last executing test programs:

6m1.335914144s ago: executing program 1 (id=1407):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x2c}}, 0x0)

6m1.291879758s ago: executing program 1 (id=1408):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$FICLONE(r4, 0x40049409, r4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000240), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5m59.326104596s ago: executing program 1 (id=1411):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xc8)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

5m57.62439159s ago: executing program 1 (id=1415):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x24}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001e40)={0x0, @aes128, 0x0, @desc2})
sendmsg$nl_route(r0, &(0x7f0000001600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="30000000140008002dbd7000fedbdf2502581001", @ANYRES32=0x0, @ANYBLOB="0800080004010000080009000100000008000a0004000000ed2821b74d5c53c4bc35348121b2382b3fedf72cf5b71de8232acc869c4b1b1139676625f697c3397cf488155ac7343ad35882c63d53b379e0a279738653cff282443400ddd3cfbdb042746301b5b77bdc8d29719873ec1ed5f4d725af7f9bfbcbd44be01538ef525e7c5c328f87024e3f677b180151feaa8120872f15dd105e515ee344b0a13b6cae6924fd9751393f084a6d8a1e57d868e598a150bdbb75e73bb1a939ded00362e836d00a10b58d9480db7c13bb92acba6e1f"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x880)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x800, 0x80000)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x1014}})
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x4, @multicast, 'macsec0\x00'}}, 0x80, &(0x7f0000001680)=[{0x0}, {&(0x7f00000003c0)="edb447ee77e7c6358b068389e6ae1adeeb9e3a039815b690971a5d4a04c6caf96f4be7d5887ad2df68dafebdb976ec54e57433bf4f41f3d91e8b79bd28fcf7747ec35b33bde2d811ac5ea8f5842d9dadb7dc303d024b7d1f6e8a6ac1821ccb04d551f25067016d15772f8d276777a0562dda4d16e968eb63b608b7da947331bae0dcb2e15aefca98ac43f0ed3f655bcd6cae29513003f32a000cc53a6267df86e04148b6f1c0042c3fb31d0607cec10edd6deb4bb8b28cd90c08525004fd15566d24c984f3b7b8d28e05bc7928fd3334bf16447108b6d949d7e719f80525f61c6f42c910b3", 0xe5}, {&(0x7f0000000500)="3bb5a0f4b79aa3ec9e767c8997cb8bb43dc8f86f40d6fb71411752c942f9462bf9a7ab7eff20b862f8e43d89edc47c4203b79c90f4e264986c51d4bf6363a5e6ae7621d4d82904db3372d09924269a9eec03e3ed68c0b39ff31b88e40a27cc4726facb256a24f1e09bddc81fdc0c07e9a78c18ce8dec259a4cdebfb700008cf453fcfb81ac5eeb29159b37df636ffe5fcf99", 0x92}, {&(0x7f0000000600)="96fbad4bbcd671392bfaa330217ec6c0f9749aed20eb671d4e76f2a274d472d64115b696974c3b57ed2ca0fb96fc215bda674b4b37f696f9fa34966ff435718851cec00108860d6092412f54076a8def14c38d5eeab69e2a383127f7dcb96d850a445316b383946f2861ac7d9db00c9775b411c5668cc131706744bbf02e3b3f537c15bc719f2de2c202deb0e13154b966f6f97e51ec2d9eb4186dee576a5e0ade95e2cb4007a34293", 0xa9}, {&(0x7f0000000240)="c05a364f6639cd57ebee1a2a40b9bd6c4c74ea46de9731e11ebd21aef9ee70d126742d59dd9e83a08f6ac025968aebe98ce039e2498db35cfb0019a6cf2c5bc5830427b787052b81733477edee7049c33425c1d5f034b27dc594af80a0d6267c470fb600c99166dfe1da2f3f42ef3e07", 0x70}, {&(0x7f0000000300)="6657faf2da5efedba73c1baf023cf8fbc339ad529d77c3f77f65beb90cbabb13e66c9b947f580580e45c388c1152a16e70b83eeda020d9eca1442088c51f69", 0x3f}, {&(0x7f0000000700)="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", 0xefe}, {&(0x7f0000001700)="fd8aa112ff3e2d52686db67c39d42f431305079210840ae72a1a7a3c2abbb89d987bd548b0b75bfbed4278734bc61b0d790a05b05b00e2b174c57bcc7eb8889993654e04f03e0d249a80cb0cd26d11aef2af4ea68618895a0af245b39b0571c47ff11e3b02491792d5a14c4ec11860b7cbdff2f3e2c020e1806ebc923f8ce491d114a91c8cee2884375300933f1cb983f4223556b258c71e1eb7fd4890481f5c33aba2339ff5168033", 0xa9}], 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYBLOB="9e8c8518780c286d9d85586534e8f194f9422096be7514bac0cae71b37f8f3b09d301ccb3cfb018ea5a9735aa5e90cadb46d4e71aa44e03f34f0f267cf39e263195cf9ee13a2750a2f5f8cb9720e76ea770dff79a2d4e2f01c2cfc48a0a21deb5fa2e6a2b54671219c0c4d798e4e810c4520d8a9e734da9804d223ea868465b55f0f09511e9fce"], 0x1a8}, 0x10)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001640)={r2}, 0x8)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
setsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000001f40)="eef670fd588abf14776ab42991596442c3f67a1e75d943328074fa0ec1cc0aece76ffed33e6f9430136b83df855bb4a8df56e7b1209ef2d00faf47fd9715de973bcf9fed296c744635ff11cb8c34d28b8d64777dde38b0d8101a5d5471ec03639ade980463e163116dbf0d66a843d2b9d0", 0x71)
openat$cgroup_devices(r2, &(0x7f0000001a00)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
connect(0xffffffffffffffff, &(0x7f00000017c0)=@isdn={0x22, 0x0, 0x2, 0x53, 0x3d}, 0x80)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
dup(r6)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000019c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x25a040, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000001c0)={0x3, 0x5, 0x2})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x17, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x6c}}, 0x0)

5m57.336156526s ago: executing program 1 (id=1417):
socket$nl_netfilter(0x10, 0x3, 0xc)
getpgrp(0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xff2e)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x2c}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r4, 0x2, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='module_request\x00'}, 0x10)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
syz_emit_ethernet(0x1f, &(0x7f00000024c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000400011aa0097f1989785ea6d06dd2f00000000009251dd04928dac44434430e0780b063b23b794a5cd16f0221ecd9abf2ce2699fa735c4541a632b44b3d6cdb10ba5b642141a01156bfa6523c3932f40d8091eb8472d1c2f8b300febecbfa71d40"], 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$nl_route(r6, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)

5m55.918913145s ago: executing program 1 (id=1424):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10)
mmap(&(0x7f0000deb000/0x2000)=nil, 0x2000, 0x100000f, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = userfaultfd(0x801)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200900, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240), 0x0)
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0)

5m40.459301106s ago: executing program 32 (id=1424):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10)
mmap(&(0x7f0000deb000/0x2000)=nil, 0x2000, 0x100000f, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = userfaultfd(0x801)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x2c}}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200900, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240), 0x0)
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0)

20.540558609s ago: executing program 4 (id=2042):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x19, 0x4, 0x19, 0x40, 0x9022, 0xd632, 0x6393, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6f, 0x86, 0xb143a241f10f8ae8, 0x1, [{{0x9, 0x4, 0x70, 0x0, 0x1, 0xde, 0x11, 0xcd, 0xd, [], [{{0x9, 0x5, 0x3, 0x4, 0x20, 0x9, 0x4c, 0x2}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000004440)={0x2c, 0x0, &(0x7f0000004240)={0x0, 0x3, 0x95, @string={0x95, 0x3, "13c9821264f553fa15d6a8e90a8550a0a31f65d34ce23378ed778e73c9d5e654acec66dc70fed1f3f7069706c50872804be265eb65104330ccf4b12d54f2c08ffbdb79f4c4a540c9501f31725c3edaacc3b8c9ad724495fa5623a5401f09fd379130598c944a10ed360c149843f363a50abce47018b07c79e4e589b4e94ab9068d5c1728a84b1729cebbee6f18c2fa8e1b7e50"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000006240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x2, 0x2d, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x7f2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000006480)={0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0)

17.010172959s ago: executing program 4 (id=2049):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000280)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@data_writeback}, {@preferred_slot}, {@acl}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
clock_adjtime(0x2, &(0x7f0000000000)={0x7, 0xfffffffffffffff7, 0x4, 0x0, 0x3, 0x63e, 0x1, 0x9, 0xfc5e, 0x1, 0x9, 0x98, 0x6, 0x0, 0xb913, 0x80000000000, 0x100000001, 0x80000001, 0x81, 0x1, 0x3, 0x0, 0x1ab, 0x5, 0x8000000000000001, 0x3})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x5, 0x3f, 0x6c03, 0xee, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = semget(0x0, 0x4, 0x83)
semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000200)=0xa)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000)
shmctl$IPC_SET(0x0, 0xfffffffe, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xf0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

13.905485601s ago: executing program 4 (id=2054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040814}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe001}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
semop(0x0, 0x0, 0x0)
mmap(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x102, 0x48001050, r2, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x301300)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, 0x0, 0x25, 0x1, @void}, 0x10)
rseq(0x0, 0x0, 0x0, 0x0)
r4 = inotify_init1(0x800)
r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0)
inotify_rm_watch(r4, r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000005574a56c16"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000090000003c0003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x50}}, 0x0)

10.687935682s ago: executing program 0 (id=2060):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000240), 0x0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000100)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
tkill(r3, 0x32)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

10.434488705s ago: executing program 4 (id=2061):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, 0x0, 0x0, 0x3595, 0xff, 0x4)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000580)='./file1\x00', &(0x7f0000000000), &(0x7f0000000540)=ANY=[], 0x841, 0x0)
llistxattr(&(0x7f0000000480)='./file1\x00', 0x0, 0x0)

9.588625172s ago: executing program 0 (id=2063):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xd, 0x10, "f21d64911c4132db21fee26903f96d36"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

8.356673703s ago: executing program 2 (id=2068):
syz_usb_connect(0x0, 0x97, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x77, 0x2a, 0xed, 0x40, 0x8086, 0xb07, 0x6cb9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0xdc, 0x20, 0x100, 0x0, [{{0x9, 0x4, 0x0, 0x3f, 0x0, 0xe, 0x1, 0x0, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0xa}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @acm={0x4, 0x24, 0x2, 0xa}, @mdlm={0x15, 0x24, 0x12, 0x900}]}]}}, {{0x9, 0x4, 0x4c, 0x3, 0x0, 0x3a, 0x92, 0xa2, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x4, 0x3, 0x7, 0xff, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x5, 0x5, 0x2, 0xd0, 0x7f}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x7, 0x47, "812e"}]}]}}]}}]}}, 0x0)

7.900610014s ago: executing program 5 (id=2069):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$xdp(0x2c, 0x3, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6, 0x0, 0xffffffffffffffff}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioperm(0x0, 0x444, 0xb1f)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, 0x0)
epoll_wait(r7, 0x0, 0x0, 0x400)
close_range(r0, 0xffffffffffffffff, 0x0)

7.849791409s ago: executing program 3 (id=2070):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000700)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0xb930}}, {@commit={'commit', 0x3d, 0x5}}, {@user_xattr}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x683888, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f00000008c0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000800)={[{@max={'max', 0x3d, 0x2000000}}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

6.792984585s ago: executing program 5 (id=2071):
mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000001c0)='mqueue\x00', 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x3000012, &(0x7f00000003c0)=ANY=[@ANYBLOB="0379b055cdc261ee91bb6a9f8df3a79afd302321c0cb8502cce0c9be44b9563980c0c3d8798013233db343c83ea966a189efa8ceb93f137d1393c0c4afa52f9e72d36f66d6830870fb5fe20967b009e7fca574f96a9acb604adde66117450d864767482c700f20bc3a0143b00c19b6fab1"], 0x82, 0x1a2, &(0x7f0000000440)="$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")
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x400000, 0x10000002000003})
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x9, 0x2)
io_submit(0x0, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}})

5.118298207s ago: executing program 5 (id=2072):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'})
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.068208201s ago: executing program 3 (id=2073):
syz_open_dev$sg(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x1ff}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
close(r1)

5.018539396s ago: executing program 5 (id=2074):
socket$inet6_sctp(0xa, 0x1, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x40, 0x0)
r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r0, 0xffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
semget$private(0x0, 0x4, 0x20)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x10, &(0x7f0000000200)={[{@lazytime}]}, 0x1, 0x56f, &(0x7f0000000640)="$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")
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r5)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$tun(r2, &(0x7f0000000240)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[{0x38b8}, {0xfff65, 0x0, 0x1}], @generic="67a3c3ef7c9ea8764f5bee7359840c61e0cc07ca8fbe8e0ea1da3d5973e284124c"}}, 0x37)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000600)='.request_key_auth\x00', &(0x7f0000000640)=@secondary)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x4, 0x200072}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x1}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2000000, 0xcb, 0x12d5f, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)

4.937808823s ago: executing program 4 (id=2075):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@checkpoint_diasble}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@noflush_merge}, {@quota}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@age_extent_cache}, {@discard}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
setsockopt(0xffffffffffffffff, 0x5, 0x20, &(0x7f0000000080)="5dd9e38d939ba6171d6cca0694872593448b4d7b98b4bb63f044cd0725252340affc200739d59853d64a130fffb3edb752", 0x31)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x81)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x20000028)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1001001000005, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8})
r4 = socket$inet6(0xa, 0x1, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0xfffc, 0x4000, 0xa, 0xa0, 0x80}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8002}, {0x2}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x20000000, 0x32}, 0x0, @in=@local, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0xe40b}}, 0xe8)
pwritev2(r1, &(0x7f0000000240), 0x1, 0x2000, 0x0, 0x0)

4.888672787s ago: executing program 2 (id=2076):
r0 = fanotify_init(0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x641, 0x1038, r1, 0x0)
r2 = fanotify_init(0x0, 0x0)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r2, 0x641, 0x4800003a, r3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

4.430480309s ago: executing program 0 (id=2077):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041, 0x1ff})
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0)

4.127312106s ago: executing program 2 (id=2078):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1035)

4.080457721s ago: executing program 0 (id=2079):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000100)={@private=0xa010101, @loopback}, 0xc)

3.600442024s ago: executing program 0 (id=2080):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140e, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000114}, 0x4c000)

3.571241596s ago: executing program 3 (id=2081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x58}}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback}, 0x1c)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000280)='./file0/file0\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=@v3={0x3000000, [{0x4, 0xbe2}, {0x8, 0x6}], 0xee00}, 0x18, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000040000000c00018006000600800a0000100002800c001700"], 0x34}}, 0xc000)

3.563526017s ago: executing program 2 (id=2082):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
pipe(0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x3, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40046304, {0x0, 0x400c630f, 0x0, 0x0, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3.388634033s ago: executing program 0 (id=2083):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x3, "0f617f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8, "848166304fe2d781"}, 0x0, 0x0, 0x0, 0x0})

2.346498558s ago: executing program 2 (id=2084):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'})
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.98219684s ago: executing program 2 (id=2085):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa0c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x22, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x25, 0x7, {0x7, 0x22, "0873ec671f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.793834778s ago: executing program 3 (id=2086):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0)
fallocate(r0, 0x0, 0x0, 0x101)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0xfecc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0)
sendfile(r2, r2, 0x0, 0x7a680000)

1.793621228s ago: executing program 5 (id=2087):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.458281528s ago: executing program 5 (id=2088):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000fa0fffffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

510.754384ms ago: executing program 4 (id=2089):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xd, 0x10, "f21d64911c4132db21fee26903f96d36"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

196.664862ms ago: executing program 3 (id=2090):
r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20}, 0x20)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f0000000240)=0x8)
sendfile(r1, r0, 0x0, 0x2c62)

0s ago: executing program 3 (id=2091):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40010)

kernel console output (not intermixed with test programs):

vice loop1): ext4_orphan_get:1405: comm syz.1.1203: couldn't read orphan inode 15 (err -117)
[  642.879064][ T9288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  642.960929][ T9286] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.1203: Directory hole found for htree leaf block 0
[  642.975217][ T7029] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  643.007589][ T9287] overlayfs: missing 'lowerdir'
[  643.112764][ T9297] loop4: detected capacity change from 0 to 1024
[  643.267393][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  643.380235][ T9297] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  649.014915][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  649.404658][ T9333] loop4: detected capacity change from 0 to 4096
[  649.431310][ T9333] NILFS (loop4): invalid segment: Checksum error in segment payload
[  649.442200][ T9333] NILFS (loop4): trying rollback from an earlier position
[  649.574318][ T9333] NILFS (loop4): recovery complete
[  649.991125][ T9339] overlayfs: failed to get inode (-116)
[  649.996886][ T9339] overlayfs: failed to get inode (-116)
[  650.002668][ T9339] overlayfs: failed to get inode (-116)
[  650.008456][ T9339] overlayfs: failed to get inode (-116)
[  650.273636][ T9342] overlayfs: failed to get inode (-116)
[  650.279513][ T9342] overlayfs: failed to get inode (-116)
[  650.285207][ T9342] overlayfs: failed to get inode (-116)
[  650.290943][ T9342] overlayfs: failed to get inode (-116)
[  651.035723][ T9345] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  652.966836][ T9352] overlayfs: failed to get inode (-116)
[  652.972862][ T9352] overlayfs: failed to get inode (-116)
[  654.067533][ T9361] loop4: detected capacity change from 0 to 1024
[  655.735018][ T9366] device tunl0 entered promiscuous mode
[  655.740748][ T9366] device vlan2 entered promiscuous mode
[  655.766994][ T9366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  655.774350][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  655.785074][ T9361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  657.603867][ T9381] ovl_get_inode: 6 callbacks suppressed
[  657.603883][ T9381] overlayfs: failed to get inode (-116)
[  657.616041][ T9381] overlayfs: failed to get inode (-116)
[  657.622511][ T9381] overlayfs: failed to get inode (-116)
[  657.628944][ T9381] overlayfs: failed to get inode (-116)
[  658.539435][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  659.067644][ T9392] loop1: detected capacity change from 0 to 4096
[  659.707197][ T9392] NILFS (loop1): invalid segment: Checksum error in segment payload
[  659.766043][ T9392] NILFS (loop1): trying rollback from an earlier position
[  659.788083][ T9394] loop4: detected capacity change from 0 to 4096
[  659.819111][ T9400] loop3: detected capacity change from 0 to 4096
[  659.838019][ T9394] NILFS (loop4): invalid segment: Checksum error in segment payload
[  659.841960][ T9400] NILFS (loop3): invalid segment: Checksum error in segment payload
[  659.847554][ T9394] NILFS (loop4): trying rollback from an earlier position
[  659.871881][ T9400] NILFS (loop3): trying rollback from an earlier position
[  659.879369][ T9392] NILFS (loop1): recovery complete
[  659.885957][ T9394] NILFS (loop4): recovery complete
[  659.891666][ T9404] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  659.907474][ T9405] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  660.664039][ T9400] NILFS (loop3): recovery complete
[  660.700006][ T9412] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  660.907527][ T9415] overlayfs: failed to get inode (-116)
[  660.913240][ T9415] overlayfs: failed to get inode (-116)
[  660.919910][ T9415] overlayfs: failed to get inode (-116)
[  660.925597][ T9415] overlayfs: failed to get inode (-116)
[  663.541307][ T9424] loop0: detected capacity change from 0 to 1024
[  663.608586][ T9424] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  667.290876][ T9437] overlayfs: failed to get inode (-116)
[  667.296714][ T9437] overlayfs: failed to get inode (-116)
[  667.302417][ T9437] overlayfs: failed to get inode (-116)
[  667.308137][ T9437] overlayfs: failed to get inode (-116)
[  668.043249][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  668.314503][ T9448] device tunl0 entered promiscuous mode
[  668.505350][ T9448] device vlan2 entered promiscuous mode
[  668.663649][ T9448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  669.028840][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  669.590085][ T9464] overlayfs: failed to get inode (-116)
[  669.596443][ T9464] overlayfs: failed to get inode (-116)
[  669.602840][ T9464] overlayfs: failed to get inode (-116)
[  669.609608][ T9464] overlayfs: failed to get inode (-116)
[  670.591142][ T9449] overlayfs: failed to get inode (-116)
[  671.223757][ T9454] overlayfs: failed to get inode (-116)
[  671.256737][ T4564] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  671.322266][ T9475] loop4: detected capacity change from 0 to 512
[  671.329865][ T9475] EXT4-fs: Ignoring removed orlov option
[  671.557719][ T9475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  671.566147][ T9475] System zones: 1-12
[  671.642573][ T9475] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1252: casefold flag without casefold feature
[  671.656344][ T9475] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1252: couldn't read orphan inode 15 (err -117)
[  671.669923][ T9475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  671.702323][ T9475] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1252: Directory hole found for htree leaf block 0
[  672.007378][ T4564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.146234][ T4564] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  672.191033][ T4564] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  672.211299][ T4564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.279863][ T4564] usb 3-1: config 0 descriptor??
[  672.285737][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  672.636581][ T9479] loop4: detected capacity change from 0 to 4096
[  673.082905][ T9479] NILFS (loop4): invalid segment: Checksum error in segment payload
[  673.405244][ T9479] NILFS (loop4): trying rollback from an earlier position
[  673.473551][ T4564] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  673.487936][ T4564] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  673.524064][ T4564] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  673.548547][ T9479] NILFS (loop4): recovery complete
[  673.584307][ T9485] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  673.623866][ T4564] usb 3-1: USB disconnect, device number 24
[  675.908573][ T9502] ovl_get_inode: 7 callbacks suppressed
[  675.908588][ T9502] overlayfs: failed to get inode (-116)
[  675.919965][ T9502] overlayfs: failed to get inode (-116)
[  675.925956][ T9502] overlayfs: failed to get inode (-116)
[  675.931771][ T9502] overlayfs: failed to get inode (-116)
[  677.135573][ T9516] overlayfs: failed to get inode (-116)
[  677.142069][ T9516] overlayfs: failed to get inode (-116)
[  677.148435][ T9516] overlayfs: failed to get inode (-116)
[  677.154808][ T9516] overlayfs: failed to get inode (-116)
[  678.914724][ T9530] loop4: detected capacity change from 0 to 1024
[  680.088898][ T9530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  681.482026][ T9547] loop3: detected capacity change from 0 to 1024
[  681.522288][ T9547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  683.686827][ T9554] overlayfs: failed to get inode (-116)
[  683.692571][ T9554] overlayfs: failed to get inode (-116)
[  683.698396][ T9554] overlayfs: failed to get inode (-116)
[  683.704064][ T9554] overlayfs: failed to get inode (-116)
[  683.988944][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  684.238061][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  685.767746][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  685.774102][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  686.102350][ T9572] loop2: detected capacity change from 0 to 1024
[  686.190528][ T9572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  688.555193][ T9591] loop1: detected capacity change from 0 to 1024
[  688.563584][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  688.635414][ T9591] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  688.736166][ T9595] overlayfs: failed to get inode (-116)
[  688.741916][ T9595] overlayfs: failed to get inode (-116)
[  688.747724][ T9595] overlayfs: failed to get inode (-116)
[  688.753427][ T9595] overlayfs: failed to get inode (-116)
[  692.047227][ T9602] overlayfs: failed to get inode (-116)
[  692.052979][ T9602] overlayfs: failed to get inode (-116)
[  692.058764][ T9602] overlayfs: failed to get inode (-116)
[  692.064543][ T9602] overlayfs: failed to get inode (-116)
[  692.932367][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  693.830398][ T9620] loop0: detected capacity change from 0 to 1024
[  693.853386][ T9618] loop4: detected capacity change from 0 to 4096
[  693.939734][ T9618] NILFS (loop4): invalid segment: Checksum error in segment payload
[  693.952457][ T9620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  693.965436][ T9623] loop1: detected capacity change from 0 to 4096
[  693.981550][ T9623] NILFS (loop1): invalid segment: Checksum error in segment payload
[  693.990249][ T9623] NILFS (loop1): trying rollback from an earlier position
[  694.022003][ T9618] NILFS (loop4): trying rollback from an earlier position
[  694.100982][ T9623] NILFS (loop1): recovery complete
[  694.148253][ T9618] NILFS (loop4): recovery complete
[  694.176450][ T9629] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  694.196138][ T9633] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  696.270835][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  696.579174][ T9618] overlayfs: missing 'lowerdir'
[  697.254234][ T9654] overlayfs: failed to resolve './file2': -2
[  698.037939][ T9662] overlayfs: failed to resolve './file2': -2
[  698.417812][ T9666] loop2: detected capacity change from 0 to 1024
[  698.518357][ T9666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  698.706311][ T9676] overlayfs: failed to get inode (-116)
[  698.712270][ T9676] overlayfs: failed to get inode (-116)
[  698.718023][ T9676] overlayfs: failed to get inode (-116)
[  698.723706][ T9676] overlayfs: failed to get inode (-116)
[  699.209221][ T9682] overlayfs: failed to get inode (-116)
[  699.215046][ T9682] overlayfs: failed to get inode (-116)
[  699.220915][ T9682] overlayfs: failed to get inode (-116)
[  699.226696][ T9682] overlayfs: failed to get inode (-116)
[  700.617956][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  701.073400][ T9694] overlayfs: failed to get inode (-116)
[  701.079159][ T9694] overlayfs: failed to get inode (-116)
[  702.006804][ T9696] loop2: detected capacity change from 0 to 2048
[  702.173852][ T9696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  703.461501][   T26] audit: type=1800 audit(1730852019.384:18): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1300" name="file1" dev="loop2" ino=15 res=0 errno=0
[  703.528731][ T9707] loop4: detected capacity change from 0 to 1024
[  703.601374][ T9707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  703.638098][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  704.602908][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  704.628697][ T9725] loop2: detected capacity change from 0 to 4096
[  704.685066][ T9725] NILFS (loop2): invalid segment: Checksum error in segment payload
[  704.703775][ T9725] NILFS (loop2): trying rollback from an earlier position
[  705.450036][ T9725] NILFS (loop2): recovery complete
[  705.515109][ T9739] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  706.987257][ T9744] ovl_get_inode: 10 callbacks suppressed
[  706.987273][ T9744] overlayfs: failed to get inode (-116)
[  706.998690][ T9744] overlayfs: failed to get inode (-116)
[  707.004379][ T9744] overlayfs: failed to get inode (-116)
[  707.010069][ T9744] overlayfs: failed to get inode (-116)
[  709.537296][ T9773] loop4: detected capacity change from 0 to 1024
[  709.547462][ T9775] loop2: detected capacity change from 0 to 1024
[  709.559881][ T9777] loop1: detected capacity change from 0 to 2048
[  709.752898][ T9773] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  709.826432][ T9775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  709.874313][ T9777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  713.273698][   T26] audit: type=1800 audit(1730852029.074:19): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1318" name="file1" dev="loop1" ino=15 res=0 errno=0
[  713.294504][ T9780] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  713.519509][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  713.594069][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  713.608899][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  716.720161][ T9832] loop2: detected capacity change from 0 to 4096
[  716.904576][ T9832] NILFS (loop2): invalid segment: Checksum error in segment payload
[  716.985981][ T9832] NILFS (loop2): trying rollback from an earlier position
[  717.094345][ T9832] NILFS (loop2): recovery complete
[  717.136664][ T9843] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  717.371190][ T9847] overlayfs: failed to get inode (-116)
[  717.377053][ T9847] overlayfs: failed to get inode (-116)
[  717.383141][ T9847] overlayfs: failed to get inode (-116)
[  717.388897][ T9847] overlayfs: failed to get inode (-116)
[  717.525621][ T9846] overlayfs: missing 'lowerdir'
[  718.205469][ T9851] loop4: detected capacity change from 0 to 2048
[  718.332449][ T9851] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  718.370673][ T9854] loop2: detected capacity change from 0 to 4096
[  718.479578][ T9854] NILFS (loop2): invalid segment: Checksum error in segment payload
[  718.572537][ T9854] NILFS (loop2): trying rollback from an earlier position
[  718.671016][ T9865] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  718.686355][ T9865] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  718.698851][ T9865] EXT4-fs (loop4): This should not happen!! Data will be lost
[  718.698851][ T9865] 
[  718.708596][ T9865] EXT4-fs (loop4): Total free blocks count 0
[  718.714658][ T9865] EXT4-fs (loop4): Free/Dirty block details
[  718.720688][ T9865] EXT4-fs (loop4): free_blocks=2415919104
[  718.726845][ T9865] EXT4-fs (loop4): dirty_blocks=64
[  718.732025][ T9865] EXT4-fs (loop4): Block reservation details
[  718.738114][ T9865] EXT4-fs (loop4): i_reserved_data_blocks=4
[  719.020700][ T9854] NILFS (loop2): recovery complete
[  719.067287][ T9868] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  719.219166][ T9869] device tunl0 entered promiscuous mode
[  719.235096][ T8585] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  719.277230][ T9869] device vlan2 entered promiscuous mode
[  719.284719][ T9870] loop0: detected capacity change from 0 to 4096
[  719.297283][ T9869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  719.304665][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  719.366906][ T9870] NILFS (loop0): invalid segment: Checksum error in segment payload
[  719.398019][ T9870] NILFS (loop0): trying rollback from an earlier position
[  719.644397][ T9873] overlayfs: missing 'lowerdir'
[  719.700662][ T9870] NILFS (loop0): recovery complete
[  719.928512][ T9879] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  721.430093][ T9888] loop2: detected capacity change from 0 to 4096
[  721.527079][ T9888] NILFS (loop2): invalid segment: Checksum error in segment payload
[  721.535142][ T9888] NILFS (loop2): trying rollback from an earlier position
[  721.582121][ T9888] NILFS (loop2): recovery complete
[  721.636889][ T9897] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  721.674139][ T9894] loop1: detected capacity change from 0 to 4096
[  721.774711][ T9894] NILFS (loop1): invalid segment: Checksum error in segment payload
[  721.814085][ T9904] overlayfs: missing 'lowerdir'
[  721.866857][ T9894] NILFS (loop1): trying rollback from an earlier position
[  721.895788][ T9894] NILFS (loop1): recovery complete
[  722.075082][ T9909] overlayfs: missing 'lowerdir'
[  722.437092][ T9912] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  722.879501][ T9915] overlayfs: missing 'lowerdir'
[  724.987652][ T9938] overlayfs: failed to resolve './file2': -2
[  725.752964][ T9955] overlayfs: failed to get inode (-116)
[  725.758813][ T9955] overlayfs: failed to get inode (-116)
[  725.764550][ T9955] overlayfs: failed to get inode (-116)
[  725.770318][ T9955] overlayfs: failed to get inode (-116)
[  726.671603][ T9977] overlayfs: failed to get inode (-116)
[  726.680891][ T9977] overlayfs: failed to get inode (-116)
[  726.686862][ T9977] overlayfs: failed to get inode (-116)
[  726.723195][ T9977] overlayfs: failed to get inode (-116)
[  727.825892][ T9992] overlayfs: failed to resolve './file2': -2
[  727.996033][ T9991] loop2: detected capacity change from 0 to 4096
[  728.211861][ T9991] NILFS (loop2): invalid segment: Checksum error in segment payload
[  728.350673][ T9991] NILFS (loop2): trying rollback from an earlier position
[  728.596150][T10000] loop1: detected capacity change from 0 to 4096
[  729.094893][ T9991] NILFS (loop2): recovery complete
[  729.100655][T10000] NILFS (loop1): invalid segment: Checksum error in segment payload
[  729.137448][T10006] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  729.166764][T10000] NILFS (loop1): trying rollback from an earlier position
[  729.431704][T10000] NILFS (loop1): recovery complete
[  729.957102][T10013] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  731.653446][T10022] overlayfs: missing 'lowerdir'
[  734.276250][T10050] overlayfs: failed to resolve './file2': -2
[  734.702457][T10056] loop1: detected capacity change from 0 to 4096
[  734.739233][T10056] NILFS (loop1): invalid segment: Checksum error in segment payload
[  734.755029][T10058] loop0: detected capacity change from 0 to 2048
[  734.761552][T10056] NILFS (loop1): trying rollback from an earlier position
[  734.782684][T10056] NILFS (loop1): recovery complete
[  734.796712][T10062] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  734.814019][T10058] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  735.760916][T10070] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  735.776299][T10070] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  735.788733][T10070] EXT4-fs (loop0): This should not happen!! Data will be lost
[  735.788733][T10070] 
[  735.798448][T10070] EXT4-fs (loop0): Total free blocks count 0
[  735.804583][T10070] EXT4-fs (loop0): Free/Dirty block details
[  735.810571][T10070] EXT4-fs (loop0): free_blocks=2415919104
[  735.816356][T10070] EXT4-fs (loop0): dirty_blocks=64
[  735.821557][T10070] EXT4-fs (loop0): Block reservation details
[  735.827628][T10070] EXT4-fs (loop0): i_reserved_data_blocks=4
[  736.426100][ T4511] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  737.681015][T10084] loop4: detected capacity change from 0 to 4096
[  737.729580][T10084] NILFS (loop4): invalid segment: Checksum error in segment payload
[  737.743331][T10086] loop1: detected capacity change from 0 to 4096
[  737.754964][T10084] NILFS (loop4): trying rollback from an earlier position
[  737.802437][T10084] NILFS (loop4): recovery complete
[  737.813181][T10086] NILFS (loop1): invalid segment: Checksum error in segment payload
[  737.830953][T10086] NILFS (loop1): trying rollback from an earlier position
[  737.838403][T10090] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  737.872655][T10086] NILFS (loop1): recovery complete
[  737.906323][T10092] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  740.340755][T10104] loop0: detected capacity change from 0 to 4096
[  740.391970][T10104] NILFS (loop0): invalid segment: Checksum error in segment payload
[  740.424904][T10104] NILFS (loop0): trying rollback from an earlier position
[  740.461371][T10104] NILFS (loop0): recovery complete
[  740.492918][T10110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  742.414424][T10124] loop3: detected capacity change from 0 to 4096
[  742.459016][T10128] loop1: detected capacity change from 0 to 2048
[  742.465561][T10124] NILFS (loop3): invalid segment: Checksum error in segment payload
[  742.491079][T10124] NILFS (loop3): trying rollback from an earlier position
[  742.519391][T10124] NILFS (loop3): recovery complete
[  742.552958][T10128] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  742.574648][T10133] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  743.546705][T10144] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  743.562772][T10144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  743.575264][T10144] EXT4-fs (loop1): This should not happen!! Data will be lost
[  743.575264][T10144] 
[  743.585305][T10144] EXT4-fs (loop1): Total free blocks count 0
[  743.591475][T10144] EXT4-fs (loop1): Free/Dirty block details
[  743.597538][T10144] EXT4-fs (loop1): free_blocks=2415919104
[  743.603413][T10144] EXT4-fs (loop1): dirty_blocks=64
[  743.608719][T10144] EXT4-fs (loop1): Block reservation details
[  743.614850][T10144] EXT4-fs (loop1): i_reserved_data_blocks=4
[  744.376949][T10146] overlayfs: missing 'lowerdir'
[  744.871801][ T4384] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  746.437377][T10180] loop4: detected capacity change from 0 to 512
[  746.907593][T10180] EXT4-fs: Ignoring removed orlov option
[  747.271908][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  747.880574][T10180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  747.989228][T10180] System zones: 1-12
[  748.016873][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  748.085221][T10180] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1406: casefold flag without casefold feature
[  748.100738][T10180] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1406: couldn't read orphan inode 15 (err -117)
[  748.114540][T10180] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  748.210908][T10177] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1406: Directory hole found for htree leaf block 0
[  748.329000][T10194] loop1: detected capacity change from 0 to 2048
[  748.420966][T10194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  748.682955][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  749.285016][T10208] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  749.300094][T10208] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  749.312489][T10208] EXT4-fs (loop1): This should not happen!! Data will be lost
[  749.312489][T10208] 
[  749.322184][T10208] EXT4-fs (loop1): Total free blocks count 0
[  749.328251][T10208] EXT4-fs (loop1): Free/Dirty block details
[  749.334171][T10208] EXT4-fs (loop1): free_blocks=2415919104
[  749.340030][T10208] EXT4-fs (loop1): dirty_blocks=64
[  749.345445][T10208] EXT4-fs (loop1): Block reservation details
[  749.351631][T10208] EXT4-fs (loop1): i_reserved_data_blocks=4
[  749.884986][ T8585] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  751.383169][T10234] loop2: detected capacity change from 0 to 4096
[  751.437072][T10234] NILFS (loop2): invalid segment: Checksum error in segment payload
[  751.445097][T10234] NILFS (loop2): trying rollback from an earlier position
[  751.621989][T10234] NILFS (loop2): recovery complete
[  754.490096][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1423'.
[  756.810658][T10234] NILFS (loop2): error -4 creating segctord thread
[  757.263846][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'.
[  761.195255][T10299] loop4: detected capacity change from 0 to 4096
[  761.221086][T10299] NILFS (loop4): invalid segment: Checksum error in segment payload
[  761.234232][T10299] NILFS (loop4): trying rollback from an earlier position
[  761.332685][T10305] overlayfs: failed to get inode (-116)
[  761.339052][T10305] overlayfs: failed to get inode (-116)
[  761.345236][T10305] overlayfs: failed to get inode (-116)
[  761.351502][T10305] overlayfs: failed to get inode (-116)
[  761.647922][T10299] NILFS (loop4): recovery complete
[  762.708062][T10308] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  765.413579][T10332] overlayfs: failed to get inode (-116)
[  765.419467][T10332] overlayfs: failed to get inode (-116)
[  765.425495][T10332] overlayfs: failed to get inode (-116)
[  765.431276][T10332] overlayfs: failed to get inode (-116)
[  767.829356][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1443'.
[  769.807290][T10363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  769.816011][T10363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  769.824596][T10363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  769.834066][T10363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  769.837471][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.852864][T10363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  769.860272][T10363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  770.922017][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.137528][T10363] Bluetooth: hci4: command tx timeout
[  774.143073][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.567947][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1452'.
[  774.750237][T10389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1454'.
[  775.031768][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.146762][T10363] Bluetooth: hci4: command tx timeout
[  775.442705][T10403] overlayfs: failed to get inode (-116)
[  775.449112][T10403] overlayfs: failed to get inode (-116)
[  775.455499][T10403] overlayfs: failed to get inode (-116)
[  775.462142][T10403] overlayfs: failed to get inode (-116)
[  776.289293][T10360] chnl_net:caif_netlink_parms(): no params data found
[  776.739078][T10360] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.763182][T10360] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.801761][T10360] device bridge_slave_0 entered promiscuous mode
[  776.890726][T10360] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.903713][T10360] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.925643][T10360] device bridge_slave_1 entered promiscuous mode
[  777.030405][T10360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  777.065795][T10360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  777.195899][T10360] team0: Port device team_slave_0 added
[  777.237116][T10363] Bluetooth: hci4: command tx timeout
[  777.300492][T10360] team0: Port device team_slave_1 added
[  778.069370][T10360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  778.076351][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  778.154499][T10360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  778.168612][T10360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  778.175683][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  778.391243][T10360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  779.377532][T10363] Bluetooth: hci4: command tx timeout
[  781.427802][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1463'.
[  782.479967][T10360] device hsr_slave_0 entered promiscuous mode
[  782.541771][T10360] device hsr_slave_1 entered promiscuous mode
[  782.576351][T10360] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  782.648765][T10360] Cannot create hsr debugfs directory
[  784.880017][T10491] loop3: detected capacity change from 0 to 2048
[  785.142254][T10498] overlayfs: failed to resolve './file2': -2
[  786.693421][T10491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  786.752950][T10503] loop4: detected capacity change from 0 to 4096
[  786.969158][T10503] NILFS (loop4): invalid segment: Checksum error in segment payload
[  787.002711][T10503] NILFS (loop4): trying rollback from an earlier position
[  787.057448][T10514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  787.072692][T10514] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  787.085178][T10514] EXT4-fs (loop3): This should not happen!! Data will be lost
[  787.085178][T10514] 
[  787.095011][T10514] EXT4-fs (loop3): Total free blocks count 0
[  787.101129][T10514] EXT4-fs (loop3): Free/Dirty block details
[  787.107100][T10514] EXT4-fs (loop3): free_blocks=2415919104
[  787.112878][T10514] EXT4-fs (loop3): dirty_blocks=64
[  787.118093][T10514] EXT4-fs (loop3): Block reservation details
[  787.124132][T10514] EXT4-fs (loop3): i_reserved_data_blocks=4
[  787.483349][T10503] NILFS (loop4): recovery complete
[  787.495345][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  787.524071][T10518] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  789.659345][    T9] device hsr_slave_0 left promiscuous mode
[  789.743526][    T9] device hsr_slave_1 left promiscuous mode
[  789.812557][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  789.838441][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  789.881709][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  789.899804][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  789.939511][    T9] device bridge_slave_1 left promiscuous mode
[  789.959201][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.027308][    T9] device bridge_slave_0 left promiscuous mode
[  790.033756][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.088621][    T9] device veth1_macvtap left promiscuous mode
[  790.104792][    T9] device veth0_macvtap left promiscuous mode
[  790.161488][    T9] device veth1_vlan left promiscuous mode
[  790.167657][    T9] device veth0_vlan left promiscuous mode
[  790.785176][    T9] team0 (unregistering): Port device team_slave_1 removed
[  790.818557][    T9] team0 (unregistering): Port device team_slave_0 removed
[  790.850878][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  790.885913][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  791.226475][    T9] bond0 (unregistering): Released all slaves
[  791.299499][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1475'.
[  791.381306][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1477'.
[  791.436899][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1474'.
[  791.525002][T10360] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  791.875218][T10360] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  793.170038][T10554] loop3: detected capacity change from 0 to 4096
[  793.227345][T10360] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  793.295843][T10554] NILFS (loop3): invalid segment: Checksum error in segment payload
[  793.305384][T10554] NILFS (loop3): trying rollback from an earlier position
[  793.315036][T10360] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  793.337474][T10554] NILFS (loop3): recovery complete
[  793.378388][T10567] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  796.139765][T10360] 8021q: adding VLAN 0 to HW filter on device bond0
[  797.903035][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  797.974810][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  798.027082][T10360] 8021q: adding VLAN 0 to HW filter on device team0
[  798.364533][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  799.561832][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  799.591858][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  799.599011][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  799.728219][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  799.768777][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  799.841852][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  799.853229][T10604] loop4: detected capacity change from 0 to 4096
[  799.864767][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.871913][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  799.901106][T10604] NILFS (loop4): invalid segment: Checksum error in segment payload
[  799.910409][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  799.918949][T10604] NILFS (loop4): trying rollback from an earlier position
[  799.937847][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  800.182258][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  800.191027][T10604] NILFS (loop4): recovery complete
[  800.192861][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  800.799167][T10621] cifs: Unknown parameter '�[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  800.799167][T10621] S�Ș�ȞZ�6��'
[  800.881821][T10617] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  800.966277][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  801.189423][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  801.773980][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  801.918229][T10360] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  801.929160][T10360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  801.967067][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  802.018554][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  802.067730][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  802.129754][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  802.162448][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  802.630316][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1494'.
[  803.713254][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  803.721807][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  803.744132][T10360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  805.069614][ T4291] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  806.288858][T10686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1499'.
[  806.408241][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  806.573072][ T4291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  806.587066][ T4291] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  806.596374][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.617952][ T4291] usb 5-1: config 0 descriptor??
[  807.146875][ T4291] usbhid 5-1:0.0: can't add hid device: -71
[  807.152894][ T4291] usbhid: probe of 5-1:0.0 failed with error -71
[  807.216763][ T4291] usb 5-1: USB disconnect, device number 24
[  807.233018][T10360] device veth0_vlan entered promiscuous mode
[  807.292463][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  807.311529][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  807.372197][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  807.394824][T10700] loop2: detected capacity change from 0 to 4096
[  807.485894][T10706] overlayfs: failed to resolve './file2': -2
[  807.500893][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  807.629374][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  807.706297][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  807.839381][T10700] NILFS (loop2): invalid segment: Checksum error in segment payload
[  808.049450][T10700] NILFS (loop2): trying rollback from an earlier position
[  808.082746][T10700] NILFS (loop2): recovery complete
[  808.173246][T10360] device veth1_vlan entered promiscuous mode
[  808.196829][T10708] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  808.429009][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  808.435336][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  808.539705][T10720] overlayfs: missing 'lowerdir'
[  810.552136][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  810.587530][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  810.642434][T10360] device veth0_macvtap entered promiscuous mode
[  810.834357][T10360] device veth1_macvtap entered promiscuous mode
[  811.593538][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.753710][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.763721][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.774397][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.784602][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.795142][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.810345][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.820844][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.833074][T10360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  811.841565][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  811.864295][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  812.013079][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  812.041251][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  812.054260][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  812.078833][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  812.556282][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  812.566766][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  812.590002][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  812.606696][  T125] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  812.634234][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  812.754121][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  812.773492][T10360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  812.791749][T10360] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.804960][T10360] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  812.815495][T10360] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  812.829156][T10360] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  812.892382][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  812.913841][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  813.077071][  T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.118479][  T125] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  813.213267][  T125] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  813.257411][  T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.267157][T10766] overlayfs: failed to resolve './file2': -2
[  814.735705][  T125] usb 5-1: config 0 descriptor??
[  814.750772][T10761] loop0: detected capacity change from 0 to 4096
[  814.984910][T10761] NILFS (loop0): invalid segment: Checksum error in segment payload
[  814.993146][T10761] NILFS (loop0): trying rollback from an earlier position
[  815.027348][T10761] NILFS (loop0): recovery complete
[  815.039130][  T125] usb 5-1: can't set config #0, error -71
[  815.379320][T10776] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  815.603185][  T125] usb 5-1: USB disconnect, device number 25
[  815.677066][ T4511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  815.685119][ T4511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  815.736920][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  815.745508][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  815.757051][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  816.336146][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  819.630327][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1444'.
[  820.955642][T10810] loop5: detected capacity change from 0 to 512
[  820.964223][T10810] EXT4-fs: Ignoring removed orlov option
[  821.210775][T10810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  821.219251][T10810] System zones: 1-12
[  821.505412][T10810] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1523: casefold flag without casefold feature
[  821.538684][T10810] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1523: couldn't read orphan inode 15 (err -117)
[  821.551354][T10810] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  821.585570][T10810] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1523: Directory hole found for htree leaf block 0
[  822.427716][T10360] EXT4-fs (loop5): unmounting filesystem.
[  825.622837][T10838] overlayfs: failed to resolve './file2': -2
[  825.737483][T10832] loop3: detected capacity change from 0 to 4096
[  825.909895][T10832] NILFS (loop3): invalid segment: Checksum error in segment payload
[  826.118958][T10832] NILFS (loop3): trying rollback from an earlier position
[  826.149828][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1531'.
[  826.235794][T10832] NILFS (loop3): recovery complete
[  826.274562][T10832] NILFS (loop3): error -4 creating segctord thread
[  832.250741][T10879] loop0: detected capacity change from 0 to 512
[  832.258656][T10879] EXT4-fs: Ignoring removed orlov option
[  832.358969][T10879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  832.367086][T10879] System zones: 1-12
[  832.409134][T10879] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1536: casefold flag without casefold feature
[  832.422130][T10879] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1536: couldn't read orphan inode 15 (err -117)
[  832.435139][T10879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  832.450349][T10876] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.1536: Directory hole found for htree leaf block 0
[  834.150552][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  834.609097][T10894] loop4: detected capacity change from 0 to 4096
[  834.910661][T10902] overlayfs: failed to resolve './file2': -2
[  835.019963][T10894] NILFS (loop4): invalid segment: Checksum error in segment payload
[  835.161562][T10894] NILFS (loop4): trying rollback from an earlier position
[  835.465189][T10894] NILFS (loop4): recovery complete
[  835.578752][T10904] loop0: detected capacity change from 0 to 2048
[  835.609324][T10906] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  836.460155][T10904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  836.630263][T10918] overlayfs: missing 'lowerdir'
[  837.182861][T10933] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  837.198094][T10933] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  837.210881][T10933] EXT4-fs (loop0): This should not happen!! Data will be lost
[  837.210881][T10933] 
[  837.220725][T10933] EXT4-fs (loop0): Total free blocks count 0
[  837.226821][T10933] EXT4-fs (loop0): Free/Dirty block details
[  837.232872][T10933] EXT4-fs (loop0): free_blocks=2415919104
[  837.238710][T10933] EXT4-fs (loop0): dirty_blocks=64
[  837.243891][T10933] EXT4-fs (loop0): Block reservation details
[  837.249970][T10933] EXT4-fs (loop0): i_reserved_data_blocks=4
[  837.715249][ T4319] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  839.119897][T10952] loop5: detected capacity change from 0 to 512
[  839.126886][T10952] EXT4-fs: Ignoring removed orlov option
[  839.303007][T10952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  839.311397][T10952] System zones: 1-12
[  839.325738][T10952] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1549: casefold flag without casefold feature
[  839.340694][T10952] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1549: couldn't read orphan inode 15 (err -117)
[  839.354189][T10952] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  839.384186][T10952] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1549: Directory hole found for htree leaf block 0
[  840.004798][T10360] EXT4-fs (loop5): unmounting filesystem.
[  840.142799][T10958] loop3: detected capacity change from 0 to 2048
[  840.463127][T10958] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  842.158774][T10972] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  842.173917][T10972] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  842.186324][T10972] EXT4-fs (loop3): This should not happen!! Data will be lost
[  842.186324][T10972] 
[  842.196026][T10972] EXT4-fs (loop3): Total free blocks count 0
[  842.202059][T10972] EXT4-fs (loop3): Free/Dirty block details
[  842.208004][T10972] EXT4-fs (loop3): free_blocks=2415919104
[  842.213746][T10972] EXT4-fs (loop3): dirty_blocks=64
[  842.218923][T10972] EXT4-fs (loop3): Block reservation details
[  842.224934][T10972] EXT4-fs (loop3): i_reserved_data_blocks=4
[  844.282221][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  845.015954][T10996] overlayfs: failed to resolve './file2': -2
[  847.072277][T11012] loop5: detected capacity change from 0 to 2048
[  847.166788][T11018] cifs: Unknown parameter '�[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  847.166788][T11018] S�Ș�ȞZ�6��'
[  847.567497][T11012] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  848.360444][T11033] loop4: detected capacity change from 0 to 2048
[  848.693588][T11039] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  848.708597][T11039] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  848.721002][T11039] EXT4-fs (loop5): This should not happen!! Data will be lost
[  848.721002][T11039] 
[  848.730725][T11039] EXT4-fs (loop5): Total free blocks count 0
[  848.736765][T11039] EXT4-fs (loop5): Free/Dirty block details
[  848.742692][T11039] EXT4-fs (loop5): free_blocks=2415919104
[  848.748577][T11039] EXT4-fs (loop5): dirty_blocks=64
[  848.753750][T11039] EXT4-fs (loop5): Block reservation details
[  848.759876][T11039] EXT4-fs (loop5): i_reserved_data_blocks=4
[  850.286795][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1564'.
[  850.405694][T11033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  850.827977][T11050] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  850.843214][T11050] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  850.855662][T11050] EXT4-fs (loop4): This should not happen!! Data will be lost
[  850.855662][T11050] 
[  850.865397][T11050] EXT4-fs (loop4): Total free blocks count 0
[  850.880740][T11050] EXT4-fs (loop4): Free/Dirty block details
[  850.919720][T11050] EXT4-fs (loop4): free_blocks=2415919104
[  850.966721][T11050] EXT4-fs (loop4): dirty_blocks=64
[  851.016644][T11050] EXT4-fs (loop4): Block reservation details
[  851.022681][T11050] EXT4-fs (loop4): i_reserved_data_blocks=4
[  851.055525][T11052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'.
[  851.813419][ T4319] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  851.982511][ T4384] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  853.508535][T11067] capability: warning: `syz.2.1572' uses deprecated v2 capabilities in a way that may be insecure
[  858.228539][T11109] loop0: detected capacity change from 0 to 2048
[  858.293135][T11109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  858.569393][T11123] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  858.584633][T11123] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  858.597224][T11123] EXT4-fs (loop0): This should not happen!! Data will be lost
[  858.597224][T11123] 
[  858.606930][T11123] EXT4-fs (loop0): Total free blocks count 0
[  858.612978][T11123] EXT4-fs (loop0): Free/Dirty block details
[  858.618963][T11123] EXT4-fs (loop0): free_blocks=2415919104
[  858.624735][T11123] EXT4-fs (loop0): dirty_blocks=64
[  858.629929][T11123] EXT4-fs (loop0): Block reservation details
[  858.635961][T11123] EXT4-fs (loop0): i_reserved_data_blocks=4
[  858.976931][ T4386] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  859.192272][T11124] loop4: detected capacity change from 0 to 4096
[  859.387289][T11124] NILFS (loop4): invalid segment: Checksum error in segment payload
[  859.400936][T11130] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1584'.
[  859.414169][T11124] NILFS (loop4): trying rollback from an earlier position
[  860.069886][T11124] NILFS (loop4): recovery complete
[  860.128360][T11143] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  869.869535][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  869.875854][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  892.427249][T10363] Bluetooth: hci4: command 0x0406 tx timeout
[  904.857315][T11619] overlayfs: failed to resolve './file2': -2
[  905.334888][T11626] overlayfs: failed to resolve './file2': -2
[  916.881777][T11721] overlayfs: failed to resolve './file2': -2
[  918.643253][T11722] cifs: Unknown parameter '�[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  918.643253][T11722] S�Ș�ȞZ�6��'
[  929.601364][T11786] loop3: detected capacity change from 0 to 2048
[  929.644451][T11786] UDF-fs: bad mount option "dmod=00000000" or missing value
[  931.309186][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  931.315702][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  937.331191][T11827] loop0: detected capacity change from 0 to 4096
[  937.338930][T11829] overlayfs: failed to resolve './file2': -2
[  937.385759][T11827] NILFS (loop0): invalid segment: Checksum error in segment payload
[  937.411093][T11827] NILFS (loop0): trying rollback from an earlier position
[  937.435313][T11827] NILFS (loop0): recovery complete
[  937.451709][T11831] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  940.835026][T11859] loop5: detected capacity change from 0 to 2048
[  940.873620][T11859] UDF-fs: bad mount option "dmod=00000000" or missing value
[  944.808370][T11880] overlayfs: failed to resolve './file2': -2
[  945.664187][T11883] loop2: detected capacity change from 0 to 4096
[  945.708305][T11883] NILFS (loop2): invalid segment: Checksum error in segment payload
[  945.814764][T11883] NILFS (loop2): trying rollback from an earlier position
[  946.230747][T11883] NILFS (loop2): recovery complete
[  946.687650][T11894] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  947.242133][T11899] overlayfs: missing 'lowerdir'
[  952.863042][T11942] cifs: Unknown parameter '�[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  952.863042][T11942] S�Ș�ȞZ�6��'
[  953.318821][T11944] loop5: detected capacity change from 0 to 4096
[  953.365020][T11944] NILFS (loop5): invalid segment: Checksum error in segment payload
[  953.397536][T11944] NILFS (loop5): trying rollback from an earlier position
[  953.453996][T11944] NILFS (loop5): recovery complete
[  953.526599][T11948] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  953.817574][T11949] overlayfs: missing 'lowerdir'
[  954.654882][T11961] loop3: detected capacity change from 0 to 512
[  954.664822][T11961] EXT4-fs: Ignoring removed orlov option
[  955.299877][T11961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  955.308126][T11961] System zones: 1-12
[  955.430827][T11961] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1758: casefold flag without casefold feature
[  955.443948][T11961] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1758: couldn't read orphan inode 15 (err -117)
[  955.456944][T11961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  955.470496][T11961] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1758: Directory hole found for htree leaf block 0
[  955.619430][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  955.792668][T11968] overlayfs: failed to resolve './file2': -2
[  957.153226][T11988] cifs: Unknown parameter '�[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  957.153226][T11988] S�Ș�ȞZ�6��'
[  958.792205][T12000] loop5: detected capacity change from 0 to 2048
[  959.431461][T12000] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  960.010496][T12019] loop4: detected capacity change from 0 to 512
[  960.017509][T12019] EXT4-fs: Ignoring removed orlov option
[  960.065246][T12019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  960.073429][T12019] System zones: 1-12
[  960.085418][T12019] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1774: casefold flag without casefold feature
[  960.155411][T12019] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1774: couldn't read orphan inode 15 (err -117)
[  960.172553][T12019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  960.185700][T12019] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1774: Directory hole found for htree leaf block 0
[  960.227209][T12021] loop0: detected capacity change from 0 to 2048
[  960.290034][T12022] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  960.338462][T12021] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  960.566242][T12022] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  960.667707][T12033] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  960.682888][T12033] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  960.695357][T12033] EXT4-fs (loop0): This should not happen!! Data will be lost
[  960.695357][T12033] 
[  960.705383][T12033] EXT4-fs (loop0): Total free blocks count 0
[  960.711537][T12033] EXT4-fs (loop0): Free/Dirty block details
[  960.717584][T12033] EXT4-fs (loop0): free_blocks=2415919104
[  960.723366][T12033] EXT4-fs (loop0): dirty_blocks=64
[  960.728580][T12033] EXT4-fs (loop0): Block reservation details
[  960.734620][T12033] EXT4-fs (loop0): i_reserved_data_blocks=4
[  960.922634][T12022] EXT4-fs (loop5): This should not happen!! Data will be lost
[  960.922634][T12022] 
[  960.939204][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  961.093843][T12022] EXT4-fs (loop5): Total free blocks count 0
[  961.138527][    T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  961.217006][T12022] EXT4-fs (loop5): Free/Dirty block details
[  961.290242][T12022] EXT4-fs (loop5): free_blocks=2415919104
[  961.296019][T12022] EXT4-fs (loop5): dirty_blocks=64
[  961.386991][T12022] EXT4-fs (loop5): Block reservation details
[  961.560559][T12022] EXT4-fs (loop5): i_reserved_data_blocks=4
[  961.739842][T12044] cifs: Unknown parameter '�[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  961.739842][T12044] S�Ș�ȞZ�6��'
[  963.257520][T12048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1780'.
[  965.093787][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1785'.
[  965.340551][ T4511] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  965.991799][ T4511] EXT4-fs (loop5): This should not happen!! Data will be lost
[  965.991799][ T4511] 
[  966.011718][ T4511] EXT4-fs (loop5): Total free blocks count 0
[  966.028752][ T4511] EXT4-fs (loop5): Free/Dirty block details
[  966.030690][T12076] loop0: detected capacity change from 0 to 512
[  966.041366][ T4511] EXT4-fs (loop5): free_blocks=2415919104
[  966.041444][ T4511] EXT4-fs (loop5): dirty_blocks=32
[  966.041460][ T4511] EXT4-fs (loop5): Block reservation details
[  966.041475][ T4511] EXT4-fs (loop5): i_reserved_data_blocks=2
[  966.057978][T10360] EXT4-fs (loop5): unmounting filesystem.
[  966.059067][T12076] EXT4-fs: Ignoring removed orlov option
[  966.074791][T12075] loop4: detected capacity change from 0 to 2048
[  966.116781][T12076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  966.124979][T12076] System zones: 1-12
[  966.142260][T12076] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1786: casefold flag without casefold feature
[  966.155699][T12076] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1786: couldn't read orphan inode 15 (err -117)
[  966.171077][T12076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  966.185657][T12076] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.1786: Directory hole found for htree leaf block 0
[  966.229761][T12075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  966.606740][ T8916] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  966.663703][T12091] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  966.678950][T12091] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  966.691390][T12091] EXT4-fs (loop4): This should not happen!! Data will be lost
[  966.691390][T12091] 
[  966.701271][T12091] EXT4-fs (loop4): Total free blocks count 0
[  966.707390][T12091] EXT4-fs (loop4): Free/Dirty block details
[  966.713313][T12091] EXT4-fs (loop4): free_blocks=2415919104
[  966.719127][T12091] EXT4-fs (loop4): dirty_blocks=64
[  966.724287][T12091] EXT4-fs (loop4): Block reservation details
[  966.730365][T12091] EXT4-fs (loop4): i_reserved_data_blocks=4
[  966.905438][ T4247] EXT4-fs (loop0): unmounting filesystem.
[  967.155079][T11573] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  968.284676][ T8916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  968.294970][ T8916] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  968.304588][ T8916] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  968.313924][ T8916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.450962][T12106] loop0: detected capacity change from 0 to 4096
[  968.510516][ T8916] usb 6-1: config 0 descriptor??
[  968.593977][T12106] NILFS (loop0): invalid segment: Checksum error in segment payload
[  968.607147][T12109] overlayfs: failed to resolve './file2': -2
[  968.620565][T12106] NILFS (loop0): trying rollback from an earlier position
[  968.683372][T12106] NILFS (loop0): recovery complete
[  968.753471][T12112] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  969.004754][T12114] overlayfs: missing 'lowerdir'
[  969.306677][ T8916] usb 6-1: string descriptor 0 read error: -71
[  969.433285][ T8916] usb 6-1: USB disconnect, device number 2
[  969.891958][T12129] loop3: detected capacity change from 0 to 2048
[  969.962987][T12129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  970.086014][T12137] loop5: detected capacity change from 0 to 512
[  970.093209][T12137] EXT4-fs: Ignoring removed orlov option
[  970.175009][T12137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  970.183184][T12137] System zones: 1-12
[  970.191778][T12137] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1803: casefold flag without casefold feature
[  970.207510][T12137] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1803: couldn't read orphan inode 15 (err -117)
[  970.222613][T12137] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  970.235642][T12137] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.1803: Directory hole found for htree leaf block 0
[  970.300028][T12140] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  970.360518][T12140] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  970.476762][T12140] EXT4-fs (loop3): This should not happen!! Data will be lost
[  970.476762][T12140] 
[  970.813270][T12140] EXT4-fs (loop3): Total free blocks count 0
[  970.819709][T12140] EXT4-fs (loop3): Free/Dirty block details
[  970.825789][T12140] EXT4-fs (loop3): free_blocks=2415919104
[  970.868007][T12140] EXT4-fs (loop3): dirty_blocks=64
[  970.900080][T10360] EXT4-fs (loop5): unmounting filesystem.
[  970.917262][T12140] EXT4-fs (loop3): Block reservation details
[  970.953785][T12140] EXT4-fs (loop3): i_reserved_data_blocks=4
[  971.102217][T12145] loop5: detected capacity change from 0 to 2048
[  971.192571][T12145] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  971.583879][T12160] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  971.599171][T12160] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  971.611608][T12160] EXT4-fs (loop5): This should not happen!! Data will be lost
[  971.611608][T12160] 
[  971.621346][T12160] EXT4-fs (loop5): Total free blocks count 0
[  971.627490][T12160] EXT4-fs (loop5): Free/Dirty block details
[  971.633434][T12160] EXT4-fs (loop5): free_blocks=2415919104
[  971.639237][T12160] EXT4-fs (loop5): dirty_blocks=64
[  971.644401][T12160] EXT4-fs (loop5): Block reservation details
[  971.650464][T12160] EXT4-fs (loop5): i_reserved_data_blocks=4
[  972.063584][   T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  972.146764][T12156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1800'.
[  972.235081][T12164] overlayfs: failed to resolve './file2': -2
[  972.246386][T12162] loop2: detected capacity change from 0 to 4096
[  972.300236][T12162] NILFS (loop2): invalid segment: Checksum error in segment payload
[  972.338022][T12162] NILFS (loop2): trying rollback from an earlier position
[  972.394118][T12162] NILFS (loop2): recovery complete
[  972.421119][T12167] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  972.576221][T12166] overlayfs: failed to resolve './file2': -2
[  972.688231][T12170] overlayfs: missing 'lowerdir'
[  973.464927][ T4325] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  973.475098][    T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  973.877295][ T4325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  973.940930][ T4325] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  974.067683][ T4325] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  974.195889][T12185] loop3: detected capacity change from 0 to 512
[  974.202895][T12185] EXT4-fs: Ignoring removed orlov option
[  974.226307][T12185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  974.234527][T12185] System zones: 1-12
[  974.462021][T12185] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1815: casefold flag without casefold feature
[  974.486121][T12185] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1815: couldn't read orphan inode 15 (err -117)
[  974.503310][T12185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  974.517107][T12185] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1815: Directory hole found for htree leaf block 0
[  974.580988][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.590636][ T4325] usb 3-1: config 0 descriptor??
[  975.004423][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  979.826631][ T4325] usb 3-1: string descriptor 0 read error: -71
[  979.879411][ T4325] usb 3-1: USB disconnect, device number 25
[  980.005162][T12208] loop3: detected capacity change from 0 to 2048
[  980.161756][T12208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  980.192697][T12213] overlayfs: failed to resolve './file2': -2
[  980.540422][T12226] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  980.555739][T12226] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  980.568452][T12226] EXT4-fs (loop3): This should not happen!! Data will be lost
[  980.568452][T12226] 
[  980.578191][T12226] EXT4-fs (loop3): Total free blocks count 0
[  980.584260][T12226] EXT4-fs (loop3): Free/Dirty block details
[  980.590380][T12226] EXT4-fs (loop3): free_blocks=2415919104
[  980.596182][T12226] EXT4-fs (loop3): dirty_blocks=64
[  980.601393][T12226] EXT4-fs (loop3): Block reservation details
[  980.607466][T12226] EXT4-fs (loop3): i_reserved_data_blocks=4
[  980.962598][T12222] loop5: detected capacity change from 0 to 4096
[  980.964037][T11573] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  981.137173][T12222] NILFS (loop5): invalid segment: Checksum error in segment payload
[  981.161478][T12231] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1827'.
[  981.170724][T12222] NILFS (loop5): trying rollback from an earlier position
[  981.222633][T12222] NILFS (loop5): recovery complete
[  981.477082][T12234] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  981.910089][T12247] loop4: detected capacity change from 0 to 512
[  981.917750][T12247] EXT4-fs: Ignoring removed orlov option
[  981.946946][T12245] overlayfs: missing 'lowerdir'
[  982.772825][T12247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  982.780905][T12247] System zones: 1-12
[  982.786040][T12247] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1829: casefold flag without casefold feature
[  982.800438][T12247] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1829: couldn't read orphan inode 15 (err -117)
[  982.844847][T12247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  982.861364][T12242] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1829: Directory hole found for htree leaf block 0
[  984.558564][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  985.894586][T12279] overlayfs: failed to resolve './file2': -2
[  985.902010][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1830'.
[  986.059701][T12282] overlayfs: failed to resolve './file2': -2
[  986.820736][T12295] loop4: detected capacity change from 0 to 4096
[  986.897118][T12295] NILFS (loop4): invalid segment: Checksum error in segment payload
[  986.919753][T12295] NILFS (loop4): trying rollback from an earlier position
[  986.975508][T12295] NILFS (loop4): recovery complete
[  987.128290][T12301] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  987.381785][T12302] overlayfs: missing 'lowerdir'
[  987.902484][T12312] loop4: detected capacity change from 0 to 512
[  987.909661][T12312] EXT4-fs: Ignoring removed orlov option
[  988.289190][T12312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  988.297317][T12312] System zones: 1-12
[  988.303523][T12312] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1843: casefold flag without casefold feature
[  988.322723][T12312] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1843: couldn't read orphan inode 15 (err -117)
[  988.335271][T12312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  988.351087][T12311] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1843: Directory hole found for htree leaf block 0
[  988.718748][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  989.702449][T12331] overlayfs: failed to resolve './file2': -2
[  989.850987][T12329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1845'.
[  989.996982][T12337] overlayfs: failed to resolve './file2': -2
[  995.125568][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  995.131966][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  995.788123][T12362] loop4: detected capacity change from 0 to 512
[  995.795141][T12362] EXT4-fs: Ignoring removed orlov option
[  995.847219][T12362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002]
[  995.855283][T12362] System zones: 1-12
[  995.865106][T12361] loop2: detected capacity change from 0 to 2048
[  995.950629][T12362] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1857: casefold flag without casefold feature
[  995.967632][T12362] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1857: couldn't read orphan inode 15 (err -117)
[  995.979996][T12362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  995.992675][T12362] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1857: Directory hole found for htree leaf block 0
[  996.042468][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  996.122317][T12361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  997.182037][T12380] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  997.197225][T12380] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  997.209658][T12380] EXT4-fs (loop2): This should not happen!! Data will be lost
[  997.209658][T12380] 
[  997.219393][T12380] EXT4-fs (loop2): Total free blocks count 0
[  997.225455][T12380] EXT4-fs (loop2): Free/Dirty block details
[  997.231476][T12380] EXT4-fs (loop2): free_blocks=2415919104
[  997.237283][T12380] EXT4-fs (loop2): dirty_blocks=64
[  997.242489][T12380] EXT4-fs (loop2): Block reservation details
[  997.248600][T12380] EXT4-fs (loop2): i_reserved_data_blocks=4
[  997.478364][T12382] overlayfs: failed to resolve './file2': -2
[ 1002.157706][T11573] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1002.962104][T11573] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 1002.962104][T11573] 
[ 1003.061007][T11573] EXT4-fs (loop2): Total free blocks count 0
[ 1003.235349][T11573] EXT4-fs (loop2): Free/Dirty block details
[ 1003.783867][T11573] EXT4-fs (loop2): free_blocks=2415919104
[ 1003.791217][T11573] EXT4-fs (loop2): dirty_blocks=32
[ 1003.797329][T11573] EXT4-fs (loop2): Block reservation details
[ 1003.803426][T11573] EXT4-fs (loop2): i_reserved_data_blocks=2
[ 1003.817837][ T4257] EXT4-fs (loop2): unmounting filesystem.
[ 1003.838824][T12412] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1872'.
[ 1007.078788][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1877'.
[ 1007.101606][T12448] overlayfs: failed to get inode (-116)
[ 1007.107405][T12448] overlayfs: failed to get inode (-116)
[ 1007.113109][T12448] overlayfs: failed to get inode (-116)
[ 1007.118870][T12448] overlayfs: failed to get inode (-116)
[ 1024.417226][T12501] overlayfs: failed to get inode (-116)
[ 1024.423068][T12501] overlayfs: failed to get inode (-116)
[ 1024.428989][T12501] overlayfs: failed to get inode (-116)
[ 1024.434669][T12501] overlayfs: failed to get inode (-116)
[ 1024.450613][T12493] loop2: detected capacity change from 0 to 2048
[ 1025.795760][T12493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1025.853589][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1886'.
[ 1027.485877][   T26] audit: type=1800 audit(1730852343.404:20): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1889" name="file1" dev="loop2" ino=15 res=0 errno=0
[ 1027.598088][ T4257] EXT4-fs (loop2): unmounting filesystem.
[ 1029.805525][T12538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1898'.
[ 1030.438194][T12547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1899'.
[ 1035.669759][T12597] overlayfs: failed to resolve './file2': -2
[ 1036.330440][T12589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1911'.
[ 1037.207614][T12614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1912'.
[ 1039.890031][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1919'.
[ 1042.215997][T12656] loop3: detected capacity change from 0 to 2048
[ 1042.326760][T12656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1042.622799][T12668] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1042.638232][T12668] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[ 1042.650666][T12668] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1042.650666][T12668] 
[ 1042.660452][T12668] EXT4-fs (loop3): Total free blocks count 0
[ 1042.666539][T12668] EXT4-fs (loop3): Free/Dirty block details
[ 1042.672528][T12668] EXT4-fs (loop3): free_blocks=2415919104
[ 1042.678560][T12668] EXT4-fs (loop3): dirty_blocks=64
[ 1042.683755][T12668] EXT4-fs (loop3): Block reservation details
[ 1042.689817][T12668] EXT4-fs (loop3): i_reserved_data_blocks=4
[ 1043.106073][T11573] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1044.996713][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1934'.
[ 1046.720102][T12702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1939'.
[ 1054.189038][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.195345][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.822107][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1954'.
[ 1055.314751][T12785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1962'.
[ 1061.830623][T12831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1976'.
[ 1062.184151][T12835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1974'.
[ 1062.475216][T12842] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1977'.
[ 1062.738591][T12848] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1979'.
[ 1064.357989][ T8311] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1064.496538][ T9611] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1064.757719][ T8311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1064.768392][ T9611] usb 5-1: Using ep0 maxpacket: 8
[ 1064.793939][ T8311] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1064.827009][ T8311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.868432][ T8311] usb 3-1: config 0 descriptor??
[ 1064.887038][ T9611] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1064.906368][ T9611] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[ 1064.926764][ T9611] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1064.995519][ T8311] smsusb:smsusb_probe: board id=8, interface number 0
[ 1065.002488][ T7665] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1065.046965][ T8311] smsusb:smsusb_probe: Device initialized with return code -19
[ 1065.120105][ T9611] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1065.156428][ T9611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1065.193456][ T9611] usb 5-1: Product: syz
[ 1065.236582][ T9611] usb 5-1: Manufacturer: syz
[ 1065.241641][ T9611] usb 5-1: SerialNumber: syz
[ 1065.256003][ T9611] usb 5-1: config 0 descriptor??
[ 1065.298336][ T9611] radio-si470x 5-1:0.0: could not find interrupt in endpoint
[ 1065.305988][ T9611] radio-si470x: probe of 5-1:0.0 failed with error -5
[ 1065.313164][ T9611] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1065.326984][ T7665] usb 1-1: too many configurations: 13, using maximum allowed: 8
[ 1065.362827][ T8311] usb 3-1: USB disconnect, device number 26
[ 1065.477049][ T7665] usb 1-1: config 0 has no interfaces?
[ 1065.506896][ T4292] usb 5-1: USB disconnect, device number 26
[ 1065.566707][ T7665] usb 1-1: config 0 has no interfaces?
[ 1065.671795][ T7665] usb 1-1: config 0 has no interfaces?
[ 1065.779011][ T7665] usb 1-1: config 0 has no interfaces?
[ 1065.857936][ T7665] usb 1-1: config 0 has no interfaces?
[ 1065.956752][ T7665] usb 1-1: config 0 has no interfaces?
[ 1066.046621][ T7665] usb 1-1: config 0 has no interfaces?
[ 1066.106598][ T8311] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1066.121397][  T127] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1066.136983][ T7665] usb 1-1: config 0 has no interfaces?
[ 1066.306762][ T7665] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1066.317036][ T7665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.325101][ T7665] usb 1-1: Product: syz
[ 1066.329458][ T7665] usb 1-1: Manufacturer: syz
[ 1066.334065][ T7665] usb 1-1: SerialNumber: syz
[ 1066.340814][ T7665] usb 1-1: config 0 descriptor??
[ 1066.396657][ T4027] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1066.436582][ T4564] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[ 1066.486621][  T127] usb 3-1: config 0 has an invalid interface number: 68 but max is 0
[ 1066.494753][  T127] usb 3-1: config 0 has no interface number 0
[ 1066.601874][ T9611] usb 1-1: USB disconnect, device number 11
[ 1066.646932][ T4027] usb 5-1: Using ep0 maxpacket: 32
[ 1066.656943][  T127] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=b6.43
[ 1066.666287][  T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.674367][  T127] usb 3-1: Product: syz
[ 1066.678597][  T127] usb 3-1: Manufacturer: syz
[ 1066.683298][  T127] usb 3-1: SerialNumber: syz
[ 1066.690574][  T127] usb 3-1: config 0 descriptor??
[ 1066.716960][ T8311] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba
[ 1066.726214][ T8311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.734938][ T8311] usb 4-1: Product: syz
[ 1066.743480][ T8311] usb 4-1: Manufacturer: syz
[ 1066.749010][ T8311] usb 4-1: SerialNumber: syz
[ 1066.757492][ T8311] usb 4-1: config 0 descriptor??
[ 1066.769433][ T4564] usb 6-1: not running at top speed; connect to a high speed hub
[ 1066.796804][ T4027] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1066.868223][ T4564] usb 6-1: config 1 has an invalid interface number: 235 but max is 0
[ 1066.876446][ T4564] usb 6-1: config 1 has no interface number 0
[ 1066.883263][ T4564] usb 6-1: config 1 interface 235 has no altsetting 0
[ 1066.933743][  T127] usb 3-1: USB disconnect, device number 27
[ 1066.987439][ T4027] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1066.996948][ T4027] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1067.005138][ T4027] usb 5-1: Product: syz
[ 1067.016493][ T4027] usb 5-1: Manufacturer: syz
[ 1067.024214][ T8311] kaweth 4-1:0.0: Firmware present in device.
[ 1067.030736][ T4027] usb 5-1: SerialNumber: syz
[ 1067.037246][ T4027] usb 5-1: config 0 descriptor??
[ 1067.056907][T12886] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1067.096738][ T4564] usb 6-1: New USB device found, idVendor=03eb, idProduct=7617, bcdDevice=fa.93
[ 1067.105817][ T4564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.117420][ T4564] usb 6-1: Product: syz
[ 1067.121615][ T4564] usb 6-1: Manufacturer: syz
[ 1067.126219][ T4564] usb 6-1: SerialNumber: syz
[ 1067.216742][ T8311] kaweth 4-1:0.0: Statistics collection: 0
[ 1067.222644][ T8311] kaweth 4-1:0.0: Multicast filter limit: 0
[ 1067.228993][ T8311] kaweth 4-1:0.0: MTU: 0
[ 1067.233265][ T8311] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00
[ 1067.276647][ T9611] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1067.394817][  T127] usb 5-1: USB disconnect, device number 27
[ 1067.438985][ T8311] kaweth: probe of 4-1:0.0 failed with error -5
[ 1067.462535][ T8311] usb 4-1: USB disconnect, device number 23
[ 1067.484344][ T4564] usb 6-1: USB disconnect, device number 3
[ 1067.529143][ T9611] usb 1-1: Using ep0 maxpacket: 8
[ 1067.646764][ T9611] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1067.654222][ T9611] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1067.665899][ T9611] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1067.756842][ T9611] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1067.764442][ T9611] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1067.775818][ T9611] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1067.796916][T12744] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1067.866591][ T9611] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1067.874145][ T9611] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1067.885566][ T9611] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1067.966653][  T127] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1068.058606][ T9611] usb 1-1: string descriptor 0 read error: -71
[ 1068.061561][T12744] usb 3-1: Using ep0 maxpacket: 16
[ 1068.064869][ T9611] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1068.080409][ T9611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.094148][T12901] loop0: detected capacity change from 0 to 8
[ 1068.102061][T12901] squashfs: Unknown parameter 'y�U��aj����0#!�˅��ɾD�V9����y�#'
[ 1068.110835][ T9611] usb 1-1: can't set config #168, error -71
[ 1068.118366][ T9611] usb 1-1: USB disconnect, device number 12
[ 1068.216571][  T127] usb 5-1: Using ep0 maxpacket: 32
[ 1068.236619][ T4293] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1068.336623][  T127] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1068.336683][T12744] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1068.354783][T12744] usb 3-1: config 0 has no interface number 0
[ 1068.562356][T12744] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1068.588034][T12744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.634604][T12744] usb 3-1: Product: syz
[ 1068.657880][T12744] usb 3-1: Manufacturer: syz
[ 1068.698773][T12744] usb 3-1: SerialNumber: syz
[ 1068.796783][T12744] usb 3-1: config 0 descriptor??
[ 1068.893435][T12744] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1069.116802][ T4292] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1069.277274][  T127] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1069.341932][ T4293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1069.378411][ T1161] block nbd0: Attempted send on invalid socket
[ 1069.389643][ T1161] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1069.405633][T12908] ADFS-fs (nbd0): error: unable to read block 3, try 0
[ 1069.426542][ T4292] usb 4-1: Using ep0 maxpacket: 8
[ 1069.530735][  T127] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1069.543225][ T4293] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1069.610281][  T127] usb 5-1: Product: syz
[ 1069.621313][ T4293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.651018][ T4292] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1069.691634][ T4292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1069.728879][  T127] usb 5-1: config 0 descriptor??
[ 1069.735681][ T4293] usb 6-1: config 0 descriptor??
[ 1069.741269][ T4292] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1069.752325][  T127] usb 5-1: can't set config #0, error -71
[ 1069.760269][  T127] usb 5-1: USB disconnect, device number 28
[ 1069.838858][ T4292] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1069.846303][ T4292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1069.886432][ T4292] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1069.908541][T12915] mmap: syz.4.1998 (12915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1069.964529][T12916] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1069.996837][ T4292] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1070.004276][ T4292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1070.011331][T12916] kvm: pic: non byte read
[ 1070.020082][ T4292] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1070.033832][T12916] kvm: pic: non byte read
[ 1070.038823][T12916] kvm: pic: non byte read
[ 1070.043558][T12916] kvm: pic: non byte read
[ 1070.055128][T12916] kvm: pic: non byte read
[ 1070.060232][T12916] kvm: pic: single mode not supported
[ 1070.060388][T12916] kvm: pic: non byte read
[ 1070.080784][T12916] kvm: pic: non byte read
[ 1070.085789][T12916] kvm: pic: non byte read
[ 1070.093053][T12916] kvm: pic: non byte read
[ 1070.103725][T12916] kvm: pic: non byte read
[ 1070.109554][T12916] kvm: pic: single mode not supported
[ 1070.225763][ T4293] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0
[ 1070.279400][ T4292] usb 4-1: string descriptor 0 read error: -22
[ 1070.287328][ T4292] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1070.296403][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.348053][ T4292] adutux 4-1:168.0: interrupt endpoints not found
[ 1070.546523][ T4027] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1070.565887][ T4292] usb 4-1: USB disconnect, device number 24
[ 1070.626692][ T4293] lenovo 0003:17EF:6047.000E: Failed to switch F7/9/11 mode: -71
[ 1070.656935][ T4293] lenovo 0003:17EF:6047.000E: Failed to switch middle button: -71
[ 1070.686668][ T4293] lenovo 0003:17EF:6047.000E: Fn-lock setting failed: -71
[ 1070.716700][ T4293] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71
[ 1070.733803][ T4293] usb 6-1: USB disconnect, device number 4
[ 1070.916855][ T4027] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1070.925372][ T4027] usb 1-1: config 220 contains an unexpected descriptor of type 0x1, skipping
[ 1070.934768][ T4027] usb 1-1: config 220 has no interface number 2
[ 1070.942055][ T4027] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1070.966275][ T4027] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1070.973734][ T4027] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1070.980982][ T4027] usb 1-1: config 220 interface 1 has no altsetting 0
[ 1071.051498][T12744] gspca_spca1528: reg_r err -71
[ 1071.056630][T12744] spca1528: probe of 3-1:0.1 failed with error -71
[ 1071.060581][T12928] loop4: detected capacity change from 0 to 2048
[ 1071.070494][T12928] UDF-fs: bad mount option "rootd" or missing value
[ 1071.073111][T12744] usb 3-1: USB disconnect, device number 28
[ 1071.132892][T12889] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1071.186945][ T4027] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1071.211803][ T4027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.230871][ T4027] usb 1-1: Product: syz
[ 1071.235078][ T4027] usb 1-1: Manufacturer: syz
[ 1071.254911][ T4027] usb 1-1: SerialNumber: syz
[ 1071.404099][T12933] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[ 1071.600971][T12935] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1071.638376][T12935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1072.543891][ T4027] usb 1-1: selecting invalid altsetting 0
[ 1072.568595][ T4027] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[ 1072.570268][T12930] loop3: detected capacity change from 0 to 32768
[ 1072.574974][ T4027] usb 1-1: No valid video chain found.
[ 1073.632478][T12930] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2003 (12930)
[ 1073.913008][ T4027] usb 1-1: selecting invalid altsetting 0
[ 1073.927238][ T4027] usbtest: probe of 1-1:220.1 failed with error -22
[ 1073.985984][ T4027] usb 1-1: USB disconnect, device number 13
[ 1074.077244][T12930] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1074.099655][T12930] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1074.117520][T12930] BTRFS info (device loop3): setting nodatacow, compression disabled
[ 1074.125663][T12930] BTRFS info (device loop3): setting datacow
[ 1074.136231][T12930] BTRFS info (device loop3): doing ref verification
[ 1074.144438][T12930] BTRFS info (device loop3): force clearing of disk cache
[ 1074.160318][T12930] BTRFS info (device loop3): turning off barriers
[ 1074.169229][T12930] BTRFS info (device loop3): enabling ssd optimizations
[ 1074.176194][T12930] BTRFS info (device loop3): using spread ssd allocation scheme
[ 1074.189223][T12930] BTRFS info (device loop3): not using ssd optimizations
[ 1074.196293][T12930] BTRFS info (device loop3): not using spread ssd allocation scheme
[ 1074.209892][ T8311] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[ 1074.218770][T12930] BTRFS info (device loop3): using free space tree
[ 1074.371939][T12930] BTRFS error (device loop3): open_ctree failed
[ 1074.386854][  T127] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1074.416560][ T4027] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1074.453617][T12938] loop5: detected capacity change from 0 to 32768
[ 1074.488791][T12938] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2006 (12938)
[ 1074.514434][T12938] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1074.538720][T12938] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1074.576280][T12938] BTRFS info (device loop5): enabling auto defrag
[ 1074.583026][T12938] BTRFS info (device loop5): doing ref verification
[ 1074.596629][T12938] BTRFS info (device loop5): force clearing of disk cache
[ 1074.603773][T12938] BTRFS info (device loop5): turning on sync discard
[ 1074.616782][T12938] BTRFS info (device loop5): setting nodatacow, compression disabled
[ 1074.624897][T12938] BTRFS info (device loop5): using free space tree
[ 1074.636384][ T8311] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1074.646677][  T127] usb 5-1: Using ep0 maxpacket: 16
[ 1074.656682][ T4027] usb 1-1: Using ep0 maxpacket: 8
[ 1074.676791][ T8311] usb 3-1: not running at top speed; connect to a high speed hub
[ 1074.715828][T12938] BTRFS info (device loop5): enabling ssd optimizations
[ 1074.731547][T12938] BTRFS info (device loop5): rebuilding free space tree
[ 1074.756662][ T8311] usb 3-1: config 2 has an invalid interface number: 8 but max is 1
[ 1074.765023][ T8311] usb 3-1: config 2 has an invalid interface number: 3 but max is 1
[ 1074.773596][ T8311] usb 3-1: config 2 has no interface number 0
[ 1074.780310][ T4027] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1074.790917][ T8311] usb 3-1: config 2 has no interface number 1
[ 1074.797720][ T4027] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1074.807158][ T8311] usb 3-1: config 2 interface 8 has no altsetting 0
[ 1074.813839][ T4027] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1074.840091][ T4027] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1074.852405][ T4027] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1074.856810][  T127] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1074.861901][ T4027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.877869][  T125] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1074.937750][ T4027] hub 1-1:1.0: bad descriptor, ignoring hub
[ 1074.943702][ T4027] hub: probe of 1-1:1.0 failed with error -5
[ 1074.966188][ T4027] cdc_wdm 1-1:1.0: skipping garbage
[ 1074.973968][ T8311] usb 3-1: New USB device found, idVendor=1199, idProduct=9051, bcdDevice=17.eb
[ 1074.986791][  T127] usb 5-1: config 129 has an invalid interface number: 50 but max is 0
[ 1074.988755][ T4027] cdc_wdm 1-1:1.0: skipping garbage
[ 1074.995136][  T127] usb 5-1: config 129 has no interface number 0
[ 1075.010730][ T8311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.019815][ T8311] usb 3-1: Product: syz
[ 1075.035747][ T4027] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1075.040362][  T127] usb 5-1: config 129 interface 50 altsetting 250 bulk endpoint 0xC has invalid maxpacket 16
[ 1075.043053][ T8311] usb 3-1: Manufacturer: syz
[ 1075.066641][ T4027] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1075.076943][  T127] usb 5-1: config 129 interface 50 altsetting 250 has an invalid endpoint with address 0xFD, skipping
[ 1075.081797][ T8311] usb 3-1: SerialNumber: syz
[ 1075.112022][  T127] usb 5-1: config 129 interface 50 altsetting 250 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1075.141503][  T127] usb 5-1: config 129 interface 50 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1075.176538][  T127] usb 5-1: config 129 interface 50 has no altsetting 0
[ 1075.236776][  T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1075.246627][  T125] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1075.273563][  T125] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1075.302824][  T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.331503][  T125] usb 4-1: config 0 descriptor??
[ 1075.357021][  T127] usb 5-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=a7.f4
[ 1075.366231][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.379357][  T127] usb 5-1: Product: syz
[ 1075.383543][  T127] usb 5-1: Manufacturer: syz
[ 1075.391282][  T127] usb 5-1: SerialNumber: syz
[ 1075.431301][T12955] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1075.444310][T12955] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1075.459352][T10360] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1075.488013][ T8311] usb 3-1: Could not set interface, error -71
[ 1075.510359][ T8311] usb 3-1: USB disconnect, device number 29
[ 1075.760027][  T127] usb 5-1: USB disconnect, device number 29
[ 1076.008735][T12951] usb 1-1: reset high-speed USB device number 14 using dummy_hcd
[ 1076.437384][T12951] usb 1-1: device firmware changed
[ 1076.458701][T12951] cdc_wdm 1-1:1.0: Error autopm - -16
[ 1076.533880][   T22] usb 1-1: USB disconnect, device number 14
[ 1076.540171][  T125] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[ 1076.846575][   T22] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1076.854045][T13013] usb usb8: usbfs: process 13013 (syz.5.2016) did not claim interface 0 before use
[ 1076.957040][  T125] kovaplus 0003:1E7D:2D50.000F: couldn't init struct kovaplus_device
[ 1076.965611][  T125] kovaplus 0003:1E7D:2D50.000F: couldn't install mouse
[ 1076.994421][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2014'.
[ 1077.136717][   T22] usb 1-1: Using ep0 maxpacket: 8
[ 1077.240101][  T125] kovaplus: probe of 0003:1E7D:2D50.000F failed with error -71
[ 1077.564606][  T125] usb 4-1: USB disconnect, device number 25
[ 1077.767250][   T22] usb 1-1: device descriptor read/all, error -71
[ 1079.261350][T13007] loop2: detected capacity change from 0 to 40427
[ 1079.391683][T13007] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff
[ 1079.410875][T13007] F2FS-fs (loop2): invalid crc value
[ 1079.452217][T13007] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1079.626777][  T125] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1079.876692][  T125] usb 6-1: Using ep0 maxpacket: 8
[ 1079.889736][  T127] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1080.006767][  T125] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1080.176387][T13027] loop0: detected capacity change from 0 to 32768
[ 1080.189362][  T125] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1080.196934][  T127] usb 5-1: Using ep0 maxpacket: 16
[ 1080.199311][  T125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1080.215079][  T125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1080.226410][  T125] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1080.236065][  T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.280898][  T125] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1080.384212][  T125] hub: probe of 6-1:1.0 failed with error -5
[ 1080.516279][T13027] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[ 1080.575616][  T125] cdc_wdm 6-1:1.0: skipping garbage
[ 1080.742128][  T125] cdc_wdm 6-1:1.0: skipping garbage
[ 1080.763649][T13027] XFS (loop0): Mounting V5 Filesystem
[ 1080.928277][  T127] usb 5-1: too many configurations: 60, using maximum allowed: 8
[ 1081.033667][  T125] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1081.041605][  T125] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1081.140262][T13027] XFS (loop0): Ending clean mount
[ 1081.184235][T13027] XFS (loop0): Quotacheck needed: Please wait.
[ 1081.367326][T13027] XFS (loop0): Quotacheck: Done.
[ 1081.450109][  T125] usb 6-1: reset high-speed USB device number 5 using dummy_hcd
[ 1081.526432][T13059] loop2: detected capacity change from 0 to 64
[ 1082.840774][T13066] loop3: detected capacity change from 0 to 1024
[ 1082.843572][T13068] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[ 1082.847625][T12997] usb 6-1: USB disconnect, device number 5
[ 1082.916991][  T127] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[ 1082.946511][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[ 1082.974202][  T127] usb 5-1: Product: syz
[ 1082.980161][  T127] usb 5-1: Manufacturer: syz
[ 1082.995341][  T127] usb 5-1: config 0 descriptor??
[ 1083.031030][  T127] usb 5-1: can't set config #0, error -71
[ 1083.085293][  T127] usb 5-1: USB disconnect, device number 30
[ 1083.156363][ T4247] XFS (loop0): Unmounting Filesystem
[ 1083.216860][ T5130] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1083.250327][T10363] Bluetooth: hci4: unexpected event for opcode 0x2043
[ 1083.403221][T13078] loop5: detected capacity change from 0 to 256
[ 1083.417594][T13078] FAT-fs (loop5): Unrecognized mount option "ioc�" or missing value
[ 1083.476817][  T127] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1083.580813][ T5130] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1083.595813][ T5130] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[ 1083.607042][ T5130] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1083.616223][ T5130] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[ 1083.627986][ T5130] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[ 1083.756616][ T5130] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1083.776085][ T5130] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1083.791324][ T5130] usb 3-1: Product: syz
[ 1083.814618][ T5130] usb 3-1: Manufacturer: syz
[ 1083.878819][ T5130] cdc_wdm 3-1:1.0: skipping garbage
[ 1083.884234][ T5130] cdc_wdm 3-1:1.0: skipping garbage
[ 1083.896931][  T127] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1083.905772][ T5130] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1083.906531][  T127] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[ 1083.911754][ T5130] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1084.020837][  T127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1084.043117][  T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[ 1084.351398][  T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[ 1084.389021][ T4292] usb 3-1: USB disconnect, device number 30
[ 1084.516693][  T127] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1084.543406][  T127] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1084.566606][  T127] usb 5-1: Product: syz
[ 1084.586502][  T127] usb 5-1: Manufacturer: syz
[ 1084.653196][  T127] cdc_wdm 5-1:1.0: skipping garbage
[ 1084.672169][  T127] cdc_wdm 5-1:1.0: skipping garbage
[ 1084.689554][T13094] loop0: detected capacity change from 0 to 128
[ 1084.710531][  T127] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1084.727033][T13089] loop3: detected capacity change from 0 to 32768
[ 1084.734157][  T127] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1084.751265][T13089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2035 (13089)
[ 1084.833170][T13089] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1084.843784][T13089] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1084.856661][T13089] BTRFS info (device loop3): using free space tree
[ 1084.923371][T12999] usb 5-1: USB disconnect, device number 31
[ 1085.017047][ T4292] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1085.126018][T13089] BTRFS info (device loop3): enabling ssd optimizations
[ 1085.233331][T13091] loop5: detected capacity change from 0 to 40427
[ 1085.314194][T13091] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1085.426705][T13091] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1085.456813][ T4292] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1085.474132][ T4292] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[ 1085.485261][ T4292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1085.500437][ T4292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[ 1085.512945][ T4292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[ 1085.733348][T13091] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1086.074647][T12999] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1086.196600][ T4251] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1086.216832][ T4292] usb 3-1: string descriptor 0 read error: -71
[ 1086.236313][ T4292] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1086.255080][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1086.296841][T13091] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1086.306742][ T4292] usb 3-1: can't set config #1, error -71
[ 1086.326784][ T4292] usb 3-1: USB disconnect, device number 31
[ 1086.334791][T13091] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1086.536521][T12999] usb 5-1: device not accepting address 32, error -71
[ 1086.747983][T13127] loop2: detected capacity change from 0 to 40427
[ 1086.880036][T13127] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1086.951937][T13127] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1087.126646][  T127] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1087.307611][T10363] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1087.316585][T10363] Bluetooth: hci4: Injecting HCI hardware error event
[ 1087.327288][ T4248] Bluetooth: hci4: hardware error 0x00
[ 1087.649997][ T4257] syz-executor: attempt to access beyond end of device
[ 1087.649997][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1087.716834][T12999] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1088.076053][  T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1088.163037][  T127] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1088.318587][T12999] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1088.385615][  T127] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1088.450721][T12999] usb 5-1: config 111 has an invalid interface number: 112 but max is 0
[ 1088.483140][T12999] usb 5-1: config 111 has no interface number 0
[ 1088.501559][  T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.647814][  T127] usb 4-1: config 0 descriptor??
[ 1088.883119][T12999] usb 5-1: string descriptor 0 read error: -22
[ 1088.921991][T12999] usb 5-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=63.93
[ 1089.098803][T12999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.126654][ T5130] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[ 1089.330445][T12999] dw2102: su3000_identify_state
[ 1089.360425][  T127] kovaplus 0003:1E7D:2D50.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[ 1089.379115][T12999] dvb-usb: found a 'TeVii S632 USB' in warm state.
[ 1089.387059][ T4248] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1089.396797][T12999] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1089.414282][T12999] dvb-usb: bulk message failed: -22 (2/0)
[ 1089.446155][T12999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1089.487332][T12999] dvbdev: DVB: registering new adapter (TeVii S632 USB)
[ 1089.494696][T12999] usb 5-1: media controller created
[ 1089.557736][T13153] xt_bpf: check failed: parse error
[ 1089.586622][ T5130] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1089.587441][T12999] dvb-usb: bulk message failed: -22 (6/0)
[ 1089.601220][T12999] dw2102: i2c transfer failed.
[ 1089.607525][T12999] dvb-usb: bulk message failed: -22 (6/0)
[ 1089.613401][T12999] dw2102: i2c transfer failed.
[ 1089.618900][T12999] dvb-usb: bulk message failed: -22 (6/0)
[ 1089.624974][T12999] dw2102: i2c transfer failed.
[ 1089.629996][T12999] dvb-usb: bulk message failed: -22 (6/0)
[ 1089.635839][T12999] dw2102: i2c transfer failed.
[ 1089.645439][T12999] dvb-usb: bulk message failed: -22 (6/0)
[ 1089.651558][T12999] dw2102: i2c transfer failed.
[ 1089.656340][T12999] dvb-usb: bulk message failed: -22 (6/0)
[ 1090.379680][T12999] dw2102: i2c transfer failed.
[ 1090.379766][ T5130] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1090.384479][T12999] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1090.400773][T12999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1090.420500][T12999] dvb-usb: bulk message failed: -22 (1/0)
[ 1090.426295][T12999] dw2102: command 0x51 transfer failed.
[ 1090.490552][T12999] DVB: Unable to find symbol m88rs2000_attach()
[ 1090.500207][T12999] dvb-usb: no frontend was attached by 'TeVii S632 USB'
[ 1090.533417][ T5130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.566876][ T5130] usb 6-1: Product: syz
[ 1090.571077][ T5130] usb 6-1: Manufacturer: syz
[ 1090.596304][ T5130] usb 6-1: SerialNumber: syz
[ 1090.766648][T12999] rc_core: IR keymap rc-su3000 not found
[ 1090.772331][T12999] Registered IR keymap rc-empty
[ 1090.784537][T12999] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[ 1090.832512][T12999] input: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5
[ 1091.037095][  T127] kovaplus 0003:1E7D:2D50.0010: couldn't init struct kovaplus_device
[ 1091.151349][  T127] kovaplus 0003:1E7D:2D50.0010: couldn't install mouse
[ 1091.367519][  T127] kovaplus: probe of 0003:1E7D:2D50.0010 failed with error -71
[ 1091.434183][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1091.447093][T12999] dvb-usb: schedule remote query interval to 150 msecs.
[ 1091.458950][T12999] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1091.476562][T12973] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1091.486051][  T127] usb 4-1: USB disconnect, device number 26
[ 1091.497890][T12999] dvb-usb: TeVii S632 USB successfully initialized and connected.
[ 1091.533913][T12999] usb 5-1: USB disconnect, device number 33
[ 1091.592203][T13159] loop4: detected capacity change from 0 to 32768
[ 1091.605211][T13159] =======================================================
[ 1091.605211][T13159] WARNING: The mand mount option has been deprecated and
[ 1091.605211][T13159]          and is ignored by this kernel. Remove the mand
[ 1091.605211][T13159]          option from the mount to silence this warning.
[ 1091.605211][T13159] =======================================================
[ 1091.640146][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1091.651483][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1091.678012][T12471] udevd[12471]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 1091.728411][T12999] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected.
[ 1091.770858][T13159] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[ 1091.837379][T12973] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[ 1091.863463][T12973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.898653][ T5130] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1091.948772][T12973] usb 1-1: config 0 descriptor??
[ 1092.174061][T13178] loop3: detected capacity change from 0 to 1024
[ 1092.207818][T13178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1092.264393][T13170] loop2: detected capacity change from 0 to 32768
[ 1092.290249][T13170] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2051 (13170)
[ 1092.304970][T13178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1092.313177][T13170] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1092.327471][T13170] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1092.336315][T13170] BTRFS info (device loop2): using free space tree
[ 1092.747308][T12973] ath6kl: Unsupported hardware version: 0x0
[ 1093.005409][T12999] usb 6-1: USB disconnect, device number 6
[ 1093.010662][T12973] ath6kl: Failed to init ath6kl core: -22
[ 1093.022492][T12999] usblp0: removed
[ 1093.064708][T12973] ath6kl_usb: probe of 1-1:0.0 failed with error -22
[ 1093.090987][T12973] usb 1-1: USB disconnect, device number 17
[ 1093.733789][ T4251] EXT4-fs (loop3): unmounting filesystem.
[ 1093.745041][ T4252] ocfs2: Unmounting device (7,4) on (node local)
[ 1093.817160][T13170] BTRFS info (device loop2): enabling ssd optimizations
[ 1095.457017][ T4257] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1095.586713][T13216] loop5: detected capacity change from 0 to 1024
[ 1095.929220][T13216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1096.107883][   T26] audit: type=1800 audit(1730852412.034:21): pid=13216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2056" name="bus" dev="loop5" ino=18 res=0 errno=0
[ 1096.262609][T13224] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 1096.358782][T13224] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8191 with max blocks 2 with error 28
[ 1096.372881][T13224] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1096.372881][T13224] 
[ 1096.383813][T13224] EXT4-fs (loop5): Total free blocks count 0
[ 1096.392127][T13224] EXT4-fs (loop5): Free/Dirty block details
[ 1096.400308][T13224] EXT4-fs (loop5): free_blocks=68451041280
[ 1096.413857][T13224] EXT4-fs (loop5): dirty_blocks=32
[ 1096.419768][T13224] EXT4-fs (loop5): Block reservation details
[ 1096.426261][T13224] EXT4-fs (loop5): i_reserved_data_blocks=2
[ 1097.100414][T10360] EXT4-fs (loop5): unmounting filesystem.
[ 1098.765485][T13242] loop3: detected capacity change from 0 to 4096
[ 1098.773029][T13242] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[ 1098.860881][  T127] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1099.162576][T13249] loop5: detected capacity change from 0 to 128
[ 1099.168919][T13248] ntfs3: loop3: ino=0, attr_set_size
[ 1099.316873][  T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1099.484915][T13250] ntfs3: loop3: ino=0, attr_set_size
[ 1099.496143][T13249] capability: warning: `syz.5.2067' uses 32-bit capabilities (legacy support in use)
[ 1099.505809][  T127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1099.533661][  T127] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1099.548018][  T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.551398][T13242] ntfs3: loop3: ino=0, attr_set_size
[ 1099.578723][  T127] usb 1-1: config 0 descriptor??
[ 1099.830115][T13256] loop3: detected capacity change from 0 to 1024
[ 1099.860751][T12998] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1100.620372][  T127] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[ 1100.755446][T13256] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1100.782926][T13268] loop5: detected capacity change from 0 to 8
[ 1100.792992][T13256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1100.838268][T13268] squashfs: Unknown parameter 'y�U��aj����0#!�˅��ɾD�V9����y�#'
[ 1100.906655][T13258] loop4: detected capacity change from 0 to 32768
[ 1100.969627][T12998] usb 3-1: config 220 has an invalid interface number: 76 but max is 1
[ 1100.996504][T12998] usb 3-1: config 220 descriptor has 1 excess byte, ignoring
[ 1101.007311][T12998] usb 3-1: config 220 has 3 interfaces, different from the descriptor's value: 2
[ 1101.026938][T12998] usb 3-1: config 220 has no interface number 2
[ 1101.033242][T12998] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1101.090837][T12998] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1101.103351][T12998] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1101.111327][T13256] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1101.113387][T12998] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1101.136694][T13258] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1101.161618][T13256] binder: Bad value for 'max'
[ 1102.370168][  T127] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device
[ 1102.414843][  T127] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse
[ 1102.447771][  T127] kovaplus: probe of 0003:1E7D:2D50.0011 failed with error -71
[ 1102.471382][  T127] usb 1-1: USB disconnect, device number 18
[ 1102.568346][ T4251] EXT4-fs (loop3): unmounting filesystem.
[ 1102.591746][T12998] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1102.710659][T12998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.769919][T13287] process 'syz.2.2076' launched './file2' with NULL argv: empty string added
[ 1102.853116][ T4252] ocfs2: Unmounting device (7,4) on (node local)
[ 1102.886368][T12998] usb 3-1: Product: syz
[ 1102.956683][T12998] usb 3-1: Manufacturer: syz
[ 1103.027037][T12998] usb 3-1: can't set config #220, error -71
[ 1103.053322][T12998] usb 3-1: USB disconnect, device number 32
[ 1103.296024][T13295] vivid-000: disconnect
[ 1103.303482][T13293] vivid-000: reconnect
[ 1105.183262][T13297] loop5: detected capacity change from 0 to 1024
[ 1105.355802][T13297] ext4: Unknown parameter 'syzkaller1'
[ 1105.460694][T12973] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1105.529267][T13172] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1105.680716][T13308] netlink: 'syz.3.2081': attribute type 1 has an invalid length.
[ 1105.926545][T12998] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1105.986922][T12973] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1106.009714][T12973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.026863][T12973] usb 1-1: Product: syz
[ 1106.039521][T12973] usb 1-1: Manufacturer: syz
[ 1106.046574][T12973] usb 1-1: SerialNumber: syz
[ 1106.064049][T13304] loop4: detected capacity change from 0 to 40427
[ 1106.084213][T12973] usb 1-1: config 0 descriptor??
[ 1106.116674][T13304] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value
[ 1106.332652][T12998] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30
[ 1106.356496][T12998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1106.375545][T12998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1106.389854][T12998] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 1106.399501][T12998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1106.409916][T12998] usb 3-1: config 0 descriptor??
[ 1106.461719][ T4292] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1106.607497][T12973] usb 1-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127)
[ 1106.826917][T12973] usb 1-1: Firmware: build ��f0O�ׁ
[ 1106.925351][T13323] loop3: detected capacity change from 0 to 40427
[ 1106.938202][T13323] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[ 1106.967113][T13323] F2FS-fs (loop3): invalid crc value
[ 1106.996340][T13323] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1107.031161][ T4292] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[ 1107.045796][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.046865][T12973] usb 1-1: failed to fetch extended address, random address set
[ 1107.060114][T12998] holtek_mouse 0003:04D9:A0C2.0012: hidraw0: USB HID v0.00 Device [HID 04d9:a0c2] on usb-dummy_hcd.2-1/input0
[ 1107.072452][T12973] usb 1-1: atusb_probe: initialization failed, error = -524
[ 1107.087527][ T4292] usb 6-1: config 0 descriptor??
[ 1107.089234][T12973] atusb: probe of 1-1:0.0 failed with error -524
[ 1107.120246][T12973] usb 1-1: USB disconnect, device number 19
[ 1107.125110][T13323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1107.150444][   T26] audit: type=1800 audit(1730852423.074:22): pid=13323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2086" name="bus" dev="loop3" ino=14 res=0 errno=0
[ 1107.157846][T13323] syz.3.2086: attempt to access beyond end of device
[ 1107.157846][T13323] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1107.191838][T13323] syz.3.2086: attempt to access beyond end of device
[ 1107.191838][T13323] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1107.214449][T13323] syz.3.2086: attempt to access beyond end of device
[ 1107.214449][T13323] loop3: rw=2049, sector=45112, nr_sectors = 112 limit=40427
[ 1107.229345][T13323] syz.3.2086: attempt to access beyond end of device
[ 1107.229345][T13323] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[ 1107.262849][ T4251] syz-executor: attempt to access beyond end of device
[ 1107.262849][ T4251] loop3: rw=2049, sector=45224, nr_sectors = 24 limit=40427
[ 1107.265927][T12998] usb 3-1: USB disconnect, device number 33
[ 1107.316680][   T22] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1107.847653][ T4292] ------------[ cut here ]------------
[ 1107.853219][ T4292] WARNING: CPU: 0 PID: 4292 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x426/0x570
[ 1107.865193][ T4292] Modules linked in:
[ 1107.869328][ T4292] CPU: 0 PID: 4292 Comm: kworker/0:3 Not tainted 6.1.115-syzkaller #0
[ 1107.877575][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1107.887688][ T4292] Workqueue: usb_hub_wq hub_event
[ 1107.892745][ T4292] RIP: 0010:ath6kl_bmi_get_target_info+0x426/0x570
[ 1107.899307][ T4292] Code: b6 04 30 84 c0 0f 85 38 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 c0 88 9f 8b 89 da e8 64 23 fe ff e9 14 fe ff ff e8 ba e6 7a fb <0f> 0b bb ea ff ff ff e9 03 fe ff ff e8 a9 e6 7a fb 31 db e9 f7 fd
[ 1107.919081][ T4292] RSP: 0018:ffffc90004556bc0 EFLAGS: 00010283
[ 1107.925188][ T4292] RAX: ffffffff860fac96 RBX: 0000000000000000 RCX: 0000000000100000
[ 1107.933231][ T4292] RDX: ffffc90016ad2000 RSI: 0000000000012ba3 RDI: 0000000000012ba4
[ 1107.941298][ T4292] RBP: ffffc90004556c90 R08: ffffffff860fabf3 R09: fffffbfff224605a
[ 1107.949503][ T4292] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90004556d44
[ 1107.957551][ T4292] R13: ffff88807ced0e80 R14: dffffc0000000000 R15: 1ffff920008aad80
[ 1107.965551][ T4292] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1107.974549][ T4292] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1107.981216][ T4292] CR2: 0000001b2d60cff8 CR3: 000000007a7d7000 CR4: 00000000003506f0
[ 1107.989267][ T4292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1107.997320][ T4292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1108.005320][ T4292] Call Trace:
[ 1108.008723][ T4292]  <TASK>
[ 1108.011677][ T4292]  ? __warn+0x15a/0x520
[ 1108.015880][ T4292]  ? ath6kl_bmi_get_target_info+0x426/0x570
[ 1108.021981][ T4292]  ? report_bug+0x2af/0x500
[ 1108.026617][ T4292]  ? ath6kl_bmi_get_target_info+0x426/0x570
[ 1108.032548][ T4292]  ? handle_bug+0x3d/0x70
[ 1108.036928][ T4292]  ? exc_invalid_op+0x16/0x40
[ 1108.041633][ T4292]  ? asm_exc_invalid_op+0x16/0x20
[ 1108.046722][ T4292]  ? ath6kl_bmi_get_target_info+0x383/0x570
[ 1108.052880][ T4292]  ? ath6kl_bmi_get_target_info+0x426/0x570
[ 1108.058843][ T4292]  ? ath6kl_bmi_get_target_info+0x426/0x570
[ 1108.064781][ T4292]  ? ath6kl_bmi_done+0x200/0x200
[ 1108.069863][ T4292]  ? __kmalloc+0xe2/0x230
[ 1108.074233][ T4292]  ath6kl_core_init+0x1df/0x1120
[ 1108.079242][ T4292]  ? lockdep_softirqs_off+0x420/0x420
[ 1108.084657][ T4292]  ? ath6kl_core_rx_complete+0x70/0x70
[ 1108.090193][ T4292]  ath6kl_usb_probe+0x1233/0x1320
[ 1108.095330][ T4292]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1108.101334][ T4292]  ? _raw_spin_unlock+0x40/0x40
[ 1108.106216][ T4292]  ? usb_disable_lpm+0x73/0x380
[ 1108.111142][ T4292]  usb_probe_interface+0x5c0/0xaf0
[ 1108.116290][ T4292]  ? usb_register_driver+0x3d0/0x3d0
[ 1108.121705][ T4292]  really_probe+0x2ab/0xcb0
[ 1108.126263][ T4292]  __driver_probe_device+0x1a2/0x3d0
[ 1108.131629][ T4292]  driver_probe_device+0x50/0x420
[ 1108.136735][ T4292]  __device_attach_driver+0x2cf/0x510
[ 1108.142135][ T4292]  ? coredump_store+0x90/0x90
[ 1108.146927][ T4292]  bus_for_each_drv+0x183/0x200
[ 1108.151816][ T4292]  ? subsys_find_device_by_id+0x310/0x310
[ 1108.157856][ T4292]  __device_attach+0x359/0x570
[ 1108.162675][ T4292]  ? device_attach+0x20/0x20
[ 1108.167338][ T4292]  ? kobject_uevent_env+0x54a/0x8c0
[ 1108.172573][ T4292]  ? kobject_uevent_env+0x54a/0x8c0
[ 1108.176874][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1108.177866][ T4292]  bus_probe_device+0xba/0x1e0
[ 1108.188096][   T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1108.192290][ T4292]  ? device_add+0xab9/0xfd0
[ 1108.205320][   T22] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1108.209658][ T4292]  device_add+0xb48/0xfd0
[ 1108.209698][ T4292]  usb_set_configuration+0x19dd/0x2020
[ 1108.209752][ T4292]  usb_generic_driver_probe+0x84/0x140
[ 1108.219059][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1108.223126][ T4292]  usb_probe_device+0x130/0x260
[ 1108.245376][   T22] usb 5-1: config 0 descriptor??
[ 1108.247029][ T4292]  ? usb_register_device_driver+0x240/0x240
[ 1108.258201][ T4292]  really_probe+0x2ab/0xcb0
[ 1108.262761][ T4292]  __driver_probe_device+0x1a2/0x3d0
[ 1108.268161][ T4292]  driver_probe_device+0x50/0x420
[ 1108.273224][ T4292]  __device_attach_driver+0x2cf/0x510
[ 1108.278706][ T4292]  ? coredump_store+0x90/0x90
[ 1108.283414][ T4292]  bus_for_each_drv+0x183/0x200
[ 1108.288334][ T4292]  ? subsys_find_device_by_id+0x310/0x310
[ 1108.294087][ T4292]  __device_attach+0x359/0x570
[ 1108.298936][ T4292]  ? device_attach+0x20/0x20
[ 1108.303562][ T4292]  ? kobject_uevent_env+0x54a/0x8c0
[ 1108.308831][ T4292]  ? kobject_uevent_env+0x54a/0x8c0
[ 1108.314063][ T4292]  bus_probe_device+0xba/0x1e0
[ 1108.318901][ T4292]  ? device_add+0xab9/0xfd0
[ 1108.323416][ T4292]  device_add+0xb48/0xfd0
[ 1108.327828][ T4292]  usb_new_device+0xbdd/0x18f0
[ 1108.332631][ T4292]  ? usb_disconnect+0x8c0/0x8c0
[ 1108.337529][ T4292]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1108.342745][ T4292]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1108.348037][ T4292]  ? lockdep_hardirqs_on+0x94/0x130
[ 1108.353272][ T4292]  hub_event+0x2efe/0x5730
[ 1108.357814][ T4292]  ? led_work+0x700/0x700
[ 1108.362305][ T4292]  ? read_lock_is_recursive+0x10/0x10
[ 1108.367733][ T4292]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1108.373739][ T4292]  ? print_irqtrace_events+0x210/0x210
[ 1108.379246][ T4292]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1108.385163][ T4292]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1108.390439][ T4292]  ? process_one_work+0x7a9/0x11d0
[ 1108.395573][ T4292]  process_one_work+0x8a9/0x11d0
[ 1108.400577][ T4292]  ? worker_detach_from_pool+0x260/0x260
[ 1108.406228][ T4292]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1108.411840][ T4292]  ? kthread_data+0x4e/0xc0
[ 1108.416369][ T4292]  ? wq_worker_running+0x97/0x190
[ 1108.421432][ T4292]  worker_thread+0xa47/0x1200
[ 1108.426162][ T4292]  kthread+0x28d/0x320
[ 1108.430311][ T4292]  ? worker_clr_flags+0x190/0x190
[ 1108.435366][ T4292]  ? kthread_blkcg+0xd0/0xd0
[ 1108.440033][ T4292]  ret_from_fork+0x1f/0x30
[ 1108.444491][ T4292]  </TASK>
[ 1108.447607][ T4292] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1108.454896][ T4292] CPU: 0 PID: 4292 Comm: kworker/0:3 Not tainted 6.1.115-syzkaller #0
[ 1108.463067][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1108.473122][ T4292] Workqueue: usb_hub_wq hub_event
[ 1108.478156][ T4292] Call Trace:
[ 1108.481434][ T4292]  <TASK>
[ 1108.484354][ T4292]  dump_stack_lvl+0x1e3/0x2cb
[ 1108.489067][ T4292]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1108.494550][ T4292]  ? panic+0x764/0x764
[ 1108.498655][ T4292]  ? vscnprintf+0x59/0x80
[ 1108.503012][ T4292]  panic+0x318/0x764
[ 1108.506920][ T4292]  ? __warn+0x169/0x520
[ 1108.511106][ T4292]  ? memcpy_page_flushcache+0xfc/0xfc
[ 1108.516514][ T4292]  ? ret_from_fork+0x1f/0x30
[ 1108.521137][ T4292]  __warn+0x348/0x520
[ 1108.525131][ T4292]  ? ath6kl_bmi_get_target_info+0x426/0x570
[ 1108.531030][ T4292]  report_bug+0x2af/0x500
[ 1108.535357][ T4292]  ? ath6kl_bmi_get_target_info+0x426/0x570
[ 1108.541259][ T4292]  handle_bug+0x3d/0x70
[ 1108.545441][ T4292]  exc_invalid_op+0x16/0x40
[ 1108.549946][ T4292]  asm_exc_invalid_op+0x16/0x20
[ 1108.554816][ T4292] RIP: 0010:ath6kl_bmi_get_target_info+0x426/0x570
[ 1108.561325][ T4292] Code: b6 04 30 84 c0 0f 85 38 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 c0 88 9f 8b 89 da e8 64 23 fe ff e9 14 fe ff ff e8 ba e6 7a fb <0f> 0b bb ea ff ff ff e9 03 fe ff ff e8 a9 e6 7a fb 31 db e9 f7 fd
[ 1108.580934][ T4292] RSP: 0018:ffffc90004556bc0 EFLAGS: 00010283
[ 1108.587005][ T4292] RAX: ffffffff860fac96 RBX: 0000000000000000 RCX: 0000000000100000
[ 1108.594979][ T4292] RDX: ffffc90016ad2000 RSI: 0000000000012ba3 RDI: 0000000000012ba4
[ 1108.602951][ T4292] RBP: ffffc90004556c90 R08: ffffffff860fabf3 R09: fffffbfff224605a
[ 1108.610927][ T4292] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90004556d44
[ 1108.618896][ T4292] R13: ffff88807ced0e80 R14: dffffc0000000000 R15: 1ffff920008aad80
[ 1108.626871][ T4292]  ? ath6kl_bmi_get_target_info+0x383/0x570
[ 1108.632771][ T4292]  ? ath6kl_bmi_get_target_info+0x426/0x570
[ 1108.638678][ T4292]  ? ath6kl_bmi_done+0x200/0x200
[ 1108.643614][ T4292]  ? __kmalloc+0xe2/0x230
[ 1108.647971][ T4292]  ath6kl_core_init+0x1df/0x1120
[ 1108.652910][ T4292]  ? lockdep_softirqs_off+0x420/0x420
[ 1108.658294][ T4292]  ? ath6kl_core_rx_complete+0x70/0x70
[ 1108.663801][ T4292]  ath6kl_usb_probe+0x1233/0x1320
[ 1108.668831][ T4292]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1108.674735][ T4292]  ? _raw_spin_unlock+0x40/0x40
[ 1108.679596][ T4292]  ? usb_disable_lpm+0x73/0x380
[ 1108.684458][ T4292]  usb_probe_interface+0x5c0/0xaf0
[ 1108.689582][ T4292]  ? usb_register_driver+0x3d0/0x3d0
[ 1108.694871][ T4292]  really_probe+0x2ab/0xcb0
[ 1108.699390][ T4292]  __driver_probe_device+0x1a2/0x3d0
[ 1108.704688][ T4292]  driver_probe_device+0x50/0x420
[ 1108.709724][ T4292]  __device_attach_driver+0x2cf/0x510
[ 1108.715105][ T4292]  ? coredump_store+0x90/0x90
[ 1108.719790][ T4292]  bus_for_each_drv+0x183/0x200
[ 1108.724648][ T4292]  ? subsys_find_device_by_id+0x310/0x310
[ 1108.730378][ T4292]  __device_attach+0x359/0x570
[ 1108.735147][ T4292]  ? device_attach+0x20/0x20
[ 1108.739737][ T4292]  ? kobject_uevent_env+0x54a/0x8c0
[ 1108.744940][ T4292]  ? kobject_uevent_env+0x54a/0x8c0
[ 1108.750147][ T4292]  bus_probe_device+0xba/0x1e0
[ 1108.754916][ T4292]  ? device_add+0xab9/0xfd0
[ 1108.759426][ T4292]  device_add+0xb48/0xfd0
[ 1108.763758][ T4292]  usb_set_configuration+0x19dd/0x2020
[ 1108.769232][ T4292]  usb_generic_driver_probe+0x84/0x140
[ 1108.774690][ T4292]  usb_probe_device+0x130/0x260
[ 1108.779555][ T4292]  ? usb_register_device_driver+0x240/0x240
[ 1108.785457][ T4292]  really_probe+0x2ab/0xcb0
[ 1108.789979][ T4292]  __driver_probe_device+0x1a2/0x3d0
[ 1108.795281][ T4292]  driver_probe_device+0x50/0x420
[ 1108.800312][ T4292]  __device_attach_driver+0x2cf/0x510
[ 1108.805689][ T4292]  ? coredump_store+0x90/0x90
[ 1108.810368][ T4292]  bus_for_each_drv+0x183/0x200
[ 1108.815235][ T4292]  ? subsys_find_device_by_id+0x310/0x310
[ 1108.820957][ T4292]  __device_attach+0x359/0x570
[ 1108.825722][ T4292]  ? device_attach+0x20/0x20
[ 1108.830309][ T4292]  ? kobject_uevent_env+0x54a/0x8c0
[ 1108.835507][ T4292]  ? kobject_uevent_env+0x54a/0x8c0
[ 1108.840720][ T4292]  bus_probe_device+0xba/0x1e0
[ 1108.845489][ T4292]  ? device_add+0xab9/0xfd0
[ 1108.849989][ T4292]  device_add+0xb48/0xfd0
[ 1108.854323][ T4292]  usb_new_device+0xbdd/0x18f0
[ 1108.859109][ T4292]  ? usb_disconnect+0x8c0/0x8c0
[ 1108.864000][ T4292]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1108.869205][ T4292]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1108.874405][ T4292]  ? lockdep_hardirqs_on+0x94/0x130
[ 1108.879606][ T4292]  hub_event+0x2efe/0x5730
[ 1108.884060][ T4292]  ? led_work+0x700/0x700
[ 1108.888401][ T4292]  ? read_lock_is_recursive+0x10/0x10
[ 1108.893781][ T4292]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1108.899765][ T4292]  ? print_irqtrace_events+0x210/0x210
[ 1108.905223][ T4292]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1108.911116][ T4292]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1108.916312][ T4292]  ? process_one_work+0x7a9/0x11d0
[ 1108.921423][ T4292]  process_one_work+0x8a9/0x11d0
[ 1108.926370][ T4292]  ? worker_detach_from_pool+0x260/0x260
[ 1108.932005][ T4292]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1108.937570][ T4292]  ? kthread_data+0x4e/0xc0
[ 1108.942097][ T4292]  ? wq_worker_running+0x97/0x190
[ 1108.947118][ T4292]  worker_thread+0xa47/0x1200
[ 1108.951814][ T4292]  kthread+0x28d/0x320
[ 1108.955891][ T4292]  ? worker_clr_flags+0x190/0x190
[ 1108.960936][ T4292]  ? kthread_blkcg+0xd0/0xd0
[ 1108.965534][ T4292]  ret_from_fork+0x1f/0x30
[ 1108.969976][ T4292]  </TASK>
[ 1108.973337][ T4292] Kernel Offset: disabled
[ 1108.977731][ T4292] Rebooting in 86400 seconds..