last executing test programs:

3m44.883306291s ago: executing program 2 (id=1420):
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000", 0x4}], 0x1}, 0x40810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m43.756285927s ago: executing program 2 (id=1426):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16)
close(0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff)
rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00')
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)

3m42.282124642s ago: executing program 2 (id=1430):
mkdir(&(0x7f0000000000)='proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0)
lseek(r1, 0x186a0, 0x0)

3m37.853292647s ago: executing program 2 (id=1436):
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000", 0x4}], 0x1}, 0x40810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m35.792411316s ago: executing program 2 (id=1439):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='my_configfs/nullb/nullb1/size\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1024\x00', 0x5)

3m34.934253066s ago: executing program 2 (id=1442):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000c52, &(0x7f0000000200)=ANY=[], 0xfd, 0x296, &(0x7f0000001080)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
socket(0x3, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc0b913efba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1020060bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b43706192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, &(0x7f0000000100))

3m19.50111144s ago: executing program 32 (id=1442):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000c52, &(0x7f0000000200)=ANY=[], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
socket(0x3, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc0b913efba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1020060bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b43706192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, &(0x7f0000000100))

2m44.016655128s ago: executing program 5 (id=1578):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020)
symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
mount$nfs(&(0x7f0000000340)=')./.,\x00', 0x0, 0x0, 0x80000, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

2m42.843601446s ago: executing program 5 (id=1580):
mkdir(&(0x7f0000000000)='proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44010)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0)
lseek(r1, 0x186a0, 0x0)

2m41.620467434s ago: executing program 5 (id=1584):
r0 = socket$kcm(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104eef606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000600)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af4362", 0x64}], 0x5}, 0x40000)

2m40.571386159s ago: executing program 5 (id=1587):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0xc00000000000018, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$sndseq(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x20000050)
mount$bpf(0x0, 0x0, 0x0, 0x1e4062, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000005b00)={0x2020}, 0x2020)
r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r4, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x11)

2m36.772453629s ago: executing program 5 (id=1593):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)

2m34.484249513s ago: executing program 5 (id=1598):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x2]}}], 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff)

2m19.323821031s ago: executing program 33 (id=1598):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x2]}}], 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff)

13.270996827s ago: executing program 0 (id=2014):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)

11.788284551s ago: executing program 1 (id=2016):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc)

11.536364888s ago: executing program 1 (id=2018):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
read$hidraw(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0')

8.845442141s ago: executing program 6 (id=2023):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
socket$inet_smc(0x2b, 0x1, 0x0)
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0x13)

8.844218851s ago: executing program 1 (id=2024):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
lseek(r1, 0x2000, 0x0)
syz_usbip_server_init(0x5)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

8.534822698s ago: executing program 3 (id=2025):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}}, 0x0)

8.171925767s ago: executing program 3 (id=2027):
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000300))
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f00000001c0)=[{}], 0x1, 0x9)
close(0xffffffffffffffff)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8)
lseek(0xffffffffffffffff, 0xc, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x140)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040884}, 0x80)
fstat(r0, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f00000004c0))
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0xd})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

8.020255271s ago: executing program 0 (id=2028):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc)

7.307859797s ago: executing program 1 (id=2031):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

7.159050631s ago: executing program 0 (id=2032):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
pipe(&(0x7f0000000000))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x10100, 0x0, 0x0, 0x3, 0xfc60, 0xd6a9, 0x2000000}, 0x20)
r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a5e438, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYBLOB="487363ecb80ae4700609b76d1cf247ed3c", @ANYRES32, @ANYRESOCT=r1, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0)

6.705507152s ago: executing program 4 (id=2033):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f00000010c0))
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, 0x0, 0x0, 0x200)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0x7}, 0x1c)
setsockopt(r5, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r7, &(0x7f00000003c0)='\\x01000000 2000000000 0 - 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f', 0x6b)
getgroups(0x0, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)

6.685985962s ago: executing program 3 (id=2034):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0}, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

3.848402949s ago: executing program 6 (id=2035):
r0 = syz_open_dev$sg(&(0x7f0000000100), 0x6f5e, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001380)={0x53, 0xfffffffffffffffe, 0x6, 0x8f, @scatter={0x0, 0x0, 0x0}, &(0x7f00000005c0)="37d10558870d", 0x0, 0x86, 0x10036, 0x2001, 0x0})

3.779805821s ago: executing program 0 (id=2036):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x1c}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x4000, 0x9, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x17c1, 0xe, 0x0, @opaque="597d89794ee3"}}}}}}, 0x38)

3.474242058s ago: executing program 6 (id=2037):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}}, 0x0)

3.436208799s ago: executing program 4 (id=2038):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000180))

3.434284769s ago: executing program 1 (id=2039):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f3239000800034000000007200004800600010000020000"], 0xcd0}}, 0x0)

3.069057007s ago: executing program 6 (id=2040):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.999080649s ago: executing program 4 (id=2041):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x70}}, 0x20008800)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r2, &(0x7f0000000180)='nullb1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='my_configfs/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='1\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380), 0x0)

2.998465559s ago: executing program 0 (id=2042):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc)

2.928093091s ago: executing program 3 (id=2043):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020)
rename(0x0, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
mount$nfs(&(0x7f0000000340)=')./.,\x00', 0x0, 0x0, 0x80000, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

2.732250356s ago: executing program 4 (id=2044):
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000300))
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f00000001c0)=[{}], 0x1, 0x9)
close(0xffffffffffffffff)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8)
lseek(0xffffffffffffffff, 0xc, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x140)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040884}, 0x80)
fstat(r0, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f00000004c0))
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0xd})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

2.591600679s ago: executing program 0 (id=2045):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
socket$inet_smc(0x2b, 0x1, 0x0)
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0x13)

2.232459227s ago: executing program 3 (id=2046):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
pipe(&(0x7f0000000000))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x10100, 0x0, 0x0, 0x3, 0xfc60, 0xd6a9, 0x2000000}, 0x20)
r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a5e438, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYBLOB="487363ecb80ae4700609b76d1cf247ed3c", @ANYRES32, @ANYRESOCT=r1, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0)

1.436379676s ago: executing program 4 (id=2047):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x140, 0x80, 0x30, 0x0, 0x66006a52, 0x8, 0x20, 0x1, {0x7, 0x2}, {0x7, 0x2, 0x1}, {0x401, 0x7}, {0x3, 0xe, 0x1}, 0x2, 0x80, 0x28000000, 0x8, 0x1, 0x2, 0x1, 0x7, 0x61, 0xfff, 0x9, 0xf56, 0x68, 0x1, 0x1, 0x8})

1.370921247s ago: executing program 6 (id=2048):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14", 0x0, 0x20006, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.184006442s ago: executing program 4 (id=2049):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

698.024813ms ago: executing program 1 (id=2050):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000001c0)=0x4)
r2 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337})
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="91c71d68e839e5adb10dcd487bfcdb101b90de0864788969ff89a904f838bce0e3ad305ad16c0b7c77b53f965648fcb2435c5734d2d9c61374b5437cfe1c410a0e8dc435be"])
syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

179.261925ms ago: executing program 6 (id=2051):
syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

0s ago: executing program 3 (id=2052):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x240, 0x2a8, 0x2a8, 0x240, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}, {0xfff}}}, @common=@addrtype={{0x30}, {0x178, 0x9, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x1}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x2, 0x2, 0x0, 0x2, 0x1], 0x4, 0x7}, {0x2, [0x4, 0x2, 0x0, 0x5, 0x2, 0x3], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc)

kernel console output (not intermixed with test programs):

stem without journal. Quota mode: none.
[  305.786245][ T7883] loop2: detected capacity change from 0 to 32768
[  305.921246][ T7902] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  306.025134][ T7883] (syz.2.1274,7883,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  306.048909][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  306.213746][ T7883] (syz.2.1274,7883,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  306.363578][ T7883] JBD2: Ignoring recovery information on journal
[  307.184654][ T4318] usb 38-1: device descriptor read/8, error -110
[  307.253085][ T7883] JBD2: recovery failed
[  307.267774][ T7883] (syz.2.1274,7883,0):ocfs2_journal_load:1135 ERROR: Failed to load journal!
[  307.318248][ T7883] (syz.2.1274,7883,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5
[  307.362686][ T7918] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1281'.
[  307.455454][ T7883] (syz.2.1274,7883,0):ocfs2_check_volume:2487 ERROR: status = -5
[  307.536544][ T7883] (syz.2.1274,7883,0):ocfs2_mount_volume:1821 ERROR: status = -5
[  307.611547][ T7883] (syz.2.1274,7883,0):ocfs2_fill_super:1176 ERROR: status = -5
[  307.635416][ T4318] usb usb38-port1: attempt power cycle
[  308.429609][ T4318] usb usb38-port1: unable to enumerate USB device
[  311.177511][ T7956] loop4: detected capacity change from 0 to 512
[  311.916420][ T7956] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 16777240: comm syz.4.1292: invalid block
[  311.930682][ T7956] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1292: couldn't read orphan inode 11 (err -117)
[  311.949511][ T7956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  312.160032][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  312.324525][ T3732] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  312.517957][ T7968] loop4: detected capacity change from 0 to 32768
[  312.548498][ T7970] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  312.561266][ T7968] (syz.4.1298,7968,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  312.575431][ T7968] (syz.4.1298,7968,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  312.612548][ T7968] JBD2: Ignoring recovery information on journal
[  312.624391][ T3732] usb 2-1: Using ep0 maxpacket: 16
[  312.632578][ T3732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.702621][ T3732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.713716][ T7968] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  312.729039][ T3732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  312.758435][ T3732] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  312.784614][ T3732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.849830][ T3732] usb 2-1: config 0 descriptor??
[  313.311665][ T3732] usbhid 2-1:0.0: can't add hid device: -71
[  313.348259][ T3732] usbhid: probe of 2-1:0.0 failed with error -71
[  313.385974][ T3732] usb 2-1: USB disconnect, device number 8
[  313.636712][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  314.586947][ T7980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  315.746808][ T8005] futex_wake_op: syz.3.1310 tries to shift op by 144; fix this program
[  316.075029][ T8009] loop3: detected capacity change from 0 to 128
[  317.028369][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.034776][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.187016][ T4318] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  317.378425][ T4318] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  317.404559][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.440959][ T4318] usb 1-1: Product: syz
[  317.448388][ T4318] usb 1-1: Manufacturer: syz
[  317.471451][ T4318] usb 1-1: SerialNumber: syz
[  317.681025][ T8033] overlayfs: failed to resolve './file1': -2
[  318.683447][ T8016] loop2: detected capacity change from 0 to 32768
[  318.740626][ T8016] (syz.2.1313,8016,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  318.805312][ T8016] (syz.2.1313,8016,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  318.843189][ T4318] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  318.875408][ T4318] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  318.892902][ T4318] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  318.927577][ T8016] JBD2: Ignoring recovery information on journal
[  319.167044][ T8016] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  319.598331][ T8038] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  319.644451][ T8038] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  319.698689][ T8038] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  319.798360][ T8038] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  320.028374][ T4318] usb 1-1: USB disconnect, device number 6
[  320.154378][ T4282] ocfs2: Unmounting device (7,2) on (node local)
[  320.784621][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout
[  321.664517][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout
[  321.853077][ T8074] loop3: detected capacity change from 0 to 32768
[  321.864695][ T4279] Bluetooth: hci3: command 0x0c1a tx timeout
[  321.865197][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout
[  321.882314][ T8074] (syz.3.1335,8074,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  321.896389][ T8074] (syz.3.1335,8074,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  321.977164][ T8074] JBD2: Ignoring recovery information on journal
[  322.125839][ T8074] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  322.723032][ T8082] loop2: detected capacity change from 0 to 64
[  323.133438][ T4287] ocfs2: Unmounting device (7,3) on (node local)
[  323.605294][ T8089] loop2: detected capacity change from 0 to 256
[  326.994585][ T8108] Bluetooth: hci0: unsupported parameter 255
[  327.000664][ T8108] Bluetooth: hci0: unsupported parameter 255
[  327.129561][ T8110] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  327.195213][ T8110] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  327.224815][ T8110] udc dummy_udc.0: failed to start g1: -22
[  327.245903][ T8110] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  327.287135][ T8110] UDC core: g1: couldn't find an available UDC or it's busy
[  327.645042][ T8103] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  331.485840][ T8193] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  332.378083][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1364'.
[  335.781843][ T8269] loop1: detected capacity change from 0 to 128
[  336.743876][ T8276] loop3: detected capacity change from 0 to 128
[  336.859092][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1376'.
[  342.642749][ T8356] loop1: detected capacity change from 0 to 128
[  346.284046][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'.
[  346.303867][ T8428] 9pnet_virtio: no channels available for device syz
[  347.480693][ T8438] loop2: detected capacity change from 0 to 128
[  348.232548][ T8449] loop1: detected capacity change from 0 to 256
[  348.291985][ T8452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'.
[  348.748013][ T8449] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  348.805967][ T8449] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  349.404726][ T4345] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  349.664454][ T4345] usb 2-1: Using ep0 maxpacket: 8
[  349.672894][ T4345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  349.799861][ T4345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  349.919789][ T4345] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  350.048666][ T4345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24929, setting to 1024
[  350.219323][ T4345] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  350.360411][ T4345] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  350.429030][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.561442][ T4345] usb 2-1: config 0 descriptor??
[  350.656788][ T8449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  352.374871][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  352.384259][ T4386] usb 2-1: USB disconnect, device number 9
[  353.468890][ T8523] loop4: detected capacity change from 0 to 128
[  354.284612][ T4318] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  354.504467][ T4318] usb 5-1: Using ep0 maxpacket: 32
[  354.515012][ T4318] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  354.523658][ T4318] usb 5-1: config 0 has no interface number 0
[  354.530746][ T4318] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  354.546942][ T4318] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  354.609440][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.712260][ T4318] usb 5-1: Product: syz
[  354.735015][ T4318] usb 5-1: Manufacturer: syz
[  354.739818][ T4318] usb 5-1: SerialNumber: syz
[  354.778941][ T4318] usb 5-1: config 0 descriptor??
[  354.792350][ T8530] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  355.077742][ T8530] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  355.550664][ T4318] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  356.063759][ T4318] asix: probe of 5-1:0.188 failed with error -71
[  356.185267][ T4318] usb 5-1: USB disconnect, device number 8
[  356.652144][ T8598] loop3: detected capacity change from 0 to 128
[  357.127554][ T8604] loop1: detected capacity change from 0 to 128
[  360.087369][ T8614] loop3: detected capacity change from 0 to 128
[  360.412688][ T8620] loop4: detected capacity change from 0 to 512
[  360.694483][ T4345] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  360.702429][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  360.854572][ T4345] usb 2-1: device descriptor read/64, error -32
[  360.934273][ T8620] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 16777240: comm syz.4.1433: invalid block
[  360.955137][ T8620] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1433: couldn't read orphan inode 11 (err -117)
[  360.968812][ T8620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  362.034437][ T4345] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  362.399038][ T4345] usb 2-1: Using ep0 maxpacket: 16
[  362.406422][ T4345] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.979616][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  363.181058][ T4345] usb 2-1: config 0 interface 0 has no altsetting 0
[  363.253938][ T4345] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  363.344433][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.495543][ T4345] usb 2-1: config 0 descriptor??
[  363.504823][ T4345] usb 2-1: can't set config #0, error -71
[  363.575315][ T4345] usb 2-1: USB disconnect, device number 11
[  363.904127][ T8645] loop2: detected capacity change from 0 to 128
[  364.773961][ T8649] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  364.780577][ T8649] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  364.788570][ T8649] vhci_hcd vhci_hcd.0: Device attached
[  366.261020][ T8650] vhci_hcd: connection closed
[  366.265680][ T4885] vhci_hcd: stop threads
[  366.648569][ T4885] vhci_hcd: release socket
[  366.741981][ T4885] vhci_hcd: disconnect device
[  367.288569][ T8703] IPVS: lc: FWM 3 0x00000003 - no destination available
[  367.975571][ T4342] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  368.296453][ T4342] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  368.451422][ T8714] syz.4.1448 uses obsolete (PF_INET,SOCK_PACKET)
[  368.532224][ T4342] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  368.734947][ T4342] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  368.744060][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.759267][ T4342] usb 4-1: Product: syz
[  368.764073][ T4342] usb 4-1: Manufacturer: syz
[  368.782337][ T4342] usb 4-1: SerialNumber: syz
[  368.916235][ T4342] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected
[  369.033581][ T4342] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  369.052664][ T4342] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  369.284048][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1451'.
[  369.328674][ T4342] usb 4-1: USB disconnect, device number 8
[  369.342208][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1451'.
[  369.370356][ T4342] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  369.373444][ T8722] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1451'.
[  369.429922][ T4342] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  369.446536][ T8725] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1451'.
[  369.472875][ T4342] ti_usb_3410_5052 4-1:2.0: device disconnected
[  369.483639][ T8727] loop1: detected capacity change from 0 to 128
[  369.790454][ T8730] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  369.924190][ T8735] loop3: detected capacity change from 0 to 256
[  370.410143][ T8735] exfat: Deprecated parameter 'namecase'
[  370.464449][ T8735] exfat: Deprecated parameter 'utf8'
[  370.603348][ T8735] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  371.724011][ T8749] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  371.730605][ T8749] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  371.746039][ T8749] vhci_hcd vhci_hcd.0: Device attached
[  372.065079][  T129] usb 34-1: SetAddress Request (2) to port 0
[  372.084869][  T129] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  372.177634][ T8750] vhci_hcd: connection closed
[  372.178419][ T5099] vhci_hcd: stop threads
[  372.220714][ T5099] vhci_hcd: release socket
[  372.275057][ T5099] vhci_hcd: disconnect device
[  372.834083][ T8759] device syzkaller0 entered promiscuous mode
[  374.495865][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1465'.
[  374.772593][ T8779] IPVS: lc: FWM 3 0x00000003 - no destination available
[  375.478566][ T8780] loop4: detected capacity change from 0 to 256
[  375.514336][ T8780] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  375.738641][ T8780] exFAT-fs (loop4): hint_cluster is invalid (17)
[  375.820480][   T26] audit: type=1800 audit(1785581474.391:4): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1466" name="file2" dev="loop4" ino=1048788 res=0 errno=0
[  376.870554][ T8800] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  376.877150][ T8800] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  376.885529][ T8800] vhci_hcd vhci_hcd.0: Device attached
[  377.194647][   T27] usb 40-1: SetAddress Request (2) to port 0
[  377.264494][  T129] usb 34-1: device descriptor read/8, error -110
[  377.330692][   T27] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  378.466594][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.473115][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.945016][  T129] usb usb34-port1: attempt power cycle
[  379.428599][ T8801] vhci_hcd: connection reset by peer
[  379.434103][ T5086] vhci_hcd: stop threads
[  379.438691][ T5086] vhci_hcd: release socket
[  379.458718][ T5086] vhci_hcd: disconnect device
[  379.855338][  T129] usb usb34-port1: unable to enumerate USB device
[  380.297721][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.315562][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.325036][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.344707][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.352249][   T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  380.372382][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.399371][ T8823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1479'.
[  380.551668][ T8826] loop4: detected capacity change from 0 to 1024
[  380.622185][ T8826] EXT4-fs (loop4): filesystem is read-only
[  380.683996][ T8826] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  380.705467][ T8826] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (34930!=20869)
[  380.733742][ T8826] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal
[  381.174711][ T8833] loop3: detected capacity change from 0 to 1764
[  381.280062][ T5635] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  382.521148][ T8842] loop3: detected capacity change from 0 to 764
[  382.525737][   T49] Bluetooth: hci5: command 0x0409 tx timeout
[  382.536023][ T8842] tmpfs: Unknown parameter 'iso9660'
[  382.983764][ T8841] loop4: detected capacity change from 0 to 32768
[  382.998729][ T8841] (syz.4.1486,8841,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  383.012496][ T8841] (syz.4.1486,8841,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  383.051589][ T8841] JBD2: Ignoring recovery information on journal
[  383.189269][ T8848] loop1: detected capacity change from 0 to 164
[  383.303356][ T8841] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  383.381631][ T8821] chnl_net:caif_netlink_parms(): no params data found
[  384.036851][ T8848] rock: directory entry would overflow storage
[  384.064906][ T8848] rock: sig=0x4f50, size=4, remaining=3
[  384.070546][ T8848] iso9660: Corrupted directory entry in block 5 of inode 1792
[  384.385746][   T27] usb 40-1: device descriptor read/8, error -110
[  384.405461][   T26] audit: type=1326 audit(1785581482.981:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.0.1489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf6b9e019 code=0x7ffc0000
[  384.474983][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  384.513180][ T8859] loop1: detected capacity change from 0 to 1024
[  384.546015][ T5086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.556890][   T26] audit: type=1326 audit(1785581482.981:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.0.1489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf6b9e019 code=0x7ffc0000
[  384.556942][   T26] audit: type=1326 audit(1785581482.981:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.0.1489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf6b9e019 code=0x7ffc0000
[  384.556981][   T26] audit: type=1326 audit(1785581482.981:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.0.1489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efcf6b9e019 code=0x7ffc0000
[  384.557018][   T26] audit: type=1326 audit(1785581482.981:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.0.1489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf6b9e019 code=0x7ffc0000
[  384.557057][   T26] audit: type=1326 audit(1785581482.981:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.0.1489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efcf6b9e019 code=0x7ffc0000
[  384.557095][   T26] audit: type=1326 audit(1785581482.981:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.0.1489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efcf6b9e019 code=0x7ffc0000
[  384.605210][   T49] Bluetooth: hci5: command 0x041b tx timeout
[  384.741354][ T8859] EXT4-fs (loop1): filesystem is read-only
[  384.794457][ T8859] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  384.854535][ T8859] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (34930!=20869)
[  384.967722][ T8859] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  385.179530][   T27] usb usb40-port1: attempt power cycle
[  385.258589][ T5086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.766452][ T5086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.791415][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.841103][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.904720][ T8821] device bridge_slave_0 entered promiscuous mode
[  385.921122][ T8870] tmpfs: Unknown parameter '��h�9孱�H{����dx�i����8���0Z�l|w�?�VH��C\W4���t�C|�A
[  385.921122][ T8870] ��5�'
[  386.004577][ T5086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.028949][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.052984][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.093473][ T8821] device bridge_slave_1 entered promiscuous mode
[  386.232761][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.270090][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.375473][   T27] usb usb40-port1: unable to enumerate USB device
[  386.383005][ T8821] team0: Port device team_slave_0 added
[  386.452747][ T8821] team0: Port device team_slave_1 added
[  386.494043][ T8881] fuse: Bad value for 'fd'
[  386.568438][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.581786][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.628315][   T49] Bluetooth: hci5: command 0x040f tx timeout
[  386.644218][ T8821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.663288][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.670446][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.697644][ T8821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.755081][ T8874] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  386.774594][ T8874] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  386.827445][ T8874] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  386.847612][ T8874] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  386.862283][ T8874] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  386.888708][ T8874] Bluetooth: hci5: Suspend notifier action (1) failed: -4
[  387.084881][ T8821] device hsr_slave_0 entered promiscuous mode
[  387.110505][ T8821] device hsr_slave_1 entered promiscuous mode
[  387.142497][ T8821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  387.160963][ T8821] Cannot create hsr debugfs directory
[  387.358673][ T4345] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  387.465817][ T8893] loop3: detected capacity change from 0 to 512
[  387.548822][ T8893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  387.563921][ T8893] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.587387][ T4345] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024
[  387.614599][ T8893] capability: warning: `syz.3.1499' uses deprecated v2 capabilities in a way that may be insecure
[  387.629486][ T4345] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[  387.704515][ T4345] usb 5-1: config 1 interface 0 has no altsetting 0
[  387.734969][ T4345] usb 5-1: string descriptor 0 read error: -22
[  387.741287][ T4345] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  387.758338][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.841295][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  388.064509][   T49] Bluetooth: hci0: command 0x0c1a tx timeout
[  388.070722][ T4284] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  388.216671][ T4345] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  388.290834][ T4345] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0009/input/input10
[  388.304359][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout
[  388.510146][ T4345] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  388.613908][ T4345] usb 5-1: USB disconnect, device number 9
[  388.784761][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout
[  388.864951][ T4284] Bluetooth: hci5: command 0x0c1a tx timeout
[  388.871101][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout
[  388.889805][ T8907] fido_id[8907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  388.944473][ T4284] Bluetooth: hci2: command 0x1003 tx timeout
[  388.952130][ T4279] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  389.087221][ T8821] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  389.140251][ T8821] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  389.436476][ T8923] loop0: detected capacity change from 0 to 1024
[  389.494756][ T8923] EXT4-fs (loop0): filesystem is read-only
[  389.524578][ T8923] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  389.567442][ T8923] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (34930!=20869)
[  389.609379][ T8923] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[  389.718166][ T8821] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  389.769398][ T8821] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  389.844588][ T8934] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1508'.
[  390.435793][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.511143][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  390.521683][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  390.609509][ T5086] device hsr_slave_0 left promiscuous mode
[  390.689466][ T5086] device hsr_slave_1 left promiscuous mode
[  390.702294][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.736952][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.767882][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.812386][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.922390][ T5086] device bridge_slave_1 left promiscuous mode
[  390.944521][ T4279] Bluetooth: hci5: command 0x0406 tx timeout
[  390.953899][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.083781][ T5086] device bridge_slave_0 left promiscuous mode
[  391.142890][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.162088][ T8937] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  391.501840][ T5086] device veth1_macvtap left promiscuous mode
[  391.554244][ T5086] device veth0_macvtap left promiscuous mode
[  391.603607][ T5086] device veth1_vlan left promiscuous mode
[  391.632700][ T5086] device veth0_vlan left promiscuous mode
[  392.277915][ T8965] loop3: detected capacity change from 0 to 128
[  392.324560][    T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  392.359616][ T8965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  392.428491][ T8965] ext4 filesystem being mounted at /284/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  392.526344][    T7] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024
[  392.554050][    T7] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[  392.592631][    T7] usb 5-1: config 1 interface 0 has no altsetting 0
[  392.640514][    T7] usb 5-1: string descriptor 0 read error: -22
[  392.668007][    T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  392.733988][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.818217][ T5049] smc: removing ib device syz
[  392.878843][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  393.190723][    T7] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  393.223464][    T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.000A/input/input11
[  393.245643][ T8974] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  393.253596][ T8976] loop1: detected capacity change from 0 to 1024
[  393.277485][ T8974] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  393.301827][ T8976] EXT4-fs (loop1): filesystem is read-only
[  393.331942][ T8976] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  393.350902][ T8974] udc dummy_udc.0: failed to start g1: -22
[  393.367668][ T8976] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (34930!=20869)
[  393.398105][ T8974] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  393.444491][ T8976] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  393.455043][ T8974] UDC core: g1: couldn't find an available UDC or it's busy
[  393.512695][    T7] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  393.606111][    T7] usb 5-1: USB disconnect, device number 10
[  393.935665][ T8982] fido_id[8982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  394.004392][ T4342] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  394.098534][ T8990] loop4: detected capacity change from 0 to 128
[  394.367100][ T4342] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  394.427951][ T4342] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  394.778313][ T4342] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  395.036252][ T4342] usb 4-1: config 220 has no interface number 2
[  395.042623][ T4342] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  395.102117][ T4342] usb 4-1: config 220 interface 0 has no altsetting 0
[  395.127812][ T4342] usb 4-1: config 220 interface 76 has no altsetting 0
[  395.148945][ T4342] usb 4-1: config 220 interface 1 has no altsetting 0
[  395.184151][ T4342] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  395.211290][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.241056][ T4342] usb 4-1: Product: syz
[  395.250243][ T4342] usb 4-1: Manufacturer: syz
[  395.270372][ T4342] usb 4-1: SerialNumber: syz
[  395.517506][ T4342] usb 4-1: selecting invalid altsetting 0
[  395.541627][ T4342] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  395.560828][ T4342] usb 4-1: No valid video chain found.
[  395.621234][ T4342] usb 4-1: selecting invalid altsetting 0
[  395.637427][ T4342] usbtest: probe of 4-1:220.1 failed with error -22
[  395.673148][ T4342] usb 4-1: USB disconnect, device number 9
[  396.807890][ T5086] team0 (unregistering): Port device team_slave_1 removed
[  396.938982][ T5086] team0 (unregistering): Port device team_slave_0 removed
[  396.981154][ T9014] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  397.001723][ T9014] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  397.013252][ T9014] udc dummy_udc.0: failed to start g1: -22
[  397.022788][ T9014] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  397.042503][ T9014] UDC core: g1: couldn't find an available UDC or it's busy
[  397.050984][ T9016] loop3: detected capacity change from 0 to 1024
[  397.060623][ T5086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.103947][ T9016] EXT4-fs (loop3): filesystem is read-only
[  397.111598][ T9016] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  397.144504][ T9016] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (34930!=20869)
[  397.172608][ T9016] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  397.208083][ T5086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.715987][ T5086] bond0 (unregistering): Released all slaves
[  397.784548][   T27] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  397.812007][ T8821] 8021q: adding VLAN 0 to HW filter on device team0
[  397.827953][ T8981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1520'.
[  397.855412][ T9004] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1526'.
[  397.879510][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  397.906967][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  397.925281][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.932571][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.977281][   T27] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  397.986752][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  398.010286][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  398.019086][   T27] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  398.073060][   T27] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  398.085031][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  398.124803][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.133372][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.141260][   T27] usb 5-1: config 220 has no interface number 2
[  398.152381][   T27] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  398.179413][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  398.206214][   T27] usb 5-1: config 220 interface 0 has no altsetting 0
[  398.213915][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'.
[  398.227780][   T27] usb 5-1: config 220 interface 76 has no altsetting 0
[  398.236868][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  398.244446][   T27] usb 5-1: config 220 interface 1 has no altsetting 0
[  398.263029][   T27] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  398.282536][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.292935][   T27] usb 5-1: Product: syz
[  398.314198][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  398.344371][   T27] usb 5-1: Manufacturer: syz
[  398.357168][   T27] usb 5-1: SerialNumber: syz
[  398.393841][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  398.518373][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  398.696766][   T27] usb 5-1: selecting invalid altsetting 0
[  398.742260][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  398.798992][   T27] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  398.883599][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  398.896992][   T27] usb 5-1: No valid video chain found.
[  399.024381][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  399.034048][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  399.051493][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  399.060172][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  399.080800][   T27] usb 5-1: selecting invalid altsetting 0
[  399.135441][   T27] usbtest: probe of 5-1:220.1 failed with error -22
[  399.658606][   T27] usb 5-1: USB disconnect, device number 11
[  400.096799][ T9052] loop3: detected capacity change from 0 to 1024
[  400.208885][ T9052] EXT4-fs (loop3): filesystem is read-only
[  400.404462][ T9052] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  400.448840][ T9052] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (34930!=20869)
[  400.542633][ T9052] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  401.262060][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.330660][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  401.370440][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  401.397269][ T9064] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1545'.
[  401.778854][ T9076] loop4: detected capacity change from 0 to 128
[  404.234905][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  404.242549][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  405.335165][ T9105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  405.457094][ T9107] netlink: 'syz.1.1556': attribute type 20 has an invalid length.
[  405.467578][ T9107] 9pnet_fd: Insufficient options for proto=fd
[  405.781741][ T9115] loop0: detected capacity change from 0 to 32768
[  405.805635][ T9115] (syz.0.1557,9115,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  405.819292][ T9115] (syz.0.1557,9115,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  405.847742][ T9115] JBD2: Ignoring recovery information on journal
[  405.870297][ T9115] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  406.053126][ T9124] loop4: detected capacity change from 0 to 64
[  406.141150][ T9117] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1558'.
[  406.188291][ T9124] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  406.838745][ T9134] loop4: detected capacity change from 0 to 128
[  407.014252][ T4275] ocfs2: Unmounting device (7,0) on (node local)
[  407.036239][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  407.056685][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  407.152761][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  407.175752][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  407.226395][ T8821] device veth0_vlan entered promiscuous mode
[  407.250926][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  407.288723][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  407.322668][ T8821] device veth1_vlan entered promiscuous mode
[  407.905586][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  407.997093][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  408.082090][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  408.091870][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  408.105621][ T8821] device veth0_macvtap entered promiscuous mode
[  408.197560][ T8821] device veth1_macvtap entered promiscuous mode
[  408.300513][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.351839][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.398325][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.423052][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.465461][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.508555][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.535402][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.604465][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.626111][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.636857][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  408.656369][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  408.686538][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.694937][ T4318] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  408.724336][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.754318][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.784367][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.794241][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.844331][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.854205][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.889810][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.901399][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.911534][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  408.921182][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  408.921381][ T4318] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  408.949319][ T8821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.953593][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.966609][  T129] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  408.973283][ T8821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.994335][ T4318] usb 5-1: Product: syz
[  408.998704][ T4318] usb 5-1: Manufacturer: syz
[  409.001806][ T8821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.003319][ T4318] usb 5-1: SerialNumber: syz
[  409.032497][ T4318] usb 5-1: config 0 descriptor??
[  409.053930][ T4318] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  409.060968][ T8821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.144893][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  409.164616][  T129] usb 4-1: Using ep0 maxpacket: 32
[  409.173880][  T129] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  409.202645][  T129] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  409.224907][ T4318] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  409.245243][  T129] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  409.279168][ T4318] usb 5-1: media controller created
[  409.318389][  T129] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  409.339347][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  409.351428][ T5092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.359510][  T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.369607][ T5092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.389919][  T129] usb 4-1: Product: syz
[  409.394142][  T129] usb 4-1: Manufacturer: syz
[  409.407330][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  409.435217][  T129] usb 4-1: SerialNumber: syz
[  409.685293][  T129] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  409.693627][  T129] imon 4-1:155.0: unable to initialize intf0, err -19
[  409.700633][  T129] imon:imon_probe: failed to initialize context!
[  409.707255][  T129] imon 4-1:155.0: unable to register, err -19
[  409.793439][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.803608][ T4318] DVB: Unable to find symbol mt352_attach()
[  409.807867][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.874767][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  409.944479][ T4318] DVB: Unable to find symbol nxt6000_attach()
[  409.950627][ T4318] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  410.811508][ T4318] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12
[  410.831135][ T4318] dvb-usb: schedule remote query interval to 1000 msecs.
[  410.838398][ T4318] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  410.850577][ T4318] dvb-usb: bulk message failed: -22 (7/0)
[  410.857276][ T4318] dvb-usb: bulk message failed: -22 (7/0)
[  410.865628][ T4318] usb 5-1: USB disconnect, device number 12
[  410.907852][ T9173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1570'.
[  411.041109][ T4318] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  411.555031][ T9183] loop0: detected capacity change from 0 to 128
[  412.200745][ T9182] loop4: detected capacity change from 0 to 32768
[  412.378356][ T9182] (syz.4.1573,9182,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  412.393949][ T9182] (syz.4.1573,9182,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  413.965556][ T9188] loop1: detected capacity change from 0 to 1024
[  413.973167][ T4318] usb 4-1: USB disconnect, device number 10
[  414.003444][ T9188] EXT4-fs (loop1): filesystem is read-only
[  414.044143][ T9188] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  414.647553][ T9188] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (34930!=20869)
[  414.682847][ T9182] (syz.4.1573,9182,1):ocfs2_initialize_super:2284 ERROR: status = -12
[  414.691630][ T9182] (syz.4.1573,9182,1):ocfs2_fill_super:1176 ERROR: status = -12
[  414.744422][ T9188] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  414.794430][ T5633] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  417.241081][ T9218] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1583'.
[  417.345202][  T127] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  418.300031][  T127] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  418.310091][ T9228] loop0: detected capacity change from 0 to 128
[  418.344319][  T127] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  418.353234][  T127] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  418.375488][  T127] usb 2-1: config 220 has no interface number 2
[  418.381863][  T127] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  418.542882][ T9230] loop5: detected capacity change from 0 to 32768
[  418.552226][  T127] usb 2-1: config 220 interface 0 has no altsetting 0
[  418.573635][ T9230] (syz.5.1587,9230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  418.587486][ T9230] (syz.5.1587,9230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  418.606369][  T127] usb 2-1: config 220 interface 76 has no altsetting 0
[  418.613869][  T127] usb 2-1: config 220 interface 1 has no altsetting 0
[  418.626254][  T127] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  418.639724][  T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.648092][  T127] usb 2-1: Product: syz
[  418.652476][  T127] usb 2-1: Manufacturer: syz
[  418.657371][  T127] usb 2-1: SerialNumber: syz
[  418.664036][ T9230] JBD2: Ignoring recovery information on journal
[  418.899020][ T9230] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  418.908816][  T127] usb 2-1: selecting invalid altsetting 0
[  418.920558][  T127] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  419.304430][ T4318] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  419.494431][ T4318] usb 4-1: Using ep0 maxpacket: 8
[  419.516286][ T4318] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  419.555529][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.608541][ T4318] usb 4-1: config 0 has no interface number 0
[  419.633010][ T4318] usb 4-1: config 0 interface 31 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  419.938259][  T127] usb 2-1: No valid video chain found.
[  420.838939][ T4317] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  420.898750][  T127] usb 2-1: selecting invalid altsetting 0
[  420.899059][  T127] usbtest: probe of 2-1:220.1 failed with error -22
[  420.960101][  T127] usb 2-1: USB disconnect, device number 12
[  421.163088][ T4317] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  421.183806][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.193704][ T4317] usb 5-1: Product: syz
[  421.207803][ T4317] usb 5-1: Manufacturer: syz
[  421.213478][ T4317] usb 5-1: SerialNumber: syz
[  421.236835][ T4318] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  421.555098][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.700654][ T4318] usb 4-1: Product: syz
[  421.776829][ T4318] usb 4-1: Manufacturer: syz
[  421.962300][ T4317] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  421.976821][ T4318] usb 4-1: SerialNumber: syz
[  422.011950][ T4317] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  422.027271][ T4318] usb 4-1: config 0 descriptor??
[  422.182591][ T4318] usb 4-1: can't set config #0, error -71
[  422.199661][ T4318] usb 4-1: USB disconnect, device number 11
[  422.219391][ T4317] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  422.232476][ T4317] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  422.258279][ T4317] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  422.380805][ T4317] lan78xx: probe of 5-1:1.0 failed with error -71
[  422.941147][ T8821] ocfs2: Unmounting device (7,5) on (node local)
[  423.043399][ T4317] usb 5-1: USB disconnect, device number 13
[  423.105361][  T129] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  423.316167][  T129] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  423.336209][  T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.347762][  T129] usb 2-1: Product: syz
[  423.352034][  T129] usb 2-1: Manufacturer: syz
[  423.357870][  T129] usb 2-1: SerialNumber: syz
[  423.368695][  T129] usb 2-1: config 0 descriptor??
[  424.176205][  T129] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  424.271554][  T129] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  424.338812][  T129] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  424.380994][  T129] usb 2-1: media controller created
[  424.427207][  T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  425.402570][  T129] DVB: Unable to find symbol mt352_attach()
[  425.665613][ T9291] loop4: detected capacity change from 0 to 32768
[  425.715411][ T9291] (syz.4.1603,9291,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  425.734140][ T9291] (syz.4.1603,9291,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  425.757429][ T9291] JBD2: Ignoring recovery information on journal
[  425.774891][  T129] DVB: Unable to find symbol nxt6000_attach()
[  425.781144][  T129] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  425.835483][ T9291] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  425.975019][  T129] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  426.192359][  T129] dvb-usb: schedule remote query interval to 1000 msecs.
[  426.476001][  T129] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  426.821128][  T129] dvb-usb: bulk message failed: -22 (7/0)
[  426.925018][  T129] dvb-usb: bulk message failed: -22 (7/0)
[  427.216398][  T129] usb 2-1: USB disconnect, device number 13
[  427.396178][  T129] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  428.830952][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  431.768358][ T9354] UDC core: g1: couldn't find an available UDC or it's busy
[  433.213675][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1620'.
[  433.444440][ T4317] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  434.409618][ T4317] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  435.115927][ T4317] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  435.214999][ T4317] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  435.263586][ T4317] usb 2-1: config 220 has no interface number 2
[  435.288676][ T4317] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  435.339062][ T4317] usb 2-1: config 220 interface 0 has no altsetting 0
[  435.372882][ T4317] usb 2-1: config 220 interface 76 has no altsetting 0
[  435.400574][ T4317] usb 2-1: config 220 interface 1 has no altsetting 0
[  435.402354][ T9389] UDC core: g1: couldn't find an available UDC or it's busy
[  435.443090][ T4317] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  435.472678][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.504499][ T4317] usb 2-1: Product: syz
[  435.514534][ T4317] usb 2-1: Manufacturer: syz
[  435.529496][ T4317] usb 2-1: SerialNumber: syz
[  435.793761][ T4317] usb 2-1: selecting invalid altsetting 0
[  435.879913][ T4317] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  435.887601][   T27] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  435.952112][ T4317] usb 2-1: No valid video chain found.
[  436.099836][   T27] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024
[  436.121131][ T4317] usb 2-1: selecting invalid altsetting 0
[  436.175581][   T27] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[  436.197547][ T4317] usbtest: probe of 2-1:220.1 failed with error -22
[  436.320375][   T27] usb 5-1: config 1 interface 0 has no altsetting 0
[  436.337222][ T4317] usb 2-1: USB disconnect, device number 14
[  436.531483][   T27] usb 5-1: string descriptor 0 read error: -22
[  436.590573][   T27] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  436.665305][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.866721][ T9408] loop1: detected capacity change from 0 to 128
[  437.179601][   T27] usbhid 5-1:1.0: can't add hid device: -71
[  437.190833][   T27] usbhid: probe of 5-1:1.0 failed with error -71
[  437.212908][   T27] usb 5-1: USB disconnect, device number 14
[  437.613252][ T9423] loop0: detected capacity change from 0 to 256
[  437.681731][ T9423] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  437.775572][ T9423] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  438.888050][ T9432] UDC core: g1: couldn't find an available UDC or it's busy
[  439.434552][  T129] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  439.638695][  T129] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  439.669651][  T129] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  439.716770][  T129] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  439.765494][  T129] usb 5-1: config 220 has no interface number 2
[  439.793221][  T129] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  439.856088][  T129] usb 5-1: config 220 interface 0 has no altsetting 0
[  439.893921][  T129] usb 5-1: config 220 interface 76 has no altsetting 0
[  439.907872][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.914938][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  439.933592][  T129] usb 5-1: config 220 interface 1 has no altsetting 0
[  439.963737][  T129] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  440.002402][  T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.036300][  T129] usb 5-1: Product: syz
[  440.059383][  T129] usb 5-1: Manufacturer: syz
[  440.069787][  T129] usb 5-1: SerialNumber: syz
[  440.302291][  T129] usb 5-1: selecting invalid altsetting 0
[  440.325542][  T129] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  440.362943][  T129] usb 5-1: No valid video chain found.
[  440.406969][  T129] usb 5-1: selecting invalid altsetting 0
[  440.422713][  T129] usbtest: probe of 5-1:220.1 failed with error -22
[  440.476720][  T129] usb 5-1: USB disconnect, device number 15
[  442.336394][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  442.352474][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  442.368245][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  442.379815][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  442.404929][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  442.412268][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  443.602008][ T9480] UDC core: g1: couldn't find an available UDC or it's busy
[  443.935937][ T9489] UDC core: g1: couldn't find an available UDC or it's busy
[  443.991594][ T9495] loop4: detected capacity change from 0 to 256
[  444.019498][ T9495] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  444.132016][ T9495] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  444.196600][ T9464] chnl_net:caif_netlink_parms(): no params data found
[  444.464737][ T4279] Bluetooth: hci2: command 0x0409 tx timeout
[  445.404444][   T27] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  445.614449][   T27] usb 5-1: Using ep0 maxpacket: 8
[  446.544350][ T4284] Bluetooth: hci2: command 0x041b tx timeout
[  447.358348][   T27] usb 5-1: device descriptor read/all, error -71
[  448.624459][ T4284] Bluetooth: hci2: command 0x040f tx timeout
[  448.628143][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.799131][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.965482][ T9464] device bridge_slave_0 entered promiscuous mode
[  449.423354][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.440899][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.452193][ T9464] device bridge_slave_1 entered promiscuous mode
[  449.490898][ T9464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.742929][ T9464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.951962][ T9464] team0: Port device team_slave_0 added
[  450.012989][ T9464] team0: Port device team_slave_1 added
[  450.167600][ T9530] UDC core: g1: couldn't find an available UDC or it's busy
[  450.704539][ T4284] Bluetooth: hci2: command 0x0419 tx timeout
[  451.291755][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.319363][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.463452][ T9464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.552774][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.580418][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.700524][ T9464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.294827][   T26] audit: type=1804 audit(1785581551.851:12): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1670" name="bus" dev="ramfs" ino=79985 res=1 errno=0
[  453.333104][ T5074] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.344606][   T26] audit: type=1804 audit(1785581551.901:13): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1670" name="bus" dev="ramfs" ino=79985 res=1 errno=0
[  453.507363][ T9464] device hsr_slave_0 entered promiscuous mode
[  453.524352][ T3600] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  453.548996][ T9464] device hsr_slave_1 entered promiscuous mode
[  453.558795][ T9464] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  453.574445][ T9464] Cannot create hsr debugfs directory
[  453.646650][ T5074] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.714622][ T3600] usb 5-1: Using ep0 maxpacket: 16
[  453.726138][ T3600] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.781604][ T3600] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  453.853380][ T3600] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  453.902224][ T3600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.939992][ T3600] usb 5-1: config 0 descriptor??
[  453.983439][ T3600] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  454.037677][ T5074] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.071646][ T9570] loop0: detected capacity change from 0 to 128
[  455.088895][ T5074] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.617012][ T9575] device bridge2 entered promiscuous mode
[  455.638712][ T9575] team0: Port device bridge2 added
[  455.740261][ T9464] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  456.125791][ T9464] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  456.262994][ T9464] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  456.344619][ T9464] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  456.407550][ T9585] loop1: detected capacity change from 0 to 256
[  456.439312][ T9585] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  456.472324][ T9585] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  456.964493][ T4386] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  457.185761][ T4386] usb 2-1: Using ep0 maxpacket: 8
[  457.198021][ T4386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  457.314396][ T4320] usb 5-1: USB disconnect, device number 18
[  457.413725][ T4386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  457.483564][ T4386] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  457.509282][ T4386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24929, setting to 1024
[  457.541090][ T4386] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  457.562529][ T4386] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  457.582849][ T4386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.612009][ T4386] usb 2-1: config 0 descriptor??
[  457.635105][ T9585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  458.594361][ T4320] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  458.816509][ T4320] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  458.831669][ T4320] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  458.854347][ T4320] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  458.864937][ T4320] usb 5-1: config 220 has no interface number 2
[  458.871370][ T4320] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  458.885317][ T4320] usb 5-1: config 220 interface 0 has no altsetting 0
[  458.892217][ T4320] usb 5-1: config 220 interface 76 has no altsetting 0
[  458.899392][ T4320] usb 5-1: config 220 interface 1 has no altsetting 0
[  458.909108][ T4320] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  458.929229][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.945963][ T4320] usb 5-1: Product: syz
[  458.956690][ T4320] usb 5-1: Manufacturer: syz
[  458.968951][ T4320] usb 5-1: SerialNumber: syz
[  459.199250][ T4320] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  459.211459][ T4320] usb 5-1: No valid video chain found.
[  459.212312][ T9464] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.240186][ T4320] usb 5-1: selecting invalid altsetting 0
[  459.288358][ T4320] usb 5-1: selecting invalid altsetting 0
[  459.326214][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  459.333974][  T129] usb 2-1: USB disconnect, device number 15
[  459.353224][ T4320] usbtest: probe of 5-1:220.1 failed with error -22
[  459.438290][ T4320] usb 5-1: USB disconnect, device number 19
[  459.685198][ T9626] device bridge3 entered promiscuous mode
[  459.717562][ T9626] team0: Port device bridge3 added
[  459.789310][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  459.825214][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  459.931177][ T9464] 8021q: adding VLAN 0 to HW filter on device team0
[  459.957543][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  459.975690][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  460.023205][ T5070] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.030404][ T5070] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.436629][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  460.453582][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  460.483780][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  460.531388][ T9635] UDC core: g1: couldn't find an available UDC or it's busy
[  460.572067][ T5070] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.579285][ T5070] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.625297][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  460.653144][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  460.682329][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  460.727185][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  461.751585][ T9644] loop4: detected capacity change from 0 to 32768
[  461.759229][  T129] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  461.785475][ T9644] (syz.4.1691,9644,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  461.799256][ T9644] (syz.4.1691,9644,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  461.830013][ T9644] JBD2: Ignoring recovery information on journal
[  461.866078][ T9644] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  462.393717][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  462.441927][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  462.474819][  T129] usb 2-1: Using ep0 maxpacket: 16
[  462.481563][  T129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.528404][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  462.545195][  T129] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  462.580051][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  462.625719][  T129] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  462.675549][  T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.699526][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  462.717618][  T129] usb 2-1: config 0 descriptor??
[  462.778646][  T129] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  462.843740][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  463.001806][ T9658] loop4: detected capacity change from 0 to 128
[  463.035163][ T9656] loop3: detected capacity change from 0 to 256
[  463.075851][ T9656] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  463.088509][ T9464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  463.120695][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  463.183405][ T9656] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  463.205640][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  463.245228][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  464.576790][ T9674] device bridge2 entered promiscuous mode
[  464.635977][ T9674] team0: Port device bridge2 added
[  464.773903][ T5074] device hsr_slave_0 left promiscuous mode
[  464.800909][ T5074] device hsr_slave_1 left promiscuous mode
[  464.840841][ T5074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.880769][ T4317] usb 2-1: USB disconnect, device number 16
[  464.888112][ T5074] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.982021][ T5074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  465.034444][ T5074] batman_adv: batadv0: Removing interface: batadv_slave_1
[  465.076331][ T5074] device bridge_slave_1 left promiscuous mode
[  465.108226][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.179832][ T5074] device bridge_slave_0 left promiscuous mode
[  465.214133][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.442294][ T5074] device veth1_macvtap left promiscuous mode
[  465.464563][ T5074] device veth0_macvtap left promiscuous mode
[  465.480977][ T5074] device veth1_vlan left promiscuous mode
[  465.493239][ T5074] device veth0_vlan left promiscuous mode
[  465.499326][ T4318] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  465.684386][ T4318] usb 4-1: Using ep0 maxpacket: 8
[  465.754401][ T4320] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  465.969867][ T4320] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  466.014878][ T4320] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  466.112276][ T4320] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  466.151327][ T4320] usb 5-1: config 220 has no interface number 2
[  466.178425][ T4320] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  466.217250][ T4320] usb 5-1: config 220 interface 0 has no altsetting 0
[  466.244327][ T4320] usb 5-1: config 220 interface 76 has no altsetting 0
[  466.264976][ T4320] usb 5-1: config 220 interface 1 has no altsetting 0
[  466.297942][ T4320] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  466.435906][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.472139][ T4320] usb 5-1: Product: syz
[  466.480183][ T4320] usb 5-1: Manufacturer: syz
[  466.484979][ T4320] usb 5-1: SerialNumber: syz
[  466.555608][ T4318] usb 4-1: unable to read config index 0 descriptor/start: -71
[  466.574322][ T4318] usb 4-1: can't read configurations, error -71
[  466.764519][ T4320] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  466.814300][ T4320] usb 5-1: No valid video chain found.
[  466.830259][ T4320] usb 5-1: selecting invalid altsetting 0
[  466.921307][ T4320] usb 5-1: selecting invalid altsetting 0
[  466.940163][ T4320] usbtest: probe of 5-1:220.1 failed with error -22
[  466.980755][ T4320] usb 5-1: USB disconnect, device number 20
[  467.869378][ T9703] loop3: detected capacity change from 0 to 32768
[  467.905473][ T9703] (syz.3.1702,9703,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  467.919184][ T9703] (syz.3.1702,9703,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  467.998026][ T9703] JBD2: Ignoring recovery information on journal
[  468.072096][ T9710] UDC core: g1: couldn't find an available UDC or it's busy
[  468.113574][ T9703] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  469.031392][ T9727] tmpfs: Unknown parameter '��h�9孱�H{����dx�i����8���0Z�l|w�?�VH��C\W4���t�C|�A
[  469.031392][ T9727] ��5�'
[  469.444485][ T9732] loop4: detected capacity change from 0 to 256
[  469.492794][ T9732] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  469.555842][ T9732] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  469.641986][ T9734] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  469.657730][ T9734] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  469.697396][ T9734] udc dummy_udc.0: failed to start g1: -22
[  469.716083][ T9734] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  469.749650][ T9734] UDC core: g1: couldn't find an available UDC or it's busy
[  469.794452][ T5074] team0 (unregistering): Port device team_slave_1 removed
[  469.943983][ T5074] team0 (unregistering): Port device team_slave_0 removed
[  470.069903][ T5074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  470.161286][ T5074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  470.174409][ T4386] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  470.254509][ T4318] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  470.364609][ T4386] usb 5-1: Using ep0 maxpacket: 8
[  470.372043][ T4386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  470.392527][ T4386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  470.412533][ T4386] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  470.422824][ T4386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24929, setting to 1024
[  470.434610][ T4386] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  470.452744][ T4386] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  470.487573][ T4318] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  470.497411][ T4318] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  470.506454][ T4386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.514615][ T4318] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  470.533280][ T4386] usb 5-1: config 0 descriptor??
[  470.538590][ T4318] usb 2-1: config 220 has no interface number 2
[  470.545187][ T4318] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  470.559427][ T9736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  470.580448][ T4318] usb 2-1: config 220 interface 0 has no altsetting 0
[  470.590545][ T4318] usb 2-1: config 220 interface 76 has no altsetting 0
[  470.597568][ T4318] usb 2-1: config 220 interface 1 has no altsetting 0
[  470.617498][ T4318] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  470.627043][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.635238][ T4318] usb 2-1: Product: syz
[  470.639585][ T4318] usb 2-1: Manufacturer: syz
[  470.644611][ T4318] usb 2-1: SerialNumber: syz
[  470.778860][ T5074] bond0 (unregistering): Released all slaves
[  470.872970][ T4318] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  470.880163][ T4318] usb 2-1: No valid video chain found.
[  470.886167][ T4318] usb 2-1: selecting invalid altsetting 0
[  470.952094][ T4318] usb 2-1: selecting invalid altsetting 0
[  470.960892][ T4318] usbtest: probe of 2-1:220.1 failed with error -22
[  470.971447][ T4318] usb 2-1: USB disconnect, device number 17
[  471.020192][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  471.028305][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  471.073608][ T4287] ocfs2: Unmounting device (7,3) on (node local)
[  471.080421][ T9464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.231935][ T9752] UDC core: g1: couldn't find an available UDC or it's busy
[  472.444339][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  472.452316][  T129] usb 5-1: USB disconnect, device number 21
[  473.897840][ T9750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'.
[  473.977768][ T9782] UDC core: g1: couldn't find an available UDC or it's busy
[  474.046200][ T9786] device bridge4 entered promiscuous mode
[  474.072838][ T9786] team0: Port device bridge4 added
[  474.149852][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  474.170746][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  474.215821][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  474.228448][ T9789] loop4: detected capacity change from 0 to 128
[  474.247804][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  474.270926][ T9464] device veth0_vlan entered promiscuous mode
[  474.295716][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  474.315275][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  474.349247][ T9464] device veth1_vlan entered promiscuous mode
[  475.029088][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  475.158019][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  475.185662][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  475.231014][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  475.270069][ T9464] device veth0_macvtap entered promiscuous mode
[  475.297406][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  475.329723][ T9464] device veth1_macvtap entered promiscuous mode
[  475.391577][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.431530][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.458718][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.489985][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.520711][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.551906][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.579873][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.624009][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.658711][ T9464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.713597][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  475.735337][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  475.763488][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.791046][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.819448][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.851301][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.890285][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.911302][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.931771][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.973371][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.005596][ T9464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.031229][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  476.050847][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  476.076179][ T9464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.119937][ T9464] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.149417][ T9464] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.199437][ T9464] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.494067][ T5074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.542473][ T5074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.603846][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  476.655055][ T5074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.677920][ T5074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.705027][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  476.719555][    T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  476.916522][    T7] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  476.936452][ T9801] UDC core: g1: couldn't find an available UDC or it's busy
[  476.944112][    T7] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  476.980208][    T7] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  477.025625][    T7] usb 2-1: config 220 has no interface number 2
[  477.121143][    T7] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  477.262653][    T7] usb 2-1: config 220 interface 0 has no altsetting 0
[  477.362768][    T7] usb 2-1: config 220 interface 76 has no altsetting 0
[  477.624311][    T7] usb 2-1: config 220 interface 1 has no altsetting 0
[  478.358708][    T7] usb 2-1: string descriptor 0 read error: -71
[  478.370820][    T7] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  478.436193][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.480557][    T7] usb 2-1: can't set config #220, error -71
[  478.528554][    T7] usb 2-1: USB disconnect, device number 18
[  478.729492][ T9829] device bridge1 entered promiscuous mode
[  478.769662][ T9829] team0: Port device bridge1 added
[  478.866481][ T9834] loop4: detected capacity change from 0 to 128
[  479.791776][ T9820] loop3: detected capacity change from 0 to 256
[  479.978978][ T4317] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  480.115053][ T9849] UDC core: g1: couldn't find an available UDC or it's busy
[  480.144741][ T4317] usb 2-1: device descriptor read/64, error -71
[  480.278330][ T9848] loop6: detected capacity change from 0 to 32768
[  480.306950][ T9848] (syz.6.1740,9848,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  480.323807][ T9848] (syz.6.1740,9848,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  480.364830][ T9847] UDC core: g1: couldn't find an available UDC or it's busy
[  480.409604][ T9848] JBD2: Ignoring recovery information on journal
[  480.455417][ T9848] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  480.524477][ T4317] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  480.555601][ T9464] ocfs2: Unmounting device (7,6) on (node local)
[  480.684351][ T4317] usb 2-1: device descriptor read/64, error -71
[  480.814778][ T4317] usb usb2-port1: attempt power cycle
[  480.959538][  T129] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  481.234389][ T4317] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  481.297100][ T4317] usb 2-1: device descriptor read/8, error -71
[  481.504813][  T129] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  481.549931][  T129] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  481.594493][ T4317] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  481.642088][ T4317] usb 2-1: device descriptor read/8, error -71
[  482.221497][  T129] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  482.233055][  T129] usb 4-1: config 220 has no interface number 2
[  482.239805][  T129] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  482.246650][ T4317] usb usb2-port1: unable to enumerate USB device
[  482.254595][  T129] usb 4-1: config 220 interface 0 has no altsetting 0
[  482.266267][  T129] usb 4-1: config 220 interface 76 has no altsetting 0
[  482.273175][  T129] usb 4-1: config 220 interface 1 has no altsetting 0
[  482.285331][  T129] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  482.296959][ T9877] device bridge2 entered promiscuous mode
[  482.304004][ T9877] team0: Port device bridge2 added
[  482.310654][  T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.322385][  T129] usb 4-1: Product: syz
[  482.330929][  T129] usb 4-1: Manufacturer: syz
[  482.349875][  T129] usb 4-1: SerialNumber: syz
[  482.578462][  T129] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  482.604603][  T129] usb 4-1: No valid video chain found.
[  482.630576][  T129] usb 4-1: selecting invalid altsetting 0
[  482.681567][ T9887] loop1: detected capacity change from 0 to 128
[  482.717255][  T129] usb 4-1: selecting invalid altsetting 0
[  482.754628][  T129] usbtest: probe of 4-1:220.1 failed with error -22
[  482.864501][  T129] usb 4-1: USB disconnect, device number 14
[  483.005194][ T9895] UDC core: g1: couldn't find an available UDC or it's busy
[  483.642368][ T9909] loop6: detected capacity change from 0 to 256
[  484.708678][ T9915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1759'.
[  484.896990][ T9891] loop4: detected capacity change from 0 to 32768
[  484.995965][ T9891] (syz.4.1754,9891,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  485.106580][ T9891] (syz.4.1754,9891,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  485.173942][ T9891] JBD2: Ignoring recovery information on journal
[  485.180622][ T4318] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  485.341624][ T9891] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  485.384491][ T4318] usb 2-1: Using ep0 maxpacket: 16
[  485.393280][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  485.482094][ T4318] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  485.507238][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.533490][ T4318] usb 2-1: config 0 descriptor??
[  485.560212][ T4318] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  485.596241][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  486.367659][ T9941] UDC core: g1: couldn't find an available UDC or it's busy
[  486.844322][ T4317] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  487.670312][ T4345] usb 2-1: USB disconnect, device number 23
[  487.756401][ T4317] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  487.773072][ T4317] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  487.792633][ T4317] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  487.817668][ T4317] usb 5-1: config 220 has no interface number 2
[  487.841488][ T4317] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  487.868710][ T4317] usb 5-1: config 220 interface 0 has no altsetting 0
[  487.883563][ T4317] usb 5-1: config 220 interface 76 has no altsetting 0
[  487.898794][ T4317] usb 5-1: config 220 interface 1 has no altsetting 0
[  487.918309][ T4317] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  487.937738][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.960661][ T4317] usb 5-1: Product: syz
[  487.969642][ T4317] usb 5-1: Manufacturer: syz
[  487.979787][ T4317] usb 5-1: SerialNumber: syz
[  488.180561][ T9968] loop3: detected capacity change from 0 to 256
[  488.203241][ T4317] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  488.218032][ T4317] usb 5-1: No valid video chain found.
[  488.230709][ T4317] usb 5-1: selecting invalid altsetting 0
[  488.283146][ T4317] usb 5-1: selecting invalid altsetting 0
[  488.311181][ T4317] usbtest: probe of 5-1:220.1 failed with error -22
[  488.343197][ T4317] usb 5-1: USB disconnect, device number 22
[  488.662861][ T9970] loop6: detected capacity change from 0 to 32768
[  488.770059][ T9981] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  488.770648][ T9970] (syz.6.1774,9970,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  488.840476][ T9970] (syz.6.1774,9970,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  488.875576][ T9981] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  489.016985][ T9981] udc dummy_udc.0: failed to start g1: -22
[  489.155582][ T9981] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  489.313646][ T9970] JBD2: Ignoring recovery information on journal
[  489.380469][ T9981] UDC core: g1: couldn't find an available UDC or it's busy
[  489.784151][ T9970] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  489.829227][ T9989] UDC core: g1: couldn't find an available UDC or it's busy
[  490.128289][ T9464] ocfs2: Unmounting device (7,6) on (node local)
[  490.386182][ T9998] loop4: detected capacity change from 0 to 32768
[  490.409890][ T9998] (syz.4.1783,9998,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  490.425380][ T9998] (syz.4.1783,9998,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  490.483358][ T9998] JBD2: Ignoring recovery information on journal
[  490.567770][ T9998] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  491.580249][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  491.646192][T10022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1781'.
[  492.644357][ T4317] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  492.881576][ T4317] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  492.917740][ T4317] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  493.027567][ T4317] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  493.149400][ T4317] usb 5-1: config 220 has no interface number 2
[  493.259081][ T4317] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  493.409395][ T4317] usb 5-1: config 220 interface 0 has no altsetting 0
[  493.429263][ T4317] usb 5-1: config 220 interface 76 has no altsetting 0
[  493.448173][T10030] loop1: detected capacity change from 0 to 256
[  493.471112][ T4317] usb 5-1: config 220 interface 1 has no altsetting 0
[  493.500709][ T4317] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  493.553660][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.586257][T10045] UDC core: g1: couldn't find an available UDC or it's busy
[  493.594501][ T4317] usb 5-1: Product: syz
[  493.598741][ T4317] usb 5-1: Manufacturer: syz
[  493.628501][ T4317] usb 5-1: SerialNumber: syz
[  493.904148][ T4317] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  493.923875][ T4317] usb 5-1: No valid video chain found.
[  493.938416][ T4317] usb 5-1: selecting invalid altsetting 0
[  493.972916][ T4317] usb 5-1: selecting invalid altsetting 0
[  493.987241][ T4317] usbtest: probe of 5-1:220.1 failed with error -22
[  494.007162][T10052] UDC core: g1: couldn't find an available UDC or it's busy
[  494.023618][ T4317] usb 5-1: USB disconnect, device number 23
[  495.644376][ T4317] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  495.829792][T10055] loop3: detected capacity change from 0 to 32768
[  495.854685][ T4317] usb 2-1: Using ep0 maxpacket: 16
[  495.879475][ T4317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.898350][T10055] (syz.3.1795,10055,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  495.912999][T10089] UDC core: g1: couldn't find an available UDC or it's busy
[  495.934534][ T4317] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  495.954633][T10055] (syz.3.1795,10055,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  495.982007][ T4317] usb 2-1: config 0 interface 0 has no altsetting 0
[  495.998706][ T4317] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  496.010504][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.042986][ T4317] usb 2-1: config 0 descriptor??
[  496.060099][T10055] JBD2: Ignoring recovery information on journal
[  496.070071][ T4317] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  496.201672][T10055] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  496.373635][ T4287] ocfs2: Unmounting device (7,3) on (node local)
[  498.280728][T10095] loop4: detected capacity change from 0 to 256
[  498.421103][ T4317] usb 2-1: USB disconnect, device number 24
[  498.584869][ T4356] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  498.830509][ T4356] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  498.890920][ T4356] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  499.057544][ T4356] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  499.218577][ T4356] usb 4-1: config 220 has no interface number 2
[  499.330366][ T4356] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  499.476390][ T4356] usb 4-1: config 220 interface 0 has no altsetting 0
[  499.564347][ T4356] usb 4-1: config 220 interface 76 has no altsetting 0
[  499.571334][ T4356] usb 4-1: config 220 interface 1 has no altsetting 0
[  499.653452][ T4356] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  499.715549][T10140] UDC core: g1: couldn't find an available UDC or it's busy
[  499.741460][ T4356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.777972][ T4356] usb 4-1: Product: syz
[  499.789301][ T4356] usb 4-1: Manufacturer: syz
[  499.797185][ T4356] usb 4-1: SerialNumber: syz
[  499.952039][T10144] loop4: detected capacity change from 0 to 32768
[  500.169334][T10144] (syz.4.1817,10144,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  500.183349][T10144] (syz.4.1817,10144,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  500.219723][ T4356] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  500.228325][T10144] JBD2: Ignoring recovery information on journal
[  500.278835][T10144] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  500.386810][ T4356] usb 4-1: No valid video chain found.
[  500.423051][ T4356] usb 4-1: selecting invalid altsetting 0
[  500.778487][ T4356] usb 4-1: selecting invalid altsetting 0
[  500.790540][ T4356] usbtest: probe of 4-1:220.1 failed with error -22
[  501.002302][ T4356] usb 4-1: USB disconnect, device number 15
[  501.231303][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  501.348768][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.355171][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.714487][ T4318] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  501.754328][ T4345] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  501.914544][ T4318] usb 5-1: Using ep0 maxpacket: 16
[  501.925107][ T4318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.076452][ T4318] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  502.250474][ T4318] usb 5-1: config 0 interface 0 has no altsetting 0
[  502.338357][ T4318] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  502.471975][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.537198][ T4318] usb 5-1: config 0 descriptor??
[  502.625981][ T4318] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  502.635928][ T4345] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  502.662325][ T4345] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  502.700359][T10173] loop6: detected capacity change from 0 to 256
[  502.711947][ T4345] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  502.731163][ T4345] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  502.812139][ T4345] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  502.853333][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.876861][ T4345] usb 2-1: Product: syz
[  502.881095][ T4345] usb 2-1: Manufacturer: syz
[  502.894375][ T4345] usb 2-1: SerialNumber: syz
[  502.925407][ T4345] ti_usb_3410_5052 2-1:2.0: required endpoints missing
[  503.138818][ T4345] usb 2-1: USB disconnect, device number 25
[  503.191636][T10193] UDC core: g1: couldn't find an available UDC or it's busy
[  503.770009][T10207] loop6: detected capacity change from 0 to 32768
[  503.798210][T10207] (syz.6.1835,10207,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  503.811990][T10207] (syz.6.1835,10207,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  503.845834][T10207] JBD2: Ignoring recovery information on journal
[  503.875757][T10207] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  504.564301][ T4345] usb 5-1: USB disconnect, device number 24
[  505.745350][ T9464] ocfs2: Unmounting device (7,6) on (node local)
[  505.953330][T10230] UDC core: g1: couldn't find an available UDC or it's busy
[  507.288743][T10225] loop3: detected capacity change from 0 to 256
[  507.444386][ T4342] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  507.566497][ T4356] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  507.674599][ T4342] usb 5-1: Using ep0 maxpacket: 16
[  507.706511][ T4342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  507.736246][ T4342] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  507.756155][ T4356] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  507.767894][ T4342] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  507.781253][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.792863][ T4356] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  507.797037][ T4342] usb 5-1: config 0 descriptor??
[  507.853213][ T4342] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  507.954870][ T4317] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  508.140223][ T4356] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  508.164448][ T4317] usb 7-1: Using ep0 maxpacket: 16
[  508.190150][ T4317] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.201177][ T4317] usb 7-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  508.214737][ T4317] usb 7-1: config 0 interface 0 has no altsetting 0
[  508.221563][ T4317] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  508.231391][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.260878][ T4317] usb 7-1: config 0 descriptor??
[  508.288604][ T4317] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  508.327521][ T4356] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  508.451395][ T4356] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  508.476018][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.496666][ T4356] usb 2-1: Product: syz
[  508.500917][ T4356] usb 2-1: Manufacturer: syz
[  508.516024][ T4356] usb 2-1: SerialNumber: syz
[  508.553699][ T4356] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected
[  508.563748][ T4356] ti_usb_3410_5052 2-1:2.0: missing endpoints
[  508.804577][ T4356] usb 2-1: USB disconnect, device number 26
[  509.681307][T10280] device bridge1 entered promiscuous mode
[  509.701595][T10280] team0: Port device bridge1 added
[  509.873541][T10286] UDC core: g1: couldn't find an available UDC or it's busy
[  510.203580][T10282] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  510.271293][ T4318] usb 5-1: USB disconnect, device number 25
[  511.044715][ T3600] usb 7-1: USB disconnect, device number 2
[  513.334328][ T4317] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  513.413104][T10324] tmpfs: Unknown parameter '��h�9孱�H{����dx�i����8���0Z�l|w�?�VH��C\W4���t�C|�A
[  513.413104][T10324] ��5�'
[  513.533602][ T4317] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  513.639826][ T4317] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  513.738315][ T4317] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  514.297724][ T4317] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  514.601073][ T4317] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  514.635890][T10339] UDC core: g1: couldn't find an available UDC or it's busy
[  514.670268][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.759625][ T4317] usb 4-1: Product: syz
[  514.817883][ T4317] usb 4-1: Manufacturer: syz
[  514.828613][T10315] loop4: detected capacity change from 0 to 256
[  514.914273][ T4317] usb 4-1: SerialNumber: syz
[  515.012360][ T4317] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected
[  515.263115][ T4317] ti_usb_3410_5052 4-1:2.0: missing endpoints
[  515.353303][ T4317] usb 4-1: USB disconnect, device number 16
[  515.504504][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  515.974608][ T4386] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  516.164383][ T4386] usb 7-1: Using ep0 maxpacket: 16
[  516.171908][ T4386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.260979][ T4386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.339955][ T4386] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  516.418854][ T4386] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  516.482137][ T4386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.545883][ T4386] usb 7-1: config 0 descriptor??
[  517.412057][ T4386] usbhid 7-1:0.0: can't add hid device: -71
[  517.444313][T10401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1867'.
[  517.526128][ T4386] usbhid: probe of 7-1:0.0 failed with error -71
[  517.743885][ T4386] usb 7-1: USB disconnect, device number 3
[  518.248221][T10412] UDC core: g1: couldn't find an available UDC or it's busy
[  518.527959][T10417] device bridge3 entered promiscuous mode
[  518.590219][T10417] team0: Port device bridge3 added
[  520.416486][ T4356] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  520.710385][ T4356] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  520.737809][ T4356] usb 7-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  520.803737][ T4356] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  520.983807][ T4356] usb 7-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  520.999761][ T4356] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  521.018153][ T4356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.026608][ T4356] usb 7-1: Product: syz
[  521.032837][ T4356] usb 7-1: Manufacturer: syz
[  521.037911][ T4356] usb 7-1: SerialNumber: syz
[  521.411539][T10482] loop0: detected capacity change from 0 to 256
[  521.426361][ T4356] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[  521.445261][ T4356] ti_usb_3410_5052 7-1:2.0: missing endpoints
[  521.463247][ T4356] usb 7-1: USB disconnect, device number 4
[  523.211932][T10503] UDC core: g1: couldn't find an available UDC or it's busy
[  524.504362][ T4317] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  524.764476][ T4317] usb 2-1: Using ep0 maxpacket: 16
[  524.774758][ T4317] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.794498][ T4317] usb 2-1: config 0 interface 0 has no altsetting 0
[  524.807478][ T4317] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  524.818776][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.842385][ T4317] usb 2-1: config 0 descriptor??
[  524.850817][ T4317] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  526.777811][ T4318] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  526.887330][T10554] loop0: detected capacity change from 0 to 256
[  527.685960][ T4318] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  527.704358][ T4318] usb 5-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  527.705242][ T4317] usb 2-1: USB disconnect, device number 27
[  527.757353][ T4318] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  527.787958][ T4318] usb 5-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  527.854139][ T4318] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  527.904056][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.936615][T10594] UDC core: g1: couldn't find an available UDC or it's busy
[  527.944061][ T4318] usb 5-1: Product: syz
[  527.954455][ T4318] usb 5-1: Manufacturer: syz
[  527.979463][ T4318] usb 5-1: SerialNumber: syz
[  528.023483][ T4318] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[  528.063209][ T4318] ti_usb_3410_5052 5-1:2.0: missing endpoints
[  528.349248][ T4318] usb 5-1: USB disconnect, device number 26
[  532.018596][T10674] UDC core: g1: couldn't find an available UDC or it's busy
[  532.335161][ T4345] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  532.521391][T10687] loop0: detected capacity change from 0 to 128
[  533.178933][ T4317] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  533.284326][ T4345] usb 5-1: Using ep0 maxpacket: 16
[  533.384516][ T4317] usb 2-1: Using ep0 maxpacket: 16
[  533.436440][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.448079][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.459352][ T4345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  533.472836][ T4317] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.482742][ T4345] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  533.492918][ T4317] usb 2-1: config 0 interface 0 has no altsetting 0
[  533.503026][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.511374][ T4317] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  533.522203][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.532197][ T4345] usb 5-1: config 0 descriptor??
[  533.552393][ T4317] usb 2-1: config 0 descriptor??
[  533.586134][ T4317] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  534.129647][ T4345] usbhid 5-1:0.0: can't add hid device: -71
[  534.136510][ T4345] usbhid: probe of 5-1:0.0 failed with error -71
[  534.196928][ T4345] usb 5-1: USB disconnect, device number 27
[  535.789983][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'.
[  535.891228][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'.
[  535.972121][  T129] usb 2-1: USB disconnect, device number 28
[  536.229710][T10751] UDC core: g1: couldn't find an available UDC or it's busy
[  536.867461][T10767] loop4: detected capacity change from 0 to 128
[  542.354889][T10844] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  542.366554][T10844] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  542.415001][T10844] udc dummy_udc.0: failed to start g1: -22
[  542.421058][T10844] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  542.438203][T10844] UDC core: g1: couldn't find an available UDC or it's busy
[  544.023247][T10879] loop4: detected capacity change from 0 to 32768
[  544.057384][T10879] (syz.4.1955,10879,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  544.075214][T10879] (syz.4.1955,10879,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  544.143427][T10879] JBD2: Ignoring recovery information on journal
[  544.230576][T10879] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  545.701270][T10921] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  545.901693][T10921] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  546.074552][T10921] udc dummy_udc.0: failed to start g1: -22
[  546.125456][T10921] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  546.153121][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  546.174183][T10921] UDC core: g1: couldn't find an available UDC or it's busy
[  547.191253][T10939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1957'.
[  547.639066][T10954] tmpfs: Unknown parameter '��h�9孱�H{����dx�i����8���0Z�l|w�?�VH��C\W4���t�C|�A
[  547.639066][T10954] ��5�'
[  552.725191][T11020] loop4: detected capacity change from 0 to 256
[  552.788935][T11020] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  552.881811][T11020] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  553.208414][T11015] loop1: detected capacity change from 0 to 256
[  553.594473][ T4345] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  553.702768][T11039] tmpfs: Unknown parameter '��h�9孱�H{����dx�i����8���0Z�l|w�?�VH��C\W4���t�C|�A
[  553.702768][T11039] ��5�'
[  553.799334][ T4345] usb 5-1: Using ep0 maxpacket: 8
[  553.807362][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  553.858887][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  553.914263][ T4345] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  554.045620][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24929, setting to 1024
[  554.123283][ T4345] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  554.175043][ T4345] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  554.257239][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.348989][ T4345] usb 5-1: config 0 descriptor??
[  554.385204][T11034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  556.464382][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  557.135370][T11084] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  558.003100][   T27] usb 5-1: USB disconnect, device number 28
[  558.507776][T11110] tmpfs: Unknown parameter '��h�9孱�H{����dx�i����8���0Z�l|w�?�VH��C\W4���t�C|�A
[  558.507776][T11110] ��5�'
[  558.595391][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1990'.
[  558.669688][T11101] loop1: detected capacity change from 0 to 256
[  558.678190][T11092] loop0: detected capacity change from 0 to 32768
[  558.837252][T11092] XFS (loop0): Mounting V5 Filesystem
[  559.054144][T11092] XFS (loop0): Ending clean mount
[  559.164819][   T26] audit: type=1800 audit(1785581657.741:14): pid=11092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1989" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  559.235343][T11092] XFS (loop0): User initiated shutdown received.
[  559.283626][T11092] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  559.306240][T11092] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  559.472528][ T4275] XFS (loop0): Unmounting Filesystem
[  560.704539][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  561.505528][T11157] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  561.512573][T11157] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  561.583981][T11157] udc dummy_udc.0: failed to start g1: -22
[  561.630556][T11157] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  561.683630][T11157] UDC core: g1: couldn't find an available UDC or it's busy
[  562.600526][T11176] loop6: detected capacity change from 0 to 512
[  562.689203][T11179] loop4: detected capacity change from 0 to 256
[  562.787674][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.794043][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  562.831283][T11176] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13
[  562.870656][T11179] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  562.881429][T11176] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2004: inode #15: comm syz.6.2004: iget: illegal inode #
[  562.918253][T11176] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.2004: couldn't read orphan inode 15 (err -117)
[  562.997246][T11176] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  563.779564][   T26] audit: type=1800 audit(1785581662.351:15): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2006" name="file1" dev="loop4" ino=1048871 res=0 errno=0
[  563.789657][ T9464] EXT4-fs (loop6): unmounting filesystem.
[  563.818607][T11181] loop0: detected capacity change from 0 to 256
[  564.749967][T11198] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  564.754619][ T4342] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  564.756534][T11198] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  564.804572][T11198] vhci_hcd vhci_hcd.0: Device attached
[  564.864416][ T4279] Bluetooth: hci2: command 0x0406 tx timeout
[  564.905231][T11199] vhci_hcd: connection closed
[  564.906734][ T5046] vhci_hcd: stop threads
[  564.954285][ T4342] usb 5-1: Using ep0 maxpacket: 32
[  564.962035][ T4342] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  564.967689][ T5046] vhci_hcd: release socket
[  564.982588][ T4342] usb 5-1: config 0 has no interface number 0
[  564.991613][ T4342] usb 5-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  564.995004][ T5046] vhci_hcd: disconnect device
[  565.026127][ T4342] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  565.054761][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.068496][ T4342] usb 5-1: Product: syz
[  565.079461][ T4342] usb 5-1: Manufacturer: syz
[  565.092075][ T4342] usb 5-1: SerialNumber: syz
[  565.117276][ T4342] usb 5-1: config 0 descriptor??
[  565.144491][ T4342] asix: probe of 5-1:0.188 failed with error -22
[  566.014336][   T14] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  566.202485][T11210] loop6: detected capacity change from 0 to 32768
[  566.238851][   T14] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  566.249628][T11210] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2011 (11210)
[  566.269138][   T14] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[  566.291509][   T14] usb 4-1: config 220 has no interface number 2
[  566.305718][   T14] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  566.334964][   T14] usb 4-1: config 220 interface 0 has no altsetting 0
[  566.349045][   T14] usb 4-1: config 220 interface 76 has no altsetting 0
[  566.364155][   T14] usb 4-1: config 220 interface 1 has no altsetting 0
[  566.392713][T11210] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  566.406239][   T14] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  566.438157][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.447947][T11210] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  566.456907][   T14] usb 4-1: Product: syz
[  566.474466][   T14] usb 4-1: Manufacturer: syz
[  566.478706][T11210] BTRFS info (device loop6): using free space tree
[  566.494526][   T14] usb 4-1: SerialNumber: syz
[  566.623441][T11210] BTRFS info (device loop6): enabling ssd optimizations
[  566.737005][   T14] usb 4-1: selecting invalid altsetting 0
[  566.748433][   T14] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  566.768887][   T14] usb 4-1: No valid video chain found.
[  566.801289][   T14] usb 4-1: selecting invalid altsetting 0
[  566.816420][   T14] usbtest: probe of 4-1:220.1 failed with error -22
[  566.849958][   T14] usb 4-1: USB disconnect, device number 17
[  566.886616][T11250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2014'.
[  567.083551][ T9464] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  567.494517][ T4317] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  567.545426][ T4342] usb 5-1: USB disconnect, device number 29
[  567.694307][ T4317] usb 2-1: Using ep0 maxpacket: 16
[  567.701458][ T4317] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.739661][ T4317] usb 2-1: config 0 interface 0 has no altsetting 0
[  567.761173][ T4317] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  567.783909][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.821282][ T4317] usb 2-1: config 0 descriptor??
[  568.076653][T11259] loop3: detected capacity change from 0 to 256
[  568.449126][ T4317] usbhid 2-1:0.0: can't add hid device: -71
[  568.467246][ T4317] usbhid: probe of 2-1:0.0 failed with error -71
[  568.478733][ T4317] usb 2-1: USB disconnect, device number 29
[  569.816560][T11276] dummy_hcd dummy_hcd.0: remove, state 1
[  569.823296][T11276] usb usb1: USB disconnect, device number 1
[  569.963855][T11276] dummy_hcd dummy_hcd.0: stopped
[  570.064359][T11276] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  570.552200][T11288] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  570.558806][T11288] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  570.572769][T11288] vhci_hcd vhci_hcd.0: Device attached
[  570.626431][T11289] vhci_hcd: connection closed
[  570.626649][ T5072] vhci_hcd: stop threads
[  570.646094][ T5072] vhci_hcd: release socket
[  570.650680][ T5072] vhci_hcd: disconnect device
[  572.374715][    T7] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  573.994564][    T7] usb 4-1: Using ep0 maxpacket: 16
[  574.053098][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.212355][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.326206][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  574.468127][    T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  574.576788][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.720468][    T7] usb 4-1: config 0 descriptor??
[  575.208228][    T7] usbhid 4-1:0.0: can't add hid device: -71
[  575.217897][    T7] usbhid: probe of 4-1:0.0 failed with error -71
[  575.252622][    T7] usb 4-1: USB disconnect, device number 18
[  575.867279][T11348] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82
[  577.859130][T11364] loop3: detected capacity change from 0 to 256
[  578.432570][T11382] tmpfs: Unknown parameter '��h�9孱�H{����dx�i����8���0Z�l|w�?�VH��C\W4���t�C|�A
[  578.432570][T11382] ��5�'
[  578.660212][ T5101] Bluetooth: hci5: Frame reassembly failed (-84)
[  578.705139][T11393] loop6: detected capacity change from 0 to 256
[  578.741642][T11393] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  578.828603][T11393] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  579.286827][T11398] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  579.298818][T11398] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  579.307354][T11398] CPU: 0 PID: 11398 Comm: syz.3.2052 Not tainted syzkaller #0
[  579.314858][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  579.324965][T11398] RIP: 0010:dummy_set_selfpowered+0xb7/0x150
[  579.331127][T11398] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b1 53 fb 41 be 30 12 00 00 4d
[  579.350842][T11398] RSP: 0018:ffffc900034f77e0 EFLAGS: 00010246
[  579.357010][T11398] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[  579.365025][T11398] RDX: ffff888024d88000 RSI: 0000000000000003 RDI: 0000000000000005
[  579.373033][T11398] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b
[  579.381038][T11398] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000
[  579.389045][T11398] R13: ffff88805a1494a8 R14: ffff888143775238 R15: 0000000000000000
[  579.397068][T11398] FS:  00007ff1283f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  579.406038][T11398] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  579.412656][T11398] CR2: 000000110c3cd771 CR3: 00000000596ba000 CR4: 00000000003526f0
[  579.420666][T11398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  579.428671][T11398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  579.436674][T11398] Call Trace:
[  579.440059][T11398]  <TASK>
[  579.443068][T11398]  ? dummy_wakeup+0x260/0x260
[  579.447813][T11398]  usb_gadget_set_selfpowered+0x6a/0x2b0
[  579.453475][T11398]  composite_dev_prepare+0x2f3/0x310
[  579.458784][T11398]  configfs_composite_bind+0xa1/0xf60
[  579.464190][T11398]  ? kernfs_put+0x442/0x480
[  579.468742][T11398]  ? os_desc_qw_sign_store+0x100/0x100
[  579.474232][T11398]  gadget_bind_driver+0x2af/0x760
[  579.479295][T11398]  ? gadget_match_driver+0x130/0x130
[  579.484612][T11398]  really_probe+0x24a/0xb40
[  579.489204][T11398]  ? pm_runtime_barrier+0x147/0x1c0
[  579.494457][T11398]  __driver_probe_device+0x1f5/0x390
[  579.499763][T11398]  driver_probe_device+0x4f/0x420
[  579.504825][T11398]  __driver_attach+0x43d/0x6c0
[  579.509620][T11398]  ? driver_attach+0x40/0x40
[  579.514262][T11398]  bus_for_each_dev+0x182/0x1f0
[  579.519146][T11398]  ? __lock_acquire+0x7c40/0x7c40
[  579.524267][T11398]  ? bus_remove_file+0xd0/0xd0
[  579.529103][T11398]  ? do_raw_spin_unlock+0x11d/0x230
[  579.534326][T11398]  bus_add_driver+0x324/0x5d0
[  579.539027][T11398]  driver_register+0x32d/0x430
[  579.543816][T11398]  usb_gadget_register_driver_owner+0xf5/0x260
[  579.550005][T11398]  gadget_dev_desc_UDC_store+0x1c3/0x2e0
[  579.555665][T11398]  configfs_write_iter+0x30b/0x400
[  579.560808][T11398]  ? gadget_dev_desc_UDC_show+0x80/0x80
[  579.566391][T11398]  vfs_write+0x482/0x9a0
[  579.570795][T11398]  ? file_end_write+0x250/0x250
[  579.575682][T11398]  ? __fget_files+0x3fc/0x460
[  579.580408][T11398]  ? __fdget_pos+0x2ae/0x360
[  579.585030][T11398]  ? ksys_write+0x70/0x260
[  579.589480][T11398]  ksys_write+0x14d/0x260
[  579.593837][T11398]  ? __ia32_sys_read+0x80/0x80
[  579.598643][T11398]  ? lockdep_hardirqs_on+0x94/0x140
[  579.603890][T11398]  do_syscall_64+0x4c/0xa0
[  579.608350][T11398]  ? clear_bhb_loop+0x60/0xb0
[  579.613124][T11398]  ? clear_bhb_loop+0x60/0xb0
[  579.617826][T11398]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  579.623769][T11398] RIP: 0033:0x7ff12a19e019
[  579.628229][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.647853][T11398] RSP: 002b:00007ff1283f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  579.656289][T11398] RAX: ffffffffffffffda RBX: 00007ff12a425fa0 RCX: 00007ff12a19e019
[  579.664283][T11398] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000005
[  579.672271][T11398] RBP: 00007ff12a23500c R08: 0000000000000000 R09: 0000000000000000
[  579.680257][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.688247][T11398] R13: 00007ff12a426038 R14: 00007ff12a425fa0 R15: 00007fff33fa7108
[  579.696245][T11398]  </TASK>
[  579.699294][T11398] Modules linked in:
[  579.794325][T11398] ---[ end trace 0000000000000000 ]---
[  579.800461][T11398] RIP: 0010:dummy_set_selfpowered+0xb7/0x150
[  579.810989][T11398] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b1 53 fb 41 be 30 12 00 00 4d
[  579.834271][T11398] RSP: 0018:ffffc900034f77e0 EFLAGS: 00010246
[  579.840651][T11398] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[  579.849572][T11398] RDX: ffff888024d88000 RSI: 0000000000000003 RDI: 0000000000000005
[  579.857930][T11398] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b
[  579.867774][T11398] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000
[  579.876123][T11398] R13: ffff88805a1494a8 R14: ffff888143775238 R15: 0000000000000000
[  579.884860][T11398] FS:  00007ff1283f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  579.894408][T11398] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  579.901552][T11398] CR2: 00007ff12a1eb700 CR3: 00000000596ba000 CR4: 00000000003526e0
[  579.910249][T11398] Kernel panic - not syncing: Fatal exception
[  579.916958][T11398] Kernel Offset: disabled
[  579.921292][T11398] Rebooting in 86400 seconds..