last executing test programs:

2m37.197383462s ago: executing program 0 (id=152):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r0, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a7661", 0x11)

2m36.964657413s ago: executing program 0 (id=155):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x7, 0x4, 0x0, 0xf})
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r2, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2m35.770520217s ago: executing program 0 (id=158):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x81, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})

2m32.270942398s ago: executing program 0 (id=167):
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@grpquota}]}, 0x4, 0x4e9, &(0x7f0000001140)="$eJzs3E1oXEUcAPD/2yRN+mVjrdXWqqlVDBaTNq22B0EqCh4UxArqMeajxKaNNCnYUmULUg8epOBdPHr14MWDeiniSfBaj4IUivTSVhBX3u57u5vtbtKkm6wxvx9sduZ9zcybNy/zZnY3gHVrIP2TVMJXI2JbRBQaNxiovN26cWHs9o0LY1EslY7/mZR3u5nGM9lhYnMWGSxEFD5JaivqzJ47f3J0enriTBYfnjv1wfDsufPPTvVlS44ePXzo4JHnR55beqGapJeW6+buj2f27Hr13cuvj3Xny/PU6svRLgMx0CwrZU+1O7EO21oXTro7mBGWJL3+0+rqKbf/bdEVC1VecRVzBqy0UqlU6m29ulhqdPGOJcCalUSncwB0Rv6PPn3+zV/NOgIbVqb70XHXj1UegNJy38peEY+XF+bjID0Nz7ftNBAR7xT/+jJ9xQqNQwAA1PvhWHX4Z37/r78yM/L32Ssvpu/3ZXMo/RFxf0Rsj4gHImJHRDwYETsj4qGIeLjh+F0RUVog/YGGeDX96iRU4VobitlS2v97IZvbqvX/5mWgvyuLbY3IO8wTB7JzMhg9vZNT0xMHF0jjx5d//bzVuvr+X/pK08/7glk+rnU3DNCNj86NVkLfvVf8rL4Xv3TXL0bs7m4sf9IdkVRnApKI2BURu5dw3P668NQzX++pRnrmb7d4+ctKTefR2jDPVPoq4ulK/RdjXv3XUkzmzU+eGj0xcWLi9Eh1fnK4L6YnDgxPtszNz79ceqPVukXL/+3vjbu8cuT741nLundp/W+qu/4jn7+tlb8/iUiq87WzS0/j0m+ftnymWe71vyF5qxzOn0s/HJ2bO3MwYkPy2p3LR2r75vH0PYqV8g/ua97+t2f7pGfikYhIL+JHI+KxqDwhpnnfGxFPRMS+Bcr/00tPvr/88q+stPzjDfe/Ss3Pq//afH2rQJLNDTZZ1XVy79XbLW4ed1f/h8uhwWxJ7f5XL5l3i2iV03zcI13yzz2fPQAAAFgbChGxpW4saUsUCkNDlTGgHbGpMD0zO7d/cubs6fF0XUR/9BQmp6bL45+V8eCeJB//7K+LjzTED2Xjxl90bSzHh8Zmpsc7WnJgc7nNJ4WhiLe76tp/6o/2DDED/2W+rwXr10LtP+3E77y8ipkBVtXd//+/8tGKZgRYdXXtv9U3/IvL+NwXsAZ4/gdqFv+hH/cMWPtK2jKsa0tq//v9CCD8n3THm9VwoaM5AVab/j+sS4t+r/+eAqXe5qv64s6No2/hA3bF8rKxsUlaHQmkPauOpL5xOXvlv6bQcpsoLO2AvdGeOp1cxknoLQfyru3siZ1tv/hL2Wfl212D36xKO20WWPVbEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIr4NwAA///eNtoE")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5)

2m30.989996936s ago: executing program 0 (id=175):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
gettid()
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

2m26.428709686s ago: executing program 0 (id=181):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
mremap(&(0x7f0000496000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00000e3000/0x4000)=nil)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000092c000/0x1000)=nil, 0x400000, 0x0, 0x2})

2m26.069142652s ago: executing program 32 (id=181):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
mremap(&(0x7f0000496000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00000e3000/0x4000)=nil)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000092c000/0x1000)=nil, 0x400000, 0x0, 0x2})

4.082668483s ago: executing program 4 (id=656):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{0x0}, 0x0}, 0x20)

4.006933137s ago: executing program 4 (id=659):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000080)={0xa8, 0xfffffff5, 0x3, [{{0x6, 0x3, 0x1, 0x3ff, 0xa, 0xfe, {0x1, 0x8, 0x8000000000000000, 0xffff, 0x8, 0x5, 0xffffffff, 0x8000, 0xc, 0x6000, 0x8, 0x0, 0x0, 0x1, 0xdc}}, {0x4, 0x4, 0x0, 0x9}}]}, 0xa8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.581016936s ago: executing program 4 (id=661):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8091}, 0x4000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000f70002fc0001000000000000000001000001180002001400018008000100ac14141d080002007f000001040002"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.962795895s ago: executing program 3 (id=671):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

2.854701469s ago: executing program 5 (id=673):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x400002, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x4, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0x80000d, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0xffffffff, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.272815186s ago: executing program 5 (id=674):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x5, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x9, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x2, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a3, 0xa9, 0x1, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x2c, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x7a85, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x2, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x200, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8091}, 0x4000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f00000003c0)=""/211, 0xd3}], 0x3}, 0x527}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/36, 0x24}, {&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000800)=""/52, 0x34}, {&(0x7f0000005780)=""/236, 0xec}, {&(0x7f0000000a40)}], 0x6}, 0x6}], 0x2, 0x100, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.96278891s ago: executing program 1 (id=675):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @remote})

1.857114725s ago: executing program 3 (id=676):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc)

1.856112775s ago: executing program 2 (id=677):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001514230c"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000)

1.75692951s ago: executing program 2 (id=678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000100003800400010008000380"], 0x3c}}, 0x0)

1.732151431s ago: executing program 4 (id=679):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x20)
write(r0, &(0x7f0000000100)='+1', 0x2)

1.666753354s ago: executing program 1 (id=680):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYRES32=r0], 0x60}, 0x1, 0x400000000000000}, 0x40810)

1.650075285s ago: executing program 3 (id=681):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
syz_fuse_handle_req(r2, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r2, 0xffffffffffffffff, 0x1)
socket$packet(0x11, 0x2, 0x300)
unshare(0x22020600)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00')
write$cgroup_int(r3, &(0x7f0000000080)=0x800407fd, 0xfdd5)

1.584144698s ago: executing program 2 (id=682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x240, 0x60, 0x10}, 0x18)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

1.510680831s ago: executing program 5 (id=683):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x1)
ioctl$USBDEVFS_GET_SPEED(r0, 0x542f)

1.507893321s ago: executing program 1 (id=684):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x5, {0x0, 0x7, 0xfff, 0x8, 0x5}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='traceon', 0x7)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x83)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)

1.493925702s ago: executing program 4 (id=685):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10842, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x28a, &(0x7f00000002c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)

1.479286763s ago: executing program 5 (id=686):
r0 = io_uring_setup(0x394c, &(0x7f00000000c0)={0x0, 0x6910, 0x40000, 0x1, 0x1cd})
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000006480)=[{0x4a, 0x0, 0x0}], 0x1)

1.419106536s ago: executing program 2 (id=687):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008000000"], 0x20}}, 0x0)
r2 = socket(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_mtu=0x44})
r3 = socket(0x2d, 0x2, 0x0)
bind(r3, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80)
r4 = socket(0x2d, 0x2, 0x0)
sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80)

473.786889ms ago: executing program 4 (id=688):
socket$packet(0x11, 0xa, 0x300)
openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})

454.88775ms ago: executing program 5 (id=689):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x40ffff, 0xa6400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0xffe4, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0xa, 0x8000000000000000]}})

364.721674ms ago: executing program 1 (id=690):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000800)="29140000010001", 0x7)

364.120343ms ago: executing program 3 (id=691):
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)}}], 0x1, 0x20008000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

235.40454ms ago: executing program 2 (id=692):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006)

164.493993ms ago: executing program 1 (id=693):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x605, 0x70bd24, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x6, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0)

164.359183ms ago: executing program 3 (id=694):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r3}}, 0x30)

80.838997ms ago: executing program 2 (id=695):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff)
request_key(&(0x7f0000000480)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)='\x00', r0)

34.681289ms ago: executing program 5 (id=696):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./proc\x00', 0x1ff)
dup(0xffffffffffffffff)
r0 = fsopen(0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8c0)
socket$inet_udp(0x2, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xa)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x5d}, {@rand_addr=0x64010100, 0x4e23, 0x2000, 0x244, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

24.26171ms ago: executing program 1 (id=697):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f00000000c0))

0s ago: executing program 3 (id=698):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0)
write(r0, &(0x7f0000000800)='res', 0x3)

kernel console output (not intermixed with test programs):

0] type 2 family 0 port 6081 - 0
[   72.358774][ T4264] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   72.369026][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.378977][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.397157][ T4264] kvm: pic: non byte read
[   72.430772][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.453811][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.469464][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.480700][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.498815][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.509513][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.551566][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.639491][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.659857][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.695000][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.708942][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.769629][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.778003][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.801863][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.811969][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.916788][ T4272] loop2: detected capacity change from 0 to 512
[   73.006076][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.146384][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.257638][ T4273] Bluetooth: hci1: command 0x0419 tx timeout
[   74.291052][ T4273] Bluetooth: hci0: command 0x0419 tx timeout
[   74.371915][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.440881][ T4273] Bluetooth: hci2: command 0x0419 tx timeout
[   74.512429][    C0] sched: RT throttling activated
[   74.528810][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.530844][ T4273] Bluetooth: hci4: command 0x0419 tx timeout
[   74.540654][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.613087][ T4229] Bluetooth: hci3: command 0x0419 tx timeout
[   74.712389][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.830176][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.531874][ T4188] device veth0_macvtap entered promiscuous mode
[   75.574250][ T3103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.602834][ T3103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.612921][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.637161][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.697494][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.719396][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.735457][ T4284] loop4: detected capacity change from 0 to 512
[   75.807825][ T4284] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   75.821547][ T4284] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   75.830332][ T4284] System zones: 0-1, 15-15, 18-18, 34-34
[   75.844077][ T4284] EXT4-fs (loop4): orphan cleanup on readonly fs
[   75.850700][ T4284] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[   75.867108][ T4284] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   75.884390][ T4284] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   75.901003][ T4284] EXT4-fs (loop4): 1 truncate cleaned up
[   75.908001][ T4284] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   75.990726][ T4188] device veth1_macvtap entered promiscuous mode
[   76.060359][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.076437][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.089400][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.105963][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.119884][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.135435][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.148023][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.162190][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.184864][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.229964][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.241426][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.258870][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.270321][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.287112][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.511318][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.980754][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.023001][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.046971][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.120946][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.164003][ T4294] syz.1.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   77.175089][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.206524][ T4294] serio: Serial port ptm0
[   77.224075][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.233135][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.246017][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.255231][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.268885][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.277914][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.378694][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.411443][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.462701][ T4270] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.486737][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.549724][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.558998][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.562715][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.590366][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.619411][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.628406][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.651825][ T3103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.660806][ T3103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.669693][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.756399][ T4302] kvm: pic: non byte write
[   77.832888][ T4270] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   77.848795][ T4270] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   77.874337][ T4270] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   77.888106][ T4270] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   77.917862][ T4270] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   77.928011][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.945881][ T4307] loop0: detected capacity change from 0 to 16
[   77.983367][ T4292] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   77.996484][ T4292] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.021919][ T4307] erofs: (device loop0): mounted with root inode @ nid 36.
[   78.039743][ T4270] pl2303 3-1:1.0: pl2303 converter detected
[   78.040552][ T4307] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   78.063289][ T4307] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[   78.081640][ T4307] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   78.091264][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36
[   78.100389][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36
[   78.109482][ T4307] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   78.118946][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36
[   78.128392][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36
[   78.137528][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36
[   78.147628][ T4307] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[   78.157103][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36
[   78.166223][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[   78.176201][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36
[   78.177239][ T4270] usb 3-1: pl2303 converter now attached to ttyUSB0
[   78.185299][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[   78.185344][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36
[   78.185365][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[   78.185385][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36
[   78.185488][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[   78.240617][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36
[   78.249831][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36
[   78.258936][ T4307] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 0 of nid 36
[   78.268346][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 36
[   78.277363][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 36
[   78.287255][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36
[   78.296528][ T4307] attempt to access beyond end of device
[   78.296528][ T4307] loop0: rw=524288, want=16408, limit=16
[   78.307905][ T4307] attempt to access beyond end of device
[   78.307905][ T4307] loop0: rw=524288, want=1049280, limit=16
[   78.319323][ T4307] attempt to access beyond end of device
[   78.319323][ T4307] loop0: rw=524288, want=24, limit=16
[   78.330354][ T4307] attempt to access beyond end of device
[   78.330354][ T4307] loop0: rw=524288, want=736, limit=16
[   78.341842][ T4307] attempt to access beyond end of device
[   78.341842][ T4307] loop0: rw=524288, want=776, limit=16
[   78.352996][ T4307] attempt to access beyond end of device
[   78.352996][ T4307] loop0: rw=524288, want=848, limit=16
[   78.365116][ T4307] attempt to access beyond end of device
[   78.365116][ T4307] loop0: rw=524288, want=13478624160, limit=16
[   78.378429][ T4307] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36
[   78.387991][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 85 @ nid 36
[   78.397379][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36
[   78.407436][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 84 @ nid 36
[   78.416631][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36
[   78.426758][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36
[   78.435102][ T4292] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[   78.435856][ T4307] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   78.453393][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36
[   78.462527][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 81 @ nid 36
[   78.471606][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 80 @ nid 36
[   78.473208][ T4292] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[   78.480716][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36
[   78.480759][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36
[   78.505962][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 77 @ nid 36
[   78.515067][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36
[   78.525101][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36
[   78.534244][ T4307] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   78.543594][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36
[   78.552992][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36
[   78.562088][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 73 @ nid 36
[   78.571236][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36
[   78.580329][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36
[   78.589503][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36
[   78.593122][ T4292] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[   78.599544][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36
[   78.615731][ T4307] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36
[   78.625323][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 65 @ nid 36
[   78.634436][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36
[   78.644494][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 64 @ nid 36
[   78.653594][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36
[   78.663650][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36
[   78.672786][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36
[   78.681905][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36
[   78.691023][ T4307] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   78.696655][ T4292] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[   78.700365][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36
[   78.717290][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 57 @ nid 36
[   78.726412][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36
[   78.735503][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 55 @ nid 36
[   78.744600][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36
[   78.753810][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 53 @ nid 36
[   78.762948][ T4307] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36
[   78.772353][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 51 @ nid 36
[   78.781443][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36
[   78.791486][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36
[   78.792171][ T4292] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[   78.800598][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 49 @ nid 36
[   78.800622][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36
[   78.800659][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 48 @ nid 36
[   78.800677][ T4307] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36
[   78.845815][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36
[   78.854914][ T4307] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   78.864260][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36
[   78.873469][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36
[   78.882846][ T4307] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36
[   78.891986][ T4307] attempt to access beyond end of device
[   78.891986][ T4307] loop0: rw=524288, want=56, limit=16
[   78.902959][ T4307] attempt to access beyond end of device
[   78.902959][ T4307] loop0: rw=524288, want=24, limit=16
[   78.913953][ T4307] attempt to access beyond end of device
[   78.913953][ T4307] loop0: rw=524288, want=40, limit=16
[   79.087861][ T4229] usb 3-1: USB disconnect, device number 2
[   79.128679][ T4229] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   79.151050][ T4229] pl2303 3-1:1.0: device disconnected
[   79.386721][ T4305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'.
[   79.680148][ T4332] loop4: detected capacity change from 0 to 512
[   79.906306][ T4339] tipc: Started in network mode
[   79.911591][ T4339] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   79.921831][ T4339] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   79.931673][ T4339] tipc: Enabled bearer <udp:syz0>, priority 10
[   79.949121][ T4332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   80.029720][ T4341] process 'syz.3.16' launched './file0' with NULL argv: empty string added
[   80.463632][ T4332] System zones: 1-12
[   80.912599][ T4233] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   80.929722][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.17: missing EA_INODE flag
[   80.944689][ T4237] tipc: Node number set to 1
[   80.990020][ T4345] loop1: detected capacity change from 0 to 4096
[   81.007383][ T4332] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.17: error while reading EA inode 12 err=-117
[   81.025682][ T4349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'.
[   81.039569][ T4332] EXT4-fs (loop4): 1 orphan inode deleted
[   81.050830][ T4345] EXT4-fs (loop1): Test dummy encryption mode enabled
[   81.065657][ T4349] loop3: detected capacity change from 0 to 128
[   81.072799][ T4332] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   81.087030][ T4345] EXT4-fs (loop1): inline encryption not supported
[   81.106393][ T4351] loop0: detected capacity change from 0 to 512
[   81.112914][ T4345] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   81.141540][ T4345] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,test_dummy_encryption=v1,inlinecrypt,resgid=0x0000000000000000,noinit_itable,norecovery,nombcache,nodioread_nolock,errors=remount-ro,mblk_io_submit,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[   81.265382][ T4351] EXT4-fs (loop0): Ignoring removed bh option
[   81.273646][ T4233] usb 3-1: config 127 has an invalid interface number: 57 but max is 0
[   81.287347][ T4233] usb 3-1: config 127 has no interface number 0
[   81.294102][ T4233] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64
[   81.420033][ T4351] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.22: corrupted in-inode xattr
[   81.470890][ T4351] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.22: couldn't read orphan inode 15 (err -117)
[   82.270033][ T4351] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[   82.412724][ T4233] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[   82.436079][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.473886][ T4233] usb 3-1: Product: syz
[   82.478133][ T4233] usb 3-1: Manufacturer: syz
[   82.513769][ T4233] usb 3-1: SerialNumber: syz
[   82.564543][ T4336] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   82.607800][ T4362] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.396875][ T4376] loop3: detected capacity change from 0 to 512
[   83.558870][ T4376] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   83.948255][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   84.159769][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   84.238669][ T4382] Zero length message leads to an empty skb
[   84.294478][ T4233] asix: probe of 3-1:127.57 failed with error -71
[   84.316171][ T4233] usb 3-1: USB disconnect, device number 3
[   84.562305][ T4390] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   85.992225][ T4409] capability: warning: `syz.0.33' uses 32-bit capabilities (legacy support in use)
[   86.706877][ T1110] cfg80211: failed to load regulatory.db
[   87.440667][ T4415] loop3: detected capacity change from 0 to 1024
[   87.487863][ T4417] loop4: detected capacity change from 0 to 512
[   87.566865][ T4415] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   87.597526][ T4415] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 623: comm syz.3.35: Attempting to read directory block (623) that is past i_size (638464)
[   87.632634][ T4417] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   87.648306][ T4417] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.36: corrupted in-inode xattr
[   87.775065][ T4417] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.36: couldn't read orphan inode 15 (err -117)
[   87.832839][ T4417] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback.
[   87.973045][ T4427] deleting an unspecified loop device is not supported.
[   88.144611][ T4428] loop3: detected capacity change from 0 to 1024
[   88.159274][ T4430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.39'.
[   88.270256][ T4428] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   88.312614][ T4428] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   88.362456][ T4428] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (40000)
[   88.470111][ T4437] loop4: detected capacity change from 0 to 512
[   88.645095][ T4437] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.998641][ T4464] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   90.075567][ T4464] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   90.272335][ T4471] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   90.526739][ T4469] loop4: detected capacity change from 0 to 8192
[   90.702767][   T26] audit: type=1800 audit(1789700906.315:2): pid=4469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.51" name="bus" dev="loop4" ino=1048594 res=0 errno=0
[   93.618249][ T4498] loop3: detected capacity change from 0 to 512
[   93.774529][ T4498] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   93.827410][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'.
[   98.999234][ T4527] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   99.975170][ T4557] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  102.205829][ T4568] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  102.295610][ T4237] Bluetooth: hci5: command 0x1003 tx timeout
[  102.301738][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  103.631924][ T4588] loop1: detected capacity change from 0 to 512
[  104.093332][ T4588] =======================================================
[  104.093332][ T4588] WARNING: The mand mount option has been deprecated and
[  104.093332][ T4588]          and is ignored by this kernel. Remove the mand
[  104.093332][ T4588]          option from the mount to silence this warning.
[  104.093332][ T4588] =======================================================
[  104.332599][ T1110] Bluetooth: hci5: command 0x1001 tx timeout
[  104.338351][ T4588] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.87: bad orphan inode 15
[  104.379251][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  105.132654][ T4588] ext4_test_bit(bit=14, block=5) = 0
[  105.138015][ T4588] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  105.290340][ T4588] EXT4-fs error (device loop1): __ext4_new_inode:1084: comm syz.1.87: reserved inode found cleared - inode=1
[  106.410551][ T4237] Bluetooth: hci5: command 0x1009 tx timeout
[  106.672756][ T4626] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[
[  106.672756][ T4626] Q&|xù6
[  106.991732][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'.
[  111.608342][ T4677] HTB: quantum of class FFF10001 is small. Consider r2q change.
[  113.798559][ T4711] loop1: detected capacity change from 0 to 512
[  114.008129][ T4717] loop0: detected capacity change from 0 to 512
[  114.113630][ T4717] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  114.141232][ T4717] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  114.261267][ T4717] EXT4-fs (loop0): 1 truncate cleaned up
[  114.278567][ T4711] EXT4-fs (loop1): Test dummy encryption mode enabled
[  114.298601][ T4711] EXT4-fs (loop1): Test dummy encryption mode enabled
[  114.306179][ T4717] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000020007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  114.348184][ T4711] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  114.401846][ T4711] EXT4-fs (loop1): 1 truncate cleaned up
[  114.455974][ T4711] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,debug_want_extra_isize=0x0000000000000080,nogrpid,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none.
[  114.696510][ T4711] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  115.330534][ T4745] loop2: detected capacity change from 0 to 512
[  115.413535][ T4745] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  117.741549][ T4790] loop0: detected capacity change from 0 to 512
[  117.978878][ T4790] EXT4-fs (loop0): Ignoring removed oldalloc option
[  118.247859][ T4790] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback.
[  118.263266][ T4790] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.638588][ T4799] loop1: detected capacity change from 0 to 512
[  118.825105][ T4799] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  120.668858][ T4816] loop0: detected capacity change from 0 to 4096
[  120.836335][ T4816] EXT4-fs (loop0): Test dummy encryption mode enabled
[  120.843451][ T4816] EXT4-fs (loop0): inline encryption not supported
[  120.880511][ T4816] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  122.287887][ T4834] loop0: detected capacity change from 0 to 512
[  122.975309][ T4840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.156'.
[  123.022253][ T4834] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  124.519321][ T4855] loop2: detected capacity change from 0 to 4096
[  124.613728][ T4855] EXT4-fs (loop2): Test dummy encryption mode enabled
[  124.620789][ T4855] EXT4-fs (loop2): inline encryption not supported
[  124.653108][ T4855] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  125.301964][ T4862] Config c/1 of g1 needs at least one function.
[  125.353358][ T4862] udc dummy_udc.0: failed to start g1: -22
[  125.618265][ T4869] loop1: detected capacity change from 0 to 1024
[  125.653580][ T4869] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  126.000326][ T4860] loop0: detected capacity change from 0 to 40427
[  126.097693][ T4871] loop1: detected capacity change from 0 to 4096
[  126.110288][ T4860] F2FS-fs (loop0): invalid crc value
[  126.166031][ T4860] F2FS-fs (loop0): Found nat_bits in checkpoint
[  126.191038][ T4871] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsdgroups,acl,errors=remount-ro,norecovery,. Quota mode: writeback.
[  126.468000][ T4860] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  126.701726][ T4872] handle_bad_sector: 2 callbacks suppressed
[  126.701747][ T4872] attempt to access beyond end of device
[  126.701747][ T4872] loop0: rw=2049, want=45104, limit=40427
[  127.162548][ T4883] loop2: detected capacity change from 0 to 512
[  127.250047][ T4883] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  127.407121][ T4888] loop0: detected capacity change from 0 to 512
[  127.463981][ T4888] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  127.530024][ T4888] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.167: bg 0: block 5: invalid block bitmap
[  127.604927][ T4888] EXT4-fs (loop0): Remounting filesystem read-only
[  127.611796][ T4888] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  127.667429][ T4888] EXT4-fs (loop0): Remounting filesystem read-only
[  127.675874][ T4888] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.167: invalid indirect mapped block 3 (level 2)
[  127.692464][ T4888] EXT4-fs (loop0): Remounting filesystem read-only
[  127.699165][ T4888] EXT4-fs (loop0): 2 truncates cleaned up
[  127.706016][ T4888] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,grpquota,. Quota mode: writeback.
[  127.910338][ T4901] loop2: detected capacity change from 0 to 128
[  127.931853][ T4901] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  128.102071][ T4186] EXT4-fs error (device loop0): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  130.060281][ T4907] loop4: detected capacity change from 0 to 4096
[  130.202058][ T4907] EXT4-fs (loop4): Test dummy encryption mode enabled
[  130.209242][ T4907] EXT4-fs (loop4): inline encryption not supported
[  130.219726][ T4186] EXT4-fs (loop0): Remounting filesystem read-only
[  130.237909][ T4907] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  130.530825][ T4186] EXT4-fs error (device loop0): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  130.558088][ T4186] EXT4-fs (loop0): Remounting filesystem read-only
[  130.669095][ T4910] Config c/1 of g1 needs at least one function.
[  130.717110][ T4910] udc dummy_udc.0: failed to start g1: -22
[  132.559784][ T4276] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.645741][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.652148][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.809905][ T4276] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.975399][ T4276] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.097509][ T4929] syz.4.179 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  133.107889][ T4929] CPU: 0 PID: 4929 Comm: syz.4.179 Not tainted syzkaller #0
[  133.115213][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  133.125323][ T4929] Call Trace:
[  133.128637][ T4929]  <TASK>
[  133.131606][ T4929]  dump_stack_lvl+0x188/0x250
[  133.136349][ T4929]  ? show_regs_print_info+0x20/0x20
[  133.141592][ T4929]  ? load_image+0x410/0x410
[  133.146159][ T4929]  ? local_lock_release+0x170/0x170
[  133.151406][ T4929]  ? __rwlock_init+0x140/0x140
[  133.156217][ T4929]  dump_header+0xd9/0x780
[  133.160593][ T4929]  oom_kill_process+0x20e/0x3d0
[  133.165499][ T4929]  out_of_memory+0xdb2/0x1190
[  133.170224][ T4929]  ? mem_cgroup_out_of_memory+0xbd/0x3b0
[  133.175902][ T4929]  ? mutex_lock_io_nested+0x60/0x60
[  133.181153][ T4929]  ? unregister_oom_notifier+0x20/0x20
[  133.186672][ T4929]  mem_cgroup_out_of_memory+0x2b9/0x3b0
[  133.192269][ T4929]  ? mem_cgroup_oom_trylock+0x210/0x210
[  133.198041][ T4929]  ? do_raw_spin_unlock+0x11d/0x230
[  133.203297][ T4929]  try_charge_memcg+0x1075/0x15b0
[  133.208398][ T4929]  ? get_mem_cgroup_from_objcg+0x120/0x120
[  133.214252][ T4929]  ? __alloc_pages+0x480/0x480
[  133.219088][ T4929]  ? rcu_lock_acquire+0x30/0x30
[  133.224000][ T4929]  charge_memcg+0x100/0x300
[  133.228567][ T4929]  ? __mem_cgroup_charge+0x80/0x80
[  133.233744][ T4929]  __mem_cgroup_charge+0x21/0x80
[  133.238744][ T4929]  handle_mm_fault+0x23fe/0x4440
[  133.243748][ T4929]  ? get_page+0xe0/0xe0
[  133.247958][ T4929]  ? follow_page_mask+0xa51/0x12b0
[  133.253213][ T4929]  __get_user_pages+0x952/0x11e0
[  133.258210][ T4929]  ? populate_vma_page_range+0x290/0x290
[  133.263994][ T4929]  ? __might_sleep+0xf0/0xf0
[  133.268638][ T4929]  ? read_lock_is_recursive+0x10/0x10
[  133.274070][ T4929]  ? vma_is_secretmem+0x9/0x40
[  133.278870][ T4929]  ? check_vma_flags+0x410/0x470
[  133.283936][ T4929]  faultin_vma_page_range+0x1e0/0x260
[  133.289360][ T4929]  do_madvise+0x9d1/0x2aa0
[  133.293824][ T4929]  ? get_nr_vmemmap_pages_cb+0x40/0x40
[  133.299344][ T4929]  ? verify_lock_unused+0x140/0x140
[  133.304582][ T4929]  ? verify_lock_unused+0x140/0x140
[  133.309826][ T4929]  ? do_futex+0xdc2/0x12b0
[  133.314279][ T4929]  ? vfs_write+0xaa6/0xd70
[  133.318754][ T4929]  ? __context_tracking_exit+0x4c/0x80
[  133.324303][ T4929]  ? __lock_acquire+0x7b50/0x7b50
[  133.329382][ T4929]  ? lock_chain_count+0x20/0x20
[  133.334277][ T4929]  __x64_sys_madvise+0xa2/0xb0
[  133.339099][ T4929]  do_syscall_64+0x4c/0xa0
[  133.343570][ T4929]  ? clear_bhb_loop+0x30/0x80
[  133.348291][ T4929]  ? clear_bhb_loop+0x30/0x80
[  133.353005][ T4929]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  133.358946][ T4929] RIP: 0033:0x7f2a9f2a5159
[  133.363399][ T4929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.383045][ T4929] RSP: 002b:00007f2a9d4bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  133.391741][ T4929] RAX: ffffffffffffffda RBX: 00007f2a9f52d180 RCX: 00007f2a9f2a5159
[  133.399795][ T4929] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000
[  133.407856][ T4929] RBP: 00007f2a9f33c06b R08: 0000000000000000 R09: 0000000000000000
[  133.416080][ T4929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.424096][ T4929] R13: 00007f2a9f52d218 R14: 00007f2a9f52d180 R15: 00007ffcc35d5b78
[  133.432352][ T4929]  </TASK>
[  133.438951][ T4929] memory: usage 96kB, limit 96kB, failcnt 68
[  133.445162][ T4929] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0
[  133.452976][ T4929] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  133.459860][ T4929] Memory cgroup stats for /syz4/test:
[  133.461127][ T4929] anon 98304
[  133.461127][ T4929] file 0
[  133.461127][ T4929] kernel_stack 0
[  133.461127][ T4929] pagetables 0
[  133.461127][ T4929] percpu 0
[  133.461127][ T4929] sock 0
[  133.461127][ T4929] shmem 0
[  133.461127][ T4929] file_mapped 0
[  133.461127][ T4929] file_dirty 0
[  133.461127][ T4929] file_writeback 0
[  133.461127][ T4929] swapcached 98304
[  133.461127][ T4929] anon_thp 0
[  133.461127][ T4929] file_thp 0
[  133.461127][ T4929] shmem_thp 0
[  133.461127][ T4929] inactive_anon 0
[  133.461127][ T4929] active_anon 98304
[  133.461127][ T4929] inactive_file 0
[  133.461127][ T4929] active_file 0
[  133.461127][ T4929] unevictable 0
[  133.461127][ T4929] slab_reclaimable 0
[  133.461127][ T4929] slab_unreclaimable 0
[  133.461127][ T4929] slab 0
[  133.461127][ T4929] workingset_refault_anon 0
[  133.461127][ T4929] workingset_refault_file 0
[  133.461127][ T4929] workingset_activate_anon 0
[  133.461127][ T4929] workingset_activate_file 0
[  133.558502][ T4929] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.179,pid=4922,uid=0
[  133.576288][ T4929] Memory cgroup out of memory: Killed process 4922 (syz.4.179) total-vm:102508kB, anon-rss:1308kB, file-rss:21948kB, shmem-rss:11348kB, UID:0 pgtables:156kB oom_score_adj:1000
[  133.684943][ T4276] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.007108][ T4937] loop1: detected capacity change from 0 to 512
[  134.228611][ T4937] EXT4-fs (loop1): Ignoring removed bh option
[  134.283683][ T4944] FAULT_INJECTION: forcing a failure.
[  134.283683][ T4944] name failslab, interval 1, probability 0, space 0, times 1
[  134.423619][ T4944] CPU: 1 PID: 4944 Comm: syz.2.187 Not tainted syzkaller #0
[  134.430983][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.441068][ T4944] Call Trace:
[  134.444373][ T4944]  <TASK>
[  134.447332][ T4944]  dump_stack_lvl+0x188/0x250
[  134.452051][ T4944]  ? show_regs_print_info+0x20/0x20
[  134.457270][ T4944]  ? load_image+0x410/0x410
[  134.461807][ T4944]  ? __might_sleep+0xf0/0xf0
[  134.466594][ T4944]  ? __lock_acquire+0x7b50/0x7b50
[  134.471653][ T4944]  should_fail+0x383/0x4b0
[  134.476108][ T4944]  should_failslab+0x5/0x20
[  134.480635][ T4944]  slab_pre_alloc_hook+0x51/0xc0
[  134.485598][ T4944]  ? __se_sys_flock+0x14f/0x570
[  134.490482][ T4944]  kmem_cache_alloc+0x3d/0x280
[  134.495292][ T4944]  ? __fdget+0x18b/0x210
[  134.499595][ T4944]  __se_sys_flock+0x14f/0x570
[  134.504354][ T4944]  do_syscall_64+0x4c/0xa0
[  134.508807][ T4944]  ? clear_bhb_loop+0x30/0x80
[  134.513514][ T4944]  ? clear_bhb_loop+0x30/0x80
[  134.518221][ T4944]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  134.524138][ T4944] RIP: 0033:0x7ff1d21b4159
[  134.528583][ T4944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.548218][ T4944] RSP: 002b:00007ff1d040c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  134.556671][ T4944] RAX: ffffffffffffffda RBX: 00007ff1d243bfa0 RCX: 00007ff1d21b4159
[  134.564680][ T4944] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004
[  134.572703][ T4944] RBP: 00007ff1d224b06b R08: 0000000000000000 R09: 0000000000000000
[  134.580717][ T4944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.588712][ T4944] R13: 00007ff1d243c038 R14: 00007ff1d243bfa0 R15: 00007ffdd4287e78
[  134.596728][ T4944]  </TASK>
[  135.370150][ T4934] chnl_net:caif_netlink_parms(): no params data found
[  135.634496][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.689034][   T28] oom_reaper: reaped process 4922 (syz.4.179), now anon-rss:0kB, file-rss:22472kB, shmem-rss:11348kB
[  135.710689][ T4934] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.823486][ T4934] device bridge_slave_0 entered promiscuous mode
[  135.892310][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.941644][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.981594][ T4934] device bridge_slave_1 entered promiscuous mode
[  136.012978][ T4237] Bluetooth: hci2: command 0x0409 tx timeout
[  136.108677][ T4934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.185311][ T4934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.317585][ T4937] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.184: corrupted in-inode xattr
[  136.341739][ T4937] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.184: couldn't read orphan inode 15 (err -117)
[  136.356963][ T4973] Config c/1 of g1 needs at least one function.
[  136.363480][ T4973] udc dummy_udc.0: failed to start g1: -22
[  136.396625][ T4937] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  136.434686][ T4975] loop4: detected capacity change from 0 to 512
[  136.455969][ T4968] loop3: detected capacity change from 0 to 256
[  136.491132][ T4975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  136.508983][ T4975] System zones: 1-12
[  136.516166][ T4975] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.190: missing EA_INODE flag
[  136.529797][ T4975] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.190: error while reading EA inode 12 err=-117
[  136.558524][ T4975] EXT4-fs (loop4): 1 orphan inode deleted
[  136.623916][ T4934] team0: Port device team_slave_0 added
[  136.634073][ T4975] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  136.710331][ T4934] team0: Port device team_slave_1 added
[  138.720188][ T1110] Bluetooth: hci2: command 0x041b tx timeout
[  139.462130][ T4934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.612445][ T4934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.768427][ T4997] loop4: detected capacity change from 0 to 1024
[  139.913837][ T4997] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  139.934070][ T4934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.064470][ T4934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.071492][ T4934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.231200][ T4934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.314493][ T4934] device hsr_slave_0 entered promiscuous mode
[  140.358027][ T4934] device hsr_slave_1 entered promiscuous mode
[  140.381726][ T4934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.425083][ T4934] Cannot create hsr debugfs directory
[  140.490895][ T5009] loop3: detected capacity change from 0 to 512
[  140.561180][ T5009] EXT4-fs (loop3): Ignoring removed oldalloc option
[  140.577450][ T5009] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  140.625669][ T5014] loop2: detected capacity change from 0 to 512
[  140.755248][ T5009] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,oldalloc,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback.
[  140.774005][ T5009] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.788815][ T5014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  140.812555][ T4237] Bluetooth: hci2: command 0x040f tx timeout
[  140.838209][ T5014] System zones: 1-12
[  140.904248][ T5014] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.199: missing EA_INODE flag
[  140.997057][ T5012] loop4: detected capacity change from 0 to 256
[  141.012834][ T5014] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.199: error while reading EA inode 12 err=-117
[  141.064856][ T5012] exfat: Bad value for 'uid'
[  141.081923][ T5014] EXT4-fs (loop2): 1 orphan inode deleted
[  141.124737][ T5012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'.
[  141.139246][ T5014] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  141.242106][ T5026] Config c/1 of g1 needs at least one function.
[  141.260313][ T5026] udc dummy_udc.0: failed to start g1: -22
[  142.102115][ T4934] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  142.251023][ T4934] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  142.387292][ T4934] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  142.447412][ T4934] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  142.511417][ T5044] loop3: detected capacity change from 0 to 1024
[  142.622925][ T4276] device hsr_slave_0 left promiscuous mode
[  142.646163][ T4276] device hsr_slave_1 left promiscuous mode
[  142.659366][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.678863][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.690736][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.715810][ T5050] loop1: detected capacity change from 0 to 256
[  142.760502][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.772147][ T5044] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  143.247765][ T5056] loop2: detected capacity change from 0 to 16
[  143.563595][   T23] Bluetooth: hci2: command 0x0419 tx timeout
[  143.613233][ T4276] device bridge_slave_1 left promiscuous mode
[  143.620247][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.653130][ T5056] erofs: Unknown parameter './sys'
[  143.720968][ T5050] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  143.812768][ T5051] loop2: detected capacity change from 0 to 256
[  143.820433][ T5051] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  143.870148][ T4276] device bridge_slave_0 left promiscuous mode
[  143.876680][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.064567][ T4274] Bluetooth: hci5: Frame reassembly failed (-84)
[  144.125041][ T4276] device veth1_macvtap left promiscuous mode
[  144.131620][ T4276] device veth0_macvtap left promiscuous mode
[  144.160194][ T4276] device veth1_vlan left promiscuous mode
[  144.202113][ T4276] device veth0_vlan left promiscuous mode
[  145.197556][ T5080] loop2: detected capacity change from 0 to 512
[  145.484329][ T5080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  145.515422][ T5080] System zones: 1-12
[  145.666881][ T5080] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.212: missing EA_INODE flag
[  145.984012][ T5080] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.212: error while reading EA inode 12 err=-117
[  146.083469][ T5080] EXT4-fs (loop2): 1 orphan inode deleted
[  146.093525][ T4229] Bluetooth: hci5: command 0x1003 tx timeout
[  146.100332][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  146.122567][ T5080] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  147.784871][ T4276] team0 (unregistering): Port device team_slave_1 removed
[  147.826156][ T4276] team0 (unregistering): Port device team_slave_0 removed
[  147.888404][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.162714][ T4229] Bluetooth: hci5: command 0x1001 tx timeout
[  148.172972][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  148.531317][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.645320][ T5115] loop4: detected capacity change from 0 to 4096
[  148.718072][ T5115] EXT4-fs (loop4): Test dummy encryption mode enabled
[  148.732723][ T5118] Config c/1 of g1 needs at least one function.
[  148.744355][ T5115] EXT4-fs (loop4): inline encryption not supported
[  148.750982][ T5115] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  148.782191][ T5118] udc dummy_udc.0: failed to start g1: -22
[  148.854295][ T5115] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  148.883518][ T5115] System zones: 0-5
[  148.934992][ T5115] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  149.024748][ T4276] bond0 (unregistering): Released all slaves
[  149.402198][ T5115] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  149.453881][ T5127] overlayfs: failed to resolve './bus': -2
[  149.539391][ T4934] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.587712][ T5146] loop1: detected capacity change from 0 to 512
[  149.653465][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.661399][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.691005][ T5146] EXT4-fs (loop1): Ignoring removed bh option
[  149.705878][ T4934] 8021q: adding VLAN 0 to HW filter on device team0
[  149.861372][ T5146] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.227: corrupted in-inode xattr
[  149.929206][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.942644][ T5146] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.227: couldn't read orphan inode 15 (err -117)
[  149.961425][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.983931][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.991636][ T4772] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.003456][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.017500][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.028289][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.035458][ T4772] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.063628][ T5156] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  150.230474][ T5146] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  150.409284][ T4237] Bluetooth: hci5: command 0x1009 tx timeout
[  150.798563][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  151.058487][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  152.380244][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  152.423477][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  152.658806][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  152.710680][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  152.866509][ T4934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  152.943795][ T4934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.045235][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  153.089268][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  153.153490][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  153.202231][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.232933][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  153.268327][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.435287][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  154.027789][ T5197] loop1: detected capacity change from 0 to 512
[  154.150400][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  154.169799][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.177441][ T5197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  154.232661][ T5197] System zones: 1-12
[  154.235804][ T4934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.280057][ T5197] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.234: missing EA_INODE flag
[  154.302895][ T5197] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.234: error while reading EA inode 12 err=-117
[  154.319539][ T5197] EXT4-fs (loop1): 1 orphan inode deleted
[  154.326046][ T5197] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  155.657977][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  155.677432][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  155.794106][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.813018][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.847496][ T4934] device veth0_vlan entered promiscuous mode
[  155.874020][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  155.887211][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  155.918723][ T4934] device veth1_vlan entered promiscuous mode
[  156.008888][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  156.016611][   T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  156.043356][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  156.097853][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  156.151724][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  156.183703][ T4934] device veth0_macvtap entered promiscuous mode
[  156.241904][ T4934] device veth1_macvtap entered promiscuous mode
[  156.272594][   T13] usb 4-1: Using ep0 maxpacket: 32
[  156.314938][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.392789][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.397163][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.428030][   T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.462427][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.493656][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.494841][   T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  156.562576][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.608566][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.661968][   T13] usb 4-1: config 0 descriptor??
[  156.694278][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.744883][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.810953][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.853625][ T4934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.942863][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.001459][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.362832][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.698912][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  158.701361][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.717642][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.816736][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.869263][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  158.876935][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.902499][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  158.929122][ T5257] Config c/1 of g1 needs at least one function.
[  158.945877][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.962682][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  158.979517][ T5257] udc dummy_udc.0: failed to start g1: -22
[  159.006020][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.019979][ T4934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.052581][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.112577][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.172259][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.184857][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  159.253394][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  159.257505][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.294155][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  159.321475][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.336492][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.352555][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.380643][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.389645][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  159.398051][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.412001][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  159.434271][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.461952][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.476122][ T4934] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.511736][ T4934] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.520937][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.534269][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.551783][ T4934] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.561125][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.572545][ T4934] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.582831][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.590036][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.628007][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.640793][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.658426][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.668944][ T5249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.241'.
[  159.678411][   T13] logitech 0003:046D:C623.0001: unknown main item tag 0x0
[  159.711916][   T13] logitech 0003:046D:C623.0001: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0
[  159.772194][   T13] usb 4-1: USB disconnect, device number 2
[  160.059657][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.083278][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.121564][ T5271] fido_id[5271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  160.220645][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  160.276469][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.346406][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.409447][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  160.935263][ T5304] Config c/1 of g1 needs at least one function.
[  160.992772][ T5304] udc dummy_udc.0: failed to start g1: -22
[  162.651413][ T5331] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  163.250767][ T5346] loop1: detected capacity change from 0 to 512
[  163.326031][ T5346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  163.342765][ T5346] System zones: 1-12
[  163.380342][ T5346] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.257: missing EA_INODE flag
[  163.453962][ T5346] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.257: error while reading EA inode 12 err=-117
[  163.517107][ T5346] EXT4-fs (loop1): 1 orphan inode deleted
[  163.556073][ T5346] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  163.782596][ T4233] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  165.301894][ T5378] loop4: detected capacity change from 0 to 256
[  165.364212][ T5379] loop1: detected capacity change from 0 to 512
[  165.393578][ T5378] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  165.462727][ T4233] usb 4-1: unable to get BOS descriptor or descriptor too short
[  165.502736][ T5379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  165.515422][ T4233] usb 4-1: not running at top speed; connect to a high speed hub
[  165.532995][ T5379] System zones: 1-12
[  165.709538][ T5379] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.264: missing EA_INODE flag
[  165.990242][ T5379] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.264: error while reading EA inode 12 err=-117
[  166.294540][ T5379] EXT4-fs (loop1): 1 orphan inode deleted
[  166.352554][ T5379] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  166.388789][ T4233] usb 4-1: config 1 has an invalid interface number: 81 but max is 0
[  166.398635][ T4233] usb 4-1: config 1 has no interface number 0
[  166.405529][ T4233] usb 4-1: config 1 interface 81 altsetting 215 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  166.416908][ T4233] usb 4-1: config 1 interface 81 altsetting 215 endpoint 0x7 has invalid wMaxPacketSize 0
[  166.442757][ T4233] usb 4-1: config 1 interface 81 has no altsetting 0
[  167.062596][ T4233] usb 4-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1
[  167.071824][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.255267][ T4233] usb 4-1: can't set config #1, error -71
[  167.320116][ T4233] usb 4-1: USB disconnect, device number 3
[  169.655955][ T5429] loop2: detected capacity change from 0 to 512
[  169.845319][ T5429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  169.972536][ T5429] System zones: 1-12
[  169.997944][ T5429] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.275: missing EA_INODE flag
[  170.071233][ T5429] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.275: error while reading EA inode 12 err=-117
[  170.095661][ T5434] loop3: detected capacity change from 0 to 4096
[  170.130261][ T5429] EXT4-fs (loop2): 1 orphan inode deleted
[  170.150069][ T5429] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  170.184912][ T5434] EXT4-fs (loop3): Test dummy encryption mode enabled
[  170.191797][ T5434] EXT4-fs (loop3): inline encryption not supported
[  170.236619][ T5434] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  170.326481][ T5434] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  170.433874][ T5434] System zones: 0-5
[  170.439775][ T5434] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  170.533438][ T5447] loop4: detected capacity change from 0 to 512
[  171.743232][ T5447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  171.883197][ T5447] System zones: 1-12
[  171.975608][ T5447] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.279: missing EA_INODE flag
[  172.064195][ T5434] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  172.096211][ T5447] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.279: error while reading EA inode 12 err=-117
[  172.112712][ T5458] overlayfs: failed to resolve './bus': -2
[  172.200638][ T5471] loop5: detected capacity change from 0 to 512
[  172.211691][ T5447] EXT4-fs (loop4): 1 orphan inode deleted
[  172.294745][ T5447] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  172.339044][ T5471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  172.352799][ T5471] System zones: 1-12
[  172.381084][ T5471] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.280: missing EA_INODE flag
[  172.398545][ T5471] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.280: error while reading EA inode 12 err=-117
[  172.555266][ T5471] EXT4-fs (loop5): 1 orphan inode deleted
[  172.561072][ T5471] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  174.850516][ T5504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.288'.
[  174.880343][ T5504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.288'.
[  174.914363][ T5502] netlink: 60 bytes leftover after parsing attributes in process `syz.4.288'.
[  175.291890][ T5512] loop4: detected capacity change from 0 to 512
[  177.334292][ T5522] loop5: detected capacity change from 0 to 512
[  177.458732][ T5522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  177.482652][ T5522] System zones: 1-12
[  177.512598][ T5522] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.293: missing EA_INODE flag
[  177.585107][ T5522] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.293: error while reading EA inode 12 err=-117
[  177.618187][ T5522] EXT4-fs (loop5): 1 orphan inode deleted
[  177.637199][ T5529] loop3: detected capacity change from 0 to 512
[  177.649748][ T5522] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  177.694527][ T5532] netlink: 'syz.4.294': attribute type 19 has an invalid length.
[  177.797537][ T5534] loop4: detected capacity change from 0 to 512
[  177.826162][ T5529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  177.865389][ T5529] System zones: 1-12
[  177.935063][ T5529] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.295: missing EA_INODE flag
[  177.958900][ T5529] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.295: error while reading EA inode 12 err=-117
[  178.315445][ T5534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  178.368170][ T5534] System zones: 1-12
[  178.374943][ T5529] EXT4-fs (loop3): 1 orphan inode deleted
[  178.380783][ T5529] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  178.427468][ T5534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.296: missing EA_INODE flag
[  178.514086][ T5534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.296: error while reading EA inode 12 err=-117
[  178.686041][ T5534] EXT4-fs (loop4): 1 orphan inode deleted
[  178.696166][ T5534] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  179.805194][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'.
[  179.816075][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'.
[  180.906147][ T5573] netlink: 14 bytes leftover after parsing attributes in process `syz.3.302'.
[  182.098161][ T5579] netlink: 'syz.3.302': attribute type 21 has an invalid length.
[  182.107779][ T5579] netlink: 'syz.3.302': attribute type 7 has an invalid length.
[  182.117373][ T5584] netlink: 'syz.2.303': attribute type 5 has an invalid length.
[  182.126386][ T5584] netlink: 'syz.2.303': attribute type 1 has an invalid length.
[  182.136353][ T5584] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.157721][ T5624] loop2: detected capacity change from 0 to 512
[  184.279703][ T5624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  184.322613][ T5624] System zones: 1-12
[  184.339176][ T5624] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.315: missing EA_INODE flag
[  184.352928][ T5624] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.315: error while reading EA inode 12 err=-117
[  184.410519][ T5624] EXT4-fs (loop2): 1 orphan inode deleted
[  184.432546][ T5624] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  184.690974][ T5639] netlink: 'syz.3.319': attribute type 10 has an invalid length.
[  186.197384][ T5639] team0: Port device wlan1 added
[  186.350202][ T5651] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.322'.
[  186.937683][ T5660] loop2: detected capacity change from 0 to 512
[  187.701760][ T5664] netlink: 'syz.3.325': attribute type 4 has an invalid length.
[  187.752551][ T5664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.325'.
[  187.884393][ T5664] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  189.128649][ T5675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.497853][ T5701] loop5: detected capacity change from 0 to 512
[  190.543590][ T5705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.332'.
[  190.589733][ T5701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  190.605227][ T5701] System zones: 1-12
[  190.648405][ T5705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.332'.
[  190.676159][ T5701] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.331: missing EA_INODE flag
[  190.700656][ T5701] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.331: error while reading EA inode 12 err=-117
[  190.845800][ T5701] EXT4-fs (loop5): 1 orphan inode deleted
[  190.891595][ T5701] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  191.599679][ T4289] Bluetooth: hci3: command 0x0406 tx timeout
[  191.612586][ T5722] device caif0 entered promiscuous mode
[  191.628508][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  192.663150][ T5738] loop3: detected capacity change from 0 to 512
[  193.418159][ T5747] netlink: 40 bytes leftover after parsing attributes in process `syz.5.340'.
[  193.494790][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.340'.
[  194.172997][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.179418][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.889488][ T5776] loop3: detected capacity change from 0 to 512
[  194.923436][ T5776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  194.937897][ T5776] System zones: 1-12
[  194.961522][ T5776] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.350: missing EA_INODE flag
[  194.979859][ T5776] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.350: error while reading EA inode 12 err=-117
[  194.993071][ T5776] EXT4-fs (loop3): 1 orphan inode deleted
[  195.003245][ T5776] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  195.161637][ T5785] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  196.131388][ T5789] netlink: 'syz.4.351': attribute type 11 has an invalid length.
[  196.186267][ T5793] loop5: detected capacity change from 0 to 512
[  196.563895][ T5793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  196.590087][ T5793] System zones: 1-12
[  196.639953][ T5793] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.352: missing EA_INODE flag
[  196.730460][ T5793] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.352: error while reading EA inode 12 err=-117
[  196.792963][ T5793] EXT4-fs (loop5): 1 orphan inode deleted
[  196.798776][ T5793] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  197.773423][ T5819] netlink: 36 bytes leftover after parsing attributes in process `syz.2.358'.
[  198.078568][ T5827] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  198.446609][ T5835] loop2: detected capacity change from 0 to 512
[  200.396096][ T5850] loop4: detected capacity change from 0 to 512
[  200.528711][ T5850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  200.539226][ T5852] syz.1.364 uses obsolete (PF_INET,SOCK_PACKET)
[  200.616138][ T5850] System zones: 1-12
[  200.671072][ T5850] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.363: missing EA_INODE flag
[  200.715964][ T5850] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.363: error while reading EA inode 12 err=-117
[  200.799306][ T5850] EXT4-fs (loop4): 1 orphan inode deleted
[  200.826972][ T5864] loop2: detected capacity change from 0 to 512
[  200.828656][ T5850] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  200.935296][ T5864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  200.969706][ T5864] System zones: 1-12
[  201.048804][ T5864] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.366: missing EA_INODE flag
[  201.109620][ T5864] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.366: error while reading EA inode 12 err=-117
[  201.970833][ T5864] EXT4-fs (loop2): 1 orphan inode deleted
[  202.022504][ T5864] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  202.786523][ T5889] loop4: detected capacity change from 0 to 512
[  203.096894][ T5889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  203.112815][ T5889] System zones: 1-12
[  203.220012][ T5902] fuse: Bad value for 'user_id'
[  203.244492][ T5889] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.370: missing EA_INODE flag
[  203.308689][ T5889] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.370: error while reading EA inode 12 err=-117
[  203.371519][ T5889] EXT4-fs (loop4): 1 orphan inode deleted
[  203.416996][ T5908] loop5: detected capacity change from 0 to 512
[  203.445051][ T5889] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  204.083896][ T5907] 9pnet_virtio: no channels available for device syz
[  205.791803][ T5925] loop5: detected capacity change from 0 to 512
[  205.801454][ T5903] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  205.883987][ T5925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  205.904167][ T5925] System zones: 1-12
[  205.909498][ T5925] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.380: missing EA_INODE flag
[  205.934893][ T5925] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.380: error while reading EA inode 12 err=-117
[  206.512611][ T5925] EXT4-fs (loop5): 1 orphan inode deleted
[  206.518425][ T5925] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  206.631214][ T5915] loop1: detected capacity change from 0 to 256
[  206.923815][ T5915] exfat: Bad value for 'uid'
[  207.540306][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[  208.013499][ T5943] loop4: detected capacity change from 0 to 16
[  208.024272][ T5943] erofs: Unknown parameter './sys'
[  208.632162][ T5950] loop5: detected capacity change from 0 to 512
[  208.661838][ T5946] device-mapper: ioctl: Unable to rename non-existent device,  to §
[  208.912181][ T5950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  209.066011][ T5950] System zones: 1-12
[  209.379660][ T5950] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.383: missing EA_INODE flag
[  209.742522][ T5950] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.383: error while reading EA inode 12 err=-117
[  209.808851][ T5950] EXT4-fs (loop5): 1 orphan inode deleted
[  209.836077][ T5950] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  209.976740][ T5968] loop4: detected capacity change from 0 to 512
[  210.161386][ T5968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  210.172672][ T5968] System zones: 1-12
[  210.177955][ T5968] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.390: missing EA_INODE flag
[  210.568520][ T5968] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.390: error while reading EA inode 12 err=-117
[  210.648382][ T5968] EXT4-fs (loop4): 1 orphan inode deleted
[  210.680132][ T5968] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  212.088282][ T5984] loop3: detected capacity change from 0 to 512
[  212.212410][ T5988] loop4: detected capacity change from 0 to 512
[  213.694361][ T5984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  213.713189][ T5984] System zones: 1-12
[  214.714387][ T5984] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.394: missing EA_INODE flag
[  214.980759][ T5984] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.394: error while reading EA inode 12 err=-117
[  215.117599][ T5984] EXT4-fs (loop3): 1 orphan inode deleted
[  215.145922][ T5984] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  215.319042][ T6003] loop4: detected capacity change from 0 to 512
[  215.384635][ T6003] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  215.418106][ T6003] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  215.479356][ T6003] EXT4-fs (loop4): 1 truncate cleaned up
[  215.506391][ T6005] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only
[  215.592556][ T6003] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000020007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  218.029138][ T6051] loop5: detected capacity change from 0 to 512
[  218.056082][ T6053] loop4: detected capacity change from 0 to 512
[  218.374568][ T6053] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  218.394163][ T6051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  218.402251][ T6051] System zones: 1-12
[  218.438212][ T6053] System zones: 1-12
[  218.492795][ T6053] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.411: missing EA_INODE flag
[  218.516776][ T6051] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.410: missing EA_INODE flag
[  218.586149][ T6051] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.410: error while reading EA inode 12 err=-117
[  218.612796][ T6053] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.411: error while reading EA inode 12 err=-117
[  218.694409][ T6051] EXT4-fs (loop5): 1 orphan inode deleted
[  218.700739][ T6053] EXT4-fs (loop4): 1 orphan inode deleted
[  218.706691][ T6051] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  218.721910][ T6053] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  218.846616][ T6062] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  219.712210][   T26] audit: type=1326 audit(1789701035.375:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.1.414" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd63414e159 code=0x0
[  219.808833][ T6076] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  220.142745][ T4273] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  220.543887][ T4273] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  220.771260][ T4273] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  220.844844][   T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  220.973023][ T4273] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  221.014806][ T4273] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  221.238376][ T4273] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  221.248196][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.279150][ T4273] usb 4-1: Product: syz
[  221.283052][   T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.298393][ T4273] usb 4-1: Manufacturer: syz
[  221.319249][   T13] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00
[  221.325741][ T4273] usb 4-1: SerialNumber: syz
[  221.340201][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.356447][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'.
[  221.392571][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'.
[  221.401796][ T4273] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected
[  221.413824][   T13] metro_usb 2-1:1.0: Metrologic USB to Serial converter detected
[  221.425661][ T6088] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.435320][ T6088] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.444148][ T6088] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.452962][ T6088] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.465835][ T4273] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  221.475131][   T13] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB2
[  221.505888][ T4273] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  221.570073][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'.
[  221.612508][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'.
[  221.656915][ T6075] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[  221.733371][ T4233] usb 2-1: USB disconnect, device number 2
[  221.753192][ T4233] metro-usb ttyUSB2: Metrologic USB to Serial converter now disconnected from ttyUSB2
[  221.786747][ T4233] metro_usb 2-1:1.0: device disconnected
[  222.233370][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  222.503633][ T6100] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[  222.656382][ T4229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  222.734587][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  222.917345][ T4229] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  222.952402][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.060877][ T4237] usb 4-1: USB disconnect, device number 4
[  223.084434][ T4229] spcp8x5 5-1:1.0: SPCP8x5 converter detected
[  223.105788][ T4229] usb 5-1: SPCP8x5 converter now attached to ttyUSB2
[  223.129624][ T4237] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  223.149581][ T6103] loop1: detected capacity change from 0 to 512
[  223.208051][ T4237] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  223.238300][ T6103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  223.247697][ T4237] ti_usb_3410_5052 4-1:2.0: device disconnected
[  223.278015][ T6108] loop3: detected capacity change from 0 to 512
[  223.284643][ T6103] System zones: 1-12
[  223.331484][ T6103] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.423: missing EA_INODE flag
[  223.343999][ T6103] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.423: error while reading EA inode 12 err=-117
[  223.356924][ T6103] EXT4-fs (loop1): 1 orphan inode deleted
[  223.364880][ T6103] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  223.512874][ T6108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  223.557309][ T6108] System zones: 1-12
[  223.582993][ T6108] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.425: missing EA_INODE flag
[  223.841772][ T6108] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.425: error while reading EA inode 12 err=-117
[  224.156692][ T6108] EXT4-fs (loop3): 1 orphan inode deleted
[  224.359588][ T6108] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  224.930895][ T4273] usb 5-1: USB disconnect, device number 2
[  225.036078][ T4273] SPCP8x5 ttyUSB2: SPCP8x5 converter now disconnected from ttyUSB2
[  225.060423][ T4273] spcp8x5 5-1:1.0: device disconnected
[  225.336516][ T6130] loop2: detected capacity change from 0 to 512
[  225.363584][ T6132] 9pnet_virtio: no channels available for device syz
[  225.464853][ T6130] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  225.482897][ T6130] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  225.501359][ T6130] System zones: 0-1, 15-15, 18-18, 34-34
[  225.508330][ T6130] EXT4-fs (loop2): orphan cleanup on readonly fs
[  225.527013][ T6130] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  225.545958][ T6130] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  225.567632][ T6130] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  225.586812][ T6130] EXT4-fs (loop2): 1 truncate cleaned up
[  225.593009][ T6130] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  225.613888][ T4273] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  225.681854][ T6139] loop1: detected capacity change from 0 to 512
[  225.812087][ T6143] 9pnet_virtio: no channels available for device syz
[  226.034187][ T4273] usb 5-1: Using ep0 maxpacket: 8
[  227.004936][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.5.436'.
[  227.210055][ T6156] loop3: detected capacity change from 0 to 512
[  227.265681][ T4273] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  227.284273][ T4273] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  227.316052][ T6156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  227.331765][ T4273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  227.351338][ T6156] System zones: 1-12
[  227.352524][ T4273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  227.382414][ T4273] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.402428][ T4273] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  227.411556][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.429848][ T6156] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.439: missing EA_INODE flag
[  227.433943][ T6165] loop2: detected capacity change from 0 to 512
[  227.434890][ T6156] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.439: error while reading EA inode 12 err=-117
[  227.440363][ T6156] EXT4-fs (loop3): 1 orphan inode deleted
[  227.518333][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  227.605953][ T6165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  227.627234][ T6165] System zones: 1-12
[  227.642275][ T6165] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.441: missing EA_INODE flag
[  227.702613][ T4273] usb 5-1: usb_control_msg returned -32
[  227.708256][ T4273] usbtmc 5-1:16.0: can't read capabilities
[  227.792674][ T6165] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.441: error while reading EA inode 12 err=-117
[  227.849474][ T6165] EXT4-fs (loop2): 1 orphan inode deleted
[  227.915262][ T6165] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  229.600841][ T6176] MTRR 1 not used
[  230.653550][ T1110] usb 5-1: USB disconnect, device number 3
[  230.926346][ T6200] loop3: detected capacity change from 0 to 512
[  230.938823][ T6202] loop4: detected capacity change from 0 to 512
[  231.017020][ T6202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  231.029826][ T6202] System zones: 1-12
[  231.050958][ T6200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  231.074940][ T6200] System zones: 1-12
[  231.079176][ T6202] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.454: missing EA_INODE flag
[  231.099258][ T6200] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.453: missing EA_INODE flag
[  231.121804][ T6200] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.453: error while reading EA inode 12 err=-117
[  231.134735][ T6202] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.454: error while reading EA inode 12 err=-117
[  231.148009][ T6200] EXT4-fs (loop3): 1 orphan inode deleted
[  231.154040][ T6200] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  231.169762][ T6202] EXT4-fs (loop4): 1 orphan inode deleted
[  231.175999][ T6202] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  232.335455][ T6225] loop5: detected capacity change from 0 to 16
[  232.400867][ T6225] erofs: Unknown parameter './sys'
[  234.502442][ T4270] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  234.577713][ T6253] loop4: detected capacity change from 0 to 512
[  234.607504][ T6253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  234.625964][ T6253] System zones: 1-12
[  234.670304][ T6253] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.471: missing EA_INODE flag
[  234.687641][ T6253] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.471: error while reading EA inode 12 err=-117
[  234.721503][ T6253] EXT4-fs (loop4): 1 orphan inode deleted
[  234.732959][ T4174] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  234.741426][ T6253] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  234.888496][ T4270] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.912470][ T4270] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  234.948089][ T4270] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  235.293080][ T4174] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  235.385665][ T4174] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.559770][ T4174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  235.589565][ T4174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.767722][ T4174] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  235.791146][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  235.797229][ T4270] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  235.810570][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  235.820032][ T4270] usb 3-1: Product: syz
[  235.824315][ T4270] usb 3-1: Manufacturer: syz
[  235.829923][ T4174] usb 4-1: Product: syz
[  235.852537][ T4174] usb 4-1: Manufacturer: syz
[  235.862903][ T6243] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  235.883752][ T4270] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[  235.914409][ T4270] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  235.924485][ T4174] cdc_wdm 4-1:1.0: skipping garbage
[  235.929795][ T4174] cdc_wdm 4-1:1.0: skipping garbage
[  235.945214][ T4174] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  235.981988][ T4174] cdc_wdm 4-1:1.0: Unknown control protocol
[  236.203878][ T1110] usb 3-1: USB disconnect, device number 4
[  236.225221][ T1110] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  236.256315][ T1110] garmin_gps 3-1:1.0: device disconnected
[  236.305590][ T6269] loop4: detected capacity change from 0 to 512
[  236.318256][ T4174] usb 4-1: USB disconnect, device number 5
[  236.324474][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  236.324744][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  236.324764][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  236.375380][ T6269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  236.408945][ T6269] System zones: 1-12
[  236.427103][ T6269] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.474: missing EA_INODE flag
[  236.529705][ T6269] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.474: error while reading EA inode 12 err=-117
[  236.569023][ T6269] EXT4-fs (loop4): 1 orphan inode deleted
[  236.581739][ T6269] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  237.403857][ T6287] loop2: detected capacity change from 0 to 512
[  237.426665][ T6286] block2mtd: parameter too long
[  237.534039][ T6287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  237.599624][ T6287] System zones: 1-12
[  237.620234][ T6287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.478: missing EA_INODE flag
[  237.744238][ T6287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.478: error while reading EA inode 12 err=-117
[  237.907151][ T6287] EXT4-fs (loop2): 1 orphan inode deleted
[  237.921076][ T6287] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  238.207602][ T6307] loop5: detected capacity change from 0 to 512
[  238.245910][ T6311] 9pnet_virtio: no channels available for device syz
[  238.976128][ T6319] loop1: detected capacity change from 0 to 512
[  239.132253][ T6317] nvme nvme0: rdma_resolve_addr failed (-19).
[  239.143793][ T6319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  239.192525][ T6319] System zones: 1-12
[  239.239613][ T6319] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.491: missing EA_INODE flag
[  239.345503][ T6319] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.491: error while reading EA inode 12 err=-117
[  239.380152][ T6319] EXT4-fs (loop1): 1 orphan inode deleted
[  239.410699][ T6319] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  239.430270][ T6332] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  240.703464][ T6345] devpts: called with bogus options
[  241.035700][ T6351] EXT4-fs (sda1): shut down requested (0)
[  241.284668][ T6356] loop5: detected capacity change from 0 to 512
[  242.248007][ T6357] loop4: detected capacity change from 0 to 512
[  242.440554][ T6357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  242.472500][ T6357] System zones: 1-12
[  242.514155][ T6357] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.502: missing EA_INODE flag
[  242.607466][ T6357] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.502: error while reading EA inode 12 err=-117
[  242.722837][ T6357] EXT4-fs (loop4): 1 orphan inode deleted
[  242.747326][ T6362] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  242.878348][ T6357] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  243.304944][ T4233] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  243.333704][ T4233] wiimote 0005:057E:0306.0002: New device registered
[  243.528302][ T6374] loop1: detected capacity change from 0 to 512
[  243.565599][ T6375] udevd[6375]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  243.652525][ T4195] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  243.922455][ T6374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  243.969399][ T6374] System zones: 1-12
[  243.976340][ T6371] wiimote 0005:057E:0306.0002: Device removed
[  244.032631][ T4195] usb 3-1: unable to get BOS descriptor or descriptor too short
[  244.055107][ T6374] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.511: missing EA_INODE flag
[  244.169320][ T6374] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.511: error while reading EA inode 12 err=-117
[  244.182055][ T4195] usb 3-1: unable to read config index 0 descriptor/start: -71
[  244.200953][ T4195] usb 3-1: can't read configurations, error -71
[  244.238589][ T6374] EXT4-fs (loop1): 1 orphan inode deleted
[  244.267377][ T6374] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  244.402816][ T4233] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1)
[  244.545523][ T4233] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8
[  245.476632][ T6409] loop5: detected capacity change from 0 to 512
[  245.709469][ T4233] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9
[  245.721926][ T4233] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7
[  247.575331][ T6427] loop1: detected capacity change from 0 to 512
[  247.694867][ T6427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  247.712713][ T6427] System zones: 1-12
[  247.736370][ T6427] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.524: missing EA_INODE flag
[  247.842883][ T6427] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.524: error while reading EA inode 12 err=-117
[  247.857652][ T6436] FAULT_INJECTION: forcing a failure.
[  247.857652][ T6436] name failslab, interval 1, probability 0, space 0, times 0
[  247.908565][ T6427] EXT4-fs (loop1): 1 orphan inode deleted
[  247.918270][ T6427] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  247.955306][ T6436] CPU: 1 PID: 6436 Comm: syz.5.531 Not tainted syzkaller #0
[  247.962757][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  247.972858][ T6436] Call Trace:
[  247.976255][ T6436]  <TASK>
[  247.979224][ T6436]  dump_stack_lvl+0x188/0x250
[  247.983970][ T6436]  ? show_regs_print_info+0x20/0x20
[  247.989320][ T6436]  ? load_image+0x410/0x410
[  247.993866][ T6436]  should_fail+0x383/0x4b0
[  247.998321][ T6436]  should_failslab+0x5/0x20
[  248.002847][ T6436]  slab_pre_alloc_hook+0x51/0xc0
[  248.007907][ T6436]  ? anon_vma_clone+0xbc/0x4d0
[  248.012737][ T6436]  kmem_cache_alloc+0x3d/0x280
[  248.017552][ T6436]  anon_vma_clone+0xbc/0x4d0
[  248.022190][ T6436]  __split_vma+0x1ab/0x410
[  248.026650][ T6436]  ? find_vma+0x1df/0x230
[  248.031017][ T6436]  __do_munmap+0x40b/0xe10
[  248.035491][ T6436]  ? mremap_userfaultfd_prep+0xd1/0x1b0
[  248.041088][ T6436]  move_vma+0x770/0xbc0
[  248.045295][ T6436]  ? vma_expandable+0x110/0x110
[  248.050172][ T6436]  ? cap_mmap_addr+0x153/0x2c0
[  248.054979][ T6436]  ? bpf_lsm_file_ioctl_compat+0x10/0x10
[  248.060745][ T6436]  ? security_mmap_addr+0x6e/0x90
[  248.065821][ T6436]  ? get_unmapped_area+0x2f0/0x360
[  248.070976][ T6436]  mremap_to+0x556/0x6b0
[  248.075262][ T6436]  __se_sys_mremap+0x412/0x950
[  248.080074][ T6436]  ? __x64_sys_mremap+0xc0/0xc0
[  248.084988][ T6436]  ? lock_chain_count+0x20/0x20
[  248.089897][ T6436]  ? lockdep_hardirqs_on+0x94/0x140
[  248.095134][ T6436]  ? __x64_sys_mremap+0x1c/0xc0
[  248.100052][ T6436]  do_syscall_64+0x4c/0xa0
[  248.104510][ T6436]  ? clear_bhb_loop+0x30/0x80
[  248.109235][ T6436]  ? clear_bhb_loop+0x30/0x80
[  248.113955][ T6436]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  248.119892][ T6436] RIP: 0033:0x7f3fb3cb2159
[  248.124351][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.144214][ T6436] RSP: 002b:00007f3fb1f0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  248.152717][ T6436] RAX: ffffffffffffffda RBX: 00007f3fb3f39fa0 RCX: 00007f3fb3cb2159
[  248.160748][ T6436] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000
[  248.168770][ T6436] RBP: 00007f3fb3d4906b R08: 0000200000ffd000 R09: 0000000000000000
[  248.176792][ T6436] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  248.184812][ T6436] R13: 00007f3fb3f3a038 R14: 00007f3fb3f39fa0 R15: 00007ffc1cf4b8d8
[  248.192847][ T6436]  </TASK>
[  248.465850][ T6445] loop5: detected capacity change from 0 to 512
[  248.746948][ T6445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  248.760385][ T6445] System zones: 1-12
[  248.769433][ T6445] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.535: missing EA_INODE flag
[  248.788488][ T6445] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.535: error while reading EA inode 12 err=-117
[  248.818785][ T6445] EXT4-fs (loop5): 1 orphan inode deleted
[  248.827229][ T6445] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  248.846982][ T4273] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  249.946534][ T6462] loop1: detected capacity change from 0 to 512
[  250.473266][ T4273] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.703799][ T4273] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.729511][ T4273] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00
[  250.740738][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.806514][ T4273] metro_usb 5-1:1.0: Metrologic USB to Serial converter detected
[  250.874719][ T4273] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  251.042716][ T6440] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90
[  251.082731][ T4273] usb 5-1: USB disconnect, device number 4
[  251.111612][ T4273] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  251.145536][ T4273] metro_usb 5-1:1.0: device disconnected
[  252.082208][ T6478] 9pnet_virtio: no channels available for device syz
[  252.294214][ T6488] loop4: detected capacity change from 0 to 512
[  252.363755][ T6491] loop5: detected capacity change from 0 to 512
[  252.467436][ T6488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  252.518995][ T6488] System zones: 1-12
[  252.534336][ T6491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  252.582866][ T6491] System zones: 1-12
[  252.610571][ T6496] netlink: 'syz.1.553': attribute type 10 has an invalid length.
[  252.618462][ T6491] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.552: missing EA_INODE flag
[  252.641879][ T6491] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.552: error while reading EA inode 12 err=-117
[  252.660931][ T6488] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.549: missing EA_INODE flag
[  252.671750][ T6491] EXT4-fs (loop5): 1 orphan inode deleted
[  252.692530][ T6488] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.549: error while reading EA inode 12 err=-117
[  252.725550][ T6496] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  252.750155][ T6491] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  252.764679][ T6488] EXT4-fs (loop4): 1 orphan inode deleted
[  252.770464][ T6488] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  252.853243][ T6496] netlink: 14 bytes leftover after parsing attributes in process `syz.1.553'.
[  253.005156][ T6496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.093388][ T6496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.311476][ T6496] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  253.335761][ T6496] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  253.394224][ T6496] bond0 (unregistering): Released all slaves
[  253.989401][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.997891][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.089344][ T6515] loop5: detected capacity change from 0 to 512
[  255.526502][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.540934][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  256.523146][ T6502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.589885][ T6502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.064635][ T6502] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.079233][ T6502] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.088498][ T6502] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.103002][ T6502] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.382250][ T6502] syz.3.555 (6502) used greatest stack depth: 19920 bytes left
[  257.735533][ T6550] loop2: detected capacity change from 0 to 512
[  257.753579][ T6549] loop1: detected capacity change from 0 to 512
[  257.838685][ T6527] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  257.871632][ T6550] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  257.889915][ T6549] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  257.906544][ T6550] System zones: 1-12
[  257.921919][ T6549] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  257.944719][ T6550] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.566: missing EA_INODE flag
[  257.949301][ T4273] Bluetooth: hci2: command 0x0406 tx timeout
[  257.963714][ T6549] System zones: 0-1, 15-15, 18-18, 34-34
[  257.970554][ T6549] EXT4-fs (loop1): orphan cleanup on readonly fs
[  257.981733][ T6549] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  257.992289][ T6549] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  258.029384][ T6550] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.566: error while reading EA inode 12 err=-117
[  258.048459][ T6549] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  258.055543][ T6550] EXT4-fs (loop2): 1 orphan inode deleted
[  258.067496][ T4199] Bluetooth: Wrong link type (-22)
[  258.074502][ T6550] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  258.102885][ T6549] EXT4-fs (loop1): 1 truncate cleaned up
[  258.108688][ T6549] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  259.434578][ T6527] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  259.450058][ T6527] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  259.460547][ T6527] usb 6-1: config 0 interface 0 has no altsetting 0
[  259.632765][ T6527] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  259.652094][ T6527] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  259.667475][ T6571] overlayfs: upper fs does not support file handles, falling back to index=off.
[  259.677903][ T6527] usb 6-1: Product: syz
[  259.697591][ T6527] usb 6-1: Manufacturer: syz
[  259.702262][ T6527] usb 6-1: SerialNumber: syz
[  259.735024][ T6527] usb 6-1: config 0 descriptor??
[  259.785582][ T6527] hub 6-1:0.0: bad descriptor, ignoring hub
[  259.801915][ T6527] hub: probe of 6-1:0.0 failed with error -5
[  259.825114][ T6527] usb 6-1: selecting invalid altsetting 0
[  260.035751][ T6578] loop4: detected capacity change from 0 to 512
[  261.381208][ T6580] 9pnet_virtio: no channels available for device syz
[  262.987466][ T6527] usb 6-1: USB disconnect, device number 2
[  263.395071][ T6597] program syz.4.578 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  263.558584][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.629325][ T6603] loop3: detected capacity change from 0 to 512
[  263.734004][ T6603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  263.770216][ T6603] System zones: 1-12
[  263.791297][ T6603] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.582: missing EA_INODE flag
[  263.846995][ T6603] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.582: error while reading EA inode 12 err=-117
[  263.905169][ T6603] EXT4-fs (loop3): 1 orphan inode deleted
[  263.910980][ T6603] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  264.097667][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.585'.
[  264.114037][ T6519] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  264.142787][ T6527] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  264.382544][ T6519] usb 3-1: Using ep0 maxpacket: 32
[  264.794953][ T6519] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  264.816534][ T6519] usb 3-1: config 0 has no interface number 0
[  264.902218][ T6629] loop5: detected capacity change from 0 to 512
[  265.012698][ T6519] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  265.054583][ T6519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.081421][ T6519] usb 3-1: Product: syz
[  265.088564][ T6519] usb 3-1: Manufacturer: syz
[  265.093312][ T6527] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.093356][ T6527] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  265.093382][ T6527] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  265.093424][ T6527] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  265.126981][ T6519] usb 3-1: SerialNumber: syz
[  265.161976][ T6519] usb 3-1: config 0 descriptor??
[  265.218117][   T26] audit: type=1800 audit(1789701080.885:4): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.589" name="attr_allow_any_host" dev="configfs" ino=40788 res=0 errno=0
[  265.232743][ T6527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.244297][ T6519] smsc95xx v2.0.0
[  265.304175][ T6527] spcp8x5 2-1:1.0: required endpoints missing
[  265.511346][ T6520] usb 2-1: USB disconnect, device number 3
[  265.993829][ T6642] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2055 out of range (51000000..2150000000)
[  267.200750][ T6659] loop1: detected capacity change from 0 to 512
[  267.251559][ T6659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  267.330404][ T6659] System zones: 1-12
[  267.352700][ T6519] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  267.373780][ T6659] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.599: missing EA_INODE flag
[  267.386013][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'.
[  267.426415][ T6519] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  267.438590][ T6662] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5
[  267.467550][ T6659] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.599: error while reading EA inode 12 err=-117
[  267.485220][ T6662] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5
[  267.495361][ T6519] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  267.522049][ T6659] EXT4-fs (loop1): 1 orphan inode deleted
[  267.535214][ T6659] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  267.551523][ T6519] smsc95xx: probe of 3-1:0.67 failed with error -71
[  267.560303][ T6662] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  267.597611][ T6519] usb 3-1: USB disconnect, device number 7
[  268.095122][ T6519] nvmet: connect request for invalid subsystem testsubsys!
[  268.110989][ T6679] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  268.172695][ T6686] ucma_write: process 221 (syz.5.605) changed security contexts after opening file descriptor, this is not allowed.
[  268.307699][ T6685] loop4: detected capacity change from 0 to 256
[  268.334678][   T26] audit: type=1800 audit(1789701084.005:5): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.609" name="no_out_endpoint" dev="configfs" ino=41632 res=0 errno=0
[  268.363657][ T6685] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  268.912617][ T6710] loop1: detected capacity change from 0 to 512
[  268.967033][ T6710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  268.994656][ T6710] System zones: 1-12
[  269.079716][ T6721] loop4: detected capacity change from 0 to 512
[  270.713098][ T6710] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.618: missing EA_INODE flag
[  270.771714][ T6710] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.618: error while reading EA inode 12 err=-117
[  271.012655][ T6710] EXT4-fs (loop1): 1 orphan inode deleted
[  271.018710][ T6710] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  271.713881][ T6731] loop2: detected capacity change from 0 to 256
[  271.754410][ T6731] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  272.132498][ T6528] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  272.763502][ T6528] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  272.860033][ T6528] usb 6-1: config 0 has no interface number 0
[  272.927291][ T6764] loop3: detected capacity change from 0 to 512
[  272.967309][ T6528] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  273.527832][ T6771] loop1: detected capacity change from 0 to 512
[  273.576897][ T6775] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  273.584231][ T6528] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  273.604424][ T6528] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.646153][ T6528] usb 6-1: Product: syz
[  273.650451][ T6528] usb 6-1: Manufacturer: syz
[  273.656962][ T6771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  273.687827][ T6771] System zones: 1-12
[  273.701735][ T6528] usb 6-1: SerialNumber: syz
[  273.707517][ T6771] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.637: missing EA_INODE flag
[  273.720121][ T6771] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.637: error while reading EA inode 12 err=-117
[  273.751043][ T6771] EXT4-fs (loop1): 1 orphan inode deleted
[  273.767541][ T6771] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  273.783100][ T6528] usb 6-1: config 0 descriptor??
[  273.857233][ T6528] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  274.112211][ T6519] usb 6-1: USB disconnect, device number 3
[  274.133003][ T6519] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  274.406290][ T6796] autofs4:pid:6796:autofs_fill_super: called with bogus options
[  275.018028][ T6824] loop3: detected capacity change from 0 to 512
[  275.133044][ T6832] FAULT_INJECTION: forcing a failure.
[  275.133044][ T6832] name failslab, interval 1, probability 0, space 0, times 0
[  275.148821][ T6832] CPU: 1 PID: 6832 Comm: syz.1.658 Not tainted syzkaller #0
[  275.149815][ T6824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  275.156176][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  275.156247][ T6832] Call Trace:
[  275.156257][ T6832]  <TASK>
[  275.156268][ T6832]  dump_stack_lvl+0x188/0x250
[  275.156299][ T6832]  ? show_regs_print_info+0x20/0x20
[  275.156321][ T6832]  ? load_image+0x410/0x410
[  275.156345][ T6832]  ? __lock_acquire+0x7b50/0x7b50
[  275.156378][ T6832]  should_fail+0x383/0x4b0
[  275.204580][ T6832]  should_failslab+0x5/0x20
[  275.209125][ T6832]  slab_pre_alloc_hook+0x51/0xc0
[  275.214111][ T6832]  __kmalloc_node+0x6d/0x3a0
[  275.218730][ T6832]  ? kvmalloc_node+0x84/0x130
[  275.223437][ T6832]  kvmalloc_node+0x84/0x130
[  275.227961][ T6832]  __list_lru_init+0x4cb/0xac0
[  275.232759][ T6832]  alloc_super+0x787/0x970
[  275.237199][ T6832]  ? kill_mtd_super+0x60/0x60
[  275.241936][ T6832]  sget_fc+0x2d4/0x6f0
[  275.246039][ T6832]  ? mtd_test_super+0x1d0/0x1d0
[  275.250922][ T6832]  ? jffs2_reconfigure+0x310/0x310
[  275.256073][ T6832]  mtd_get_sb+0x5a/0x2b0
[  275.260335][ T6832]  ? mtd_get_sb_by_nr+0x7c/0xa0
[  275.265206][ T6832]  get_tree_mtd+0x5e2/0x760
[  275.269742][ T6832]  ? jffs2_reconfigure+0x310/0x310
[  275.274876][ T6832]  ? mtd_proc_show+0x270/0x270
[  275.279663][ T6832]  ? apparmor_capable+0x12c/0x190
[  275.284711][ T6832]  ? bpf_lsm_capable+0x5/0x10
[  275.289396][ T6832]  ? security_capable+0x85/0xb0
[  275.294271][ T6832]  vfs_get_tree+0x88/0x270
[  275.298708][ T6832]  do_new_mount+0x247/0xa40
[  275.303235][ T6832]  __se_sys_mount+0x2e3/0x3d0
[  275.308020][ T6832]  ? __x64_sys_mount+0xc0/0xc0
[  275.312805][ T6832]  ? lockdep_hardirqs_on+0x94/0x140
[  275.318044][ T6832]  ? __x64_sys_mount+0x1c/0xc0
[  275.322830][ T6832]  do_syscall_64+0x4c/0xa0
[  275.327287][ T6832]  ? clear_bhb_loop+0x30/0x80
[  275.331980][ T6832]  ? clear_bhb_loop+0x30/0x80
[  275.336691][ T6832]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  275.342602][ T6832] RIP: 0033:0x7fd63414e159
[  275.347030][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.368224][ T6832] RSP: 002b:00007fd6323a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  275.376786][ T6832] RAX: ffffffffffffffda RBX: 00007fd6343d5fa0 RCX: 00007fd63414e159
[  275.384867][ T6832] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200
[  275.392975][ T6832] RBP: 00007fd6341e506b R08: 0000000000000000 R09: 0000000000000000
[  275.400954][ T6832] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[  275.408934][ T6832] R13: 00007fd6343d6038 R14: 00007fd6343d5fa0 R15: 00007ffe49784ae8
[  275.417019][ T6832]  </TASK>
[  275.420140][    C1] vkms_vblank_simulate: vblank timer overrun
[  275.427198][ T6824] System zones: 1-12
[  275.432614][ T6824] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.657: missing EA_INODE flag
[  275.502065][ T6824] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.657: error while reading EA inode 12 err=-117
[  275.562758][ T6824] EXT4-fs (loop3): 1 orphan inode deleted
[  275.568832][ T6824] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  275.815034][ T6845] overlayfs: conflicting options: userxattr,metacopy=on
[  277.234673][ T6874] netdevsim netdevsim1 ªªªªª»: renamed from netdevsim0
[  277.293273][ T6880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.677'.
[  277.429740][ T6889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.680'.
[  277.465002][ T6891] bond0: invalid ARP target specified
[  277.481998][ T6893] loop3: detected capacity change from 0 to 512
[  277.541941][ T6895] 9pnet_virtio: no channels available for device syz
[  277.631824][ T6893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  277.640760][ T6893] System zones: 1-12
[  277.646373][ T6893] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.681: missing EA_INODE flag
[  277.660043][ T6893] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.681: error while reading EA inode 12 err=-117
[  277.674397][ T6893] EXT4-fs (loop3): 1 orphan inode deleted
[  277.680190][ T6893] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  277.731392][ T6903] loop4: detected capacity change from 0 to 256
[  277.910836][ T6903] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  278.719922][ T6915] loop9: detected capacity change from 0 to 7
[  278.742688][ T6915] Dev loop9: unable to read RDB block 7
[  278.749025][ T6915]  loop9: AHDI p1
[  278.790341][ T6915] loop9: partition table partially beyond EOD, truncated
[  279.138159][ T6937] 
[  279.140567][ T6937] ======================================================
[  279.147605][ T6937] WARNING: possible circular locking dependency detected
[  279.154667][ T6937] syzkaller #0 Not tainted
[  279.159112][ T6937] ------------------------------------------------------
[  279.166160][ T6937] syz.3.698/6937 is trying to acquire lock:
[  279.172098][ T6937] ffffffff8cf514a8 (serio_mutex){+.+.}-{3:3}, at: drvctl_store+0x2a/0xae0
[  279.180687][ T6937] 
[  279.180687][ T6937] but task is already holding lock:
[  279.188096][ T6937] ffff888025aa7da0 (kn->active#342){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500
[  279.197818][ T6937] 
[  279.197818][ T6937] which lock already depends on the new lock.
[  279.197818][ T6937] 
[  279.203186][ T6939] loop2: detected capacity change from 0 to 256
[  279.208250][ T6937] 
[  279.208250][ T6937] the existing dependency chain (in reverse order) is:
[  279.208263][ T6937] 
[  279.208263][ T6937] -> #1 (kn->active#342){++++}-{0:0}:
[  279.231161][ T6937]        __kernfs_remove+0x5da/0xcb0
[  279.236572][ T6937]        kernfs_remove_by_name_ns+0x91/0x100
[  279.242625][ T6937]        sysfs_remove_group+0xfd/0x290
[  279.248122][ T6937]        sysfs_remove_groups+0x50/0xa0
[  279.253622][ T6937]        device_remove_attrs+0xc2/0x140
[  279.259208][ T6937]        device_del+0x637/0xa80
[  279.264100][ T6937]        serio_destroy_port+0x34a/0x470
[  279.269766][ T6937]        serio_unregister_port+0x12c/0x150
[  279.274149][ T6943] loop5: detected capacity change from 0 to 512
[  279.275607][ T6937]        serport_ldisc_read+0x4ec/0x5b0
[  279.288123][ T6937]        tty_read+0x2af/0x5c0
[  279.292845][ T6937]        aio_read+0x33a/0x490
[  279.297592][ T6937]        io_submit_one+0x68b/0x1310
[  279.302818][ T6937]        __se_sys_io_submit+0x19d/0x310
[  279.308371][ T6937]        do_syscall_64+0x4c/0xa0
[  279.313512][ T6937]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  279.319957][ T6937] 
[  279.319957][ T6937] -> #0 (serio_mutex){+.+.}-{3:3}:
[  279.327268][ T6937]        __lock_acquire+0x2c66/0x7b50
[  279.332816][ T6937]        lock_acquire+0x19e/0x400
[  279.337848][ T6937]        __mutex_lock_common+0x1e5/0x2400
[  279.343595][ T6937]        mutex_lock_interruptible_nested+0x17/0x20
[  279.350105][ T6937]        drvctl_store+0x2a/0xae0
[  279.355144][ T6937]        kernfs_fop_write_iter+0x3a8/0x500
[  279.360969][ T6937]        vfs_write+0x748/0xd70
[  279.365751][ T6937]        ksys_write+0x153/0x260
[  279.370603][ T6937]        do_syscall_64+0x4c/0xa0
[  279.375561][ T6937]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  279.381984][ T6937] 
[  279.381984][ T6937] other info that might help us debug this:
[  279.381984][ T6937] 
[  279.392211][ T6937]  Possible unsafe locking scenario:
[  279.392211][ T6937] 
[  279.399663][ T6937]        CPU0                    CPU1
[  279.405030][ T6937]        ----                    ----
[  279.410394][ T6937]   lock(kn->active#342);
[  279.414914][ T6937]                                lock(serio_mutex);
[  279.421506][ T6937]                                lock(kn->active#342);
[  279.428630][ T6937]   lock(serio_mutex);
[  279.432697][ T6937] 
[  279.432697][ T6937]  *** DEADLOCK ***
[  279.432697][ T6937] 
[  279.440933][ T6937] 4 locks held by syz.3.698/6937:
[  279.445988][ T6937]  #0: ffff88807f5b4af0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  279.455236][ T6937]  #1: ffff888057c8c460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70
[  279.464125][ T6937]  #2: ffff888060a24888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500
[  279.473880][ T6937]  #3: ffff888025aa7da0 (kn->active#342){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500
[  279.483997][ T6937] 
[  279.483997][ T6937] stack backtrace:
[  279.490076][ T6937] CPU: 0 PID: 6937 Comm: syz.3.698 Not tainted syzkaller #0
[  279.497360][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  279.507435][ T6937] Call Trace:
[  279.510732][ T6937]  <TASK>
[  279.513660][ T6937]  dump_stack_lvl+0x188/0x250
[  279.518519][ T6937]  ? load_image+0x410/0x410
[  279.523038][ T6937]  ? show_regs_print_info+0x20/0x20
[  279.528256][ T6937]  ? print_circular_bug+0x12b/0x1a0
[  279.533578][ T6937]  check_noncircular+0x296/0x330
[  279.538528][ T6937]  ? add_chain_block+0x9b0/0x9b0
[  279.543483][ T6937]  ? lockdep_lock+0xf1/0x1f0
[  279.548133][ T6937]  ? mark_lock+0x94/0x320
[  279.552518][ T6937]  ? _find_first_zero_bit+0xd1/0xf0
[  279.557743][ T6937]  __lock_acquire+0x2c66/0x7b50
[  279.562614][ T6937]  ? verify_lock_unused+0x140/0x140
[  279.567821][ T6937]  ? mark_lock+0x94/0x320
[  279.572176][ T6937]  ? mark_lock+0x94/0x320
[  279.576517][ T6937]  lock_acquire+0x19e/0x400
[  279.581209][ T6937]  ? drvctl_store+0x2a/0xae0
[  279.585806][ T6937]  ? __might_sleep+0xf0/0xf0
[  279.590425][ T6937]  ? read_lock_is_recursive+0x10/0x10
[  279.595807][ T6937]  ? verify_lock_unused+0x140/0x140
[  279.601028][ T6937]  __mutex_lock_common+0x1e5/0x2400
[  279.606245][ T6937]  ? drvctl_store+0x2a/0xae0
[  279.610841][ T6937]  ? kernfs_fop_write_iter+0x14f/0x500
[  279.616322][ T6937]  ? drvctl_store+0x2a/0xae0
[  279.620931][ T6937]  ? mutex_lock_io_nested+0x60/0x60
[  279.626136][ T6937]  ? read_lock_is_recursive+0x10/0x10
[  279.631529][ T6937]  ? sysfs_kf_read+0x350/0x350
[  279.636304][ T6937]  mutex_lock_interruptible_nested+0x17/0x20
[  279.642300][ T6937]  drvctl_store+0x2a/0xae0
[  279.646750][ T6937]  ? sysfs_kf_write+0x183/0x2a0
[  279.651927][ T6937]  ? sysfs_kf_read+0x350/0x350
[  279.656706][ T6937]  kernfs_fop_write_iter+0x3a8/0x500
[  279.662002][ T6937]  vfs_write+0x748/0xd70
[  279.666284][ T6937]  ? file_end_write+0x250/0x250
[  279.671138][ T6937]  ? mutex_lock_nested+0x17/0x20
[  279.676090][ T6937]  ? __fdget_pos+0x2bf/0x370
[  279.680696][ T6937]  ? ksys_write+0x70/0x260
[  279.685115][ T6937]  ksys_write+0x153/0x260
[  279.689464][ T6937]  ? __ia32_sys_read+0x80/0x80
[  279.694274][ T6937]  ? lockdep_hardirqs_on+0x94/0x140
[  279.699503][ T6937]  do_syscall_64+0x4c/0xa0
[  279.703921][ T6937]  ? clear_bhb_loop+0x30/0x80
[  279.708622][ T6937]  ? clear_bhb_loop+0x30/0x80
[  279.713314][ T6937]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  279.719227][ T6937] RIP: 0033:0x7f0858bb2159
[  279.723653][ T6937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.743278][ T6937] RSP: 002b:00007f0856e0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  279.751702][ T6937] RAX: ffffffffffffffda RBX: 00007f0858e39fa0 RCX: 00007f0858bb2159
[  279.759681][ T6937] RDX: 0000000000000003 RSI: 0000200000000800 RDI: 0000000000000003
[  279.767657][ T6937] RBP: 00007f0858c4906b R08: 0000000000000000 R09: 0000000000000000
[  279.775628][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.783600][ T6937] R13: 00007f0858e3a038 R14: 00007f0858e39fa0 R15: 00007ffff92b4cd8
[  279.791585][ T6937]  </TASK>
[  279.874306][ T6939] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  279.933546][ T6943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  280.095186][ T6943] System zones: 1-12
[  280.301110][ T6943] EXT4-fs (loop5): ext4_process_orphan: deleting unreferenced inode 15
[  280.351593][ T6937] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11
[  280.374992][ T6943] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.701: missing EA_INODE flag
[  280.433693][ T6943] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.701: error while reading EA inode 12 err=-117
[  280.477351][ T6943] EXT4-fs (loop5): 1 orphan inode deleted
[  280.487845][ T6943] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.