last executing test programs:

6m51.653623026s ago: executing program 2 (id=586):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$eJzs3cFqE0EYB/Bv23UbxEPP4mHBi6egPkFUWiguCMoe9KRQvbQi2MvqqW/hG/gqvo7k1FskTmhoWcEetrvJ/n6XfOx/wnwzgcwpk/cPPp8cfzn79PPXj5hMsshnMYuLLPZjJ3YjOY8rstanAMDGuFgs4vci+Y/hz2+hJQCgYzc8/wGALeD8B4Dxcf4DwPi8efvu5bOqOnhdlpOI+XlTN3V6TfnhUXXwuPxrf/2uedPUu5f5k5SXV/M7cXeVP23Ni3j0MOXL7MWrKuV5GtHUe3Hc1vAs62AXAAAAAAAAAAAAAAAAAAAAAADgdk3LS633+0ynxT/yVB0eFatn1+/3yeN+3jJh0ckyAAAAAAAAAAAAAAAAAAAAYKOdfft+8uH09OPX4RbzYbQxtOJe55/g3mqGvle67cVynwfQxrWixy8lAAAAAAAAAAAAAAAAAAAYqfWPfvvuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6s/7//+6K5Tw7fS8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR+xMAAP//+cFD/w==")
truncate(&(0x7f0000000080)='./file1\x00', 0xa47b)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

6m51.15510225s ago: executing program 2 (id=589):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x1, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000206, 'syz1\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x80, 0x2, 0xfe, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, @empty, [0x49fc5045ed3ae8ef, 0xff000000, 0x6675841787364651, 0xff], [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0x8000007f, 0xff], 0x202, 0x8}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
getsockname$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@overriderock}, {@check_strict}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {}, {@block={'block', 0x3d, 0x200}}, {@map_normal}, {@overriderock}, {@map_normal}, {}, {@cruft}, {@unhide}, {@check_strict}]}, 0x1, 0xa03, &(0x7f0000001680)="$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")
execve(0x0, 0x0, 0x0)

6m49.175477975s ago: executing program 2 (id=591):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"})

6m48.519725787s ago: executing program 2 (id=598):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$eJzs289vFFUcAPDvTH8ov+xK8Ac/lCoaiT9aWhA5eNFo4kETEz3gsbYLqSzU0JoIIQrG4NGQeDceTfgLPOnFqCejV/VsSIjhAnpaM7szdLvslu2m7Zbu55MMvDfz2ve+nfdm38zbCaBvjWb/JBHbI+KPiBipZ5cWGK3/d+vGhel/b1yYTqJafeefpFbu5o0L00XR4ue2FZnBiPTzJPa2qHf+3PlTU5VK+WyeH184/eH4/LnzL8yenjpZPlk+M3ns2JHDEy8dnXxxVeLM4rq555O5fbvfeO/KW9PHr7z/89WkiL8pjk4M3L3I6HIHn65WV1LdhrejIZ0M9rAhrMhAfZjGUG38j8RALJ68kXj9s542DlhT1Wq1+nD7w1drBYBNKjHEoU8VH/TZ/W+xrdPUY0O4/kr9BiiL+1a+1Y8MRpqXGWq6v11NoxFx/OJ/X2dbND+H2LJGlQIAfe37bP7zfKv5XxqNz4UeyNdQShHxYETsjIijEbErIh6KqJV9JCIeXWH9zYskd84/02tdBdahbP73cr62tXT+V8z+ojSQ53bU4h9KTsxWyoeyv8lv++slZivliWXq+OG1379sd6xx/pdtWf3FXDBvx7XB+5b+zMzUwlTXATe5filiz2Cr+JPbKwFJROyOiD1d1jH77Lf72h1rE/9wR794FdaZqt9EPFM//xejKf5Csvz65Pj9USkfGs97RYtlvV9+vfx2u/rvfv7X1vVLUfSuO85/3V+lpHG9dn7ldVz+84u295Td9v/h5N0l+z6eWlg4OxExnLxZy5ca9082lZtcLJ/1/4MHWo//nbH4l9gbEVknfiwiHo+I/Xnbn4iIJyPiwDLx//TqUx90H//ayuKfaXn9u93/m87/YmI4mve0Tgyc+vG7JZWWVhJ/dv6P1FIH8z2dXP86aVd3vRkAAADuPWlEbI8kHbudTtOxsfp3+HfF1rQyN7/w3Im5j87M1N8RKMVQWjz/HGl4HjqR39YX+cn8u8VF/nD+3PirgS21/Nj0XGWm18FDn9vWZvxn/u7gJRfgHte8jra1R+0A1p/3NaF/Gf/QnxLjH/pai/Hv1TPoE60+/z/tQTuA9dc0/pdd9jMxgM3F/T/0L+Mf+lf78Z+uazuAdTW/Je7+kvzmSGTXsg3QjM2SiHRDNENijRK9vjIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsjv8DAAD//17S444=")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

6m48.085154559s ago: executing program 2 (id=603):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x9, 0x0)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d10, 0x0, 0x51c, 0x0)

6m45.544225232s ago: executing program 2 (id=625):
fcntl$setsig(0xffffffffffffffff, 0xa, 0x31)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=")
r6 = socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_IO_FLUSHER(0x34, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b92"], 0x10}}, 0x0)

6m44.856841485s ago: executing program 32 (id=625):
fcntl$setsig(0xffffffffffffffff, 0xa, 0x31)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
r6 = socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_IO_FLUSHER(0x34, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b92"], 0x10}}, 0x0)

3m54.017742672s ago: executing program 3 (id=1205):
syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodiscard}, {@nolargeio}, {@gquota}]}, 0x1, 0x988a, &(0x7f00000185c0)="$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")
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r0, &(0x7f00000002c0))

3m50.506071892s ago: executing program 3 (id=1223):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r0, r0, 0x0, 0x200000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x18000000, 0x1000000})

3m46.884705177s ago: executing program 3 (id=1237):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m46.556188383s ago: executing program 3 (id=1238):
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f0000000180)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@discard_size={'discard', 0x3d, 0xfff}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x6318, &(0x7f0000006600)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42900, 0xc8)
getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006)

3m43.681515043s ago: executing program 3 (id=1252):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0)

3m42.120821858s ago: executing program 3 (id=1260):
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usbip_server_init(0x1)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, <r7=>r5})
r8 = syz_open_dev$dri(0x0, 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7})
close_range(r4, 0xffffffffffffffff, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bind$netrom(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159})
listen(0xffffffffffffffff, 0x80)

3m41.190716573s ago: executing program 33 (id=1260):
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usbip_server_init(0x1)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, <r7=>r5})
r8 = syz_open_dev$dri(0x0, 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7})
close_range(r4, 0xffffffffffffffff, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bind$netrom(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159})
listen(0xffffffffffffffff, 0x80)

1m49.526458313s ago: executing program 6 (id=1651):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x570, 0x0, 0x4}]})

1m48.384035849s ago: executing program 6 (id=1654):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x40000)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$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")

1m47.043416443s ago: executing program 6 (id=1656):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x10001, 0xffffffffffffffff})

1m45.335208336s ago: executing program 6 (id=1671):
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f0000000180)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@discard_size={'discard', 0x3d, 0xfff}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x6318, &(0x7f0000006600)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxdaV7esb2dPW4fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1dar3DA7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTns+F2Qs/81i9/qOadNZmueYzOvxtRX9eG5Kf1bm1IdFkvPvNfO/stM+Sssddv5PWDGY0jAt/9HOpU+dk/PvN/NvOGL5T7UVvYn5d1XOf3Cg/PvyBwAAAACABZb//n+i5eO/S4+/Kfuy1/HftTn1AQAAAAAAAACetIOO/zdojP+3y/h/AAAAsLCqz+qV3x1/eNu072Krbr9cRDzTWB7omHSxzGrb/QAAAAAAAAAAAACALhnsnMN7uYgYRsQzq6tlWVY/dc36oB53/aOu69sPXdb2kzwAAOz4+HjjWv4iYjkiLqfv+huurq6W5fLKarlarizl97OjpeVypfa5Nk+r25ZG+3hDPBiV1S9brq1XN+vz8qz25u+r7mtU9vfRsfloMXAAiIidV6P7016R/uf16mgqy2ej5Tc5HBF77P8cUfZ/9qPtxykAAABw+MqyLIv0dd4n0zH/XtudAgDmIr/+N48LqNVqtVqtfvrqunKyu/UiIjbr61TvGQzHDwBHzGZ80nYXaJH8O20QES+03QlgoRVtd4BDcf/BnfUi5VvUXw/S+O75XJCx/DeL7fXy+pOmszTPMZnX42sr+vHclP48P6c+LJKcf6+Z/5Wd9lFa7vHzL8f+TNjWOUbT8q+280QL/Wlbzr/fzL/hsPf/edmK3sT8uyrnPzhQ/n35AwAAAADAAst//z+xUMd/R4+6OTPtdfx3beIah9cXAAAAAAAAAHhS7j+4s56ve83H/78wYTnXfz6dcv6F/Dsp599r5P/VxnL92vy9tx/m/+8Hd9b/eOtfn8/T/ea/lGeK9Mgq0iOiSPdUDNL0cbbus7aG/VF1T8Oi1x+kc37K4btxLa7HRpwdW7aX/j8etp8ba696OtxuL/s77efH2ge77Xn9C2Ptw3R2UbmS20/Hevw8rsc72+1V29KM7V+e0V7OaM/59+3/nZTzH9R+qvxXU3vRmFbufdT7zH5fn066n7euffE3Zw9/c2baiv7uttVV2/dSC/3Z/j85Nopf3ty4cfr21Vu3bpyLNBm79XykyROW8x+mn93n/5d32vPzfn1/vffR6MD5L4qtGEzN/+XafLW9r8y5b23I+Y/ST87/ndQ+ef8/yvlP3/9fbaE/AAAAAAAAAAAAAAAAsJeyLLcvEX0rIi6m63/aujYTAJifYe31v0xy27zq/pzvT60+tLoo5nF/xcJsbwv1p+Wc738wfkPb269WP4m6rpzszXoREX+rr1O9Z/j1pF8GACyyTyPin213gtbIv8Py9/1V01NtdwaYq5sffPjTq9evb9y42XZPAAAAAAAAAIBHlcf/XKuN/3yqLMu7jeXGxn99O9Yed/zPfDnNwwFGpwxU3T/4Nu1lqzfq92rDjb8Y08b/Hu7O7TX+92DG/Q1ntI9mtC/NaF+e0T7xQo+anP+LtfHOT0XEycbw610Y/7U55n0X5Pxfqj2eq/y/0liunn/5+6Ocf28s/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/5tsceHK+efx752Hmi35Pxz5vLvlpz/l1It/27J+X851fLvlpx/fr8n/27J+efPPvLvlpz/K6mWf7fk/L+Wavl3S87/1VTLv1ty/l9Ptfy7Jef/Wqrl3y05/9Opln+35PzPpHqf+a8cdr+Yj5x/PsJl/++WnH8+s0H+3ZLzP59q+XdLzv9CquXfLTn/11Mt/27J+X8j1fLvlpz/xVTLv1ty/t9Mtfy7Jed/KdXy75ac/7dSLf9uyfl/O9Xy75ac/xupln+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/81Uy79bHn7/vxkzZszkmbafmQAAAAAAAAAAAACApnmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2cHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5zvp+4Gf25rUDiYGQv5O/gY1jkpBssutLfKF1MeHacCuBUOgF2/WuzYJveO0SaCSbBkokjIoq2oZKbQGhNm8q/IIXtAKUF6gVUiVoX9A3iAqVFxEKKCBVohVkqznneZ6dmZ3Lrne9O3PO5yPZP++ZM3OeOfOcM/vb9XcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI1uf93sp2pZltX/5H9tzbIX1P+9eWJrvuzVGz1CAAAAYLV+lf/93E1pweFl3KlhnX95+Xe+urCwsJC9d/jPRz+3sJBumMiy0U1Zlt8WXf3h+2qN6wSPZ+O1oYavh3psfrjH7SM9bh/tcftYj9s39bh9vMftS3bAEpuLn8fkD7Yz/+fWYpdmN2ej+W0729zr8dqmoaH4s5xcLb/PwuiJbC47lc1m003rF+vW8vW/fnt9W2/O4raGGra1vT5DfvbY8TiGWtjHO5u2tfiY0U9em038/GePHf+7C8/e2q723A1Nj1eM8+4d9XF+IiwpxlrLNqV9Esc51DDO7W1ek+Gmcdby+9X/3TrO55Y5zuHFYa6r1td8PBvK//3dfD+NNP5YL+2n7WHZL+7Isuzy4rBb11myrWwo29K0ZGjx9RkvZmT9MepT6cXZyIrm6e3LmKf1OrOzeZ62HhPx9b893G+kwxgaX6affHys4XX/5cK1zNOo/qw7HSutc3Ctj5V+mYNxXnw3f9JPtJ2DO8Pzf+zOznOw7dxpMwfT826Ygzt6zcGhseF8zOlFqOX3WZyDu5rWH863VMvrM3d2n4NTF06fm5r/6Mfumzt97OTsydkze3btmt6zb9+BAwemTsydmp0u/r7Gvd3/tmRD6RjYEfZdPAbualm3caoufHFsyfn3Wo/D8S7H4daWddf6OBxpfXK19Tkgl87p4th4d32nj18ZyjocY/nrc8/qj8P0vBuOw5GG47Dte0qb43BkGcdhfZ1z9yzve5aRhj/txtD5vWB1c3Brwxxs/X6kdQ6u9fcj/TIHx8O8+P49nd8LtofxPjG50u9HhrMtTW+qQ4tPN5x76kvS9/vjB/LSbl7eVr/hhrHs4vzs+fsfPXbhwvldWSjr4iUNc6V1vm5peE7Zkvk6tOL5enju5U/c1mb51rCvxu+r/zXe8bWqr7P3/u6vVf7u1n5/Ni3dnYWyxtZ7f7Z7N6/vz7Es+/y3Pv7wNx77/Os67s96v/mJqdV/L5760obz72iH82/s+58vtpce6vHh0ZHi+B1Oe2e06Xzc/FKN5OeuWr7t56aWdz4eDX/W+3x8c5fz8baWddf6fDza+uTi+bjW66cdq9P6eo6HeXJquvv5uL7Ott0rnZMjS+Zk4zF2R6i1sP9fFTqFdApvmDud5m3a1sjIaHheI3ELzfN0T9P6o6E3q2/rqd3hm8I0yuXN07vvKNYfbrhftF7zdKJl3bWep+lnX53maa3XT9+uTevrOR7mxc17us/T+jpP7139uXNz/GfDuXOs1xwcHR6rj3k0TcL8fJ8tbI5z8P7seHY2O5XN5LeO5fOplm9r8oHlnSvHwp/1Pldu6zIH725Zd63nYHof6zT3aiNLn/waaH09x8O8ePKB7nOwvs7r91/D965NS5rPlXeHJWmdhu9dW3++1ulnXre17KbrNVdGwji/tb/7z2br65w6sNI+s/t+ujcsuaHNfmo9fjsdUzPZ+uynbWGczx7ovJ/q46mv87mDy5xPh7Msu/ThB/Of94bfr1y6+L2vNv3epd3vdC59+MGfvvDEP69k/AAMvueLsqV4r2v4Idpyfv8PAAAADITY9w+Fmuj/AQAAoDRi3x//V3ii/wcAAIDSiH3/SKhJGfr/P+69yrbXPzv3/KUsJfMXgnh72g0PFevFjOt0+HpiYVF9+YNfnv3vf7q0vOENZVn2y4f+qO362x6K4ypMhHFefUPz8iW+et+ytn30kUtpu4359S+Ex4/PZ7nToF0EdzrLsq/f9Jl8OxPvu5LXpx86mteHLz/xeH2d5w4WX8f7P/OSYv2/DuHfwyeONd3/mbAffhTq9Fva7494v69cedX2/e9Z3F68X23HjfnTfvL9xePGz8n57OPF+nE/dxr/Nz791Ffq6z/6yvbjvzTUfvxPhcf9cqj/87Ji/cbXoP51vN8nw/jj9uL97v/SN9uO/+qnivXPvbFY72iocft3h693vvHZucb99WjtWNPzyt5UrBe3P/29P81vj48XH791/ONHrjTtj9b58fS/F48z1bJ+XB63E/1jy/brj9M4P+P2n/qTo037udf2rz78zMvqj9u6/Xtb1jv34Xvy7S8+XvMnNv3NJz/TdntxPIf/4VzT8zn8znAch+0/+f4wH8Pt/3u1eLzWT1c4+s7m809c/wtbLzU9n+jNPy+2f/U1J/O6aXzzlhte8MIbL7+ivu+y7Lubisfrtf2Tf3u2afxfvKXYH/H2mNFv3X4ncfvnPzJ55uz8xbmZtFcfuyn/7Jy3FuOJ470pnFtbvz5y9sIHZs9PTE9MZ9lEeT9C75p9KdSfFuVy97UXlpxB73kkvJ63/eXXt9z5b5+Oy//j3cXyK28p3rfuCut9NizfGl6/lW1/qSdvvyU/vmtPhxEuLP284NXYvvPHB5a1Ynj+rd8XxPl+7qUfyPdD/bb8fSMe16sc/w9misf5WtivC+GTmXfcsri9xvXjZyNceVdxvK96/4XTXHxd/z683m/7UfH4cVzx+f4gfB/zzW3N57s4P752aaj18fNP8bgczifZ5eL2uFbc31eeu6Xt8OLnkGSXb82//rP0OLeu6Gl2Mv/R+alTc2cuPjp1YXb+wtT8Rz925PTZi2cuHMk/y/PIB7vc9a/uyrJs8fy0JT8/zczu25vlZ6uzRbnOVjH+3GrHf+6R4zP7p++cmT1x7OKJC4+cmz1/8vj8/PHZmfk7j504MfuRXvefmzm0a/fBPft3T56cmzl04ODBPQcn586crQ+jGFQP+6Y/NHnm/JH8LvOH9h7c9cADe6cnT5+dmT20f3p68mKv++fvTZP1e//h5PnZU8cuzJ2enZyf+9jsoV0H9+3b3fPTAE+fOzE/MXX+4pmpi/Oz56eK5zJxIV9cf+/rdX/Kaf4/i+9nW9WKD+LL3nHvvvT5rHVf/njHhypWafkA0WfDZ9F8+0XnDizn69j3j4aalKH/BwAAAHKx7x8LNdH/AwAAQGnEvn9TqIn+HwAAAEoj9v3joab/ElCR/r90+f9tl5a1ffl/+f/G/SX/X7H8/7v6Lf9fnC/k/9fGavP38v+B/L/8f8rPj2VZtj75+eszfvl/+X82Ur/l/2PfvznL/P4fAAAASir2/VtCTfT/AAAAUBqx778h1ET/DwAAAKUR+/4XhJpUpP+X/5f/l/+X/5f/b799+f/BJP/fnfx/J8UnQsv/z09lG5ifX4vxrzD/f3ktx78B+f/NjV/I/9OP+i3/H/v+F4aaVKT/BwAAgCqIff+NoSb6fwAAACiN2PffFGqi/wcAAIDSiH3/1lCTivT/8v+ryv+nzJX8f/P45f+byf+H+SD/L/+/DuT/u5P/70H+f0Ovnz/o43f9f/l/luq3/H/s+18UalKR/h8AAABKa3Txn7Hvf3Goif4fAAAA+s/Itd0t9v0vCTVZ0v9f4wYAAACADRf7/puzliB4RX7/L//v+v/y//L/8v/tt7/8/P9wJv/fP+T/u5P/70H+X/6/uvn/8Uz+n+ug3/L/ed+fjWcvDTWpSP8PAAAAVRD7/ltCTfT/AAAAUBqx7/9/oSb6fwAAACiN2PdvCzWpSP8v/1+a/P8vGl86+X/5/27bl/93/f8yk//vTv6/B/l/+f/q5v9d/5/rot/y/7HvvzXUpCL9PwAAAFRB7PtvCzXR/wMAAEBpxL7//4ea6P8BAACgNGLfvz3UpCL9v/x/n+f/Y3LU9f/l/+X/+zL/Py7/33fk/7uT/+9B/l/+X/5f/p811W/5/9j3vyzUpCL9PwAAAFRB7PtfHmqi/wcAAIDSiH3/K0JN9P8AAABQGrHvnwg1qUj/v5L8f+2y/H8n1/n6/2PLuP5/E/l/+f9u25f/d/3/MpP/707+vwf5f/l/+X/5f9ZUv+X/Y99/e6hJRfp/AAAAqILY9+8INdH/AwAAQGnEvv+OUBP9PwAAAJRG7Pt3hppUpP93/f+ByP9n8v/y//L/8v/y/8sj/9+d/H8P8v/y//L/8v+sqTXO/w+1Llxp/j/2/a8MNalI/w8AAABVEPv+O0NN9P8AAABQGrHvvyvURP8PAAAApRH7/rtDTSrS/8v/y//L/8v/y/+33778/2CS/+9O/r8H+f+Byv+3BoE3evzy//L/LNVv1/+Pff+rQk0q0v8DAABAFcS+/55QE/0/AAAAlEbs++8NNdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8v/x/++3L/w8m+f/u5P97kP8fqPx/v41f/l/+n6X6Lf8f+/77Qk0q0v8DAABAFcS+//5QE/0/AAAAlEbs+6dCTfT/AAAAUBqx758ONalI/y//L/8v/y//v6L8/ysWH1f+vyD/31/k/7uT/+9B/l/+f8Pz/6Py/5RKv+X/Y9+/K9SkIv0/AAAAVEHs+3eHmuj/AQAAoDRi378n1ET/DwAAAKUR+/69oSYV6f/l/+X/5f/l/13/v/325f8Hk/x/d2uf/49PUf5f/l/+3/X/5f9Zqt/y/7HvfyDUpCL9PwAAAFRB7Pv3hZro/wEAAKA0Yt+/P9RE/w8AAAClEfv+A6EmFen/5f/l/+X/5f/l/9tvX/5/MMn/d+f6/z205P/HwvuS/L/8/yDk/+tzS/6fftNv+f/Y9x8MNalI/w8AAABVEPv+V4ea6P8BAACgNGLf/2uhJvp/AAAAKI3Y9/96qElF+n/5f/l/+X/5/37P/4/J/8v/r4D8f3fy/z24/r/8/wDn/13/n37Ub/n/2PcfCjWpSP8PAAAAVRD7/t8INdH/AwAAQGnEvv81oSb6fwAAACiN2PcfDjWpSP8v/79O+f+4UP5f/l/+3/X/5f+vK/n/7uT/e5D/l/+X/5f/Z031W/4/9v2vDTWpSP8PAAAAVRD7/gdDTfT/AAAAUBqx739dqIn+HwAAAEoj9v2vDzWpSP8v/+/6/xuf/x9tGrv8/+L95P8L8v/y/ysh/9+d/H8P8v/y//L/8v+sqX7L/8e+/w2hJhXp/wEAAKAKYt//xlAT/T8AAACURuz73xRqov8HAACA0oh9/5tDTSrS/8v/y/9vfP7f9f/l/wvy//L/a0H+v7vBzP/Xd6P8fyb/3/fjl/+X/2epfsv/x77/N0NNKtL/AwAAQBXEvv+hUBP9PwAAAJRG7PvfEmqi/wcAAIDSiH3/W0NNKtL/y//L/8v/y//L/7ffvvz/YJL/727A8v+/ujEs35Dr/8eTu/y//P91yv+PtHx9XfL/P+yU/1/Y1Hp/+X+uh37L/8e+/22hJhXp/wEAAKAKYt//9lAT/T8AAACURuz73xFqov8HAACA0oh9/2+FmlSk/5f/r49jMb0s/y//ny+Q/5f/l/8fWPL/3Q1Y/j9c/3+D8v+u/y//7/r/8v+sWr/l/2Pf/85Qk4r0/wAAAFAFse9/ONRE/w8AAAClEfv+d4Wa6P8BAACgNGLf/+5Qk4r0//L/rv8v/y//L//ffvvy/4NpbfL/w/L/8v/y//L//ZH//y/5fwZbv+X/Y9//SKhJRfp/AAAAqILY978n1ET/DwAAAKUR+/7fDjXR/wMAAEBpxL7/vaEmFen/5f8HJf8/If+/wvz/WFgm/y//L/9fLa7/3932nT/unKxsJP8v/y//3x/5f9f/Z8D1W/4/9v3vCzVZfv8/vuw1AQAAgA0R+/7fCTWpyO//AQAAoApi3/+7oSb6fwAAACiN2Pf/XqhJ6fr/z7VdKv8/KPl/1//PXP9f/r/l+cj/y/+3s375/3jmGbj8v+v/dyP/L/8v/98x/z/U4/7y/7TTb/n/2Pf/fqhJ6fp/AAAAqK7Y978/1ET/DwAAAAOh3f/JbhX7/iOhJvp/AAAAKI3Y9x8NNalI/y//L/8v/9+n+f+/2PGv3//O24/ukv+X/5f/X5F1vf5//eAfvOv/y/93I/8v/y//7/r/rKl+y//Hvv9YqMli4/dWF/gHAACAwRb7/j8INanI7/8BAACgCmLffzzURP8PAAAApRH7/plQk4r0//L/8v/y/32a/x/g6//H/TFI+f/JTQOU/48nXfn/ttY1//+exZy4/P9K8/9jbZe25v9r8v9N5P9XPP5vZ1km/y//zwbqt/x/7PtnQ00q0v8DAABAFYS+f+hEURdv0P8DAABAacS+/2Soif4fAAAASiP2/R8INalI/y//L/8v/y//7/r/7bfft/l/1//vSv6/u/7J/7fXh9f/H5L/H+j8v+v/y/+zwfot/x/7/rlQk4r0/wAAAFAFse//YKiJ/h8AAABKI/b9Hwo10f8D/8fenTxZVqZ1HD+JSZAVhBUGGxcucO+fwELW+ge4YONCQ8NQUHGeKMR5QJxnUXHAAQdQxAnFWXBCcQYV57lpeqa7ozoq83meyuHkuZmV9+Y9530/n4VPk93FzW4r6P5RfHkBAIBm5O7/9Lilk/2v/9f/6//1//r/8c/X/y+T/n+a/n8F7//r//X/+n/Wam79f+7+z4hbOtn/AAAA0IPc/ffHLfY/AAAANCN3/wNxi/0PAAAAzcjd/5lxyyL3/84b560E9f/6/2b7/4/V/5/2+fp//X/L9P/T9P8rXFb/f3XQ/2/Atr//C/T/bw76fxo1t/4/d/9nxS2L3P8AAADAmNz9nx232P8AAADQjNz9D8Yt9j8AAAA0I3f/58Qtnez/Y/3/ztBn/58Zr/6/pf7/Zq+/O+j/j3y+/l//37LL7f8fvvFHPv2//t/7/0H/7/1//T/Hza3/z93/uXFLJ/sfAAAAepC7//PiFvsfAAAAmpG7//PjFvsfAAAAmpG7/wvilk72/wzf/9//f4L3/w9+W/+/lv7f+//HPl//r/9vWd/v/++t/Ff01P8/+Mqd97/57Ec9d57P1//r//X/+n/Wa279f+7+L4xbOtn/AAAA0IPc/V8Ut9j/AAAA0Izc/V8ct9j/AAAAsEBXRr+au/9L4pZO9v8M+/+D70v/v0//f4n9/57+X/+v/29B3/3/aj31/7fy+Z30/+P/o3gG/fxFre37f2LQ/+v/WZO59f+5+780bulk/wMAAEAPcvd/Wdxi/wMAAMB8jf2F2BNy9z8Ut9j/AAAA0Izc/dfilk72v/5/8/3/B/X/y+j/vf+v/9f/N0H/P03/v0If/f+p9P/e/9f/s25z6/9z9z8ct3Sy/wEAAKAHufu/PG6x/wEAAKAZufsfiVvsfwAAAGhG7v6viFs62f/6/9m9/7876P/1/0H/f0D/r/8/D/3/NP3/Cvr/i/bzt+v/9f/6fw47Z///1sQfttfS/+fu/8q4pZP9DwAAAD3I3f9VcYv9DwAAAM3I3f/VcYv9DwAAAM3I3f81cUsn+1//P7v+3/v/S+v/r978/XTX/5/8qbdP/z9O/3859P/TZtP/7+yOfln/v/j+3/v/+n/9P0fM7f3/3P1fG7d0sv8BAACgB7n7vy5umdj/5/6T+QAAAMBW5e7/+rjFr/8DAADA4mV1lrv/G+KWTva//l//r//3/r/3/8c/f6r/f+7Q96f/nxf9/7TZ9P+n0P/r/5f8/ev/9f+cNLf+P3f/N8Ytnex/AAAA6EHu/kfjFvsfAAAAmpG7/5viFvsfAAAAmpG7/7G4pZP9P97/3/zn9f9no/8/+v3r/8d/fqyr/8/fo/5/sv+/1/v/fdL/T9P/r6D/1//r/0/r/6+s+vH6f8bMrf/P3f/NcUsn+x8AAAB6kLv/W+IW+x8AAACakbv/W+MW+x8AAACakbv/2+KWTva/9//1//r/5fX/3v8/sM33/4dL7/939f9npP+ftqD+/9Wrn3KX/v8Y/f+8v//G+/+D9/8n/i4A+n/GzK3/z93/7XFLJ/sfAAAAepC7/zviFvsfAAAAluHwXztw/C8oDbn7vzNusf8BAACgGbn7vytuaWf/T77Vqf/X/+v/9f/6//HPn1f/7/3/s9L/T1tQ/+/9/xEL7f93G+v/Hz/tx8+h/39o0/3/BP0/Y470/8/f/Pq2+v/c/d8dt7Sz/wEAAKB7ufu/J26x/wEAAKAZufu/N26x/wEAAKAZufu/L27pZP9vvP+f+LsP6P/1//p//b/+X/+/bvr/afr/FfT/3v/3/r/+n7U60v8fsq3+P3f/98ctnex/AAAA6EHu/h+IW+x/AAAAaEbu/sfjFvsfAAAAmpG7/wfjlk72v/f/9f/6f/2//n/88/X/y3Sh/v42/X/R/+v/9f/6f/0/azC3/j93/w/FLZ3sfwAAAOhB7v4fjlvsfwAAAGhG7v4n4hb7HwAAAJqRu/9H4pZO9r/+f7P9f35d/6//H/T/+n/9/6Xo9v3/nbH/JjrplP7/pU+99vFHv6L/1//r//X/+n/O6CMm/rlZ9P/Xb/6vy9z9Pxq3dLL/AQAAoAe5+38sbrH/AQAAoBm5+388brH/AQAAoBm5+5+MW865/6eah3Fv3H3uH7IB+n/v/+v/9f/6//HP1/8vU7f9/xl5/38F/b/+X/+v/2etZtH/H/rt3P0/Ebf49X8AAABoRu7+n4xb7H8AAABoRu7+n4pb7H8AAABoRu7+n45bOtn/+n/9v/5f/6//H/98/f8y6f+n6f9XWFL//+QF+v/d8S9vu5+/qG1///p//T8nza3/z93/VNzSyf4HAACAHuTu/5m4xf4HAACAZuTu/9m4xf4HAACAZuTu/7m4pZP9r//X/+v/9f/6//HP1/8vk/5/mv5/GIanJ76Bsf7/+h3z7P+9/z+771//r//npLn1/7n7fz5u6WT/AwAAQA9y9z8dt9j/AAAA0Izc/c/ELfY/AAAANCN3/y/ELZ3sf/2//l//r/9fQ/9/pK/V/4/T/18O/f80/f8KS3r/X/8/u+9f/6//56S59f+5+38xbulk/wMAAEAPcvc/G7fY/wAAANCM3P2/FLfY/wAAANCM3P3PxS2d7H/9v/5f/6//9/7/+Ofr/5dpc/3/oP/X/+v/V9D/6//1/xw3t/4/d/8vxy2d7H8AAADoQe7+X4lb7H8AAABoRu7+X41b7H8AAABoRu7+X4tbOtn/+n/9/34/H9+A/l//P2yt/7/xxyD9v/7/4rz/P03/v4L+X/+v/9f/s1bj/f9DW+v/c/f/etzSyf4HAACAHuTufz5usf8BAACgGbn7fyNusf8BAACgGbn7fzNu6WT/X7D/v2PQ/+9bfP8fP+6xR4ZB/6//X9n/xx8hvP9/4AL9/96g/187/f80/f8K+v82+//bhob6/yun/nj9P3M0t/f/c/e/ELd0sv8BAACgB7n7fytusf8BAACgGbn7fztusf8BAACgGbn7fydu6WT/e/9f/3+0//f+//4X9P9beP+/y/6//lPV/6+P/n+a/n8F/X+b/b/3//X/bM3c+v/c/b8bt3Sy/wEAAKAHuft/L26x/wEAAKAZuft/P26x/wEAAKAZufv/IG7pZP/r//X/t9D/36b/1/8P+n/9/0zp/6fp/1fQ/+v/9f/6f9Zqbv1/7v4/jFs62f8AAADQg9z9L8Yt9j8AAAA0I3f/S3GL/Q8AAADNyN3/R3FLJ/tf/6//9/7/Mvv/Pf2//l//P2ou/f8993zcy/p//b/+X/+v/9f/925u/X/u/j+OWzrZ/wAAANCD3P1/ErfY/wAAANCM3P1/GrfY/wAAANCM3P1/Frd0sv9P9v+3DweF6oGx/j8aNf3/IVvv//eOfrb+v/3+f9D/6//1/6Pm0v97///Wvn/9v/5/yd//ufr/jz754/X/tGhu/X/u/pfjlk72PwAAAPQgd/+fxy32PwAAADQjd/9fxC32PwAAADQjd/8rcUsn+9/7/430/8fo//X/U5+v/9f/t0z/P03/v4L+X//v/f8HPunD9P+sz9z6/9z9fxm3dLL/AQAAoAe5+/8qbrH/AQAAoBm5+/86brH/AQAAoBm5+/8mbulk/+v/9f/6/w30/7vjPz/0//p//f/m6f+n6f/L8X9rB/rp//fGvrjtfv6itv39b6j/f+FO7/+zYHPr/3P3/23c0sn+BwAAgB7k7v+7uMX+BwAAgGbk7v/7uMX+BwAAgGbk7n81bulk/+v/G+//b/xG9/3/J3r//9jn6//1/y3T/+d/o48b7/93T36p/f5/XD/9/6ht9/NL//6bef9f/88aza3/z93/WtzSyf4HAACAHuTu/4e4xf4HAACAZuTu/8e4xf4HAACAZuTu/6e4pZP9r/9vvP8/9v7/ztBj/7+F9/9P+fmh/9f/6/83T/8/zfv/K+j/9f/6f/0/azW3/j93/+s7u13ufwAAAFiqT/iYT3vtrP/a1/f/797wz3HLvcP1M/4yNgAAADBzN3b/zu4w/Mv+b/n1fwAAAGhR7v5/jVs62f/6/776/z7f/99g/3/jg/X/+n/9/6zo/6dtof/fO8/3p//X/y/5+9f/6/85aW79f+7+f4tbDg2/3XP/uwQAAADmJHf/v8ctnfz6PwAAAPQgd/9/xC0n9r+/HSAAAAAsVe7+/4xbOvn1f/3/zPv/YUP9f/zr9P8HvP+v/x/7fP3/Mun/p12w/7++4/1//f8E/b/+X//PcXPr/3P3/1fc0sn+BwAAgEYd+TMKufv/O26x/wEAAKAZufv/J26x/wEAAKAZufv/N27pZP/r/y+9/89UfYPv/1+pf+T9/877/0f3Rj9f/6//b5n+f9oW3v/X/x/9/ev/N+jQ93+H/l//zzzMrf/P3f9/cUsn+x8AAAB6kLv//+MW+x8AAACakbv/bXGL/Q8AAADNyN3/xo3z4f3t/630//E76bT/P9/7/2fs/++6evSzV77/r//vo/8/5fPb6f8/8s5rL973yc88pf/npsvs//Pngv5f/6//PzCj/t/7//p/ZmL9/f/ukS+et//f3/3D3vD2uKWT/Q8AAAA9yN3/Ztxi/wMAAEAzcve/I26x/wEAAKAZufvfGbd0sv+9/99G/3/cEvv//M96C/3/tVvu/68Mw7CV/j+b4t77f+//6/9P8v7/NP3/Cvp//b/+X//PWq2//z/6xfP2/7n73xW3dLL/AQAAoAe5+98dt+T+3zn3n7oHAAAAZiZ3/3viFr/+DwAAAM3I3f/euKWT/a//1//Ppf9P3v+/+ePaev//vopT++z/765/pP/fLP3/NP3/Cvp//b/+X//PWs2t/8/d/764pZP9DwAAAD3I3f9W3GL/AwAAQDNy978/brH/AQAAoBm5+z8Qt3Sy//X/rfb/WcTr//X/c+n/vf/v/f/Lof+fpv9fQf+/8P4/fsIM+n/9P3Mxt/4/d/+HAgAA///FE2fi")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42900, 0xc8)
getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006)

1m42.119834152s ago: executing program 6 (id=1673):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fb", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, <r7=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r7}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32], 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x33, 0x30, 0x0, @void, @void, @void, @value, r7}, 0x20)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r4}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r5, 0x1a, 0x0, 0x0, @void, @value=r8, @void, @void, r7}, 0x20)
r9 = socket$caif_seqpacket(0x25, 0x5, 0x3)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, <r10=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="1a000000200000000000000037f50ac8dc6e691cc4516e96a6fc96abd27b75f99c432f3d7a49a148bf48478835595d883fd970440cac0e85941a23f6da30bd682940f0205ba0544e94fdb4a6034c421d6bbf0b53322b77b4d48ce08ccacb2413c2deb7aa02e06be2393ce9e348132e2923781a79adaa087c6cbff6f5e7fe43f3085880e32c3cfd30b8e0f36e4b7abc2ac578d2d92f39c1c7c8", @ANYRES32=r10, @ANYRES64=r7], 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000200), 0x0}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
socket$kcm(0x29, 0xbec95ba3382697ee, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/108)

1m41.056963363s ago: executing program 6 (id=1676):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1m40.450750783s ago: executing program 34 (id=1676):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

8.552778765s ago: executing program 4 (id=2049):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x40000)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$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")

8.377623503s ago: executing program 5 (id=2050):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0xcc10}, 0x8000)

7.591125621s ago: executing program 4 (id=2052):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fb", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, <r7=>0x0}, 0x40)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r8, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r7}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20], 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x33, 0x30, 0x0, @void, @void, @void, @value, r7}, 0x20)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r4}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r5, 0x1a, 0x0, 0x0, @void, @value=r9, @void, @void, r7}, 0x20)
r10 = socket$caif_seqpacket(0x25, 0x5, 0x3)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, <r11=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1a000000200000000000000037f50ac8dc6e691cc4516e96a6fc96abd27b75f99c432f3d7a49a148bf48478835595d883fd970440cac0e85941a23f6da30bd682940f0205ba0544e94fdb4a6034c421d6bbf0b53322b77b4d48ce08ccacb2413c2deb7aa02e06be2393ce9e348132e2923781a79adaa087c6cbff6f5e7fe43f3085880e32c3cfd30b8e0f36e4b7abc2ac578d2d92f39c1c7c8", @ANYRES32=r11, @ANYRES64=r7], 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000200), 0x0}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
socket$kcm(0x29, 0xbec95ba3382697ee, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/108)

7.345339274s ago: executing program 5 (id=2055):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000002480)={0x1, 0x0, [{0x40000010, 0x0, 0x7}]})

7.20169871s ago: executing program 1 (id=2056):
r0 = syz_usb_connect$midi(0x2, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x10, 0x41, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5}}}}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000003fc0)={0x14, 0x0, &(0x7f0000003ec0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000004940)={0x84, &(0x7f0000004540)={0x0, 0x3, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.058082238s ago: executing program 4 (id=2058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f00000000c0)=0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c0001000000000000009bdeffafde2500", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x6558, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
unshare(0xc040480)
r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
timerfd_create(0x6, 0xdb45c74533b9965f)
mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\v'}]}], {0x14}}, 0x94}}, 0x24000840)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0)

6.909516495s ago: executing program 5 (id=2059):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x40000)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$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")

5.55739059s ago: executing program 5 (id=2060):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fsmount(0xffffffffffffffff, 0x0, 0xf)

5.460104825s ago: executing program 7 (id=2061):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, 0x0)

4.885017323s ago: executing program 0 (id=2063):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x40000)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$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")

4.751898859s ago: executing program 7 (id=2064):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa2, 0x0, &(0x7f0000000380)="e30080678bb63701fd85b69fb68a0000ec67838717bd86ddece156d082a75b8a4e359485bd744edf53e823bd97b020c801a21fb202f0781aee480c8dab2a6b4d6c5d2ea5fcaf3bebdbf55e91c120981d6fdb8163aace89abc7e0039c28c03f2d760eebaab933fbc2c228c7224b2d1babf3568d713c3b7d360e69ced7b4cbb952481281af1b9a423b296ac266d239c338f08ae1baee1f1cc5a1452961ff6ee1f8d336", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

3.806011925s ago: executing program 0 (id=2065):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fb", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, <r7=>0x0}, 0x40)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r8, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r7}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x33, 0x30, 0x0, @void, @void, @void, @value, r7}, 0x20)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r4}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r5, 0x1a, 0x0, 0x0, @void, @value=r9, @void, @void, r7}, 0x20)
r10 = socket$caif_seqpacket(0x25, 0x5, 0x3)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, <r11=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1a000000200000000000000037f50ac8dc6e691cc4516e96a6fc96abd27b75f99c432f3d7a49a148bf48478835595d883fd970440cac0e85941a23f6da30bd682940f0205ba0544e94fdb4a6034c421d6bbf0b53322b77b4d48ce08ccacb2413c2deb7aa02e06be2393ce9e348132e2923781a79adaa087c6cbff6f5e7fe43f3085880e32c3cfd30b8e0f36e4b7abc2ac578d2d92f39c1c7c8", @ANYRES32=r11, @ANYRES64=r7], 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000200), 0x0}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
socket$kcm(0x29, 0xbec95ba3382697ee, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/108)

3.673567591s ago: executing program 7 (id=2066):
fcntl$setsig(0xffffffffffffffff, 0xa, 0x31)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9})
r8 = socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_IO_FLUSHER(0x34, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b92"], 0x10}}, 0x0)

3.432346873s ago: executing program 5 (id=2067):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200))

2.624512952s ago: executing program 1 (id=2068):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fb", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, <r7=>0x0}, 0x40)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r8, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r7}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20], 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x33, 0x30, 0x0, @void, @void, @void, @value, r7}, 0x20)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r4}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r5, 0x1a, 0x0, 0x0, @void, @value=r9, @void, @void, r7}, 0x20)
r10 = socket$caif_seqpacket(0x25, 0x5, 0x3)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, <r11=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1a000000200000000000000037f50ac8dc6e691cc4516e96a6fc96abd27b75f99c432f3d7a49a148bf48478835595d883fd970440cac0e85941a23f6da30bd682940f0205ba0544e94fdb4a6034c421d6bbf0b53322b77b4d48ce08ccacb2413c2deb7aa02e06be2393ce9e348132e2923781a79adaa087c6cbff6f5e7fe43f3085880e32c3cfd30b8e0f36e4b7abc2ac578d2d92f39c1c7c8", @ANYRES32=r11, @ANYRES64=r7], 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000200), 0x0}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
socket$kcm(0x29, 0xbec95ba3382697ee, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/108)

2.588127474s ago: executing program 0 (id=2069):
fcntl$setsig(0xffffffffffffffff, 0xa, 0x31)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9})
r8 = socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_IO_FLUSHER(0x34, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b92"], 0x10}}, 0x0)

2.326971307s ago: executing program 7 (id=2070):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x400, 0x380, &(0x7f00000005c0)=[0x16, 0xfffffffffffffffd, 0x8, 0x6, 0x3e3c, 0xffff, 0x8d, 0x8001, 0x3f8000, 0x1, 0x80000001, 0x61f, 0x36, 0x1000, 0xffffffffffffffcf, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x80000001, 0x9, 0x4, 0x1000, 0x3, 0x0, 0x0, 0x8, 0x29, 0x335, 0x409, 0x6, 0x3, 0x4c0, 0x0, 0xc, 0x400004a17b51d, 0x0, 0xd9d, 0x5, 0x5, 0xfffffffffffffffb, 0x7, 0xe244, 0x0, 0x0, 0x5, 0x4, 0x4, 0x0, 0x0, 0x401, 0x7, 0x3ff, 0x5, 0x5, 0xc, 0x2, 0x8, 0xbe1f938, 0x0, 0x200, 0x5, 0x10000003, 0x8, 0x8004, 0x5, 0x2, 0x3, 0x6, 0x8, 0x4, 0x24, 0x9, 0x7, 0x5, 0xd, 0xf, 0x4, 0x93a, 0xc4a, 0xed7a, 0x8, 0x3a, 0x200, 0x0, 0x8, 0x11, 0x8, 0x400, 0xa, 0x0, 0x4bb, 0x4, 0x8, 0x800, 0x3719, 0x401, 0x8, 0x0, 0x7, 0x2, 0x4f38, 0x9, 0xfffffffffffffffe, 0x0, 0x3, 0x887, 0x2, 0xe2a, 0x2, 0x9, 0x7fffffffffffffff, 0xfffffffffffffff2, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffff2, 0x2, 0x7, 0x101, 0x80, 0xfffffffffffffffa, 0x8, 0x6, 0x2]})

2.25603779s ago: executing program 1 (id=2071):
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0xfffffffd, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x10)
syz_emit_ethernet(0x3e, 0x0, 0x0)
unshare(0x30050d00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x202000, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r2, 0x111, 0x5, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1065fa21}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)

1.64551145s ago: executing program 4 (id=2072):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x1, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x10140, 0x0, 0x5a)

1.604854332s ago: executing program 1 (id=2073):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0xe0000009, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]})

1.545690164s ago: executing program 7 (id=2074):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, 0x88}}, 0x0)

1.308154516s ago: executing program 0 (id=2075):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x40000)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$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")

1.249727649s ago: executing program 4 (id=2076):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80000, 0x1c9)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x1, r1})

1.147075814s ago: executing program 7 (id=2077):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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")
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="01002dbd70000000000001000000050004000200000005001f060000000000000700000400000000000000000000000000014d21c6e708edf5d8826b98dbb60b04d02965e114c1012fc3c5f6aeb9c081edd354fc598241f69dd429ba60ba52b7"], 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)

941.592874ms ago: executing program 1 (id=2078):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = eventfd2(0x0, 0x0)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1)
write$eventfd(r0, &(0x7f0000000280)=0x9, 0x8)

301.802715ms ago: executing program 0 (id=2079):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fb", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, <r7=>0x0}, 0x40)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r8, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r7}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x33, 0x30, 0x0, @void, @void, @void, @value, r7}, 0x20)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r4}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r5, 0x1a, 0x0, 0x0, @void, @value=r9, @void, @void, r7}, 0x20)
r10 = socket$caif_seqpacket(0x25, 0x5, 0x3)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, <r11=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1a000000200000000000000037f50ac8dc6e691cc4516e96a6fc96abd27b75f99c432f3d7a49a148bf48478835595d883fd970440cac0e85941a23f6da30bd682940f0205ba0544e94fdb4a6034c421d6bbf0b53322b77b4d48ce08ccacb2413c2deb7aa02e06be2393ce9e348132e2923781a79adaa087c6cbff6f5e7fe43f3085880e32c3cfd30b8e0f36e4b7abc2ac578d2d92f39c1c7c8", @ANYRES32=r11, @ANYRES64=r7], 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000200), 0x0}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
socket$kcm(0x29, 0xbec95ba3382697ee, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/108)

267.686366ms ago: executing program 1 (id=2080):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)

181.730361ms ago: executing program 4 (id=2081):
r0 = epoll_create1(0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)={0xb0000000})

46.652187ms ago: executing program 5 (id=2082):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x1}, {}, @result}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000100)={0x0, 0x7, 0x41b, {0x1, 0x1000000}, 0x7, 0x4})

0s ago: executing program 0 (id=2083):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1)
open_by_handle_at(r0, &(0x7f00000003c0)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x0, 0x13, "ec22762e30f1622777da7d1752774be8"}}}, 0x200000)

kernel console output (not intermixed with test programs):

4] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  442.713780][ T9523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input79
[  442.953823][ T9526] loop6: detected capacity change from 0 to 512
[  443.273004][ T5234] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  443.277820][ T9533] loop0: detected capacity change from 0 to 1024
[  443.363234][ T9526] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  443.372436][ T9526] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.404013][ T9533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  443.414625][ T5234] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  443.497334][ T5234] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  443.521458][ T5234] usb 1-1: USB disconnect, device number 15
[  443.552685][ T9540] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1386'.
[  443.589074][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  443.675640][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  443.855615][ T9544] loop1: detected capacity change from 0 to 512
[  443.939154][ T9544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  443.948446][ T9544] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  444.529443][ T9559] loop4: detected capacity change from 0 to 1764
[  445.984444][ T9555] loop0: detected capacity change from 0 to 512
[  445.991443][ T9555] EXT4-fs: Ignoring removed i_version option
[  445.997506][ T9555] EXT4-fs: Ignoring removed oldalloc option
[  446.005554][ T5234] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  446.045235][ T9555] EXT4-fs (loop0): 1 truncate cleaned up
[  446.050936][ T9555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  446.268609][ T5234] usb 7-1: Using ep0 maxpacket: 32
[  446.277221][ T5234] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  446.296344][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  446.312520][ T5234] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  446.363820][ T5234] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  446.406285][ T5234] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  446.462607][ T5234] usb 7-1: config 0 interface 0 has no altsetting 0
[  446.537709][ T9571] loop4: detected capacity change from 0 to 512
[  446.545235][ T9571] EXT4-fs: Ignoring removed i_version option
[  446.551259][ T9571] EXT4-fs: Ignoring removed oldalloc option
[  446.577696][ T5234] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  446.598294][ T9571] EXT4-fs (loop4): 1 truncate cleaned up
[  446.604327][ T9571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  446.626318][ T5234] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  446.644168][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  446.689938][ T5234] usb 7-1: Product: syz
[  446.709249][ T5234] usb 7-1: Manufacturer: syz
[  446.733355][ T5234] usb 7-1: SerialNumber: syz
[  446.809171][ T5234] usb 7-1: config 0 descriptor??
[  446.840699][ T5234] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  446.956156][ T5234] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  446.983560][ T9580] loop1: detected capacity change from 0 to 512
[  446.990615][ T9580] EXT4-fs: Ignoring removed i_version option
[  446.996690][ T9580] EXT4-fs: Ignoring removed oldalloc option
[  447.032533][ T9580] EXT4-fs (loop1): 1 truncate cleaned up
[  447.038379][ T9580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  447.229386][   T41] usb 7-1: USB disconnect, device number 2
[  447.327322][   T41] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  447.394053][ T9587] loop6: detected capacity change from 0 to 256
[  447.403280][ T9587] exfat: Deprecated parameter 'utf8'
[  447.429189][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  447.464889][ T9587] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  447.647921][ T9591] loop0: detected capacity change from 0 to 512
[  447.707181][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  447.938977][ T9591] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1398: Invalid inode bitmap blk 4 in block_group 0
[  447.982933][ T9602] IPv6: addrconf: prefix option has invalid lifetime
[  448.060016][ T9604] loop1: detected capacity change from 0 to 2048
[  448.086271][ T9591] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  448.142966][ T9604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  448.211019][ T9591] EXT4-fs (loop0): shut down requested (1)
[  448.263555][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  448.403587][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  448.492166][ T9619] loop6: detected capacity change from 0 to 8
[  448.581095][ T9619] SQUASHFS error: lzo decompression failed, data probably corrupt
[  448.649885][ T9619] SQUASHFS error: Failed to read block 0x91: -5
[  448.684502][ T9619] SQUASHFS error: Unable to read metadata cache entry [8f]
[  448.705706][ T9619] SQUASHFS error: Unable to read inode 0x11f
[  449.239857][ T9631] loop4: detected capacity change from 0 to 512
[  449.246682][ T9631] EXT4-fs: Ignoring removed i_version option
[  449.252669][ T9631] EXT4-fs: Ignoring removed oldalloc option
[  449.299020][ T9631] EXT4-fs (loop4): 1 truncate cleaned up
[  449.304737][ T9631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  449.598335][ T9640] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1411'.
[  449.780605][ T9643] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input80
[  449.898361][ T9645] loop6: detected capacity change from 0 to 512
[  450.185971][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  450.239567][ T9645] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  450.248718][ T9645] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  450.525601][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  450.663117][ T9621] loop0: detected capacity change from 0 to 32768
[  450.877163][ T9621] XFS (loop0): Mounting V5 Filesystem
[  451.048427][ T9621] XFS (loop0): Ending clean mount
[  451.098529][   T26] audit: type=1800 audit(1774633711.572:19): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1407" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  451.134513][ T4311] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  451.145794][ T9621] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  451.243447][ T9676] loop6: detected capacity change from 0 to 512
[  451.267796][ T9676] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1419: inode has both inline data and extents flags
[  451.286113][ T5234] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  451.333857][ T4311] usb 5-1: Using ep0 maxpacket: 16
[  451.340794][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.372491][ T9676] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1419: couldn't read orphan inode 15 (err -117)
[  451.395236][ T4311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  451.449081][ T4311] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  451.458403][ T9676] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  451.483887][ T9621] syz.0.1407 (9621) used greatest stack depth: 19312 bytes left
[  451.502151][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.522251][ T4276] XFS (loop0): Unmounting Filesystem
[  451.530339][ T4311] usb 5-1: config 0 descriptor??
[  451.533028][ T5234] usb 2-1: Using ep0 maxpacket: 8
[  451.548993][ T5234] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  451.592592][ T5234] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  451.607276][ T9681] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1421'.
[  451.630839][ T5234] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  451.644823][ T9681] netlink: 'syz.5.1421': attribute type 6 has an invalid length.
[  451.652989][ T9681] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1421'.
[  451.658826][ T5234] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  451.681713][ T5234] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  451.693152][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.712196][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  451.865297][ T9684] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input81
[  451.956611][ T5234] usb 2-1: GET_CAPABILITIES returned 0
[  451.979670][ T5234] usbtmc 2-1:16.0: can't read capabilities
[  452.033534][ T9689] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1423'.
[  452.212259][ T5234] usb 2-1: USB disconnect, device number 16
[  452.217098][ T4311] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0
[  452.225412][ T4311] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0
[  452.232564][ T4311] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0
[  452.239807][ T4311] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0
[  452.247039][ T4311] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0
[  452.254276][ T4311] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0
[  452.261455][ T4311] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x3
[  452.269946][ T4311] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x2
[  452.283849][ T4311] zeroplus 0003:0C12:0030.0011: unbalanced collection at end of report description
[  452.332566][ T4311] zeroplus 0003:0C12:0030.0011: parse failed
[  452.338916][ T4311] zeroplus: probe of 0003:0C12:0030.0011 failed with error -22
[  452.353667][ T4311] usb 5-1: USB disconnect, device number 14
[  452.806055][ T9702] loop6: detected capacity change from 0 to 512
[  453.074618][ T9702] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  453.084587][ T9702] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  453.588937][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  453.897485][ T9716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input82
[  454.002010][ T9719] loop4: detected capacity change from 0 to 512
[  454.379811][ T9719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  454.389180][ T9719] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.998423][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1430'.
[  455.019914][ T9700] fuse: Bad value for 'fd'
[  455.155124][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  455.374616][  T951] kernel write not supported for file /input/mouse0 (pid: 951 comm: kworker/1:2)
[  455.384912][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'.
[  455.598885][ T9742] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1435'.
[  455.650356][ T9745] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  455.901388][ T9750] loop1: detected capacity change from 0 to 512
[  456.554624][ T9750] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  456.564050][ T9750] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.504021][ T9762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input83
[  457.622260][ T9765] loop6: detected capacity change from 0 to 512
[  457.943032][ T9765] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  457.952572][ T9765] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  458.251414][ T9770] usb usb7: usbfs: process 9770 (syz.5.1441) did not claim interface 0 before use
[  458.295462][ T9756] loop0: detected capacity change from 0 to 4096
[  458.311761][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  458.314446][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  458.560050][ T4276] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  458.563796][  T951] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  458.595236][ T4276] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  458.896868][ T9781] loop1: detected capacity change from 0 to 512
[  459.990085][  T951] usb 6-1: Using ep0 maxpacket: 32
[  460.234775][ T9787] fuse: Bad value for 'fd'
[  460.356425][  T951] usb 6-1: unable to get BOS descriptor or descriptor too short
[  460.376681][ T9781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  460.386901][ T9781] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.389300][  T951] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  460.495245][  T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.503853][  T951] usb 6-1: Product: syz
[  460.508113][  T951] usb 6-1: Manufacturer: syz
[  460.512800][  T951] usb 6-1: SerialNumber: syz
[  460.597382][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  460.758589][  T951] usb 6-1: MIDIStreaming interface descriptor not found
[  460.934907][ T9798] loop6: detected capacity change from 0 to 512
[  460.968799][  T951] usb 6-1: USB disconnect, device number 10
[  461.095247][ T9798] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  461.155520][ T9798] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.421589][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  461.563981][ T9811] program syz.1.1449 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  461.639924][ T9815] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1450'.
[  461.845191][ T9818] loop4: detected capacity change from 0 to 1024
[  461.963240][ T9818] hfsplus: bad catalog entry type
[  462.133209][ T4313] hfsplus: b-tree write err: -5, ino 25
[  462.209655][ T4313] hfsplus: b-tree write err: -5, ino 4
[  462.232437][ T4313] hfsplus: b-tree write err: -5, ino 2
[  462.288075][ T4313] hfsplus: b-tree write err: -5, ino 26
[  462.372806][ T9832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input84
[  462.384067][ T9834] loop4: detected capacity change from 0 to 256
[  462.438655][ T9834] exfat: Deprecated parameter 'utf8'
[  462.494604][ T9834] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  462.514403][ T9832] loop1: detected capacity change from 0 to 512
[  462.605796][ T9832] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  462.614889][ T9832] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.883754][ T5480] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  463.133874][ T5480] usb 6-1: Using ep0 maxpacket: 16
[  463.156817][ T5480] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  463.203835][ T5480] usb 6-1: config 0 has no interface number 0
[  463.263774][ T5480] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  463.456900][ T9848] fuse: Bad value for 'fd'
[  463.464853][ T5480] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  463.499483][ T5480] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  463.509976][ T5480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.534023][ T5480] usb 6-1: Product: syz
[  463.538228][ T5480] usb 6-1: Manufacturer: syz
[  463.562186][ T5480] usb 6-1: SerialNumber: syz
[  463.708759][ T5480] usb 6-1: config 0 descriptor??
[  463.714422][ T9839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  463.722546][ T9839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  463.815942][ T9856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input85
[  463.933243][ T9859] loop4: detected capacity change from 0 to 512
[  464.450466][ T9859] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  464.459849][ T9859] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.503367][ T9839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  464.602868][ T9839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  464.719793][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  465.261000][ T5480] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  465.291674][ T5480] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  465.333969][ T5480] asix: probe of 6-1:0.251 failed with error -71
[  465.393823][ T5480] usb 6-1: USB disconnect, device number 11
[  465.573794][  T951] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  465.785886][  T951] usb 5-1: Using ep0 maxpacket: 8
[  465.798017][  T951] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  465.820438][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  465.846520][  T951] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  465.860850][  T951] usb 5-1: Product: syz
[  465.934512][ T9886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input86
[  466.051221][ T9888] loop6: detected capacity change from 0 to 512
[  466.564568][  T951] usb 5-1: Manufacturer: syz
[  466.569218][  T951] usb 5-1: SerialNumber: syz
[  466.588190][  T951] usb 5-1: config 0 descriptor??
[  466.596967][  T951] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  466.662723][ T9888] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  466.671805][ T9888] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  466.779899][ T9894] loop1: detected capacity change from 0 to 1024
[  466.813269][ T9896] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1464'.
[  466.945970][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  467.195418][   T11] hfsplus: bad catalog file entry
[  467.201195][   T11] hfsplus: b-tree write err: -5, ino 3
[  467.205599][  T951] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input87
[  467.257966][ T9906] program syz.6.1465 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  467.419600][ T4343] usb 5-1: USB disconnect, device number 15
[  468.072131][ T9922] loop6: detected capacity change from 0 to 256
[  468.919561][ T9945] loop6: detected capacity change from 0 to 512
[  468.976004][ T9945] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  468.993858][ T9945] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.152369][ T9953] loop4: detected capacity change from 0 to 2048
[  469.266350][ T9953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  469.369313][   T26] audit: type=1800 audit(1774633729.842:20): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1478" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  469.396045][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  469.616840][ T9966] loop1: detected capacity change from 0 to 256
[  469.681144][ T9966] exfat: Deprecated parameter 'namecase'
[  469.722101][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1486'.
[  469.793153][ T9966] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  470.166623][ T9986] loop4: detected capacity change from 0 to 256
[  470.302166][ T9986] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  470.330157][ T9986] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  470.396111][ T9986] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xaaf53d22, utbl_chksum : 0xe619d30d)
[  470.880768][ T9995] loop6: detected capacity change from 0 to 4096
[  470.951505][ T9995] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  471.065029][T10005] loop4: detected capacity change from 0 to 512
[  471.072036][T10005] EXT4-fs: Ignoring removed i_version option
[  471.078397][T10005] EXT4-fs: Ignoring removed oldalloc option
[  471.970953][ T9995] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  472.023654][T10005] EXT4-fs (loop4): 1 truncate cleaned up
[  472.030090][T10005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  472.081748][ T9995] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  472.141394][ T9995] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  472.234089][ T9995] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  472.236034][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  472.287355][   T14] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  472.306449][ T9995] ntfs: volume version 3.1.
[  472.400356][ T9995] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  472.494108][   T14] usb 6-1: Using ep0 maxpacket: 16
[  472.501960][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.514122][T10018] loop4: detected capacity change from 0 to 4096
[  472.521076][ T9995] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  472.551320][ T9995] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  472.595015][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.637111][ T9995] ntfs: (device loop6): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  472.687379][   T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  472.754721][   T14] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  472.814803][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.862144][   T14] usb 6-1: config 0 descriptor??
[  472.892160][T10018] ntfs3: loop4: ntfs_set_state r=3 failed, -22.
[  473.079791][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.120341][ T6850] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22.
[  473.136717][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.151350][ T4274] ntfs3: loop4: ntfs_set_state r=3 failed, -22.
[  473.168104][ T4274] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  473.198459][ T4274] ntfs3: loop4: ntfs_set_state r=3 failed, -22.
[  473.221445][   T11] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22.
[  473.246645][ T4274] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22.
[  473.398345][   T14] hid-generic 0003:0955:7214.0012: unknown main item tag 0x0
[  473.427587][   T14] hid-generic 0003:0955:7214.0012: unknown main item tag 0x4
[  473.470211][   T14] hid-generic 0003:0955:7214.0012: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[  473.572300][T10033] loop4: detected capacity change from 0 to 8192
[  473.634458][ T4311] usb 6-1: USB disconnect, device number 12
[  473.744544][T10039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input88
[  473.861158][T10042] loop0: detected capacity change from 0 to 512
[  474.435289][T10042] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  474.444417][T10042] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.706280][T10038] fido_id[10038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  474.808807][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  476.948280][T10075] loop4: detected capacity change from 0 to 512
[  476.957921][T10075] EXT4-fs: Ignoring removed i_version option
[  476.964102][T10075] EXT4-fs: Ignoring removed oldalloc option
[  477.489758][T10075] EXT4-fs (loop4): 1 truncate cleaned up
[  477.495454][T10075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  477.659845][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  477.864739][T10085] loop0: detected capacity change from 0 to 256
[  477.873542][T10085] exfat: Deprecated parameter 'utf8'
[  477.895319][T10085] exfat: Deprecated parameter 'utf8'
[  477.900759][T10085] exfat: Deprecated parameter 'utf8'
[  478.030150][T10085] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  478.169385][T10095] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1517'.
[  478.216314][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1517'.
[  478.752482][T10105] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input89
[  478.869677][T10107] loop0: detected capacity change from 0 to 512
[  479.421638][T10089] loop1: detected capacity change from 0 to 32768
[  479.495270][T10107] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  479.505190][T10107] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.616576][T10114] ea_get: invalid extended attribute
[  479.643842][T10114] ffff888054685670: 04 00 00 00                                      ....
[  479.742539][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  480.009219][T10121] loop0: detected capacity change from 0 to 512
[  480.016279][T10121] EXT4-fs: Ignoring removed i_version option
[  480.022272][T10121] EXT4-fs: Ignoring removed oldalloc option
[  480.100712][T10121] EXT4-fs (loop0): 1 truncate cleaned up
[  480.106550][T10121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  481.243197][T10137] loop4: detected capacity change from 0 to 512
[  481.252761][T10137] EXT4-fs: Ignoring removed i_version option
[  481.258887][T10137] EXT4-fs: Ignoring removed oldalloc option
[  481.778463][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  481.837612][T10137] EXT4-fs (loop4): 1 truncate cleaned up
[  481.843350][T10137] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  481.878293][T10144] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1528'.
[  481.909953][T10144] siw: device registration error -23
[  481.996246][T10148] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1529'.
[  482.023626][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  482.084821][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1529'.
[  482.311199][ T6850] Bluetooth: hci5: Frame reassembly failed (-84)
[  482.382170][ T6850] Bluetooth: hci5: Frame reassembly failed (-84)
[  482.931155][T10174] loop6: detected capacity change from 0 to 1764
[  483.823539][T10185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input90
[  483.935174][T10188] loop6: detected capacity change from 0 to 512
[  484.303905][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  484.673604][T10188] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  484.682627][T10188] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  484.876722][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  484.898089][T10197] loop4: detected capacity change from 0 to 512
[  484.925958][T10199] loop0: detected capacity change from 0 to 512
[  484.932803][T10199] EXT4-fs: Ignoring removed i_version option
[  484.938856][T10199] EXT4-fs: Ignoring removed oldalloc option
[  484.999216][T10199] EXT4-fs (loop0): 1 truncate cleaned up
[  485.004958][T10199] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  485.174256][T10197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002]
[  485.195301][T10197] System zones: 1-20
[  485.216211][T10197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  485.480260][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  485.607854][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  485.734373][T10218] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1541'.
[  485.814893][T10222] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1543'.
[  486.080035][T10225] loop6: detected capacity change from 0 to 512
[  486.087084][T10225] EXT4-fs: Ignoring removed i_version option
[  486.093100][T10225] EXT4-fs: Ignoring removed oldalloc option
[  486.986800][T10224] tipc: Started in network mode
[  486.991681][T10224] tipc: Node identity 4, cluster identity 4711
[  486.997957][T10224] tipc: Node number set to 4
[  487.036747][T10225] EXT4-fs (loop6): 1 truncate cleaned up
[  487.042412][T10225] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  487.261459][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  487.714134][T10245] loop6: detected capacity change from 0 to 256
[  487.815072][T10245] FAT-fs (loop6): Directory bread(block 64) failed
[  487.821651][T10245] FAT-fs (loop6): Directory bread(block 65) failed
[  487.894096][T10245] FAT-fs (loop6): Directory bread(block 66) failed
[  487.918016][T10245] FAT-fs (loop6): Directory bread(block 67) failed
[  487.948763][T10245] FAT-fs (loop6): Directory bread(block 68) failed
[  487.975990][T10245] FAT-fs (loop6): Directory bread(block 69) failed
[  487.988297][T10256] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  487.988297][T10256] The task syz.4.1552 (10256) triggered the difference, watch for misbehavior.
[  488.026447][T10245] FAT-fs (loop6): Directory bread(block 70) failed
[  488.040942][T10245] FAT-fs (loop6): Directory bread(block 71) failed
[  488.054398][T10245] FAT-fs (loop6): Directory bread(block 72) failed
[  488.139594][T10258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input91
[  488.257606][T10261] loop1: detected capacity change from 0 to 512
[  488.323194][T10245] FAT-fs (loop6): Directory bread(block 73) failed
[  488.513324][T10261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  488.522615][T10261] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  488.826343][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  489.003173][T10270] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1554'.
[  489.367921][T10280] device erspan0 entered promiscuous mode
[  489.699717][T10295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1562'.
[  489.744930][T10295] siw: device registration error -23
[  491.125984][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'.
[  491.989265][T10336] loop1: detected capacity change from 0 to 512
[  491.998822][T10336] EXT4-fs: Ignoring removed i_version option
[  492.004951][T10336] EXT4-fs: Ignoring removed oldalloc option
[  492.684035][T10336] EXT4-fs (loop1): 1 truncate cleaned up
[  492.689726][T10336] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  492.950853][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  493.028164][T10345] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1573'.
[  493.278546][T10351] netlink: 'syz.5.1574': attribute type 2 has an invalid length.
[  493.707770][T10359] loop0: detected capacity change from 0 to 512
[  493.717105][T10359] EXT4-fs: Ignoring removed i_version option
[  493.723196][T10359] EXT4-fs: Ignoring removed oldalloc option
[  493.991736][T10359] EXT4-fs (loop0): 1 truncate cleaned up
[  493.997567][T10359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  494.263254][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  494.484539][T10357] loop1: detected capacity change from 0 to 8192
[  494.543436][T10357] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  494.707897][T10357] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  494.769365][T10357] REISERFS (device loop1): using ordered data mode
[  494.802649][T10357] reiserfs: using flush barriers
[  494.849484][T10357] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  494.879507][T10357] REISERFS (device loop1): checking transaction log (loop1)
[  494.904475][T10357] REISERFS (device loop1): Using r5 hash to sort names
[  494.957294][T10357] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  495.187939][ T4280] Bluetooth: hci1: link tx timeout
[  495.194291][ T4280] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  495.293775][ T4311] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  495.368973][ T4280] Bluetooth: hci1: link tx timeout
[  495.374792][ T4280] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  495.396637][ T4280] Bluetooth: hci1: link tx timeout
[  495.401810][ T4280] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  495.486052][ T4311] usb 6-1: Using ep0 maxpacket: 8
[  495.495260][ T4311] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13
[  495.516666][ T4311] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  495.529654][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.538481][ T4311] usb 6-1: Product: syz
[  495.542749][ T4311] usb 6-1: Manufacturer: syz
[  495.547681][ T4311] usb 6-1: SerialNumber: syz
[  495.559365][ T4311] usb 6-1: config 0 descriptor??
[  495.569218][ T4311] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  495.859477][T10392] loop1: detected capacity change from 0 to 512
[  495.868820][T10392] EXT4-fs: Ignoring removed i_version option
[  495.874949][T10392] EXT4-fs: Ignoring removed oldalloc option
[  496.047931][T10392] EXT4-fs (loop1): 1 truncate cleaned up
[  496.053899][T10392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  496.313143][ T4280] Bluetooth: hci1: link tx timeout
[  496.319760][ T4280] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  496.397287][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  496.407379][ T4311] gspca_zc3xx: reg_w_i err -71
[  496.509039][T10404] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1589'.
[  496.707476][T10410] loop1: detected capacity change from 0 to 64
[  496.852598][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  496.852612][   T26] audit: type=1800 audit(1774633757.322:21): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1590" name=14 dev="loop1" ino=21 res=0 errno=0
[  496.964441][T10416] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input92
[  497.024063][ T4311] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  497.031295][ T4311] gspca_zc3xx: probe of 6-1:0.0 failed with error -71
[  497.048420][ T4311] usb 6-1: USB disconnect, device number 13
[  497.081201][T10419] loop0: detected capacity change from 0 to 512
[  497.576566][ T4280] Bluetooth: hci1: link tx timeout
[  497.667760][ T4280] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  497.677625][ T4280] Bluetooth: hci1: command 0x0406 tx timeout
[  497.762558][T10419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  497.771633][T10419] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.825182][ T4269] Bluetooth: hci1: link tx timeout
[  497.830495][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  497.965350][T10426] device bridge_slave_0 left promiscuous mode
[  497.978288][T10426] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.040144][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  498.425345][T10433] loop1: detected capacity change from 0 to 512
[  499.085496][T10433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  499.094586][T10433] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  499.324232][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  499.833825][T10456] loop0: detected capacity change from 0 to 512
[  499.840815][T10456] EXT4-fs: Ignoring removed i_version option
[  499.846881][T10456] EXT4-fs: Ignoring removed oldalloc option
[  500.919392][T10456] EXT4-fs (loop0): 1 truncate cleaned up
[  500.925429][T10456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  501.036050][T10461] loop1: detected capacity change from 0 to 1764
[  501.360451][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  501.366983][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  501.456941][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  501.599552][T10469] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1612'.
[  501.623196][T10469] siw: device registration error -23
[  501.657238][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'.
[  501.803817][ T4376] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  501.864618][ T4269] Bluetooth: hci1: link tx timeout
[  501.870167][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  501.901589][T10480] loop0: detected capacity change from 0 to 256
[  502.024125][ T4376] usb 5-1: Using ep0 maxpacket: 8
[  502.031978][ T4376] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  502.095657][ T4376] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  502.144886][ T4376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.173261][ T4376] usb 5-1: Product: syz
[  502.188817][ T4376] usb 5-1: Manufacturer: syz
[  502.205217][ T4376] usb 5-1: SerialNumber: syz
[  502.253819][ T4269] Bluetooth: hci1: link tx timeout
[  502.258972][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  502.298522][ T4376] usb 5-1: config 0 descriptor??
[  502.308291][ T4376] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  502.746786][T10489] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input93
[  503.339656][ T4376] gspca_zc3xx: reg_w_i err -71
[  503.477850][T10503] loop1: detected capacity change from 0 to 512
[  504.223942][ T4376] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  504.230288][ T4376] gspca_zc3xx: probe of 5-1:0.0 failed with error -71
[  504.282687][T10503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  504.292000][T10503] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  504.331149][ T4376] usb 5-1: USB disconnect, device number 16
[  504.711883][T10512] loop6: detected capacity change from 0 to 512
[  504.721585][T10512] EXT4-fs: Ignoring removed i_version option
[  504.727703][T10512] EXT4-fs: Ignoring removed oldalloc option
[  505.243609][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  505.296089][T10512] EXT4-fs (loop6): 1 truncate cleaned up
[  505.301788][T10512] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  505.509137][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  505.527536][T10523] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1616'.
[  505.665246][T10526] loop6: detected capacity change from 0 to 16
[  505.728463][T10526] erofs: (device loop6): mounted with root inode @ nid 36.
[  505.784018][T10532] comedi comedi3: comedi_test: 33787 microvolt, 16952 microsecond waveform attached
[  506.078859][T10539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input94
[  506.196710][T10542] loop4: detected capacity change from 0 to 512
[  506.491831][T10542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  506.500955][T10542] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  506.577961][ T4269] Bluetooth: hci1: link tx timeout
[  506.583851][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  506.614182][ T4269] Bluetooth: hci1: link tx timeout
[  506.619375][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  506.679591][T10548] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1622'.
[  506.695531][T10547] siw: device registration error -23
[  506.891189][ T4269] Bluetooth: hci1: link tx timeout
[  506.896651][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  506.912960][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  507.854735][T10569] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input95
[  507.972042][T10572] loop4: detected capacity change from 0 to 512
[  508.562701][T10572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  508.571781][T10572] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  508.618371][ T4269] Bluetooth: hci1: link tx timeout
[  508.623622][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  508.980154][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  509.172617][T10585] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1630'.
[  509.234491][T10586] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1632'.
[  509.768505][ T5480] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  509.963805][ T5480] usb 5-1: Using ep0 maxpacket: 32
[  509.970926][ T5480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.982668][ T5480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  509.993122][ T5480] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  510.054370][ T5480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.069997][T10602] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input96
[  510.089698][ T5480] usb 5-1: config 0 descriptor??
[  510.100962][ T5480] hub 5-1:0.0: USB hub found
[  510.190153][T10602] loop1: detected capacity change from 0 to 512
[  510.242870][ T4269] Bluetooth: hci1: link tx timeout
[  510.248184][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  510.305390][ T5480] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  510.372951][T10602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  510.390011][ T4269] Bluetooth: hci1: link tx timeout
[  510.395339][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  510.405173][T10602] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  510.718563][ T5480] hid-generic 0003:046D:C31C.0013: item fetching failed at offset 0/1
[  510.734270][ T5480] hid-generic: probe of 0003:046D:C31C.0013 failed with error -22
[  511.044212][ T4376] usb 5-1: USB disconnect, device number 17
[  511.108787][T10616] loop6: detected capacity change from 0 to 256
[  511.208490][T10616] FAT-fs (loop6): Directory bread(block 64) failed
[  511.233825][T10616] FAT-fs (loop6): Directory bread(block 65) failed
[  511.240653][T10616] FAT-fs (loop6): Directory bread(block 66) failed
[  511.268411][T10616] FAT-fs (loop6): Directory bread(block 67) failed
[  511.298677][T10616] FAT-fs (loop6): Directory bread(block 68) failed
[  511.312035][T10616] FAT-fs (loop6): Directory bread(block 69) failed
[  511.386214][T10616] FAT-fs (loop6): Directory bread(block 70) failed
[  511.411876][T10616] FAT-fs (loop6): Directory bread(block 71) failed
[  511.420959][T10616] FAT-fs (loop6): Directory bread(block 72) failed
[  511.428678][T10616] FAT-fs (loop6): Directory bread(block 73) failed
[  512.326891][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  512.382298][T10622] loop4: detected capacity change from 0 to 512
[  512.392066][ T4269] Bluetooth: hci1: link tx timeout
[  512.397294][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  512.456036][T10622] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1643: invalid indirect mapped block 256 (level 2)
[  512.486461][T10628] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1646'.
[  512.538968][T10622] EXT4-fs (loop4): Remounting filesystem read-only
[  512.569244][T10622] EXT4-fs (loop4): 2 truncates cleaned up
[  512.624870][T10622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  512.900514][T10622] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.4.1643: path /336/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  512.954213][T10622] EXT4-fs (loop4): Remounting filesystem read-only
[  513.004721][T10645] vxcan1: tx address claim with different name
[  513.223283][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  513.342627][T10653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input97
[  513.460731][T10656] loop1: detected capacity change from 0 to 512
[  514.086862][T10656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  514.096328][T10656] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  514.328640][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  514.695258][T10671] loop6: detected capacity change from 0 to 512
[  514.702214][T10671] EXT4-fs: Ignoring removed i_version option
[  514.708650][T10671] EXT4-fs: Ignoring removed oldalloc option
[  515.523949][T10671] EXT4-fs (loop6): 1 truncate cleaned up
[  515.529688][T10671] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  515.561446][T10676] device bridge_slave_0 left promiscuous mode
[  515.600151][T10676] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.485192][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  516.761956][T10689] loop6: detected capacity change from 0 to 512
[  516.832568][T10689] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1656: iget: bad i_size value: 38620345925642
[  516.854916][T10689] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1656: couldn't read orphan inode 15 (err -117)
[  516.884171][   T14] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  516.965328][T10689] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  517.088630][T10695] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1659'.
[  517.103968][   T14] usb 2-1: Using ep0 maxpacket: 8
[  517.115100][   T14] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  517.139281][ T4694] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:15: bg 0: block 5: invalid block bitmap
[  517.171521][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.200352][ T4694] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  517.225798][   T14] pvrusb2: Hardware description: Terratec Grabster AV400
[  517.231279][ T4694] EXT4-fs (loop6): This should not happen!! Data will be lost
[  517.231279][ T4694] 
[  517.233290][   T14] pvrusb2: **********
[  517.251095][   T14] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  517.262800][   T14] pvrusb2: Important functionality might not be entirely working.
[  517.276548][ T4694] EXT4-fs (loop6): Total free blocks count 0
[  517.282576][ T4694] EXT4-fs (loop6): Free/Dirty block details
[  517.292035][   T14] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  517.309314][   T14] pvrusb2: **********
[  517.314442][ T4694] EXT4-fs (loop6): free_blocks=0
[  517.319436][ T4694] EXT4-fs (loop6): dirty_blocks=1
[  517.331815][ T4694] EXT4-fs (loop6): Block reservation details
[  517.364737][ T4694] EXT4-fs (loop6): i_reserved_data_blocks=1
[  517.407738][ T8950] EXT4-fs (loop6): unmounting filesystem.
[  517.464526][ T2305] pvrusb2: Invalid write control endpoint
[  517.695017][ T3759] usb 2-1: USB disconnect, device number 17
[  517.810916][T10712] loop4: detected capacity change from 0 to 256
[  517.828023][ T2305] pvrusb2: Invalid write control endpoint
[  517.834913][T10712] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  517.868020][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  517.893885][ T4311] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  517.901574][   T26] audit: type=1800 audit(1774633778.372:22): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1664" name="file1" dev="loop4" ino=1048664 res=0 errno=0
[  517.933835][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  517.971065][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  517.983209][T10713] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264)
[  518.014761][ T2305] pvrusb2: Device being rendered inoperable
[  518.021528][   T26] audit: type=1800 audit(1774633778.372:23): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1664" name="file1" dev="loop4" ino=1048664 res=0 errno=0
[  518.042574][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  518.042698][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  518.074539][T10713] FAT-fs (loop4): Filesystem has been set read-only
[  518.081380][T10713] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  518.098977][ T2305] pvrusb2: Attached sub-driver cx25840
[  518.114347][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  518.134837][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  518.144327][ T4311] usb 1-1: Using ep0 maxpacket: 8
[  518.151918][ T4311] usb 1-1: config 0 has no interfaces?
[  518.171817][ T4311] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  518.184526][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.192859][T10713] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  518.219278][ T4311] usb 1-1: config 0 descriptor??
[  518.433886][T10719] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input98
[  518.568375][ T5480] usb 1-1: USB disconnect, device number 16
[  519.529747][T10703] loop6: detected capacity change from 0 to 32768
[  519.648553][T10703] read_mapping_page failed!
[  519.773919][T10703] ERROR: (device loop6): txCommit: 
[  519.773919][T10703] 
[  519.944758][T10703] ERROR: (device loop6): remounting filesystem as read-only
[  520.933261][T10750] loop4: detected capacity change from 0 to 512
[  520.954438][T10750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  520.975376][T10750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  520.991374][T10750] System zones: 1-2, 4-12, 8-8
[  521.103160][T10750] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1672: iget: bad i_size value: 38620345925642
[  521.127201][T10750] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1672: couldn't read orphan inode 15 (err -117)
[  521.176786][T10750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  521.311336][T10755] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1672: bg 0: block 5: invalid block bitmap
[  521.379614][T10755] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 104 with error 28
[  521.457355][T10755] EXT4-fs (loop4): This should not happen!! Data will be lost
[  521.457355][T10755] 
[  521.487753][T10755] EXT4-fs (loop4): Total free blocks count 0
[  521.502562][   T32] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.513377][T10755] EXT4-fs (loop4): Free/Dirty block details
[  521.513443][T10755] EXT4-fs (loop4): free_blocks=0
[  521.513459][T10755] EXT4-fs (loop4): dirty_blocks=108
[  521.513473][T10755] EXT4-fs (loop4): Block reservation details
[  521.513484][T10755] EXT4-fs (loop4): i_reserved_data_blocks=108
[  521.694840][ T4894] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 104 with max blocks 4 with error 28
[  521.857672][   T32] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.965810][   T32] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.090554][   T32] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.500922][   T32] tipc: Left network mode
[  522.663982][ T4319] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  522.885524][ T4319] usb 6-1: Using ep0 maxpacket: 32
[  522.916062][ T4319] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  523.161128][ T4319] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  523.352388][ T4319] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  523.400404][ T4319] usb 6-1: config 1 has no interface number 0
[  523.413865][ T4319] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  523.463258][ T4319] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  523.484592][ T4319] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  523.498673][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.559476][ T4319] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  523.709047][T10801] loop1: detected capacity change from 0 to 256
[  523.786854][ T4319] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  523.864904][T10801] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  523.913751][ T4280] Bluetooth: hci4: command 0x0406 tx timeout
[  524.020979][   T26] audit: type=1800 audit(1774633784.492:24): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1684" name="file1" dev="loop1" ino=1048665 res=0 errno=0
[  524.022009][T10806] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264)
[  524.088571][T10807] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1687'.
[  524.120417][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  524.124928][T10806] FAT-fs (loop1): Filesystem has been set read-only
[  524.134859][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  524.143888][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  524.152019][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  524.162247][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  524.169564][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  524.310388][ T4319] usb 6-1: USB disconnect, device number 14
[  524.323973][ T4319] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  524.902595][T10809] lo speed is unknown, defaulting to 1000
[  525.490888][T10827] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1691'.
[  525.515814][T10827] siw: device registration error -23
[  525.918767][T10809] chnl_net:caif_netlink_parms(): no params data found
[  525.965618][T10840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input99
[  526.044683][T10840] loop4: detected capacity change from 0 to 512
[  526.223804][ T4280] Bluetooth: hci1: command 0x0409 tx timeout
[  526.240612][T10840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  526.303211][T10840] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  526.418678][T10809] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.444870][T10809] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.456620][T10809] device bridge_slave_0 entered promiscuous mode
[  526.501746][T10809] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.519693][T10809] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.528549][T10809] device bridge_slave_1 entered promiscuous mode
[  526.718172][T10809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.767609][T10809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.791502][   T32] device hsr_slave_0 left promiscuous mode
[  526.806934][   T32] device hsr_slave_1 left promiscuous mode
[  526.814281][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.821791][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.834177][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.841610][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.850169][   T32] device bridge_slave_1 left promiscuous mode
[  526.866890][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.952882][   T32] device veth1_macvtap left promiscuous mode
[  526.968838][   T32] device veth0_macvtap left promiscuous mode
[  526.984861][   T32] device veth1_vlan left promiscuous mode
[  526.990720][   T32] device veth0_vlan left promiscuous mode
[  527.128886][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  527.286771][T10877] siw: device registration error -23
[  528.434772][ T4280] Bluetooth: hci1: command 0x041b tx timeout
[  529.310265][   T32] team0 (unregistering): Port device team_slave_1 removed
[  529.369872][   T32] team0 (unregistering): Port device team_slave_0 removed
[  529.437439][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  529.512196][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  529.890571][   T32] bond0 (unregistering): Released all slaves
[  529.993600][T10872] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1702'.
[  530.063896][T10899] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1698'.
[  530.092841][T10809] team0: Port device team_slave_0 added
[  530.161700][T10809] team0: Port device team_slave_1 added
[  530.242385][T10809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.308121][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.399578][T10809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.495312][   T48] Bluetooth: hci1: command 0x040f tx timeout
[  530.697204][T10917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input100
[  531.139518][T10920] loop4: detected capacity change from 0 to 512
[  531.146604][T10920] EXT4-fs: Ignoring removed i_version option
[  531.152625][T10920] EXT4-fs: Ignoring removed oldalloc option
[  531.378096][T10920] EXT4-fs (loop4): 1 truncate cleaned up
[  531.384145][T10920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  531.695510][T10809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.743179][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  531.764146][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.920251][T10809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.054016][ T4319] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  532.081703][T10809] device hsr_slave_0 entered promiscuous mode
[  532.109169][T10809] device hsr_slave_1 entered promiscuous mode
[  532.137040][T10809] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  532.147854][T10809] Cannot create hsr debugfs directory
[  532.253776][ T4319] usb 1-1: Using ep0 maxpacket: 8
[  532.260876][ T4319] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  532.289597][ T4319] usb 1-1: config 179 has no interface number 0
[  532.305506][ T4319] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  532.328745][ T4319] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  532.365758][ T4319] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  532.396633][ T4319] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  532.418412][ T4319] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  532.453764][ T4319] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  532.473042][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.511654][T10927] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  532.627002][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[  532.783201][ T4319] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input101
[  532.968861][   T41] usb 1-1: USB disconnect, device number 17
[  532.975002][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  532.975047][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  533.014292][T10809] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  533.055010][   T41] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  533.095573][T10809] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  533.122667][T10809] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  533.157459][T10809] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  533.293983][ T3759] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  533.593823][T10959] loop1: detected capacity change from 0 to 512
[  533.603453][T10959] EXT4-fs: Ignoring removed i_version option
[  533.609614][T10959] EXT4-fs: Ignoring removed oldalloc option
[  533.729887][T10959] EXT4-fs (loop1): 1 truncate cleaned up
[  533.735849][T10959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  534.080852][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  534.133744][ T3759] usb 5-1: Using ep0 maxpacket: 8
[  534.140608][ T3759] usb 5-1: config 0 has no interfaces?
[  534.173917][ T3759] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  534.183232][ T3759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.192828][T10809] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.457278][T10970] siw: device registration error -23
[  534.560195][T10968] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1713'.
[  534.724608][ T3759] usb 5-1: config 0 descriptor??
[  534.798398][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  534.840365][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  534.861309][T10809] 8021q: adding VLAN 0 to HW filter on device team0
[  534.920934][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  534.944349][ T3759] usb 5-1: USB disconnect, device number 18
[  534.947962][T10973] loop1: detected capacity change from 0 to 8192
[  534.959460][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  534.988384][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.995568][ T6850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.043362][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  535.082646][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  535.159047][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  535.330607][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.337900][ T4894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.703690][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  535.853584][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  535.904633][ T5234] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  535.945667][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  535.974867][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  536.035284][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  536.079199][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  536.093870][ T5234] usb 1-1: Using ep0 maxpacket: 32
[  536.101219][ T5234] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  536.220116][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  536.276402][ T5234] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  536.293311][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  536.301516][ T5234] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  536.310634][ T5234] usb 1-1: config 1 has no interface number 0
[  536.316800][ T5234] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  536.334390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  536.342908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  536.431438][T10997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input102
[  536.548446][T11000] loop1: detected capacity change from 0 to 512
[  536.978357][ T5234] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  537.001950][ T5234] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  537.012787][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.034711][T11000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  537.044833][T11000] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.093023][ T5234] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  537.145811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  537.325302][ T5234] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  537.361764][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  537.719400][T11020] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1723'.
[  537.753133][T11020] siw: device registration error -23
[  537.781550][ T5480] usb 1-1: USB disconnect, device number 18
[  537.795656][T11022] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1724'.
[  537.806244][ T5480] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  537.837494][T11022] siw: device registration error -23
[  538.006929][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  538.032796][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  538.096825][T10809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.491384][T11060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input103
[  541.711414][T11069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1734'.
[  541.925491][T11075] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1735'.
[  541.969581][T11075] siw: device registration error -23
[  542.227204][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  542.425485][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  542.509571][T11090] loop4: detected capacity change from 0 to 512
[  542.519008][T11090] EXT4-fs: Ignoring removed i_version option
[  542.525173][T11090] EXT4-fs: Ignoring removed oldalloc option
[  542.803786][T11090] EXT4-fs (loop4): 1 truncate cleaned up
[  542.809567][T11090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  543.176181][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  543.191633][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  543.264375][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  543.275850][T10809] device veth0_vlan entered promiscuous mode
[  543.285022][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  543.299943][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  543.348009][T10809] device veth1_vlan entered promiscuous mode
[  543.427819][T11106] loop4: detected capacity change from 0 to 64
[  543.477021][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  543.503003][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  543.572884][T10809] device veth0_macvtap entered promiscuous mode
[  543.609685][T10809] device veth1_macvtap entered promiscuous mode
[  543.674595][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.690695][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.731640][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.757864][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.781831][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.809511][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.827260][T11115] siw: device registration error -23
[  543.839153][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.869835][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.912608][T10809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  543.944416][T11112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1745'.
[  543.965135][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  543.984223][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  544.005572][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  544.023578][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  544.048601][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  544.075590][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.107071][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  544.136975][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.190773][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  544.211608][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.228471][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  544.244829][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.249051][T11127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input104
[  544.270547][T10809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  544.317069][T10809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.370551][T10809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  544.409780][T10809] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.418991][T10809] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.434584][T10809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.459544][T10809] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.478984][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  544.502076][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  544.700167][T11135] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1748'.
[  544.781037][ T6850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.821769][ T6850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.889024][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  544.921482][ T6850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.003416][ T6850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.031873][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  545.437443][T11147] loop4: detected capacity change from 0 to 512
[  545.446861][T11147] EXT4-fs: Ignoring removed i_version option
[  545.452960][T11147] EXT4-fs: Ignoring removed oldalloc option
[  545.664426][T11147] EXT4-fs (loop4): 1 truncate cleaned up
[  545.670367][T11147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  545.975687][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  546.479202][T11137] loop1: detected capacity change from 0 to 32768
[  546.539853][T11137] (syz.1.1750,11137,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  546.607904][T11137] (syz.1.1750,11137,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  546.658216][T11165] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1756'.
[  546.693189][T11137] JBD2: Ignoring recovery information on journal
[  546.746222][T11165] siw: device registration error -23
[  546.875504][T11137] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  547.327992][ T4266] ocfs2: Unmounting device (7,1) on (node local)
[  547.401119][T11183] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1761'.
[  547.496752][T11183] siw: device registration error -23
[  547.647065][   T14] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  548.046086][T11204] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input105
[  548.171265][T11206] loop4: detected capacity change from 0 to 512
[  549.089055][T11206] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  549.098129][T11206] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  549.121215][   T14] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  549.134838][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.170308][   T14] usb 6-1: config 0 descriptor??
[  549.226055][   T14] gspca_main: cpia1-2.14.0 probing 0813:0001
[  549.744531][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  550.001489][   T14] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  550.048856][T11227] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1770'.
[  550.202024][   T14] gspca_cpia1: usb_control_msg 01, error -32
[  550.216075][   T14] gspca_cpia1: usb_control_msg 01, error -71
[  550.238565][   T14] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  550.294258][   T14] usb 6-1: USB disconnect, device number 15
[  550.647910][T11242] loop7: detected capacity change from 0 to 8
[  550.814874][T11245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1776'.
[  550.925618][T11247] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1777'.
[  550.981707][T11247] siw: device registration error -23
[  551.043367][T11251] loop7: detected capacity change from 0 to 1024
[  551.412996][T11258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input106
[  552.542013][T11278] loop1: detected capacity change from 0 to 787
[  552.683152][T11282] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1783'.
[  552.735402][T11285] siw: device registration error -23
[  552.898020][T11278] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 50529027)!
[  552.985051][T11278] EXT4-fs (loop1): group descriptors corrupted!
[  554.371212][T11305] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1790'.
[  554.433807][T11305] siw: device registration error -23
[  554.523768][  T951] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  554.715674][  T951] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  554.740961][  T951] usb 6-1: config 0 has no interface number 0
[  554.771931][  T951] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.834053][  T951] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.882441][  T951] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  555.056980][  T951] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  555.073402][  T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.105634][  T951] usb 6-1: config 0 descriptor??
[  555.202331][T11319] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input107
[  555.935541][T11326] loop7: detected capacity change from 0 to 512
[  555.982462][  T951] uclogic 0003:28BD:0042.0014: failed retrieving string descriptor #100: -71
[  555.994106][  T951] uclogic 0003:28BD:0042.0014: failed retrieving pen parameters: -71
[  556.003225][  T951] uclogic 0003:28BD:0042.0014: pen probing failed: -71
[  556.011586][  T951] uclogic 0003:28BD:0042.0014: failed probing parameters: -71
[  556.031792][  T951] uclogic: probe of 0003:28BD:0042.0014 failed with error -71
[  556.045546][  T951] usb 6-1: USB disconnect, device number 16
[  556.053888][T11326] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.1794: Invalid inode bitmap blk 4 in block_group 0
[  556.233804][T11326] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  556.373841][T11326] EXT4-fs (loop7): shut down requested (1)
[  556.467691][T11341] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1797'.
[  556.518175][T10809] EXT4-fs (loop7): unmounting filesystem.
[  556.676086][T11347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1800'.
[  557.161682][T11347] netlink: 'syz.1.1800': attribute type 6 has an invalid length.
[  557.363261][T11347] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1800'.
[  557.696513][T11362] netlink: 220 bytes leftover after parsing attributes in process `syz.7.1804'.
[  557.783730][T11364] loop4: detected capacity change from 0 to 512
[  557.793002][T11364] EXT4-fs: Ignoring removed i_version option
[  557.799141][T11364] EXT4-fs: Ignoring removed oldalloc option
[  557.972747][T11364] EXT4-fs (loop4): 1 truncate cleaned up
[  557.978615][T11364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  558.548192][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  558.753184][T11374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input108
[  559.663419][ T4376] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  559.903958][ T4376] usb 8-1: Using ep0 maxpacket: 16
[  559.911110][ T4376] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.951055][ T4376] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.962584][ T4376] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  559.979680][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  559.989907][ T4376] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  560.000566][ T4376] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.046145][ T4376] usb 8-1: config 0 descriptor??
[  560.486215][ T4376] hid (null): unknown global tag 0xe
[  560.500092][ T4376] hid (null): unknown global tag 0xe
[  560.519227][ T4376] hid (null): unknown global tag 0xc
[  560.538903][ T4376] hid (null): unknown global tag 0xe
[  560.728838][T11415] loop4: detected capacity change from 0 to 512
[  560.735859][T11415] EXT4-fs: Ignoring removed i_version option
[  560.741876][T11415] EXT4-fs: Ignoring removed oldalloc option
[  561.712042][ T5234] usb 8-1: USB disconnect, device number 2
[  561.744938][T11415] EXT4-fs (loop4): 1 truncate cleaned up
[  561.750685][T11415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  562.716151][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  562.797007][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  562.813875][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  563.976934][T11454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1823'.
[  564.772951][T11478] tipc: Started in network mode
[  564.778121][T11478] tipc: Node identity 4, cluster identity 4711
[  564.784788][T11478] tipc: Node number set to 4
[  564.819583][T11478] loop7: detected capacity change from 0 to 512
[  564.829090][T11478] EXT4-fs: Ignoring removed i_version option
[  564.835195][T11478] EXT4-fs: Ignoring removed oldalloc option
[  565.484593][T11482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1832'.
[  565.497141][T11478] EXT4-fs (loop7): 1 truncate cleaned up
[  565.502866][T11478] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  565.681081][T10809] EXT4-fs (loop7): unmounting filesystem.
[  566.448837][T11504] loop4: detected capacity change from 0 to 4096
[  566.807349][ T4274] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  566.824066][ T4274] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  567.408994][T11533] loop1: detected capacity change from 0 to 256
[  567.461506][   T26] audit: type=1800 audit(1774633827.932:25): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1844" name="file2" dev="loop1" ino=1048671 res=0 errno=0
[  567.516853][  T951] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  567.754189][  T951] usb 8-1: Using ep0 maxpacket: 8
[  567.761102][  T951] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  567.810219][  T951] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  569.749173][T11547] loop1: detected capacity change from 0 to 512
[  569.759367][T11547] EXT4-fs: Ignoring removed i_version option
[  569.765552][T11547] EXT4-fs: Ignoring removed oldalloc option
[  570.200516][  T951] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  570.211665][  T951] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  570.224880][  T951] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  570.234561][  T951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.326108][    C1] raw-gadget.0 gadget.7: ignoring, device is not running
[  570.333599][  T951] usb 8-1: can't set config #16, error -32
[  570.384697][T11547] EXT4-fs (loop1): 1 truncate cleaned up
[  570.390374][T11547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  570.405205][  T951] usb 8-1: USB disconnect, device number 3
[  570.577022][T11562] program syz.4.1850 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  570.604666][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  570.610941][T11561] loop7: detected capacity change from 0 to 1024
[  570.694494][T11561] hfsplus: bad catalog entry type
[  570.753752][ T4311] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  570.786470][ T4729] hfsplus: b-tree write err: -5, ino 25
[  570.884311][ T4729] hfsplus: b-tree write err: -5, ino 4
[  570.944127][ T4311] usb 6-1: Using ep0 maxpacket: 16
[  570.957968][ T4311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.978123][ T4311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  570.992877][ T4311] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  571.007773][ T4311] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  571.021927][ T4311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.088948][ T4311] usb 6-1: config 0 descriptor??
[  571.373842][   T46] hfsplus: b-tree write err: -5, ino 2
[  571.379413][   T46] hfsplus: b-tree write err: -5, ino 26
[  571.611631][ T4311] microsoft 0003:045E:07DA.0016: No inputs registered, leaving
[  571.622964][T11576] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1854'.
[  571.672955][ T4311] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  571.717819][ T4311] microsoft 0003:045E:07DA.0016: no inputs found
[  571.725873][T11576] siw: device registration error -23
[  571.744042][ T4311] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway
[  571.916884][   T41] usb 6-1: USB disconnect, device number 17
[  572.021063][ T4376] kernel write not supported for file /input/mouse0 (pid: 4376 comm: kworker/0:6)
[  572.400333][T11596] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input109
[  573.189091][T11585] fido_id[11585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  573.354058][T11595] loop7: detected capacity change from 0 to 4096
[  573.799126][T10809] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22.
[  573.817354][T10809] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  573.834531][T11615] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1864'.
[  573.874535][T11615] siw: device registration error -23
[  574.361081][T11629] program syz.7.1869 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  574.885016][T11642] netlink: 'syz.7.1872': attribute type 32 has an invalid length.
[  574.923776][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1872'.
[  574.984214][T11642] (unnamed net_device) (uninitialized): option coupled_control: invalid value (20)
[  575.988051][T11657] netlink: 'syz.5.1877': attribute type 29 has an invalid length.
[  576.084937][T11660] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1878'.
[  576.120613][T11657] netlink: 'syz.5.1877': attribute type 29 has an invalid length.
[  576.134584][T11660] siw: device registration error -23
[  576.164202][T11659] netlink: 'syz.5.1877': attribute type 29 has an invalid length.
[  576.226414][T11661] netlink: 'syz.5.1877': attribute type 29 has an invalid length.
[  576.911126][T11682] loop1: detected capacity change from 0 to 512
[  576.920909][T11682] EXT4-fs: Ignoring removed i_version option
[  576.927013][T11682] EXT4-fs: Ignoring removed oldalloc option
[  577.175069][T11682] EXT4-fs (loop1): 1 truncate cleaned up
[  577.180843][T11682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  577.441470][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  577.559439][T11692] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1888'.
[  578.040204][T11707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input110
[  578.161278][T11710] loop4: detected capacity change from 0 to 512
[  578.271053][T11711] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1893'.
[  578.304391][ T5480] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  578.363899][T11710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  578.372897][T11710] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  578.387054][T11711] siw: device registration error -23
[  578.414403][T11718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1894'.
[  578.453009][T11718] siw: device registration error -23
[  578.515407][ T5480] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  578.544049][ T5480] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  578.595899][ T5480] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  578.620165][ T5480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.673962][ T5480] usb 6-1: Product: syz
[  578.719715][ T5480] usb 6-1: Manufacturer: syz
[  578.743712][ T5480] usb 6-1: SerialNumber: syz
[  578.775992][ T5480] usb 6-1: config 0 descriptor??
[  578.957025][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  579.011658][ T5480] usb 6-1: USB disconnect, device number 18
[  579.284011][ T4376] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  579.473757][ T4376] usb 2-1: Using ep0 maxpacket: 16
[  579.481010][ T4376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.517843][ T4376] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  579.556653][ T4376] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  579.639096][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.736884][ T4376] usb 2-1: config 0 descriptor??
[  580.522228][T11761] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input111
[  581.892193][T11758] loop7: detected capacity change from 0 to 512
[  581.900431][T11758] EXT4-fs: Ignoring removed i_version option
[  581.906643][T11758] EXT4-fs: Ignoring removed oldalloc option
[  582.385381][ T4376] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  582.405368][T11758] EXT4-fs (loop7): 1 truncate cleaned up
[  582.411096][T11758] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  582.602741][ T4376] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  582.653711][ T4376] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  582.660896][ T4376] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  582.719734][ T4376] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  582.753965][ T4376] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0
[  582.784466][ T4376] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x3
[  582.812085][ T4376] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x2
[  582.822218][ T4376] zeroplus 0003:0C12:0030.0017: unbalanced collection at end of report description
[  582.852904][ T4376] zeroplus 0003:0C12:0030.0017: parse failed
[  582.859245][ T4376] zeroplus: probe of 0003:0C12:0030.0017 failed with error -22
[  582.903950][   T22] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  582.918165][ T4376] usb 2-1: USB disconnect, device number 18
[  582.991912][T10809] EXT4-fs (loop7): unmounting filesystem.
[  583.125665][   T22] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  583.155074][   T22] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  583.223126][   T22] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  583.253304][T11774] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1906'.
[  583.299257][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.321243][T11774] siw: device registration error -23
[  583.404824][T11779] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1907'.
[  583.446439][T11779] siw: device registration error -23
[  583.573823][T11770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.582368][T11770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.666276][   T22] usb 6-1: usb_control_msg returned -71
[  583.671899][   T22] usbtmc 6-1:16.0: can't read capabilities
[  583.736735][T11784] loop4: detected capacity change from 0 to 512
[  583.864580][   T22] usb 6-1: USB disconnect, device number 19
[  583.926887][T11787] loop7: detected capacity change from 0 to 512
[  583.935027][T11784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  583.953945][T11784] ext4 filesystem being mounted at /392/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  584.046010][T11794] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input112
[  584.072055][T11787] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  584.074834][T11794] loop1: detected capacity change from 0 to 512
[  584.144013][T11787] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  584.160606][T11794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  584.170276][T11794] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  584.413869][ T5480] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  584.500696][T10809] EXT4-fs (loop7): unmounting filesystem.
[  584.611413][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  584.623800][ T5480] usb 1-1: Using ep0 maxpacket: 16
[  584.644498][ T5480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.711362][ T5480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  584.753267][ T5480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  584.794415][ T5480] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  585.060299][T11815] loop7: detected capacity change from 0 to 512
[  585.069885][T11815] EXT4-fs: Ignoring removed i_version option
[  585.076029][T11815] EXT4-fs: Ignoring removed oldalloc option
[  585.233887][T11815] EXT4-fs (loop7): 1 truncate cleaned up
[  585.239632][T11815] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  585.446969][ T5480] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  585.593511][ T5480] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  585.614916][ T5480] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  585.656030][ T5480] usb 1-1: Manufacturer: syz
[  585.687289][ T5480] usb 1-1: config 0 descriptor??
[  585.700720][T10809] EXT4-fs (loop7): unmounting filesystem.
[  585.916307][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.964141][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.026555][   T48] Bluetooth: hci1: link tx timeout
[  586.032297][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  586.234403][T11834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input114
[  586.355281][T11836] loop7: detected capacity change from 0 to 512
[  586.843141][T11837] loop4: detected capacity change from 0 to 512
[  586.852442][T11837] EXT4-fs: Ignoring removed i_version option
[  586.858613][T11837] EXT4-fs: Ignoring removed oldalloc option
[  586.997391][T11837] EXT4-fs (loop4): 1 truncate cleaned up
[  587.003169][T11837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  587.325748][T11836] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  587.335415][T11836] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.386815][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  587.564466][T10809] EXT4-fs (loop7): unmounting filesystem.
[  587.675369][T11848] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1921'.
[  587.693758][ T5480] rc_core: IR keymap rc-hauppauge not found
[  587.699727][ T5480] Registered IR keymap rc-empty
[  587.771666][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  587.796557][T11850] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1920'.
[  587.806958][T11848] siw: device registration error -23
[  587.836593][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  587.902862][ T5480] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  587.944877][ T5480] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input113
[  588.057240][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.064745][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  588.145862][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.213032][T11862] IPVS: sh: FWM 4 0x00000004 - no destination available
[  588.233961][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.294221][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.353795][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.404819][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  588.414319][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.459696][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.513825][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.532969][T11867] loop1: detected capacity change from 0 to 512
[  588.573996][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.619155][ T5480] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  588.652452][T11867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  588.704527][T11867] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  588.754767][ T5480] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  588.877060][ T5480] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  588.888901][T11876] loop4: detected capacity change from 0 to 256
[  588.947687][T11876] exfat: Deprecated parameter 'utf8'
[  588.953053][T11876] exfat: Deprecated parameter 'utf8'
[  588.970862][ T5480] usb 1-1: USB disconnect, device number 19
[  589.018894][T11876] exfat: Deprecated parameter 'utf8'
[  589.126041][T11876] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  589.319906][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  590.173899][ T5480] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  590.263771][   T22] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  590.300631][T11898] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1934'.
[  590.319603][T11898] siw: device registration error -23
[  590.404014][ T5480] usb 5-1: Using ep0 maxpacket: 32
[  590.413210][ T5480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[  590.441770][ T5480] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  590.495674][   T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  590.506727][ T5480] usb 5-1: string descriptor 0 read error: -22
[  590.513999][T11902] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1935'.
[  590.523404][ T5480] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  590.533047][   T22] usb 6-1: config 0 has no interfaces?
[  590.540213][T11902] siw: device registration error -23
[  590.545881][   T22] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  590.555866][ T5480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.568017][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.587721][T11892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  590.609431][ T5480] usb 5-1: MIDIStreaming interface descriptor not found
[  590.624204][   T22] usb 6-1: config 0 descriptor??
[  590.961991][   T14] usb 5-1: USB disconnect, device number 19
[  591.918187][T11920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input115
[  592.039233][T11922] loop7: detected capacity change from 0 to 512
[  592.425369][T11922] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  592.434545][T11922] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  592.496531][   T14] usb 6-1: USB disconnect, device number 20
[  592.839602][T10809] EXT4-fs (loop7): unmounting filesystem.
[  592.884345][T11936] loop4: detected capacity change from 0 to 1024
[  592.959286][T11936] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002]
[  592.995259][T11943] loop7: detected capacity change from 0 to 4096
[  593.035851][T11943] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  593.048764][T11936] System zones: 0-1, 3-36
[  593.057253][T11943] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  593.108154][T11936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  593.153592][T11943] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  593.233867][T11943] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  593.293869][T11943] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  593.312812][T11936] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  593.366800][T11943] ntfs: volume version 3.1.
[  593.446414][T11943] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  593.485541][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  593.540708][T11943] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  593.597483][T11943] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  593.637828][T11943] ntfs: (device loop7): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  593.655574][T11943] ntfs: (device loop7): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  593.741446][   T48] Bluetooth: hci1: link tx timeout
[  593.746795][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  593.764784][   T48] Bluetooth: hci1: link tx timeout
[  593.769994][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  594.146560][   T48] Bluetooth: hci1: link tx timeout
[  594.151765][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  594.363831][  T951] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  594.481920][T11967] loop7: detected capacity change from 0 to 512
[  594.491579][T11967] EXT4-fs: Ignoring removed i_version option
[  594.498037][T11967] EXT4-fs: Ignoring removed oldalloc option
[  594.686975][  T951] usb 2-1: Using ep0 maxpacket: 32
[  594.761314][T11967] EXT4-fs (loop7): 1 truncate cleaned up
[  594.767228][T11967] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  594.879653][   T48] Bluetooth: hci1: link tx timeout
[  594.885404][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  594.902675][  T951] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  595.109420][  T951] usb 2-1: config 0 has no interface number 0
[  595.139103][  T951] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  595.217053][  T951] usb 2-1: config 0 interface 85 has no altsetting 0
[  595.240066][   T48] Bluetooth: hci1: link tx timeout
[  595.241914][T10809] EXT4-fs (loop7): unmounting filesystem.
[  595.245347][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  595.247785][  T951] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  595.281478][   T48] Bluetooth: hci1: link tx timeout
[  595.286659][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  595.294596][  T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.302609][  T951] usb 2-1: Product: syz
[  595.307036][  T951] usb 2-1: Manufacturer: syz
[  595.311650][  T951] usb 2-1: SerialNumber: syz
[  595.319441][  T951] usb 2-1: config 0 descriptor??
[  595.344284][   T48] Bluetooth: hci1: link tx timeout
[  595.349554][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  595.448406][T11956] loop4: detected capacity change from 0 to 32768
[  595.546631][T11980] ea_get: invalid extended attribute
[  595.625465][T11980] ffff888054682830: 04 00 00 00                                      ....
[  595.774559][T11981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input117
[  595.808155][T11981] loop7: detected capacity change from 0 to 512
[  595.828670][T11981] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  595.837742][T11981] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  595.850466][   T48] Bluetooth: hci1: link tx timeout
[  595.855642][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  595.933164][  T951] appletouch 2-1:0.85: Geyser mode initialized.
[  595.946484][  T951] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input116
[  596.159545][  T951] usb 2-1: USB disconnect, device number 19
[  597.065931][  T951] appletouch 2-1:0.85: input: appletouch disconnected
[  597.209998][T12000] loop1: detected capacity change from 0 to 256
[  597.211976][T12002] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1967'.
[  597.258361][T12000] exfat: Deprecated parameter 'utf8'
[  597.273853][T12000] exfat: Deprecated parameter 'utf8'
[  597.279309][T12000] exfat: Deprecated parameter 'utf8'
[  597.315763][T12002] siw: device registration error -23
[  597.362495][T12000] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  597.413848][ T4376] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  597.607887][T12012] program syz.0.1961 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  597.619415][ T4376] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  597.653749][ T4376] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  597.669569][ T4376] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  597.730186][ T4376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.748868][T12014] loop1: detected capacity change from 0 to 1024
[  597.774842][T11996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  597.923713][T12014] hfsplus: xattr search failed
[  598.041031][ T5234] usb 5-1: USB disconnect, device number 20
[  598.464570][T10809] EXT4-fs (loop7): unmounting filesystem.
[  598.534187][  T125] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  598.733821][  T125] usb 2-1: Using ep0 maxpacket: 32
[  598.979754][T12032] loop7: detected capacity change from 0 to 512
[  598.989218][T12032] EXT4-fs: Ignoring removed i_version option
[  598.995339][T12032] EXT4-fs: Ignoring removed oldalloc option
[  599.511639][   T48] Bluetooth: hci1: link tx timeout
[  599.517166][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  599.536139][  T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.564932][T12032] EXT4-fs (loop7): 1 truncate cleaned up
[  599.570681][T12032] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  599.586684][  T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.614359][  T125] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  599.624043][  T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.638264][  T125] usb 2-1: config 0 descriptor??
[  599.646061][  T125] hub 2-1:0.0: USB hub found
[  599.760194][T10809] EXT4-fs (loop7): unmounting filesystem.
[  599.850711][   T48] Bluetooth: hci1: link tx timeout
[  599.856008][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  599.867669][  T125] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[  599.898036][T12043] loop7: detected capacity change from 0 to 1024
[  599.957380][T12043] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002]
[  599.975612][T12043] System zones: 0-1, 3-36
[  600.005362][T12043] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  600.044013][   T41] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  600.111695][T12043] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[  600.233729][   T41] usb 5-1: Using ep0 maxpacket: 32
[  600.243155][T10809] EXT4-fs (loop7): unmounting filesystem.
[  600.243942][   T41] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  600.293443][  T125] hid-generic 0003:046D:C31C.0018: item fetching failed at offset 0/1
[  600.295351][   T48] Bluetooth: hci1: link tx timeout
[  600.308236][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  600.312430][  T125] hid-generic: probe of 0003:046D:C31C.0018 failed with error -22
[  600.334123][   T41] usb 5-1: config 0 has no interface number 0
[  600.351753][   T41] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  600.361405][   T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.369760][   T41] usb 5-1: Product: syz
[  600.374284][   T41] usb 5-1: Manufacturer: syz
[  600.379333][   T41] usb 5-1: SerialNumber: syz
[  600.386471][   T41] usb 5-1: config 0 descriptor??
[  600.394373][   T41] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  600.598410][   T41] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  600.629249][T12049] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1972'.
[  600.664471][   T41] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  600.684837][  T125] usb 2-1: USB disconnect, device number 20
[  600.704911][T12049] siw: device registration error -23
[  601.160408][T12059] loop7: detected capacity change from 0 to 8192
[  601.177532][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  601.185818][   T41] usb 5-1: USB disconnect, device number 21
[  601.193307][   T41] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  601.252258][   T41] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  601.309564][   T41] quatech2 5-1:0.51: device disconnected
[  601.384255][  T951] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  601.593706][  T951] usb 1-1: Using ep0 maxpacket: 16
[  601.601026][  T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  601.638444][  T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  601.680510][  T951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  601.738990][  T951] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  601.768802][  T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.829941][  T951] usb 1-1: config 0 descriptor??
[  601.953972][T12075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1980'.
[  602.074453][T12062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.109781][T12062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.118189][   T41] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  602.419872][  T951] hid-generic 0003:0955:7214.0019: unknown main item tag 0x0
[  602.533817][T12090] loop7: detected capacity change from 0 to 512
[  602.541119][T12090] EXT4-fs: Ignoring removed i_version option
[  602.547218][T12090] EXT4-fs: Ignoring removed oldalloc option
[  602.554283][  T951] hid-generic 0003:0955:7214.0019: unknown main item tag 0x4
[  602.603444][   T41] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  602.628102][   T41] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  603.186952][  T951] hid-generic 0003:0955:7214.0019: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  603.244951][T12090] EXT4-fs (loop7): 1 truncate cleaned up
[  603.250643][T12090] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  603.292733][  T951] usb 1-1: USB disconnect, device number 20
[  603.301115][   T41] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config
[  603.473712][   T41] usb 2-1: config 220 has no interface number 2
[  603.493763][   T41] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  603.539708][   T41] usb 2-1: config 220 interface 0 has no altsetting 0
[  603.559183][   T41] usb 2-1: config 220 interface 76 has no altsetting 0
[  603.588394][   T41] usb 2-1: config 220 interface 1 has no altsetting 0
[  603.622666][   T41] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  603.641414][   T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.662166][   T41] usb 2-1: Product: syz
[  603.670646][T12097] loop4: detected capacity change from 0 to 8192
[  603.671880][   T41] usb 2-1: Manufacturer: syz
[  603.690252][T12095] fido_id[12095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  603.702373][   T41] usb 2-1: SerialNumber: syz
[  603.720544][T10809] EXT4-fs (loop7): unmounting filesystem.
[  603.786272][T12097] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  603.848244][T12097] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  603.858011][T12097] REISERFS (device loop4): using ordered data mode
[  603.865365][T12097] reiserfs: using flush barriers
[  603.925171][T12097] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  603.941658][   T41] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  603.948401][T12097] REISERFS (device loop4): checking transaction log (loop4)
[  603.956038][   T41] usb 2-1: No valid video chain found.
[  603.961923][   T41] usb 2-1: selecting invalid altsetting 0
[  603.998580][   T41] usb 2-1: selecting invalid altsetting 0
[  604.031318][   T41] usbtest: probe of 2-1:220.1 failed with error -22
[  604.126310][   T41] usb 2-1: USB disconnect, device number 21
[  604.260377][T12097] REISERFS (device loop4): Using tea hash to sort names
[  604.289450][T12105] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1986'.
[  604.291061][T12097] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  604.360720][T12105] siw: device registration error -23
[  604.976726][T12125] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input118
[  605.002727][T12125] loop1: detected capacity change from 0 to 512
[  605.156813][T12125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  605.166097][T12125] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  605.240761][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  605.522194][T12148] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1994'.
[  605.533964][T12146] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1993'.
[  605.583727][ T4319] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  605.783874][ T4319] usb 8-1: Using ep0 maxpacket: 8
[  605.790819][ T4319] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  605.829716][ T4319] usb 8-1: config 179 has no interface number 0
[  605.860104][ T4319] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  605.912158][ T4319] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  605.953887][ T4319] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  605.983977][ T4319] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  605.993868][  T125] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  606.005992][ T4319] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  606.051833][ T4319] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  606.067152][ T4319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.110621][T12143] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  606.195681][  T125] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  606.218630][   T48] Bluetooth: hci1: link tx timeout
[  606.224056][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  606.255069][  T125] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  606.284870][  T125] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  606.352363][  T125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  606.390800][ T4319] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input119
[  606.401301][  T951] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  606.445647][  T125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  606.540443][  T125] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  606.574577][  T125] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  606.593568][ T4319] usb 8-1: USB disconnect, device number 4
[  606.599525][    C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  606.599553][    C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  606.616471][  T951] usb 2-1: Using ep0 maxpacket: 16
[  606.624516][  T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.654279][  T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  606.687035][  T125] usb 6-1: Product: syz
[  606.699445][  T125] usb 6-1: Manufacturer: syz
[  606.700226][ T4319] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  606.726942][  T125] cdc_wdm 6-1:1.0: skipping garbage
[  606.748217][  T125] cdc_wdm 6-1:1.0: skipping garbage
[  606.765194][  T951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  606.800055][  T951] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  606.821711][  T125] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  606.829273][  T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.837539][  T125] cdc_wdm 6-1:1.0: Unknown control protocol
[  606.870596][  T951] usb 2-1: config 0 descriptor??
[  606.939965][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  606.946877][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  606.953176][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  606.959786][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  606.966527][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  606.973157][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  607.003985][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  607.010627][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  607.023836][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  607.030468][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  607.036970][   T41] usb 6-1: USB disconnect, device number 21
[  607.089328][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.113780][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.327409][T12180] device erspan0 entered promiscuous mode
[  607.358720][  T951] hid-generic 0003:0955:7214.001A: unknown main item tag 0x0
[  607.406802][  T951] hid-generic 0003:0955:7214.001A: unknown main item tag 0x4
[  607.498185][  T951] hid-generic 0003:0955:7214.001A: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  607.584644][  T951] usb 2-1: USB disconnect, device number 22
[  607.866071][T12190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input120
[  608.218188][T12186] fido_id[12186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  608.380928][T12204] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2008'.
[  608.445798][T12204] siw: device registration error -23
[  608.599218][T12212] loop7: detected capacity change from 0 to 128
[  609.570917][T12236] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input121
[  609.933867][T12253] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2022'.
[  610.016700][T12253] siw: device registration error -23
[  610.034800][T12255] netlink: 'syz.7.2023': attribute type 2 has an invalid length.
[  610.556503][T12277] loop4: detected capacity change from 0 to 512
[  610.563469][T12277] EXT4-fs: Ignoring removed i_version option
[  610.569584][T12277] EXT4-fs: Ignoring removed oldalloc option
[  611.625534][T12277] EXT4-fs (loop4): 1 truncate cleaned up
[  611.631232][T12277] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  611.867550][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  612.258747][T12294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2033'.
[  612.332108][T12294] siw: device registration error -23
[  612.474565][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2035'.
[  612.562736][T12303] IPv6: NLM_F_CREATE should be specified when creating new route
[  612.664338][T12311] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2038'.
[  612.792816][T12311] siw: device registration error -23
[  614.186255][T12338] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2048'.
[  614.241748][T12338] siw: device registration error -23
[  614.570461][T12350] loop4: detected capacity change from 0 to 512
[  614.580092][T12350] EXT4-fs: Ignoring removed i_version option
[  614.586220][T12350] EXT4-fs: Ignoring removed oldalloc option
[  614.849610][T12350] EXT4-fs (loop4): 1 truncate cleaned up
[  614.855501][T12350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  615.144906][T12354] netlink: 'syz.5.2050': attribute type 1 has an invalid length.
[  615.160167][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  615.203785][T12354] netlink: 'syz.5.2050': attribute type 2 has an invalid length.
[  615.415725][T12365] xt_connbytes: Forcing CT accounting to be enabled
[  615.436119][T12362] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2052'.
[  616.620937][  T125] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  617.350901][  T125] usb 2-1: unable to get BOS descriptor or descriptor too short
[  617.369164][  T125] usb 2-1: not running at top speed; connect to a high speed hub
[  617.402682][  T125] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  617.432394][  T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.504690][  T125] usb 2-1: Product: syz
[  617.508905][  T125] usb 2-1: Manufacturer: syz
[  617.513520][  T125] usb 2-1: SerialNumber: syz
[  618.074524][T12411] program syz.7.2064 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  618.926966][  T125] usb 2-1: USB disconnect, device number 23
[  619.085855][T12420] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2065'.
[  619.146180][T12420] siw: device registration error -23
[  619.426963][T12425] loop7: detected capacity change from 0 to 512
[  620.131127][T12433] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2068'.
[  620.141988][T12433] siw: device registration error -23
[  620.142066][T12425] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  620.156412][T12425] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  620.387750][T10809] EXT4-fs (loop7): unmounting filesystem.
[  620.727172][T12446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input122
[  621.242534][   T48] Bluetooth: hci1: link tx timeout
[  621.247895][   T48] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  622.422185][T12475] loop7: detected capacity change from 0 to 1024
[  622.525263][T12479] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2079'.
[  622.575005][T12479] siw: device registration error -23
[  622.582289][T12475] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  622.715979][T12475] ==================================================================
[  622.724082][T12475] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x965/0x1e90
[  622.731864][T12475] Read of size 18446744073709551588 at addr ffff8880555db840 by task syz.7.2077/12475
[  622.741509][T12475] 
[  622.743864][T12475] CPU: 0 PID: 12475 Comm: syz.7.2077 Not tainted syzkaller #0
[  622.751338][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  622.761423][T12475] Call Trace:
[  622.764714][T12475]  <TASK>
[  622.767659][T12475]  dump_stack_lvl+0x188/0x24e
[  622.772363][T12475]  ? __lock_acquire+0x7d10/0x7d10
[  622.777412][T12475]  ? show_regs_print_info+0x12/0x12
[  622.782612][T12475]  ? load_image+0x400/0x400
[  622.787113][T12475]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  622.792565][T12475]  ? __virt_addr_valid+0x188/0x540
[  622.797684][T12475]  ? __virt_addr_valid+0x465/0x540
[  622.802792][T12475]  ? ext4_xattr_set_entry+0x965/0x1e90
[  622.808249][T12475]  print_report+0xa8/0x210
[  622.812661][T12475]  kasan_report+0x10b/0x140
[  622.817166][T12475]  ? ext4_xattr_set_entry+0x965/0x1e90
[  622.822620][T12475]  ? ext4_xattr_set_entry+0x965/0x1e90
[  622.828074][T12475]  kasan_check_range+0x235/0x290
[  622.833014][T12475]  ? ext4_xattr_set_entry+0x965/0x1e90
[  622.838466][T12475]  memmove+0x25/0x60
[  622.842352][T12475]  ext4_xattr_set_entry+0x965/0x1e90
[  622.847640][T12475]  ext4_xattr_block_set+0xae4/0x32b0
[  622.852922][T12475]  ? ext4_destroy_inode+0x200/0x200
[  622.858127][T12475]  ? proc_nr_inodes+0x2f0/0x2f0
[  622.862975][T12475]  ? _raw_spin_unlock+0x24/0x40
[  622.867816][T12475]  ? iput+0x768/0x980
[  622.871794][T12475]  ? ext4_xattr_block_find+0x2b0/0x2b0
[  622.877252][T12475]  ? ext4_xattr_ibody_set+0x509/0x690
[  622.882721][T12475]  ext4_xattr_set_handle+0xe3b/0x1570
[  622.888188][T12475]  ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[  622.894167][T12475]  ext4_xattr_set+0x242/0x320
[  622.898843][T12475]  ? end_current_label_crit_section+0x170/0x170
[  622.905090][T12475]  ? ext4_xattr_set_credits+0x290/0x290
[  622.910630][T12475]  ? evm_protect_xattr+0x7e9/0x9d0
[  622.915737][T12475]  ? ext4_xattr_security_get+0x40/0x40
[  622.921196][T12475]  __vfs_setxattr+0x3e0/0x420
[  622.925877][T12475]  __vfs_setxattr_noperm+0x129/0x5e0
[  622.931159][T12475]  vfs_setxattr+0x167/0x2e0
[  622.935659][T12475]  ? xattr_permission+0x500/0x500
[  622.940677][T12475]  ? _copy_from_user+0x10b/0x170
[  622.945610][T12475]  ? setxattr+0x2ce/0x360
[  622.949942][T12475]  setxattr+0x346/0x360
[  622.954096][T12475]  ? path_setxattr+0x290/0x290
[  622.958862][T12475]  ? __mnt_want_write+0x21f/0x2a0
[  622.963885][T12475]  path_setxattr+0x147/0x290
[  622.968477][T12475]  ? simple_xattr_list_add+0xf0/0xf0
[  622.973769][T12475]  ? lock_chain_count+0x20/0x20
[  622.978620][T12475]  __x64_sys_setxattr+0xb7/0xd0
[  622.983468][T12475]  do_syscall_64+0x4c/0xa0
[  622.987883][T12475]  ? clear_bhb_loop+0x60/0xb0
[  622.992556][T12475]  ? clear_bhb_loop+0x60/0xb0
[  622.997232][T12475]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  623.003118][T12475] RIP: 0033:0x7f44dfd9c799
[  623.007535][T12475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  623.027133][T12475] RSP: 002b:00007f44e0ced028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  623.035539][T12475] RAX: ffffffffffffffda RBX: 00007f44e0015fa0 RCX: 00007f44dfd9c799
[  623.043523][T12475] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100
[  623.051486][T12475] RBP: 00007f44dfe32c99 R08: 0000000000000000 R09: 0000000000000000
[  623.059446][T12475] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  623.067411][T12475] R13: 00007f44e0016038 R14: 00007f44e0015fa0 R15: 00007ffdcad671d8
[  623.075381][T12475]  </TASK>
[  623.078389][T12475] 
[  623.080705][T12475] Allocated by task 12475:
[  623.085110][T12475]  kasan_set_track+0x4b/0x70
[  623.089701][T12475]  __kasan_kmalloc+0x8e/0xa0
[  623.094300][T12475]  __kmalloc_node_track_caller+0xae/0x230
[  623.100047][T12475]  kmemdup+0x27/0x60
[  623.103948][T12475]  ext4_xattr_block_set+0x9e6/0x32b0
[  623.109235][T12475]  ext4_xattr_set_handle+0xe3b/0x1570
[  623.114619][T12475]  ext4_xattr_set+0x242/0x320
[  623.119306][T12475]  __vfs_setxattr+0x3e0/0x420
[  623.123988][T12475]  __vfs_setxattr_noperm+0x129/0x5e0
[  623.129281][T12475]  vfs_setxattr+0x167/0x2e0
[  623.133784][T12475]  setxattr+0x346/0x360
[  623.137939][T12475]  path_setxattr+0x147/0x290
[  623.142529][T12475]  __x64_sys_setxattr+0xb7/0xd0
[  623.147393][T12475]  do_syscall_64+0x4c/0xa0
[  623.151820][T12475]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  623.157724][T12475] 
[  623.160042][T12475] Last potentially related work creation:
[  623.165834][T12475]  kasan_save_stack+0x3a/0x60
[  623.170517][T12475]  __kasan_record_aux_stack+0xb2/0xc0
[  623.175883][T12475]  call_rcu+0x14f/0x990
[  623.180039][T12475]  sctp_association_free+0x69d/0x7e0
[  623.185324][T12475]  sctp_do_sm+0x3725/0x55f0
[  623.189821][T12475]  sctp_assoc_bh_rcv+0x3ee/0x630
[  623.194756][T12475]  sctp_backlog_rcv+0x15f/0x370
[  623.199651][T12475]  __release_sock+0x1e1/0x450
[  623.204321][T12475]  release_sock+0x5b/0x1b0
[  623.208726][T12475]  sctp_wait_for_connect+0x38b/0x680
[  623.214007][T12475]  sctp_sendmsg_to_asoc+0x13e5/0x1830
[  623.219371][T12475]  sctp_sendmsg+0x1984/0x2940
[  623.224044][T12475]  __sys_sendto+0x497/0x650
[  623.228543][T12475]  __x64_sys_sendto+0xda/0xf0
[  623.233212][T12475]  do_syscall_64+0x4c/0xa0
[  623.237624][T12475]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  623.243508][T12475] 
[  623.245822][T12475] The buggy address belongs to the object at ffff8880555db800
[  623.245822][T12475]  which belongs to the cache kmalloc-1k of size 1024
[  623.259863][T12475] The buggy address is located 64 bytes inside of
[  623.259863][T12475]  1024-byte region [ffff8880555db800, ffff8880555dbc00)
[  623.273129][T12475] 
[  623.275440][T12475] The buggy address belongs to the physical page:
[  623.281849][T12475] page:ffffea0001557600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x555d8
[  623.291993][T12475] head:ffffea0001557600 order:3 compound_mapcount:0 compound_pincount:0
[  623.300302][T12475] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  623.308300][T12475] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0
[  623.316888][T12475] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  623.325471][T12475] page dumped because: kasan: bad access detected
[  623.331881][T12475] page_owner tracks the page as allocated
[  623.337584][T12475] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4313, tgid 4313 (kworker/u4:5), ts 335679571834, free_ts 335662179410
[  623.358413][T12475]  post_alloc_hook+0x173/0x1a0
[  623.363197][T12475]  get_page_from_freelist+0x1a1e/0x1ab0
[  623.368756][T12475]  __alloc_pages+0x1ec/0x4f0
[  623.373356][T12475]  alloc_slab_page+0x5d/0x160
[  623.378032][T12475]  new_slab+0x87/0x2c0
[  623.382110][T12475]  ___slab_alloc+0xbc6/0x1240
[  623.386791][T12475]  __kmem_cache_alloc_node+0x1a0/0x260
[  623.392260][T12475]  __kmalloc+0xa0/0x240
[  623.396428][T12475]  ieee802_11_parse_elems_full+0xb5/0x1220
[  623.402240][T12475]  ieee80211_ibss_rx_queued_mgmt+0x3ed/0x2cd0
[  623.408310][T12475]  ieee80211_iface_work+0x726/0xc80
[  623.413507][T12475]  cfg80211_wiphy_work+0x221/0x260
[  623.418615][T12475]  process_one_work+0x8a2/0x1160
[  623.423544][T12475]  worker_thread+0xaa2/0x1270
[  623.428213][T12475]  kthread+0x29d/0x330
[  623.432272][T12475]  ret_from_fork+0x1f/0x30
[  623.436684][T12475] page last free stack trace:
[  623.441348][T12475]  free_unref_page_prepare+0x8b4/0x9a0
[  623.446809][T12475]  free_unref_page+0x2e/0x3f0
[  623.451479][T12475]  __unfreeze_partials+0x1a5/0x200
[  623.456584][T12475]  put_cpu_partial+0x17c/0x250
[  623.461339][T12475]  qlist_free_all+0x76/0xe0
[  623.465832][T12475]  kasan_quarantine_reduce+0x144/0x160
[  623.471369][T12475]  __kasan_slab_alloc+0x1e/0x80
[  623.476215][T12475]  slab_post_alloc_hook+0x4b/0x480
[  623.481318][T12475]  __kmem_cache_alloc_node+0x140/0x260
[  623.486784][T12475]  __kmalloc+0xa0/0x240
[  623.490955][T12475]  security_task_alloc+0x42/0x130
[  623.495987][T12475]  copy_process+0x17df/0x4030
[  623.500662][T12475]  kernel_clone+0x24b/0x900
[  623.505158][T12475]  __se_sys_clone3+0x32d/0x3f0
[  623.509916][T12475]  do_syscall_64+0x4c/0xa0
[  623.514327][T12475]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  623.520214][T12475] 
[  623.522526][T12475] Memory state around the buggy address:
[  623.528138][T12475]  ffff8880555db700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  623.536193][T12475]  ffff8880555db780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  623.544241][T12475] >ffff8880555db800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  623.552297][T12475]                                            ^
[  623.558432][T12475]  ffff8880555db880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  623.566477][T12475]  ffff8880555db900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  623.574523][T12475] ==================================================================
[  623.899421][T12485] syz.1.2080 (12485) used greatest stack depth: 18096 bytes left
[  623.949195][T12475] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  623.956427][T12475] CPU: 0 PID: 12475 Comm: syz.7.2077 Not tainted syzkaller #0
[  623.963967][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  623.974027][T12475] Call Trace:
[  623.977302][T12475]  <TASK>
[  623.980226][T12475]  dump_stack_lvl+0x188/0x24e
[  623.984932][T12475]  ? memcpy+0x3c/0x60
[  623.988918][T12475]  ? show_regs_print_info+0x12/0x12
[  623.994127][T12475]  ? load_image+0x400/0x400
[  623.998632][T12475]  panic+0x2e5/0x730
[  624.002525][T12475]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  624.008868][T12475]  ? bpf_jit_dump+0xd0/0xd0
[  624.013379][T12475]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  624.019356][T12475]  ? _raw_spin_unlock+0x40/0x40
[  624.024200][T12475]  check_panic_on_warn+0x80/0xa0
[  624.029135][T12475]  ? ext4_xattr_set_entry+0x965/0x1e90
[  624.034589][T12475]  end_report+0x66/0x110
[  624.038831][T12475]  kasan_report+0x118/0x140
[  624.043331][T12475]  ? ext4_xattr_set_entry+0x965/0x1e90
[  624.048783][T12475]  ? ext4_xattr_set_entry+0x965/0x1e90
[  624.054236][T12475]  kasan_check_range+0x235/0x290
[  624.059167][T12475]  ? ext4_xattr_set_entry+0x965/0x1e90
[  624.064619][T12475]  memmove+0x25/0x60
[  624.068504][T12475]  ext4_xattr_set_entry+0x965/0x1e90
[  624.073790][T12475]  ext4_xattr_block_set+0xae4/0x32b0
[  624.079070][T12475]  ? ext4_destroy_inode+0x200/0x200
[  624.084261][T12475]  ? proc_nr_inodes+0x2f0/0x2f0
[  624.089107][T12475]  ? _raw_spin_unlock+0x24/0x40
[  624.093948][T12475]  ? iput+0x768/0x980
[  624.097924][T12475]  ? ext4_xattr_block_find+0x2b0/0x2b0
[  624.103379][T12475]  ? ext4_xattr_ibody_set+0x509/0x690
[  624.108746][T12475]  ext4_xattr_set_handle+0xe3b/0x1570
[  624.114120][T12475]  ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[  624.120111][T12475]  ext4_xattr_set+0x242/0x320
[  624.124785][T12475]  ? end_current_label_crit_section+0x170/0x170
[  624.131023][T12475]  ? ext4_xattr_set_credits+0x290/0x290
[  624.136564][T12475]  ? evm_protect_xattr+0x7e9/0x9d0
[  624.141670][T12475]  ? ext4_xattr_security_get+0x40/0x40
[  624.147132][T12475]  __vfs_setxattr+0x3e0/0x420
[  624.151810][T12475]  __vfs_setxattr_noperm+0x129/0x5e0
[  624.157091][T12475]  vfs_setxattr+0x167/0x2e0
[  624.161678][T12475]  ? xattr_permission+0x500/0x500
[  624.166705][T12475]  ? _copy_from_user+0x10b/0x170
[  624.171635][T12475]  ? setxattr+0x2ce/0x360
[  624.175960][T12475]  setxattr+0x346/0x360
[  624.180131][T12475]  ? path_setxattr+0x290/0x290
[  624.184928][T12475]  ? __mnt_want_write+0x21f/0x2a0
[  624.189966][T12475]  path_setxattr+0x147/0x290
[  624.194564][T12475]  ? simple_xattr_list_add+0xf0/0xf0
[  624.199847][T12475]  ? lock_chain_count+0x20/0x20
[  624.204699][T12475]  __x64_sys_setxattr+0xb7/0xd0
[  624.209545][T12475]  do_syscall_64+0x4c/0xa0
[  624.213961][T12475]  ? clear_bhb_loop+0x60/0xb0
[  624.218630][T12475]  ? clear_bhb_loop+0x60/0xb0
[  624.223307][T12475]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  624.229190][T12475] RIP: 0033:0x7f44dfd9c799
[  624.233596][T12475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.253209][T12475] RSP: 002b:00007f44e0ced028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  624.261623][T12475] RAX: ffffffffffffffda RBX: 00007f44e0015fa0 RCX: 00007f44dfd9c799
[  624.269589][T12475] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100
[  624.277551][T12475] RBP: 00007f44dfe32c99 R08: 0000000000000000 R09: 0000000000000000
[  624.285517][T12475] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  624.293475][T12475] R13: 00007f44e0016038 R14: 00007f44e0015fa0 R15: 00007ffdcad671d8
[  624.301444][T12475]  </TASK>
[  624.304804][T12475] Kernel Offset: disabled
[  624.309118][T12475] Rebooting in 86400 seconds..