inode 15 (err -117)
[  305.501605][ T9767] EXT4-fs (loop7): mounted filesystem without journal. Opts: noquota,noblock_validity,nomblk_io_submit,discard,auto_da_alloc,grpjquota=.journal_dev=0x00000000000001ff,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  305.510433][ T9770] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  305.568320][ T9767] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  305.623599][ T9767] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  305.666560][ T2303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd
[  305.684148][ T2303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  305.692009][ T9767] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1639: Corrupt directory, running e2fsck is recommended
[  305.714390][ T2303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  305.731246][ T2303] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  305.752127][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  305.773244][ T2303] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  305.785993][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.803038][ T4231] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  305.840829][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.862522][ T4231] usb 7-1: config 0 descriptor??
[  305.969814][ T2303] usb 5-1: USB disconnect, device number 9
[  306.372705][ T4231] hid-generic 0003:0C70:F0B6.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0
[  308.230063][ T9773] EXT4-fs (loop7): Unrecognized mount option "active_logs=6" or missing value
[  308.586748][ T4173] usb 7-1: reset low-speed USB device number 2 using dummy_hcd
[  308.796538][ T9843] device syzkaller0 entered promiscuous mode
[  308.827767][ T9843] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  309.388751][ T9871] loop7: detected capacity change from 0 to 1024
[  309.424732][ T9871] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5
[  309.424732][ T9871] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  309.424732][ T9871] 
[  309.483677][ T9871] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  309.502646][ T9871] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block
[  309.502646][ T9871] 
[  309.524443][ T9863] overlayfs: failed to clone upperpath
[  309.566014][ T1108] usb 7-1: USB disconnect, device number 2
[  309.956402][ T9892] device syzkaller0 entered promiscuous mode
[  310.007664][ T9892] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  310.225153][   T26] audit: type=1326 audit(1776963481.678:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2522fd819 code=0x0
[  310.290501][ T9906] loop7: detected capacity change from 0 to 16
[  310.346791][ T9906] erofs: (device loop7): mounted with root inode @ nid 36.
[  310.767348][ T9919] loop7: detected capacity change from 0 to 256
[  310.827460][ T9919] exfat: Deprecated parameter 'utf8'
[  310.900791][ T9919] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  311.286838][ T4173] Bluetooth: hci0: command 0x0401 tx timeout
[  311.296946][ T4173] Bluetooth: hci5: command 0x1003 tx timeout
[  311.303244][ T4196] Bluetooth: hci5: sending frame failed (-49)
[  311.427176][ T9936] loop7: detected capacity change from 0 to 256
[  311.566183][ T9936] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d)
[  312.074068][ T9961] device syzkaller0 entered promiscuous mode
[  313.809055][ T1108] Bluetooth: hci5: command 0x1001 tx timeout
[  313.816470][ T4196] Bluetooth: hci5: sending frame failed (-49)
[  315.574938][ T9997] tipc: Started in network mode
[  315.599081][ T9997] tipc: Node identity d61aea723486, cluster identity 4711
[  315.632572][ T9997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.683924][ T9999] tipc: Resetting bearer <eth:syzkaller0>
[  315.729128][ T9994] tipc: Disabling bearer <eth:syzkaller0>
[  315.857130][ T1108] Bluetooth: hci5: command 0x1009 tx timeout
[  317.803276][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.809657][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  318.076982][T10023] loop7: detected capacity change from 0 to 512
[  318.309418][T10023] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  318.356892][T10023] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.604694][T10030] loop4: detected capacity change from 0 to 2048
[  318.814251][T10030]  loop4: p3 < > p4 < >
[  318.818751][T10030] loop4: partition table partially beyond EOD, truncated
[  318.857975][T10030] loop4: p3 start 4284289 is beyond EOD, truncated
[  319.155091][ T3561]  loop4: p3 < > p4 < >
[  319.171294][ T3561] loop4: partition table partially beyond EOD, truncated
[  319.242951][ T3561] loop4: p3 start 4284289 is beyond EOD, truncated
[  319.263066][T10039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1706'.
[  319.291299][T10039] device erspan0 entered promiscuous mode
[  319.396986][T10044] loop7: detected capacity change from 0 to 256
[  319.602178][T10044] FAT-fs (loop7): Directory bread(block 64) failed
[  319.630294][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  319.667390][T10044] FAT-fs (loop7): Directory bread(block 65) failed
[  319.701773][T10044] FAT-fs (loop7): Directory bread(block 66) failed
[  319.704090][T10061] loop4: detected capacity change from 0 to 256
[  319.729293][T10044] FAT-fs (loop7): Directory bread(block 67) failed
[  319.792977][T10044] FAT-fs (loop7): Directory bread(block 68) failed
[  319.823403][T10044] FAT-fs (loop7): Directory bread(block 69) failed
[  319.863127][T10061] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d)
[  319.887015][T10044] FAT-fs (loop7): Directory bread(block 70) failed
[  319.936084][T10044] FAT-fs (loop7): Directory bread(block 71) failed
[  319.969024][T10044] FAT-fs (loop7): Directory bread(block 72) failed
[  319.975737][T10044] FAT-fs (loop7): Directory bread(block 73) failed
[  320.121147][T10073] loop6: detected capacity change from 0 to 128
[  322.194599][T10084] loop7: detected capacity change from 0 to 16
[  322.579242][T10086] loop4: detected capacity change from 0 to 128
[  323.237097][T10086] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  323.265437][T10086] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  323.813523][   T26] audit: type=1800 audit(1776963494.778:60): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1716" name="file1" dev="loop4" ino=1048712 res=0 errno=0
[  323.886158][T10084] erofs: (device loop7): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300)
[  324.219714][T10094] loop6: detected capacity change from 0 to 512
[  325.160191][T10094] EXT4-fs (loop6): Invalid default hash set in the superblock
[  325.418550][T10111] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  325.694853][T10120] loop4: detected capacity change from 0 to 256
[  325.832377][T10120] FAT-fs (loop4): Directory bread(block 64) failed
[  325.859900][T10120] FAT-fs (loop4): Directory bread(block 65) failed
[  325.876842][T10120] FAT-fs (loop4): Directory bread(block 66) failed
[  325.893884][T10120] FAT-fs (loop4): Directory bread(block 67) failed
[  325.927008][T10120] FAT-fs (loop4): Directory bread(block 68) failed
[  325.943935][T10120] FAT-fs (loop4): Directory bread(block 69) failed
[  325.974407][T10120] FAT-fs (loop4): Directory bread(block 70) failed
[  326.001558][T10120] FAT-fs (loop4): Directory bread(block 71) failed
[  326.036819][T10120] FAT-fs (loop4): Directory bread(block 72) failed
[  326.053710][T10120] FAT-fs (loop4): Directory bread(block 73) failed
[  326.306950][T10120] attempt to access beyond end of device
[  326.306950][T10120] loop4: rw=0, want=1196, limit=256
[  326.713195][T10113] loop6: detected capacity change from 0 to 40427
[  326.847021][T10113] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  326.853564][T10113] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  326.927943][T10113] F2FS-fs (loop6): invalid crc value
[  326.978251][T10113] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  327.226485][T10113] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  327.237149][T10113] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  327.586944][ T9031] attempt to access beyond end of device
[  327.586944][ T9031] loop6: rw=2049, want=45104, limit=40427
[  328.605124][T10164] loop6: detected capacity change from 0 to 128
[  330.457271][T10164] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  330.481876][T10164] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  331.126878][   T26] audit: type=1800 audit(1776963501.998:61): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1733" name="file1" dev="loop6" ino=1048714 res=0 errno=0
[  331.405195][T10175] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  332.186860][ T2303] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  332.266829][ T6560] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  332.568177][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.637566][ T6560] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  332.685450][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.903266][ T6560] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.923505][ T2303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  332.956746][ T6560] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  332.973657][ T2303] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  332.983339][ T6560] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.999352][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.009216][ T6560] usb 7-1: config 0 descriptor??
[  333.024345][ T2303] usb 5-1: config 0 descriptor??
[  333.093387][T10180] loop7: detected capacity change from 0 to 40427
[  333.203164][T10180] F2FS-fs (loop7): invalid crc value
[  333.253331][T10180] F2FS-fs (loop7): Found nat_bits in checkpoint
[  333.398068][T10180] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  333.598820][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  333.611112][ T6560] hid-generic 0003:0C70:F0B6.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0
[  333.623165][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  333.630734][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  333.648515][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  333.656835][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  333.664441][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  333.689423][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  333.793114][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  333.956314][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  334.003311][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  334.050313][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  334.096723][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  334.155677][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  334.192240][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  334.240812][ T2303] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  334.271895][ T2303] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  334.306392][ T2303] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  334.371450][ T2303] usb 5-1: USB disconnect, device number 10
[  334.505349][T10206] fido_id[10206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  334.589357][ T6558] usb 7-1: USB disconnect, device number 3
[  335.156115][T10214] loop7: detected capacity change from 0 to 1024
[  335.207271][T10196] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.214757][T10196] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.262934][T10214] EXT4-fs (loop7): Ignoring removed bh option
[  335.454187][T10214] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  336.328015][T10228] loop6: detected capacity change from 0 to 1024
[  336.448527][T10228] EXT4-fs (loop6): Ignoring removed bh option
[  336.566979][T10228] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  336.959895][T10210] loop4: detected capacity change from 0 to 40427
[  337.028409][T10210] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  337.061888][T10210] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  337.123448][T10210] F2FS-fs (loop4): invalid crc value
[  337.163738][T10210] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  337.453258][T10210] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  337.460722][T10210] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  339.946357][T10248] loop4: detected capacity change from 0 to 40427
[  339.970988][T10196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.980523][T10257] loop6: detected capacity change from 0 to 512
[  340.013083][T10248] F2FS-fs (loop4): invalid crc value
[  340.039981][T10196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.078851][T10248] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  340.107099][T10257] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1756: iget: bad i_size value: 38620345925642
[  340.141162][T10257] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1756: couldn't read orphan inode 15 (err -117)
[  340.154681][T10257] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,acl,journal_dev=0x0000000000000011,max_dir_size_kb=0x0000000000000007,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  340.247274][T10248] F2FS-fs (loop4): Start checkpoint disabled!
[  340.258966][T10248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  340.483244][    T9] attempt to access beyond end of device
[  340.483244][    T9] loop4: rw=2049, want=45104, limit=40427
[  340.727725][ T4261] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  340.800572][T10196] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.806091][T10268] loop4: detected capacity change from 0 to 256
[  340.816749][T10196] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.836565][T10196] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.846368][T10268] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d)
[  340.846494][T10196] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.090718][T10241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.118336][ T4261] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.153010][ T4261] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  341.196204][T10241] tipc: Disabling bearer <eth:syzkaller0>
[  341.337074][ T4261] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  341.511303][ T4261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.520299][ T4261] usb 7-1: Product: syz
[  341.524601][ T4261] usb 7-1: Manufacturer: syz
[  341.530249][ T4261] usb 7-1: SerialNumber: syz
[  341.578039][ T4261] cdc_mbim 7-1:1.0: skipping garbage
[  342.048396][T10264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  343.259689][T10264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  343.516924][ T4261] cdc_mbim 7-1:1.0: setting rx_max = 16384
[  343.569050][T10301] loop7: detected capacity change from 0 to 256
[  343.589115][T10301] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  343.606838][T10301] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  343.701727][T10301] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d)
[  343.727296][T10275] loop4: detected capacity change from 0 to 40427
[  343.729930][ T4261] cdc_mbim 7-1:1.0: setting tx_max = 16384
[  343.757187][T10275] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  343.764462][T10275] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  343.819691][T10275] F2FS-fs (loop4): invalid crc value
[  343.968456][T10275] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  345.139826][ T4261] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[  345.335104][ T4261] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 5a:72:1c:61:0e:6e
[  345.426927][ T4261] usb 7-1: USB disconnect, device number 4
[  345.445671][ T4261] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[  345.694536][T10321] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  347.471170][T10348] loop4: detected capacity change from 0 to 256
[  347.564815][T10351] tipc: Started in network mode
[  347.587454][T10348] exfat: Deprecated parameter 'utf8'
[  347.797445][T10351] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  347.835229][T10348] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  347.856860][T10351] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  348.741378][T10363] device syzkaller0 entered promiscuous mode
[  350.189228][T10369] loop4: detected capacity change from 0 to 128
[  351.274057][T10371] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  351.298278][T10369] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  351.322282][T10369] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  351.832911][   T26] audit: type=1800 audit(1776963522.838:62): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1787" name="file1" dev="loop4" ino=1048718 res=0 errno=0
[  353.692673][ T4261] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  355.236314][T10397] loop7: detected capacity change from 0 to 40427
[  355.296992][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  355.372156][T10397] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1ffff
[  355.432716][T10397] F2FS-fs (loop7): invalid crc value
[  355.507069][T10411] device syzkaller0 entered promiscuous mode
[  355.521336][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.535659][ T4261] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  355.545356][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.548420][T10397] F2FS-fs (loop7): Found nat_bits in checkpoint
[  355.570695][ T4261] usb 5-1: config 0 descriptor??
[  355.720683][T10397] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  356.119664][ T4261] hid-generic 0003:0C70:F0B6.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0
[  356.250720][T10448] loop6: detected capacity change from 0 to 128
[  356.541071][T10448] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  356.571885][T10448] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  357.128933][   T26] audit: type=1800 audit(1776963528.078:63): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1803" name="file1" dev="loop6" ino=1048719 res=0 errno=0
[  357.352592][ T9192] attempt to access beyond end of device
[  357.352592][ T9192] loop7: rw=2049, want=45104, limit=40427
[  359.571795][T10475] device syzkaller0 entered promiscuous mode
[  360.301288][T10485] loop7: detected capacity change from 0 to 512
[  360.667702][T10485] EXT4-fs (loop7): Ignoring removed orlov option
[  360.816751][T10491] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  361.351611][T10491] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1815'.
[  362.260883][T10485] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  362.381942][T10485] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.1806: corrupted in-inode xattr
[  362.526525][T10485] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1806: couldn't read orphan inode 15 (err -117)
[  362.611512][T10485] EXT4-fs (loop7): mounted filesystem without journal. Opts: orlov,grpid,usrjquota=,grpid,noload,max_dir_size_kb=0x0000000000000003,init_itable=0x0000000000000009,init_itable,bsdgroups,grpid,norecovery,,errors=continue. Quota mode: none.
[  362.663233][T10500] loop6: detected capacity change from 0 to 256
[  362.735822][T10500] exfat: Bad value for 'uid'
[  364.232061][ T4173] usb 5-1: USB disconnect, device number 11
[  364.770970][T10520] loop6: detected capacity change from 0 to 128
[  364.952884][T10520] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  364.976094][T10520] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  365.540601][   T26] audit: type=1800 audit(1776963536.478:64): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1820" name="file1" dev="loop6" ino=1048720 res=0 errno=0
[  365.993104][T10532] 9pnet: Insufficient options for proto=fd
[  367.176828][ T4173] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  368.981964][T10563] device syzkaller0 entered promiscuous mode
[  369.051036][   T26] audit: type=1326 audit(1776963540.508:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  369.139484][   T26] audit: type=1326 audit(1776963540.528:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  369.753327][   T26] audit: type=1326 audit(1776963541.208:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.159074][   T26] audit: type=1326 audit(1776963541.238:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.200894][T10571] loop4: detected capacity change from 0 to 128
[  370.217965][   T26] audit: type=1326 audit(1776963541.238:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.276213][   T26] audit: type=1326 audit(1776963541.238:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.299853][   T26] audit: type=1326 audit(1776963541.238:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.397142][   T26] audit: type=1326 audit(1776963541.248:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.492935][   T26] audit: type=1326 audit(1776963541.258:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.516083][T10583] loop7: detected capacity change from 0 to 256
[  370.531432][T10560] loop6: detected capacity change from 0 to 40427
[  370.564243][T10583] exfat: Deprecated parameter 'utf8'
[  370.565043][   T26] audit: type=1326 audit(1776963541.268:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.583279][T10583] exfat: Deprecated parameter 'utf8'
[  370.596323][T10586] loop4: detected capacity change from 0 to 256
[  370.604848][   T26] audit: type=1326 audit(1776963541.288:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de636819 code=0x7fc00000
[  370.632571][   T26] audit: type=1326 audit(1776963541.978:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.1.1843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2522fd819 code=0x0
[  370.661127][T10560] F2FS-fs (loop6): invalid crc value
[  370.669211][T10586] exfat: Bad value for 'uid'
[  370.737228][T10583] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  370.751845][T10560] F2FS-fs (loop6): Found nat_bits in checkpoint
[  371.282213][T10599] loop4: detected capacity change from 0 to 8192
[  371.327841][T10583] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  373.936890][T10632] loop4: detected capacity change from 0 to 256
[  373.958281][T10632] exfat: Bad value for 'uid'
[  374.205411][T10607] loop7: detected capacity change from 0 to 40427
[  374.292093][T10607] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  374.336750][T10607] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  374.375146][T10607] F2FS-fs (loop7): invalid crc value
[  374.424372][T10607] F2FS-fs (loop7): Found nat_bits in checkpoint
[  374.546952][ T6558] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  374.618790][T10607] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  374.626854][T10607] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  374.646810][ T4260] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[  374.779861][ T5568] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  374.792310][ T5568] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  374.927021][ T6558] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  374.954808][ T6558] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  375.057376][ T4260] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  375.096638][ T4260] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.136726][ T4260] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  375.145930][ T4260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.147067][ T6558] usb 5-1: New USB device found, idVendor=0582, idProduct=08ae, bcdDevice= 0.40
[  375.186726][ T6558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.205127][ T6558] usb 5-1: Product: syz
[  375.215281][ T6558] usb 5-1: Manufacturer: syz
[  375.223569][ T4260] usb 7-1: config 0 descriptor??
[  375.245713][ T6558] usb 5-1: SerialNumber: syz
[  375.378502][T10660] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  375.717268][ T6558] usb 5-1: Can't get UAC3 power state for id 10
[  375.946890][ T6558] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  375.981647][ T6558] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  376.072141][T10669] loop7: detected capacity change from 0 to 1024
[  376.142665][T10669] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  376.233336][ T6558] usb 5-1: USB disconnect, device number 13
[  376.248564][ T4260] hid-generic 0003:0C70:F0B6.000B: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0
[  376.352031][T10669] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  376.446960][T10669] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  376.509691][T10669] EXT4-fs error (device loop7) in ext4_setattr:5645: error 28
[  376.676392][T10684] EXT4-fs error (device loop7) in ext4_setattr:5645: error 28
[  376.788694][T10672] udevd[10672]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  377.005436][T10702] device syzkaller0 entered promiscuous mode
[  378.371873][ T1108] usb 7-1: USB disconnect, device number 5
[  378.734219][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.740736][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  379.173205][T10718] loop6: detected capacity change from 0 to 8192
[  379.502957][T10724] loop4: detected capacity change from 0 to 256
[  379.619070][T10724] exfat: Deprecated parameter 'utf8'
[  379.692042][T10728] loop7: detected capacity change from 0 to 256
[  379.722374][T10724] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  379.811260][T10728] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d)
[  380.089300][T10742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1899'.
[  380.182361][T10743] overlayfs: missing 'lowerdir'
[  381.785489][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1907'.
[  382.106918][T10785] loop7: detected capacity change from 0 to 256
[  382.131818][T10756] loop4: detected capacity change from 0 to 8192
[  382.149197][T10785] exfat: Bad value for 'uid'
[  382.768335][T10812] overlayfs: missing 'lowerdir'
[  382.828245][T10812] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  383.463270][T10816] netlink: 'syz.2.1921': attribute type 29 has an invalid length.
[  383.527425][T10816] netlink: 'syz.2.1921': attribute type 29 has an invalid length.
[  383.597855][T10816] netlink: 'syz.2.1921': attribute type 29 has an invalid length.
[  384.971219][T10847] loop7: detected capacity change from 0 to 1024
[  385.026445][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'.
[  385.059802][T10847] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  385.198884][T10847] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  385.220069][T10861] loop6: detected capacity change from 0 to 256
[  385.257526][T10847] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  385.336901][T10847] EXT4-fs error (device loop7) in ext4_setattr:5645: error 28
[  385.357738][T10868] EXT4-fs error (device loop7) in ext4_setattr:5645: error 28
[  385.367935][T10861] exfat: Bad value for 'uid'
[  385.708556][T10875] device syzkaller0 entered promiscuous mode
[  386.845671][T10884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  386.852993][T10884] IPv6: NLM_F_CREATE should be set when creating new route
[  386.860312][T10884] IPv6: NLM_F_CREATE should be set when creating new route
[  386.867649][T10884] IPv6: NLM_F_CREATE should be set when creating new route
[  386.964154][T10886] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns
[  387.011626][T10892] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.1947'.
[  387.023092][T10886] pit: kvm: requested 18438 ns i8254 timer period limited to 200000 ns
[  387.063245][T10886] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  387.097226][T10886] pit: kvm: requested 55314 ns i8254 timer period limited to 200000 ns
[  387.149476][T10886] pit: kvm: requested 54476 ns i8254 timer period limited to 200000 ns
[  387.187370][T10886] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns
[  387.212292][T10898] loop6: detected capacity change from 0 to 256
[  387.229322][T10886] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  387.254285][T10898] exfat: Bad value for 'uid'
[  387.277426][T10886] pit: kvm: requested 55314 ns i8254 timer period limited to 200000 ns
[  387.317830][T10886] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns
[  387.359649][T10886] pit: kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[  389.445847][T10933] loop7: detected capacity change from 0 to 1024
[  390.182187][T10933] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  390.438858][T10933] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  391.319587][ T1108] Bluetooth: hci1: command 0x0406 tx timeout
[  391.327551][T10933] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  391.344849][T10933] EXT4-fs error (device loop7) in ext4_setattr:5645: error 28
[  391.362297][T10958] EXT4-fs error (device loop7) in ext4_setattr:5645: error 28
[  392.815518][T10984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1975'.
[  393.754429][T11044] netlink: 'syz.1.1986': attribute type 29 has an invalid length.
[  393.766547][T11043] loop6: detected capacity change from 0 to 256
[  393.775362][T11044] netlink: 'syz.1.1986': attribute type 29 has an invalid length.
[  393.822349][T11050] netlink: 'syz.1.1986': attribute type 29 has an invalid length.
[  393.827212][T11043] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d)
[  393.850258][T11049] loop7: detected capacity change from 0 to 256
[  393.853297][T11044] netlink: 548 bytes leftover after parsing attributes in process `syz.1.1986'.
[  393.913798][T11049] exfat: Deprecated parameter 'utf8'
[  393.988618][T11049] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  394.361588][T11061] block device autoloading is deprecated and will be removed.
[  395.485220][T11070] device syzkaller0 entered promiscuous mode
[  397.259398][T11092] loop4: detected capacity change from 0 to 256
[  397.330750][T11092] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d)
[  397.966054][T11115] loop4: detected capacity change from 0 to 8192
[  398.449159][T11097] loop6: detected capacity change from 0 to 40427
[  398.556546][T11097] F2FS-fs (loop6): invalid crc value
[  398.956076][T11097] F2FS-fs (loop6): Found nat_bits in checkpoint
[  399.729459][T11097] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  400.954948][T11171] loop6: detected capacity change from 0 to 256
[  401.286950][ T4231] Bluetooth: hci4: command 0x0406 tx timeout
[  401.537595][T11171] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d)
[  403.284099][T11201] loop6: detected capacity change from 0 to 40427
[  404.455365][T11201] F2FS-fs (loop6): invalid crc value
[  404.540354][T11201] F2FS-fs (loop6): Found nat_bits in checkpoint
[  404.766058][T11201] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  406.047782][T11261] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  406.636696][ T6558] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  407.346931][ T6558] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.425646][ T6558] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  407.557252][ T6558] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.904703][ T6558] usb 7-1: config 0 descriptor??
[  407.969057][ T6558] pwc: Askey VC010 type 2 USB webcam detected.
[  408.212035][T11301] overlayfs: failed to clone upperpath
[  408.324787][T11302] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  408.401794][T11302] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2054'.
[  408.816501][ T6558] pwc: recv_control_msg error -32 req 02 val 2b00
[  408.878109][ T6558] pwc: recv_control_msg error -32 req 02 val 2700
[  408.916822][ T6558] pwc: recv_control_msg error -32 req 02 val 2c00
[  408.976868][ T6558] pwc: recv_control_msg error -32 req 04 val 1000
[  409.066857][ T6558] pwc: recv_control_msg error -32 req 04 val 1300
[  409.146722][ T6558] pwc: recv_control_msg error -32 req 04 val 1400
[  409.285800][T11321] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  409.406759][ T6558] pwc: recv_control_msg error -71 req 02 val 2100
[  409.436987][ T6558] pwc: recv_control_msg error -71 req 04 val 1500
[  409.456937][ T6558] pwc: recv_control_msg error -71 req 02 val 2500
[  409.666778][ T6558] pwc: recv_control_msg error -71 req 02 val 2400
[  410.853548][ T6558] pwc: recv_control_msg error -71 req 02 val 2600
[  410.886747][ T6558] pwc: recv_control_msg error -71 req 02 val 2900
[  410.906794][ T6558] pwc: recv_control_msg error -71 req 02 val 2800
[  410.926759][ T6558] pwc: recv_control_msg error -71 req 04 val 1100
[  410.946768][ T6558] pwc: recv_control_msg error -71 req 04 val 1200
[  410.986177][ T6558] pwc: Registered as video103.
[  411.004388][ T6558] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9
[  411.109989][ T6558] usb 7-1: USB disconnect, device number 6
[  411.633034][T11313] loop4: detected capacity change from 0 to 40427
[  411.698994][T11313] F2FS-fs (loop4): invalid crc value
[  411.709438][T11355] loop7: detected capacity change from 0 to 8192
[  411.743261][T11313] F2FS-fs (loop4): Found nat_bits in checkpoint
[  411.986088][T11313] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  412.161056][T11380] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  412.600979][ T4261] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  412.710612][T11396] device syzkaller0 entered promiscuous mode
[  412.751644][T11396] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  412.977105][ T4261] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 182, changing to 7
[  413.167080][ T4261] usb 7-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  413.176187][ T4261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.214281][ T4261] usb 7-1: Product: syz
[  413.219326][ T4261] usb 7-1: Manufacturer: syz
[  413.223960][ T4261] usb 7-1: SerialNumber: syz
[  413.616901][ T4261] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  413.634120][T11427] device syzkaller0 entered promiscuous mode
[  413.636818][ T4261] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  413.716942][ T4261] usb 7-1: USB disconnect, device number 7
[  413.989397][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  414.101141][T11441] device syzkaller0 entered promiscuous mode
[  414.266609][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  414.286605][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[  414.306608][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  414.316605][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  414.326606][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  414.336603][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  414.346612][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  414.356610][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  414.816997][ T4228] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  415.266923][ T4228] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  415.275075][ T4228] usb 7-1: config 0 has no interface number 0
[  415.299175][ T4228] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  415.326722][ T4228] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  415.346695][ T4228] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  415.374740][ T4228] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  415.402439][ T4228] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  415.419843][ T4228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.443599][ T4228] usb 7-1: config 0 descriptor??
[  415.468558][T11457] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  415.475683][T11457] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  415.518561][ T4228] ldusb 7-1:0.55: Interrupt in endpoint not found
[  415.734219][ T4228] usb 7-1: USB disconnect, device number 8
[  417.491501][T11507] loop6: detected capacity change from 0 to 128
[  417.538301][T11507] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  417.565428][T11507] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  417.641926][   T26] audit: type=1800 audit(1776963589.038:77): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2112" name="file1" dev="loop6" ino=1048851 res=0 errno=0
[  418.097010][ T2303] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  418.456950][ T2303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  418.492307][ T2303] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  418.524322][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.564799][ T2303] usb 5-1: config 0 descriptor??
[  418.629180][ T2303] pwc: Askey VC010 type 2 USB webcam detected.
[  418.732841][T11551] binder_alloc: 11550: binder_alloc_buf, no vma
[  419.894554][T11567] device syzkaller0 entered promiscuous mode
[  419.996710][ T2303] pwc: recv_control_msg error -32 req 02 val 2b00
[  420.266316][T11572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.296749][T11572] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  420.338129][T11572] tipc: Resetting bearer <eth:syzkaller0>
[  420.375305][T11571] tipc: Disabling bearer <eth:syzkaller0>
[  420.937693][T11581] loop4: detected capacity change from 0 to 256
[  420.986686][ T2303] pwc: recv_control_msg error -32 req 02 val 2700
[  421.006759][ T2303] pwc: recv_control_msg error -71 req 02 val 2c00
[  421.009566][T11581] exfat: Deprecated parameter 'utf8'
[  421.106666][ T2303] pwc: recv_control_msg error -71 req 04 val 1000
[  421.111824][T11581] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  421.126806][ T2303] pwc: recv_control_msg error -71 req 04 val 1300
[  421.146752][ T2303] pwc: recv_control_msg error -71 req 04 val 1400
[  421.176823][ T2303] pwc: recv_control_msg error -71 req 02 val 2000
[  421.206708][ T2303] pwc: recv_control_msg error -71 req 02 val 2100
[  421.242242][ T2303] pwc: recv_control_msg error -71 req 04 val 1500
[  421.276726][ T2303] pwc: recv_control_msg error -71 req 02 val 2500
[  421.296746][ T2303] pwc: recv_control_msg error -71 req 02 val 2400
[  421.316902][ T2303] pwc: recv_control_msg error -71 req 02 val 2600
[  421.346930][ T2303] pwc: recv_control_msg error -71 req 02 val 2900
[  421.366997][ T2303] pwc: recv_control_msg error -71 req 02 val 2800
[  421.406780][ T2303] pwc: recv_control_msg error -71 req 04 val 1100
[  421.426852][ T2303] pwc: recv_control_msg error -71 req 04 val 1200
[  421.458731][ T2303] pwc: Registered as video103.
[  421.488095][ T2303] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[  421.541034][ T2303] usb 5-1: USB disconnect, device number 14
[  421.882201][T11598] loop6: detected capacity change from 0 to 8192
[  422.210465][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'.
[  422.956923][ T4228] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  423.366765][ T4228] usb 5-1: Using ep0 maxpacket: 8
[  423.524323][ T4228] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  423.541430][ T4228] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  423.569218][ T4228] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  423.598035][ T4228] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  423.637224][ T4228] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  423.664460][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.966778][ T4228] usb 5-1: GET_CAPABILITIES returned 0
[  423.972542][ T4228] usbtmc 5-1:16.0: can't read capabilities
[  424.197808][ T4173] usb 5-1: USB disconnect, device number 15
[  426.122695][T11705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2175'.
[  426.260991][T11711] device syzkaller0 entered promiscuous mode
[  426.317274][T11711] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  426.994131][T11740] overlayfs: missing 'lowerdir'
[  427.796744][ T4228] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  428.096983][ T4228] usb 7-1: Using ep0 maxpacket: 32
[  428.443359][ T4228] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  428.460046][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.475026][ T4228] usb 7-1: Product: syz
[  428.481184][ T4228] usb 7-1: Manufacturer: syz
[  428.486353][ T4228] usb 7-1: SerialNumber: syz
[  428.501793][T11782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2201'.
[  428.515991][ T4228] usb 7-1: config 0 descriptor??
[  428.557203][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'.
[  428.584373][T11789] overlayfs: failed to clone lowerpath
[  428.606332][T11789] overlayfs: missing 'lowerdir'
[  428.704887][ T4228] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  428.809782][ T4228] dvb-usb: bulk message failed: -22 (4/0)
[  428.938688][ T4228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  429.080558][ T4228] dvb-usb: bulk message failed: -22 (5/0)
[  429.143366][ T4228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  429.257306][ T4228] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  429.327342][ T4228] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  429.365035][ T4228] usb 7-1: media controller created
[  429.473367][T11806] device syzkaller0 entered promiscuous mode
[  429.483566][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  429.551408][ T4228] usb 7-1: selecting invalid altsetting 3
[  429.570702][ T4228] ttusb2: set interface to alts=3 failed
[  429.714734][ T4228] DVB: Unable to find symbol tda10086_attach()
[  429.737799][ T4228] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  429.826066][T11827] device syzkaller0 entered promiscuous mode
[  429.833514][ T4228] dvb-usb: bulk message failed: -22 (4/0)
[  429.856453][ T4228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  429.911730][ T4228] dvb-usb: bulk message failed: -22 (5/0)
[  429.921997][ T4228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  430.112017][ T1108] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  431.210770][ T4228] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  431.246285][ T4228] usb 7-1: USB disconnect, device number 9
[  431.303547][ T4228] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  431.638883][ T1108] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  431.663054][ T1108] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  431.713736][ T1108] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  431.723284][ T1108] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  431.754598][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  431.803818][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  431.865622][T11854] device syzkaller1 entered promiscuous mode
[  431.998460][ T1108] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  432.007995][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.016028][ T1108] usb 5-1: Product: syz
[  432.031221][ T1108] usb 5-1: Manufacturer: syz
[  432.035912][ T1108] usb 5-1: SerialNumber: syz
[  432.074336][ T1108] usb 5-1: config 0 descriptor??
[  432.107910][T11862] device syzkaller0 entered promiscuous mode
[  432.142660][ T1108] hub 5-1:0.0: bad descriptor, ignoring hub
[  432.149295][ T1108] hub: probe of 5-1:0.0 failed with error -5
[  432.367271][T11867] device syzkaller0 entered promiscuous mode
[  432.467416][ T4228] usb 5-1: USB disconnect, device number 16
[  433.872312][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  433.883058][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:5 Not tainted syzkaller #0
[  433.890732][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  433.900906][ T4198] Workqueue: hci3 hci_rx_work
[  433.905618][ T4198] Call Trace:
[  433.908917][ T4198]  <TASK>
[  433.911878][ T4198]  dump_stack_lvl+0x188/0x250
[  433.916585][ T4198]  ? show_regs_print_info+0x20/0x20
[  433.921807][ T4198]  ? load_image+0x400/0x400
[  433.926323][ T4198]  sysfs_create_dir_ns+0x26a/0x290
[  433.931457][ T4198]  ? sysfs_warn_dup+0xa0/0xa0
[  433.936229][ T4198]  ? process_one_work+0x85f/0x1010
[  433.941352][ T4198]  ? do_raw_spin_unlock+0x11d/0x230
[  433.946655][ T4198]  kobject_add_internal+0x6e0/0xd90
[  433.951873][ T4198]  kobject_add+0x160/0x230
[  433.956300][ T4198]  ? kobject_init+0x1d0/0x1d0
[  433.960987][ T4198]  ? klist_children_get+0x50/0x50
[  433.966175][ T4198]  ? get_device_parent+0x121/0x3f0
[  433.971295][ T4198]  device_add+0x483/0xfb0
[  433.975640][ T4198]  hci_conn_add_sysfs+0xd1/0x1e0
[  433.980672][ T4198]  le_conn_complete_evt+0xc48/0x15c0
[  433.985978][ T4198]  ? cs_le_create_conn+0x5e0/0x5e0
[  433.991199][ T4198]  ? __mutex_trylock_common+0x155/0x260
[  433.996771][ T4198]  hci_le_meta_evt+0x285/0x3c90
[  434.001630][ T4198]  ? hci_event_packet+0x37b/0x1370
[  434.006748][ T4198]  ? __lock_acquire+0x7d10/0x7d10
[  434.011791][ T4198]  ? hci_remote_host_features_evt+0x280/0x280
[  434.017872][ T4198]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  434.023516][ T4198]  ? mark_lock+0x94/0x320
[  434.027848][ T4198]  ? mutex_unlock+0x10/0x10
[  434.032371][ T4198]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  434.038364][ T4198]  ? lock_chain_count+0x20/0x20
[  434.043226][ T4198]  ? __rwlock_init+0x140/0x140
[  434.047999][ T4198]  hci_event_packet+0xe48/0x1370
[  434.052938][ T4198]  ? lockdep_hardirqs_on+0x94/0x140
[  434.058146][ T4198]  ? rcu_lock_release+0x20/0x20
[  434.063003][ T4198]  ? hci_send_to_monitor+0x9c/0x4a0
[  434.068207][ T4198]  hci_rx_work+0x255/0xa10
[  434.072647][ T4198]  process_one_work+0x85f/0x1010
[  434.077613][ T4198]  ? worker_detach_from_pool+0x240/0x240
[  434.083252][ T4198]  ? lockdep_hardirqs_off+0x70/0x100
[  434.088543][ T4198]  ? _raw_spin_lock_irq+0xb7/0xf0
[  434.093573][ T4198]  ? _raw_spin_lock_irqsave+0x100/0x100
[  434.099126][ T4198]  ? wq_worker_running+0x97/0x170
[  434.104223][ T4198]  worker_thread+0xaa6/0x1290
[  434.108937][ T4198]  kthread+0x436/0x520
[  434.113011][ T4198]  ? rcu_lock_release+0x20/0x20
[  434.117861][ T4198]  ? kthread_blkcg+0xd0/0xd0
[  434.122460][ T4198]  ret_from_fork+0x1f/0x30
[  434.126891][ T4198]  </TASK>
[  434.133273][ T4198] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  434.148061][ T4198] Bluetooth: hci3: failed to register connection device
[  434.180287][T11902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2238'.
[  434.196909][ T2303] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  434.567202][T11915] device syzkaller0 entered promiscuous mode
[  434.735294][T11923] device syzkaller1 entered promiscuous mode
[  434.907010][ T2303] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  434.927896][ T2303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.959537][ T2303] usb 5-1: Product: syz
[  434.974664][ T2303] usb 5-1: Manufacturer: syz
[  434.991141][ T2303] usb 5-1: SerialNumber: syz
[  435.013937][ T2303] usb 5-1: config 0 descriptor??
[  435.496753][ T2303] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32
[  435.504854][ T2303] usb 5-1: Firmware version (0.0) predates our first public release.
[  435.513436][ T4231] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  435.546874][ T2303] usb 5-1: Please update to version 0.2 or newer
[  435.612851][ T2303] usb 5-1: Firmware: build 
[  435.617794][ T2303] usb 5-1: atusb_probe: initialization failed, error = -32
[  435.625452][ T2303] atusb: probe of 5-1:0.0 failed with error -32
[  435.816525][ T2303] usb 5-1: USB disconnect, device number 17
[  435.830280][ T4198] ==================================================================
[  435.838876][ T4198] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90
[  435.846722][ T4198] Read of size 1 at addr ffff8880230d7c0a by task kworker/u5:5/4198
[  435.854722][ T4198] 
[  435.857073][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:5 Not tainted syzkaller #0
[  435.864642][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  435.874716][ T4198] Workqueue: hci1 hci_rx_work
[  435.879447][ T4198] Call Trace:
[  435.882845][ T4198]  <TASK>
[  435.885794][ T4198]  dump_stack_lvl+0x188/0x250
[  435.890511][ T4198]  ? show_regs_print_info+0x20/0x20
[  435.895743][ T4198]  ? load_image+0x400/0x400
[  435.900273][ T4198]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  435.905771][ T4198]  ? mutex_lock_io_nested+0x60/0x60
[  435.911018][ T4198]  print_address_description+0x60/0x2d0
[  435.916605][ T4198]  ? hci_le_meta_evt+0x1324/0x3c90
[  435.921842][ T4198]  kasan_report+0xdf/0x130
[  435.926295][ T4198]  ? hci_le_meta_evt+0x1324/0x3c90
[  435.931444][ T4198]  hci_le_meta_evt+0x1324/0x3c90
[  435.936430][ T4198]  ? hci_remote_host_features_evt+0x280/0x280
[  435.942527][ T4198]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  435.948192][ T4198]  ? mark_lock+0x94/0x320
[  435.952546][ T4198]  ? mutex_unlock+0x10/0x10
[  435.957177][ T4198]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  435.963193][ T4198]  ? lock_chain_count+0x20/0x20
[  435.968071][ T4198]  ? __rwlock_init+0x140/0x140
[  435.972878][ T4198]  hci_event_packet+0xe48/0x1370
[  435.977846][ T4198]  ? lockdep_hardirqs_on+0x94/0x140
[  435.983081][ T4198]  ? rcu_lock_release+0x20/0x20
[  435.987965][ T4198]  ? hci_send_to_monitor+0x9c/0x4a0
[  435.993201][ T4198]  hci_rx_work+0x255/0xa10
[  435.997671][ T4198]  process_one_work+0x85f/0x1010
[  436.002754][ T4198]  ? worker_detach_from_pool+0x240/0x240
[  436.008415][ T4198]  ? lockdep_hardirqs_off+0x70/0x100
[  436.013742][ T4198]  ? _raw_spin_lock_irq+0xb7/0xf0
[  436.018807][ T4198]  ? _raw_spin_lock_irqsave+0x100/0x100
[  436.024396][ T4198]  ? wq_worker_running+0x97/0x170
[  436.029449][ T4198]  worker_thread+0xaa6/0x1290
[  436.034196][ T4198]  kthread+0x436/0x520
[  436.038375][ T4198]  ? rcu_lock_release+0x20/0x20
[  436.043247][ T4198]  ? kthread_blkcg+0xd0/0xd0
[  436.047862][ T4198]  ret_from_fork+0x1f/0x30
[  436.052416][ T4198]  </TASK>
[  436.055462][ T4198] 
[  436.057800][ T4198] Allocated by task 11935:
[  436.062326][ T4198]  __kasan_kmalloc+0xb5/0xf0
[  436.066946][ T4198]  __alloc_skb+0x22c/0x750
[  436.071389][ T4198]  vhci_write+0xbc/0x450
[  436.075661][ T4198]  vfs_write+0x745/0xd60
[  436.079932][ T4198]  ksys_write+0x152/0x260
[  436.084287][ T4198]  do_syscall_64+0x4c/0xa0
[  436.088730][ T4198]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  436.094651][ T4198] 
[  436.096991][ T4198] Last potentially related work creation:
[  436.102806][ T4198]  kasan_save_stack+0x35/0x60
[  436.107874][ T4198]  kasan_record_aux_stack+0xb8/0x100
[  436.113207][ T4198]  insert_work+0x54/0x3d0
[  436.117582][ T4198]  __queue_work+0x9c5/0xd50
[  436.122106][ T4198]  queue_work_on+0x124/0x1f0
[  436.126723][ T4198]  l2cap_connect_cfm+0xe5f/0x10f0
[  436.131767][ T4198]  le_conn_complete_evt+0xd42/0x15c0
[  436.137072][ T4198]  hci_le_meta_evt+0x285/0x3c90
[  436.141942][ T4198]  hci_event_packet+0xe48/0x1370
[  436.146911][ T4198]  hci_rx_work+0x255/0xa10
[  436.151414][ T4198]  process_one_work+0x85f/0x1010
[  436.156372][ T4198]  worker_thread+0xaa6/0x1290
[  436.161080][ T4198]  kthread+0x436/0x520
[  436.165183][ T4198]  ret_from_fork+0x1f/0x30
[  436.169632][ T4198] 
[  436.171981][ T4198] Second to last potentially related work creation:
[  436.178579][ T4198]  kasan_save_stack+0x35/0x60
[  436.183373][ T4198]  kasan_record_aux_stack+0xb8/0x100
[  436.188682][ T4198]  call_rcu+0x189/0x950
[  436.192949][ T4198]  sctp_association_free+0x69d/0x7e0
[  436.198257][ T4198]  sctp_do_sm+0x3725/0x55f0
[  436.202786][ T4198]  sctp_endpoint_bh_rcv+0x597/0x7e0
[  436.208012][ T4198]  sctp_rcv+0x1108/0x15e0
[  436.212457][ T4198]  sctp6_rcv+0x35/0x60
[  436.216544][ T4198]  ip6_protocol_deliver_rcu+0x8f6/0x12c0
[  436.222242][ T4198]  ip6_input_finish+0xa2/0x130
[  436.227027][ T4198]  NF_HOOK+0x303/0x390
[  436.231374][ T4198]  NF_HOOK+0x303/0x390
[  436.235460][ T4198]  __netif_receive_skb+0xcc/0x290
[  436.240516][ T4198]  process_backlog+0x370/0x790
[  436.245309][ T4198]  __napi_poll+0xc0/0x430
[  436.249660][ T4198]  net_rx_action+0x4d4/0xa10
[  436.254273][ T4198]  handle_softirqs+0x339/0x830
[  436.259066][ T4198]  do_softirq+0x142/0x210
[  436.263414][ T4198]  __local_bh_enable_ip+0x180/0x1c0
[  436.268637][ T4198]  ip6_finish_output2+0x1127/0x1510
[  436.273866][ T4198]  ip6_xmit+0x109b/0x16d0
[  436.278211][ T4198]  sctp_v6_xmit+0x985/0x11b0
[  436.282819][ T4198]  sctp_packet_transmit+0x239c/0x2910
[  436.288211][ T4198]  sctp_packet_singleton+0x231/0x330
[  436.293532][ T4198]  sctp_outq_flush+0x4ac/0x3100
[  436.298406][ T4198]  sctp_do_sm+0x4ee2/0x55f0
[  436.302922][ T4198]  sctp_primitive_ASSOCIATE+0x91/0xc0
[  436.308299][ T4198]  sctp_sendmsg_to_asoc+0x14a7/0x1d90
[  436.313682][ T4198]  sctp_sendmsg+0x196a/0x2900
[  436.318370][ T4198]  __sys_sendto+0x46d/0x620
[  436.322900][ T4198]  __x64_sys_sendto+0xda/0xf0
[  436.327585][ T4198]  do_syscall_64+0x4c/0xa0
[  436.332005][ T4198]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  436.337899][ T4198] 
[  436.340224][ T4198] The buggy address belongs to the object at ffff8880230d7800
[  436.340224][ T4198]  which belongs to the cache kmalloc-1k of size 1024
[  436.354367][ T4198] The buggy address is located 10 bytes to the right of
[  436.354367][ T4198]  1024-byte region [ffff8880230d7800, ffff8880230d7c00)
[  436.368278][ T4198] The buggy address belongs to the page:
[  436.373927][ T4198] page:ffffea00008c3400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x230d0
[  436.384106][ T4198] head:ffffea00008c3400 order:3 compound_mapcount:0 compound_pincount:0
[  436.392570][ T4198] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  436.400656][ T4198] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0
[  436.409244][ T4198] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  436.417920][ T4198] page dumped because: kasan: bad access detected
[  436.424356][ T4198] page_owner tracks the page as allocated
[  436.430135][ T4198] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4195, ts 60821281706, free_ts 60786686738
[  436.448678][ T4198]  get_page_from_freelist+0x1bbd/0x1ca0
[  436.454305][ T4198]  __alloc_pages+0x1ee/0x480
[  436.458901][ T4198]  new_slab+0xc0/0x4b0
[  436.462978][ T4198]  ___slab_alloc+0x80a/0xdd0
[  436.467754][ T4198]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  436.473563][ T4198]  __alloc_skb+0x22c/0x750
[  436.478072][ T4198]  inet6_rt_notify+0xdd/0x290
[  436.482758][ T4198]  fib6_add+0x1d4d/0x3d40
[  436.487091][ T4198]  ip6_ins_rt+0xd3/0x130
[  436.491344][ T4198]  __ipv6_ifa_notify+0x4e4/0xe60
[  436.496395][ T4198]  add_addr+0x1aa/0x2c0
[  436.500552][ T4198]  add_v4_addrs+0x768/0xcc0
[  436.505058][ T4198]  addrconf_init_auto_addrs+0x7b0/0xb00
[  436.510603][ T4198]  addrconf_notify+0xa6b/0xf00
[  436.515544][ T4198]  raw_notifier_call_chain+0xcb/0x160
[  436.520916][ T4198]  __dev_notify_flags+0x194/0x300
[  436.525945][ T4198] page last free stack trace:
[  436.530614][ T4198]  free_unref_page_prepare+0x637/0x6c0
[  436.536079][ T4198]  free_unref_page+0x8f/0x2a0
[  436.540762][ T4198]  __unfreeze_partials+0x1a5/0x200
[  436.545877][ T4198]  put_cpu_partial+0x12d/0x190
[  436.550741][ T4198]  qlist_free_all+0x35/0x90
[  436.555345][ T4198]  kasan_quarantine_reduce+0x150/0x160
[  436.560810][ T4198]  __kasan_slab_alloc+0x2f/0xd0
[  436.565668][ T4198]  slab_post_alloc_hook+0x4c/0x380
[  436.570781][ T4198]  kmem_cache_alloc_trace+0x103/0x2a0
[  436.576159][ T4198]  netdevice_event+0x324/0x900
[  436.580937][ T4198]  raw_notifier_call_chain+0xcb/0x160
[  436.586318][ T4198]  dev_set_mac_address+0x2e8/0x400
[  436.591444][ T4198]  dev_set_mac_address_user+0x2d/0x50
[  436.596838][ T4198]  do_setlink+0x8b0/0x3d60
[  436.601274][ T4198]  rtnl_newlink+0x1658/0x1a50
[  436.605992][ T4198]  rtnetlink_rcv_msg+0x844/0xf30
[  436.610938][ T4198] 
[  436.613300][ T4198] Memory state around the buggy address:
[  436.618947][ T4198]  ffff8880230d7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.627030][ T4198]  ffff8880230d7b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  436.635292][ T4198] >ffff8880230d7c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  436.643367][ T4198]                       ^
[  436.647706][ T4198]  ffff8880230d7c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  436.655769][ T4198]  ffff8880230d7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  436.663847][ T4198] ==================================================================
[  436.671906][ T4198] Disabling lock debugging due to kernel taint
[  436.711968][ T4198] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  436.716780][ T4231] usb 7-1: unable to get BOS descriptor or descriptor too short
[  436.719216][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:5 Tainted: G    B             syzkaller #0
[  436.735801][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  436.745882][ T4198] Workqueue: hci1 hci_rx_work
[  436.750596][ T4198] Call Trace:
[  436.753893][ T4198]  <TASK>
[  436.756931][ T4198]  dump_stack_lvl+0x188/0x250
[  436.761629][ T4198]  ? show_regs_print_info+0x20/0x20
[  436.766847][ T4198]  ? load_image+0x400/0x400
[  436.771385][ T4198]  panic+0x2e5/0x810
[  436.775324][ T4198]  ? bpf_jit_dump+0xd0/0xd0
[  436.779849][ T4198]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  436.785950][ T4198]  ? _raw_spin_unlock+0x40/0x40
[  436.790825][ T4198]  ? hci_le_meta_evt+0x1324/0x3c90
[  436.795959][ T4198]  check_panic_on_warn+0x80/0xa0
[  436.801010][ T4198]  ? hci_le_meta_evt+0x1324/0x3c90
[  436.806144][ T4198]  end_report+0x6d/0xf0
[  436.810319][ T4198]  kasan_report+0x102/0x130
[  436.814851][ T4198]  ? hci_le_meta_evt+0x1324/0x3c90
[  436.820068][ T4198]  hci_le_meta_evt+0x1324/0x3c90
[  436.825022][ T4198]  ? hci_remote_host_features_evt+0x280/0x280
[  436.831211][ T4198]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  436.836936][ T4198]  ? mark_lock+0x94/0x320
[  436.841313][ T4198]  ? mutex_unlock+0x10/0x10
[  436.846078][ T4198]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  436.852059][ T4198]  ? lock_chain_count+0x20/0x20
[  436.856915][ T4198]  ? __rwlock_init+0x140/0x140
[  436.861682][ T4198]  hci_event_packet+0xe48/0x1370
[  436.866630][ T4198]  ? lockdep_hardirqs_on+0x94/0x140
[  436.871835][ T4198]  ? rcu_lock_release+0x20/0x20
[  436.876691][ T4198]  ? hci_send_to_monitor+0x9c/0x4a0
[  436.881910][ T4198]  hci_rx_work+0x255/0xa10
[  436.886334][ T4198]  process_one_work+0x85f/0x1010
[  436.891280][ T4198]  ? worker_detach_from_pool+0x240/0x240
[  436.896934][ T4198]  ? lockdep_hardirqs_off+0x70/0x100
[  436.902223][ T4198]  ? _raw_spin_lock_irq+0xb7/0xf0
[  436.907253][ T4198]  ? _raw_spin_lock_irqsave+0x100/0x100
[  436.912801][ T4198]  ? wq_worker_running+0x97/0x170
[  436.917834][ T4198]  worker_thread+0xaa6/0x1290
[  436.922524][ T4198]  kthread+0x436/0x520
[  436.926597][ T4198]  ? rcu_lock_release+0x20/0x20
[  436.931450][ T4198]  ? kthread_blkcg+0xd0/0xd0
[  436.936128][ T4198]  ret_from_fork+0x1f/0x30
[  436.940555][ T4198]  </TASK>
[  436.943861][ T4198] Kernel Offset: disabled
[  436.948189][ T4198] Rebooting in 86400 seconds..