last executing test programs:

24m29.684454598s ago: executing program 32 (id=184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/177, 0xa1}], 0x3}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000000000)=""/164, 0xa4}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001a80)=""/85, 0x55}], 0xb}, 0x81}], 0x4000000000000f9, 0x40012032, 0x0)

21m22.587167126s ago: executing program 33 (id=2582):
r0 = socket(0x1, 0x5, 0x0)
close(r0)
inotify_init()
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040))

19m14.646382857s ago: executing program 34 (id=4297):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x0, {0xa, 0x3, 0x7, 0xfffffffe}})
syz_ublk_setup_io_uring(0x506e, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x129}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140))
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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")
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
fdatasync(r7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r7, 0xc00)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000540), &(0x7f0000000700)=r3}, 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x390, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x360, 0x2, [@TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xffffffffffffff13, 0x2, "bc36617e3f5bd536cabe3adff40f316299b9d93110de5ecc19b02375366598d37159e29612c009d44c22e4549d5a868d1c4d76e55503b1bb4c2a2ad8b5b0e63a0de641e37396d70cd0537243fcef1cbcac648d77944064a7b8605f7826043b6e1b5dc6e4eef98813adb37a543f0e38bcc33f64013df0346a3c082873dcea96d49850d12794eb350db3f737030106e3c587b15080f4d4b9975e81f52826f010ffd08ae0136a6dba02f1e9284aa9d8c0cd6fabc346dbf6d1870a1c8ea6b3627124167d375119d370b866f15bfcba311d9c0290def3399a9a65d1a5edfb6069bd96e38706702756abd6d07bdb4623f00613831bdbfb43b7cf2013a592298a297679"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x390}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000d00)={'gre0\x00', <r12=>r11, 0x7800, 0x80, 0x3, 0x5, {{0x1b, 0x4, 0x0, 0x9, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x5, [{@empty, 0x1}]}, @rr={0x7, 0x7, 0x15, [@multicast1]}, @lsrr={0x83, 0xf, 0xb5, [@remote, @dev={0xac, 0x14, 0x14, 0x3f}, @empty]}, @ssrr={0x89, 0x7, 0xbc, [@local]}, @ssrr={0x89, 0x27, 0xd, [@broadcast, @multicast2, @private=0xa010102, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0xc0d8)

18m4.898537457s ago: executing program 35 (id=5168):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x5, 0x7}, {0x3a62c59e, 0x1ff}, 0x7fff, 0x5})

14m22.416538599s ago: executing program 36 (id=8269):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]})

12m28.230702567s ago: executing program 37 (id=9941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}]}, 0x1c}}, 0x8000)

10m55.017898829s ago: executing program 38 (id=11326):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@sack_info={0x0, 0xfffffff8, 0xb}, &(0x7f0000000940)=0xc)

10m17.291009826s ago: executing program 39 (id=11854):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7201}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0)

9m45.943501585s ago: executing program 40 (id=12261):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

9m25.749351142s ago: executing program 1 (id=12582):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000006c0)={0x2, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x7e}}}]}, 0x110)

9m25.748853512s ago: executing program 1 (id=12584):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00005e9000/0x3000)=nil, 0x3000, 0x300})

9m25.667536063s ago: executing program 1 (id=12586):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xb4c0b7e6e5653f76}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
close_range(r0, 0xffffffffffffffff, 0x2)

9m22.516951644s ago: executing program 1 (id=12624):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[])

9m22.398180471s ago: executing program 1 (id=12625):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

9m22.029562649s ago: executing program 1 (id=12628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797aa2f0000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)

9m21.879981539s ago: executing program 41 (id=12628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797aa2f0000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)

9m9.748726078s ago: executing program 2 (id=12753):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='%rdma'], 0xe)

9m9.688534565s ago: executing program 2 (id=12754):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x2}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4c, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0x3800, 0x8, 0x0, 0xe190, 0x3}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0)

9m9.688354089s ago: executing program 2 (id=12755):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000084000000000000007200000000000020200000000000000084"], 0x38}, 0x41)

9m9.626882206s ago: executing program 2 (id=12756):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x1000400, &(0x7f0000000200)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}]}, 0x1, 0x5cd, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0x800, &(0x7f0000000240))

9m9.626487436s ago: executing program 2 (id=12757):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0x2, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x5776d45a, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xc, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001})

9m9.3047139s ago: executing program 2 (id=12758):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x0)

9m9.183612461s ago: executing program 42 (id=12758):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x0)

5m39.145457405s ago: executing program 0 (id=15155):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268)

5m39.085957669s ago: executing program 0 (id=15157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(0x3)

5m39.08538128s ago: executing program 0 (id=15159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4)
syz_open_dev$dri(0x0, 0x1, 0x0)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r5, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000100)=0xd)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000)

5m38.085223327s ago: executing program 0 (id=15173):
unshare(0x4000400)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r0, &(0x7f0000000100)=""/134, 0x86)

5m37.974375091s ago: executing program 0 (id=15175):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x141202)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000340)={0x0, 0x0, 0x3013, 0xff, 0x1, 0x2000, 0x1})

5m36.865534816s ago: executing program 0 (id=15183):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
close(0x3)
dup(r2)
writev(r0, &(0x7f0000000740)=[{&(0x7f00000008c0)='X', 0x1}], 0x1)

5m36.801459529s ago: executing program 43 (id=15183):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
close(0x3)
dup(r2)
writev(r0, &(0x7f0000000740)=[{&(0x7f00000008c0)='X', 0x1}], 0x1)

5m0.483933413s ago: executing program 5 (id=15571):
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)

4m59.446660344s ago: executing program 6 (id=15580):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
exit(0xfffffffffffffffb)
fchdir(r0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0)

4m59.255571122s ago: executing program 5 (id=15581):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
getdents64(r0, 0xffffffffffffffff, 0x43)

4m59.255378045s ago: executing program 5 (id=15582):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
sendto$inet(r0, &(0x7f0000000580)='g', 0x1, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x0)

4m58.966235289s ago: executing program 3 (id=15586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="611890727000fedbdf250300000008000100", @ANYRES32=r2], 0x60}, 0x1, 0x60, 0x0, 0x4000431}, 0x4040084)

4m58.966032555s ago: executing program 3 (id=15587):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flistxattr(r0, 0x0, 0x100000000)

4m58.892079904s ago: executing program 3 (id=15588):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000180001000000005955ee0e662d"], 0x24}}, 0x0)

4m58.891725991s ago: executing program 3 (id=15589):
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./bus\x00', 0x2000040, &(0x7f0000000180)={[{@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_lower}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@shortname_win95}, {@uni_xlate}]}, 0x21, 0x382, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9)

4m58.834654513s ago: executing program 3 (id=15590):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

4m58.766168627s ago: executing program 3 (id=15591):
r0 = io_uring_setup(0x136a, &(0x7f0000000300)={0x0, 0x201f89, 0x0, 0x3, 0x288})
r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000)
io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m58.583971781s ago: executing program 6 (id=15592):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000001c0))

4m58.583724232s ago: executing program 6 (id=15593):
r0 = socket$inet(0x2, 0x2, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x41, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}})
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)

4m58.511710036s ago: executing program 6 (id=15594):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)

4m58.289511734s ago: executing program 5 (id=15595):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000fc0)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x8c2ef9f38faebbd2, @in6={0xa, 0x4e24, 0xde3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0xa0)

4m58.17203072s ago: executing program 5 (id=15596):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)

4m58.171531287s ago: executing program 6 (id=15597):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040))

4m58.145219186s ago: executing program 6 (id=15598):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0xc1bdf10000000003, 0x100000000, 0x1, 0xfffffffffffffff2, 0x1, 0x1, 0x200, 0x0, 0x300, 0x1, 0x2, 0x4494, 0x0, 0x9, 0x82, 0x0, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x7})
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

4m24.13302092s ago: executing program 5 (id=15599):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
futimesat(0xffffffffffffff9c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0xfcfa, 0x0}, 0x20000818)

4m23.902676171s ago: executing program 44 (id=15598):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0xc1bdf10000000003, 0x100000000, 0x1, 0xfffffffffffffff2, 0x1, 0x1, 0x200, 0x0, 0x300, 0x1, 0x2, 0x4494, 0x0, 0x9, 0x82, 0x0, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x7})
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

4m23.860742562s ago: executing program 45 (id=15591):
r0 = io_uring_setup(0x136a, &(0x7f0000000300)={0x0, 0x201f89, 0x0, 0x3, 0x288})
r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000)
io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m23.791525008s ago: executing program 46 (id=15599):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
futimesat(0xffffffffffffff9c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0xfcfa, 0x0}, 0x20000818)

1m56.264421813s ago: executing program 8 (id=16669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x40000)

1m56.204629463s ago: executing program 8 (id=16670):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

1m56.144891046s ago: executing program 8 (id=16671):
r0 = socket(0x10, 0x3, 0x9)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7fffffffffffffff)

1m55.230528718s ago: executing program 8 (id=16680):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp")
r0 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x0)

1m54.910799581s ago: executing program 8 (id=16687):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4004550c, 0x0)

1m54.252645777s ago: executing program 8 (id=16697):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001680)={0x0, 0x200000, 0x0, 0x0, 0x6, 0x8ca8})
r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_clone3(&(0x7f0000000880)={0x102000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0], 0x1}, 0x58)

1m53.980882447s ago: executing program 47 (id=16697):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001680)={0x0, 0x200000, 0x0, 0x0, 0x6, 0x8ca8})
r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_clone3(&(0x7f0000000880)={0x102000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0], 0x1}, 0x58)

1.987509406s ago: executing program 4 (id=17555):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)

1.987234607s ago: executing program 4 (id=17556):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0)

1.916251087s ago: executing program 4 (id=17557):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000000024"], 0xd0}}, 0x0)

1.915785938s ago: executing program 4 (id=17558):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x43, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "60924fdb"}]}}, 0x0}, 0x0)

1.525975745s ago: executing program 9 (id=17560):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)

1.437188657s ago: executing program 9 (id=17561):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef)
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0)

1.43696565s ago: executing program 9 (id=17562):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240500000000000000000200010000000c240304"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

1.29175773s ago: executing program 7 (id=17564):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x483, &(0x7f0000000580)="$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")
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.217316996s ago: executing program 7 (id=17565):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

325.283712ms ago: executing program 7 (id=17566):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200025a726bd7000fddbdf250a0000cdff0000010200010008000600000000000c000c00e5"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x27)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES8=r1], 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r4, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x38}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800)

289.569525ms ago: executing program 7 (id=17567):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = getpgrp(0xffffffffffffffff)
syz_pidfd_open(r1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040))
gettid()
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x6)

265.567718ms ago: executing program 4 (id=17568):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x9fd6], [0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

193.401265ms ago: executing program 9 (id=17569):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/4096, 0x1000)

192.367525ms ago: executing program 7 (id=17570):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000028c0)='./file1\x00', 0x2a08800, &(0x7f0000000040)=ANY=[], 0x1, 0x6af, &(0x7f0000003180)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

191.920252ms ago: executing program 4 (id=17571):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4c95, &(0x7f0000001ac0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@errors_continue}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f0000000b40)="$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")

103.611694ms ago: executing program 9 (id=17572):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48)

520.523µs ago: executing program 7 (id=17573):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB="0de0271c3bb30ed66447d448cc91866f809eec78ce476bce094c27517aaaeee9df34fdb6f82fd4a9e9eda525d5d8f3d5a8dc5a7b431bcd8d8e2fa1f7b6592cc11bcfb3c4cc5e86875cfa9c"], 0x2, 0x5fb0, &(0x7f0000011600)="$eJzs3VtvHGf9B/DfHrw+9N/U6kWVf8QhTTm0lCaNkzYtp6ZC4gIEVKpyn8i4VYQLKAkVrSzsKhL3SFyj8iK4BqHeIBWJl8AbiGT3hghEBo39PM54vPbaJN5Zez4fyZn97TPjfSZfj2fXc3gCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvf+/ti52IuP5+emI+4v+iF9GNmC3rs/HXiNX706m5HxGnY7M5nomIU9MR5fKb/zwVcTkiPj0Vsb6xslg+vXDAfrzy1r2//fDtH6399ot/+fu/P/n9n+rtb33y3R/8cTVi/vRvfvef1ce08gAAANASRVEUnc2P+RFn0uf7btOdAgDGIu//iyQ/r1Y/St2PnZruj1qtVqt3K4ZbrRYRsVZdpnzP4HA8ABwza3G/6S7QIPm3Wj8inmi6E8BE6zTdAY7E+sbKYifl26nuD85utedzQXbkv9bZvr5jr+ko9XNMxvXzdTd68fQe/ZkdUx8mSc6/W8//+lb7IM131PmPy175D7YufWqdnH+vnn/Nycm/OzT/tsr59w+Vf0/+AAAAAAAwwfLf/+cbPv47/eirciD7Hf89O6Y+AAAAAAAAAMDjdoDx/8oHV/P89fH/thn/DwAAACZW+Vm99PGph8/tdS+28vlrnYgna/MDLZMulplruh8AAAAAAAAAAAAA0Cb9rXN4r3UipiLiybm5oijKr6p6fViPuvxx1/b1hzZr+pc8AABs+fRU7Vr+TsRMRFxL9/qbmpubK4qZ2blirpidzu9nB9MzxWzlc22els9NDw7whrg/KMpvNlNZrmrU5+VR7fXvV77WoOgdoGPj0WDgABARW3ujdXukE6Yonoqm3+VwPNj+Tx7bPwfR9M8pAAAAcPSKoig66XbeZ9Ix/27TnQIAxiLv/+vHBdRqtVqtVp+8uqoYbrVaRMRadZnyPYPh+AHgmFmL+013gQbJv9X6EXG66U4AE63TdAc4EusbK4udlG+nuj9I47vnc0F25L/W2VwuLz9sOkr9HJNx/XzdjV48vUd/nhlTHyZJzr9bz//6VvsgzXfU+Y/LXvmX6znfQH+alvPv1fOvOTn5d4fm31Y5//6h8u/JHwAAAAAAJlj++/+84795lQEAAAAAAADg2FnfWFnM173m4/+fGzKf6z9Pppx/R/6tlPPv1vOvnZDTqzy+9+bD/D/bWFn8+P+vfCFPJz7/qd6gfO2pTrfX3zrn55/51qZL8fKu+ct5iql34mYsx1Jc3NU+taN9YUT7pV3tg7J9Nrefj8X4eSzHT7bbp0ecGDUzor0Y0Z7z79n+Wynn3698lfnPpfZObVq691F313ZfnQ57nas/fnBl99Y1fnejt71uVeX6nWugP5v/J08M4pe3l26d/9WNO3duXYw02fHsQqTJY5bzn0pfOf/nn9tqz7/3q9vrvY8Gh85/UtyN/p75P1d5XK7vC2PuWxNy/oP0lfPPe6Dh2/9xzn/v7f/FBvoDAAAAAAAAAAAAAAAA+ymKYvMS0asR8Wq6/qepazMBgPHK+/8i3wwjUavVarVaffLqqmK4N6pFRPy5ukz5nuHXw74ZADDJHkTEP5ruBI2Rf4vl+/2V0y813RlgrG5/8OFPbywvL926/b8sXfQef48AAAAAAAAAgMPK43+erYz/vHkeUG3c6B3jv74ZZz/bWFl8f/5fnz924392B73Nsc7TCj0b1fG5d49QfC72H/+7P+L1pka0D0a0T49onxnRPvRCj4qc/7Mp45z/mbRi+43/mvOvT0e8ZKP2G//1+Qb607Sc/7k01nPO/6u1+ar5F384zuP/dnfkf+HOe7+4cPuDD1+6+d6Nd5feXfrZpcsLr19cuHL5tZcvvHNzeSn922CPj1bOP4997TzQdsn558zl3y45/y+nWv7tkvP/Sqrl3y45//x+T/7tkvPPn32283/QbL8Yj5z/C6m2/bdLzv9rqZZ/u+T8X0y1/Nsl5//1VMu/XXL+L6Va/u2S8z+favm3S87/Qqrl3y45/3yES/7tkvPPZzbIv11y/gupln+75PwvpVr+7ZLzv5xq+bdLzv+VVMu/XXL+r6b6EPm799cJkPO/kmrbf7vk/F9LtfzbJef/eqrl3y45/2+kWv7tkvP/Zqrl3y45/2+lWv7tkvP/dqrl3y45/+/Ew4tJ5d8eOf83Um37b5eH9//3wAMPPMgPmv7NBAAAAAAAAAAAAADUjeN04qbXEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHdvMXLV9x3Az169NsTeJIZwMbA2Bgws3vUFX9o6GAgphbYhJNAbqXHttXHiW702AYTERtAUCaTywAOtlBQQqvKQKqhN1CDRiEqVenlpn9qXKq3UqEJRqJyoL40Krs6c///vmdnZmV3vrj1zzueD8M87c2bmv2fOzO53rO8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANRbf+/UH/ZlWZb/X/tjNMsuz/++Mtubfzmz41KvEAAAAFisD2t/fntNOmHvPC5Ut83fXf9P3z137ty5LPuTtZ96NZ/BWJatXpFlxXnByI9PNmwTPJ+N9PXXfd3f4eYHOpw/2OH8oQ7nD3c4f0WH80c6nD9rB8yysng9pnZlG2t/HS12abY2G6qdt7HFpZ7vW9HfH1/LqemrXebc0KHsSHY0m8omZ12mr/Zflr27Pr+t+7N4W/11t7Uuy7KzP332QFxDX9jHG7OGG6upv+8+uDsb+9lPnz3w5OjPr2s1O+6GWSvNsk0b8nW+kGXnX67K+rIVaZ/EdfbXrXNdi3UONKyzr3a5/O/N6zw7z3XG73skrPOf26xzXTjtqRuzLJvJ5tym2fNZf7aq6VbT/h4pjoj8OvK78hPZ4IKOk/XzOE7yy/zoxsbjpPmYjPt/fdgng3Osof7u+OBrw7P2+4UeJ/l33Q3Han7dD+U3OjJS/9Jqw7Gab/PsTXMfAy3vuxbHQDqW646BDZ2Ogf7hgdox0H9+zRsajoEtsy7Tn/XVbuv9m9ofAxOnj52cmH76mTuOHNt/eOrw1PFt27fu3rJ15/ZdkxOHjhydCn8ubJf2kFVZfzoGN4TnmngM3tK0bf0hee6N4nHw+tU7r281F7KGkSV6HCxmDVk4Xr54c76gy/uzOY7xfJsXNi3+cZB+7tc9DgbrHgctn1NbPA4G5/E4yLc5u2l+PzMH6/5vtYZWz4VLcQyM1h0Di/l5WL+GC/l5mN/mY7fO/Vy4LqzrxdsW+vNwYNYxEL+tvvDYy09Jv++N7Ar7ZfZxcU1+xmXD2ZnpqVObn9p/+vSpLVkYF8Un6+6r5uNlVd33lM06XvoXfLzs/dxHO69pcfpo2Fcjt7e/r/Jtto+3v69qz+6t92fDqVuzMJbYxd6frX6a5fszZYk2+zPf5oU7Fv+7YMoldc9/Q52e/waGBovnv4G0N4Yanv9m3zUDtZVl2dk75vf8NxT+v9jPf2u75Pkv31ePbW5/DOTbvDix0GNgsO3z341h9oX13BoSw0hd7v+odv5McZjW3Zcdj5vBwaFw3AzGW2w8brbNukx+bfltb5q8sONm042N91XD7y0lPG7yffXqZPvjJt/mvS2Lf+5YGf9a99wx3OkYGBoYztc7lA6C4vnu3Mp4DGzODmQnsqPZwXSZ/F7Ob2t86/yOgeHw/8V+7riqS46BfF+9trX9MZBv87fblvZ3p03hlLRN3e9Oza8vzJX5rxk8f33Nu22pM3++zs9sb//aUL7NT7YvNGe030+3h1Mua7Gfmh8/cx3TB7PO+2mpjul8nUfvbP/aVL7N2h3zPJ72Zln2zktvFa93Fa/v/sWZf/luw+u+rV5Tfueltz5/bs0/LGT9AABcuI9qf84MF79r1v2L9Xz+/R8AAADoCTH394eZyP8AAABQGjH3D4SZyP8AAABQGjH3D4aZ7O307njl8ETf11/98LksvRvguSCeH18GeWhFsV3seM+Er8fOnZeffs9bQw9+77n53XZ/lmX/98C1Lbd/YkVcV+FkXOdA4+mzXHXDvG7/8UfOb1f//gln+4vrj9/PfF8Gil3ld//9ntr1jt1azPceyGrz4ZkXn69d/+7i67j9+/9ZbPeN8KYlew/1NVx+U1jPxjDHwnvKPLTy/H7IZ7zcd949/PeffvT87cXL9W1YXfs2X9tcXG98j6hX/rLYPn7fc63/r1/61nfy7Z+6qfX6n+tvvf73w/X+KMz//aA4vX6ff69u/X8Q1h9vL15u85s/aLn+t/+q2P7tcFy8Hmbz+u/+o+s+bHV/xdvZO1hcLt7+5J/dV7tcvL54/c3rH5m4p2F/NF//e28W17Pnyf8ZqN8+nh5vJ3p8sPH47gv3b0OPPMuyb309a9jP2VBxuXea1h+v7+Rg6/Xf3rTOk288Ubt88/cTffORe1t+v3E9e/98tOH7eWV12H/9K/8xv973rw3HYzj/5zPF9TW/l+nbqxufb+L2r48Wj9t4fRNN63+laf0zN+T7rvP67/9Zsf6371rRsP69a8Lx9PFidlr/4T9d03D5Nz5brOfUV8ePn5g+cyS+x8Fo0+N4xcjKVZdd/rHVa8JzafPX+06cfmLq1Njk2GSWjfXgWwYu9/rfDPO/izGz9LdQ+NfB4rh7+cHi59YtQ8XXr4TTHw/3Z/z5+M0/Hmo4Xpvv95mRYi52/beFdczXuo0/3jWvDf9r+9uv/tvDX2r+vSB+PyevGKl9f6+tv7J2Xt97xfnNz1ed/McVjY/rH64t5vfDfj0X3pl5w5XF7TVff3xvkpe/UDx+429y8fJZ0/uJjA40fh+LXf8Pw+8xP7iq8fkvHh/ff67p3ZxHs758CTPh+SGbKc6PW8X9/fLZK1veXnwfnmzm6oUsc07TT09PHD1y/MxTE6enpk9PTD/9zL5jJ84cP72v9t6l+77c6fLnH9+rao/vg1M7tme1R/uJYiyzS73+k48cOLhz8uaDU4f2nzl0+pGTU6cOH5iePjB1cPrm/YcOTX210+WPHNyzZevubTu3jh8+cnDPrt27t+0eP3L8RL6MYlEd7Jj8yvjxU/tqF5nes333ljvv3D45fuzEwak9Oycnx890unztZ9N4fuknx09NHd1/+sixqfHpI89M7dmye8eOrR3f/fHYyUPTYxOnzhyfODM9dWqi+F7GTtdOzn/2dbo81TC9JjzfNekLv53fd/uO9P64ube+NudVFZuMNp74k/BeUN8Y2bZrPl/H3D8UZuLf/wEAAKA0Yu4Pn09x/nV3+R8AAABKI3zgX/jMSP/+DwAAAGUUc/9ImElF8r/+v/7/BfT/U11b/1//P9P/1//vQP9f/78d/X/9/15ev/6//j+ddVv/P+b+lVlWyfwPAAAAVRBz/6owE/kfAAAASiPm/svCTOR/AAAAKI2Y+y8PM6lI/tf/1//3+f/l6//3ZdmM/r/+f7fQ/9f/b0f/X/+/l9ev/6//T2fd1v+Puf9jYSYVyf8AAABQBTH3rw4zkf8BAACgNGLuXxNmIv8DAABAacTcPxpmUqb8f9fcZ+n/6//r/5ev/+/z/wv6/91B/1//vx39f/3/Xl6//r/+P511W/8/5v6Ph5mUKf8DAABAxcXc/4kwE/kfAAAASiPm/k+Gmcj/AAAAUBox968NM6lI/tf/1//X/9f/1//X/19O+v/l6P+vDCfr/zfS/9f/1//X/6e9buv/x9x/RZhJRfI/AAAAVEHM/VeGmcj/AAAAUBox938qzET+BwAAgNKIuf+qMJOK5H/9f/1//X/9f/1//f/lpP9fjv5/PFn/v5H+v/6//r/+P+11W/8/5v6rw0wqkv8BAACgCmLuvybMRP4HAACA0oi5/9owE/kfAAAASiPm/nVhJhXJ//r/+v/6/2Xr/+d7R/8/0//vGvr/+v/t6P/r//fy+vX/9f/prNv6/zH3XxdmUpH8DwAAAFUQc//1YSbyPwAAAJRGzP03hJnI/wAAAFAaMfePhZlUJP/r/+v/6/+Xrf/v8//1/7uL/r/+fzv6//r/vbx+/X/9fzrrtv5/zP3rw0wqkv8BAACgCmLu3xBmIv8DAABAacTcf2OYifwPAAAApRFz/8Ywk4rkf/1//X/9/7L2/wf0//X/u4L+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/TeFmVQk/wMAAEAVxNx/c5iJ/A8AAAClEXP/LWEm8j8AAAD0quHmE2Lu3xRmUpH8r/+v/6//X9b+v8//1//vDvr/+v/t6P/r//fy+vX/9f/prNv6/zH33xpmUpH8DwAAAFUQc/9tYSbyPwAAAJRGzP23h5nI/wAAAFAaMfePh5lUJP/r/+v/6/+37v8P6//Pov+v/38h9P/1/9vR/9f/7+X16//r/9NZt/X/Y+6/I8ykIvkfAAAAqiDm/s1hJvI/AAAAlEbM/RNhJvI/AAAAlEbM/ZNhJhXJ//r/+v/6/z7/X/9f/3856f/r/7ej/6//38vr1//X/6ezbuv/x9y/JcykIvkfAAAAetR1C9k45v6tYSbyPwAAAJRGzP3bwkzkfwAAACiNmPu3h5lUJP/r/+v/6//r/+v/6/8vJ/1//f926vv/+SX1/6vS/5/rJ02vrL+g/6//T2fd1v+Puf/OMJOK5H8AAACogpj7d4SZyP8AAABQGjH37wwzmZ3//+birQoAAABYSjH37woz6fl//59fr6pS/f/996e/6v8X9P/1/zP9f/3/Zab/r//fjs//r2r/f2lc6vXr/+v/01m39f9j7t8dZtLz+R8AAACIYu7/hTAT+R8AAABKI+b+Xwwzkf8BAACgNGLu/6Uwk4rk/0r1/+vo/xf0//X/M/1//f9lpv+v/9+O/r/+fy+vv3v7/99elWX6/3SHbuv/x9y/J8ykIvkfAAAAqiDm/k+Hmcj/AAAAUBox998VZiL/AwAAQGnE3L83zKQi+V//X/9f/1//X/9f/3856f/r/7ezuP7/mP7/Il3q/nyvr797+/8+/5/u0W39/5j77w4zqUj+BwAAgCqIuf+eMBP5HwAAAEoj5v57w0zkfwAAACiNmPs/E2ZSkfx/0fr/LQrF+v/6/5n+v/6//r/+/yLp/1e5/+/z/xfrUvfnl2D9+V2u/6//Txfrtv5/zP33hZlUJP8DAABAFcTc/9kwE/kfAAAASiPm/l8OM5H/AQAAoDRi7r8/zKQi+d/n/+v/6//r/+v/6/8vJ/1//f929P/1/3t5/fr/+v901m39/5j7fyXMpCL5HwAAAKog5v4HwkzkfwAAACiNmPsfDDOR/wEAAKA0Yu7/1TCTiuR//X/9f/1//X/9f/3/5aT/r//fjv6//n8vr1//X/+fzrqt/x9z/6+FmVQk/wMAAEAVxNz/62Em8j8AAACURsz9nwszkf8BAACgNGLufyjMpCL5X/9f/1//X/9f/1//fznp/+v/t6P/r//fy+vX/9f/p7Nu6//H3P/5MJOK5H8AAACogpj7Hw4zkf8BAACgNGLu/0KYifwPAAAAPeDsvLaKuf+LYSYVyf/6//r/+v/6/0vY/x/O9P8T/f+VtT/1//X/2+ml/n+rc/T/9f/1//X/aa/b+v8x9z8SZlKR/A8AAABVEHP/o2Em8j8AAACURsz9vxFmIv8DAABAacTc/5thJhXJ//r/+v/6//r/Pv9f/3856f/r/7fTS/3/VvT/9f/1//X/aa/b+v8x9/9WmElF8j8AAABUQcz9vx1mIv8DAABAacTc/zthJvI/AAAAlEbM/Y+FmVQk/xf9/0cP6P8X9P/1//X/9f8j/f+lof+v/9+O/r/+fy+vX/9f/5/Ouq3/H3P/l8JMKpL/AQAAoApi7v/dMBP5HwAAAEoj5v59YSbyPwAAAJRGzP2Ph5lUJP/7/H/9f/1//f+F9P9Xtjhd/7+g/9+a/r/+fzv6/2Xu/w8vyRov3frnesIaTH/T/9f/p7Nu6//H3L8/zKQi+R8AAACqIOb+3wszkf8BAACgNGLuPxBmIv8DAABAacTcfzDMpCL5X/9f/1//X/+/Rz7/fyhbjv7/jP7/citJ//89/f+C/n8j/X+f/6//r/9Pe93W/4+5fyrMpCL5HwAAAHrdfN51NOb+Q2Em8j8AAACURsz9h8NM5H8AAAAojZj7nwgzqUj+78b+/w36//r/+v/pevT/ff6//n97Pv9f/z/T/79gl7o/3+vr1//X/6ezbuv/x9x/JMykIvkfAAAAqiDm/i+Hmcj/AAAAUBox938lzET+BwAAgNKIuf9omElF8n839v8z/X/9f/3/dD36//r/+v/t6f/r/2f6/xfsUvfne339+v/6/3TWbf3/mPuPhZlUJP8DAABAFcTcfzzMRP4HAACA0oi5/0SYifwPAAAApRFz/8kwk57M/31z9nbnov+v/99t/f/65mWp+/8r9P/1//X/l4L+v/5/pv9/wS51f77X16//r/9PZ93W/4+5//fDTHoy/wMAAACtxNx/KsxE/gcAAIDSiLl/OsxE/gcAAIDSiLn/dJjJ/7N3Xzt23VUcx4+txA4XhHvEu4B4Al6Aa56ADonpLfQammkJvffeQofQewm99xqKZKSZtVY8eGZvz8HHs/d/fT43C2OPZ0d2Jvpp9NWe3v+nd/tUV4/+X/+/tP6/7fv/r9H/J/2//v849P/6/43+f2sn3c+v/fn1//p/5i2t/8/d/8C4xff/AQAAYBi5+x8Ut9j/AAAAMIzc/Q+OW+x/AAAAGEbu/ofELU32/9Xt/+974Ef6f/3/Zqv+/2x97FD9v/f/3/Xnqv/X/x9D1/4/vxLq//fp/7dz0v382p9f/6//Z97S+v/c/Q+NW5rsfwAAAOggd//D4hb7HwAAAIaRu//hcYv9DwAAAMPI3f+IuKXJ/vf+f/3/+vr/Qd//r/8v+n/9/3F07f+T/n+f/n87J93Pr/359f/6f+Ytrf/P3f/IuKXJ/gcAAIAOcvffELfY/wAAADCM3P03xi32PwAAAAwjd/+5uKXJ/tf/6//1//p//b/+f5f0//r/Kfr/5fb/F/T/s59f/6//Z97S+v9zN232dv/+p+m3/wEAAKCD3P2PjlvsfwAAABhG7v7HxC32PwAAAAwjd/9j45Ym+1//r//X/+v/9f/6/13S/+v/p+j/l9v/e/+//n/u4/X/XI6l9f+5+x8XtzTZ/wAAANBB7v7Hxy32PwAAAAwjd/8T4hb7HwAAAIaRu/+JcUuT/a//1//r//X/+v8d9//3u0X/r//X/x9hJf1//BaX/vHo/4fu/x9wr5mPP7L/P7XZsv+/48z+z+j/GcfS+v/c/U+KW5rsfwAAAOggd/+T4xb7HwAAAIaRu/8pcYv9DwAAAMPI3X9T3NJk/+v/9f/6f/2//t/7/3dJ/6//n7KS/v9I+v+h+//Zz+/9//p/5i2t/8/d/9S4pcn+BwAAgA5y9z8tbrH/AQAAYBi5+58et9j/AAAAMIzc/c+IW5rsf/3/fP9/w93nfz/9/+HPr//X/+v/9f/6/xX0/7ce8gv1/5dF/9+o/7/bpR+v/9f/M29p/X/u/mfGLU32PwAAAHSQu/9ZcYv9DwAAAMPI3f/suMX+BwAAgGHk7n9O3HKfzeYyM/ZV0/97/7/+X/+v/9f/75L+fwX9/2H0/5dF/9+o/z+E/l//z7yl9f+5+58bt/j+PwAAAAwjd//z4hb7HwAAAIaRu//5cYv9DwAAAMPI3f+CuKXJ/tf/r6f/v0b/P0L/f8/bzt9f/x8/r//X/18J+n/9/0b/v7WT7ufX/vz6f/0/85bW/+fuvzluabL/AQAAoIPc/S+MW+x/AAAAGEbu/hfFLfY/AAAADCN3/4vjlpXt/7Nbfpz+fz39v/f/D9H/e///gvv/R8Xfx6T/vzL0//r/KVeg/7/5ev3/1k66nz+h5z99pZ5f/6//Z97S+v/c/S+JW1a2/wEAAICj5e5/adxi/wMAAMAwcvefj1vsfwAAABhG7v6XxS1N9r/+X/+v/9f/6/+9/3+X9P/6/yne/6//X/Pz6//1/8xbWv+fu//lcUuT/Q8AAAAd5O5/Rdxi/wMAAMAwcve/Mm6x/wEAAGDVLu7Acve/Km5psv/1//p//f9R/f95/f//0P/r/7eh/9f/T9H/6//X/Pz6f/0/85bW/+fuvyVuabL/AQAAoIPc/bfGLfY/AAAADCN3/6vjFvsfAAAAhpG7/zVxS5P9r//X/+v/vf9f/6//3yX9v/5/iv5f/7/m59f/6/+Zt7T+P3f/a+OWJvsfAAAAOsjd/7q4xf4HAACAYeTuf33cYv8DAADAMHL3vyFuabL/9f/6f/2//l//r//fJf2//n+K/l//v+bn1//r/5m3tP4/d/8b45Ym+x8AAAA6yN3/prjF/gcAAIBh5O5/c9xi/wMAAMAwcve/JW5psv/1//p//b/+X/+v/98l/b/+f4r+X/+/5ufX/+v/mbe0/j93/1vjlib7HwAAADrI3f+2uMX+BwAAgGHk7n973GL/AwAAwDBy978jbmmy//X/+n/9v/5f/6//3yX9v/5/yvr6/2sP/Ej/r//X/+v/mba0/j93/zvjlib7HwAAADrI3f+uuMX+BwAAgGHk7n933GL/AwAAwDBy978nbmmy//X/nfv/U+c2G/3/Rv+v/9f/75T+X/8/ZX39/0H6f/2//l//z7Sl9f+5+98btzTZ/wAAANBB7v73xS32PwAAAAwjd//74xb7HwAAAIaRu/8DcUuT/a//79z/e/+//v/gc+r/9f+7oP/X/08Zov+/oP/X/y+v/z+t/2chltb/5+7/YNzSZP8DAABAB7n7PxS32P8AAAAwjNz9H45b7H8AAAAYRu7+j8QtTfa//l//r//X/1/c/585/K/4Hv2//n8b+n/9/5Qh+n/v/9f/L7D/9/5/lmJp/X/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7r8tbmmy//X/+n/9v/7f+//1/7uk/9f/T9H/r67/v+biH+j/9f/6f+Ysrf/P3f+JuKXJ/gcAAIAOcvd/Mm6x/wEAAGAYufs/FbfY/wAAADCM3P2fjlua7P9t+v+z+v9L6P8Pf379v/5f/6//X1j/f922n0f/v0//f1DD/v8A/b/+X//PnKX1/7n7PxO3NNn/AAAA0EHu/s/GLfY/AAAADCN3/+fiFvsfAAAAhpG7//NxS5P97/3/+n/9/7H6/xtX0//nlzP9/+zz6/93a2H9/9b0//t21//fe9Oj/782/of+f4Tn1//r/5m3tP4/d/8X4pYm+x8AAAA6yN1/e9xi/wMAAMAwcvd/MW6x/wEAAGAYufu/FLc02f/6f/2//t/7//X/+v9d0v8ft/8/c6znGqf/9/7/jf5/dc+v/9f/M29p/X/u/i/HLU32PwAAAHSQu/8rcYv9DwAAAMPI3f/VuMX+BwAAgGHk7v9a3NJk/+v/9f/6f/2//l//v0v6f+//n6L/1/+v+fn1//p/5i2t/8/d//W4pcn+BwAAgA5y938jbrH/AQAAYBi5+78Zt9j/AAAAMIzc/d+KW5rsf/2//l//r//X/y+k/z91Tv+/Bf2//n+j/9/aSffza39+/b/+n3lL6/9z9387bmmy/wEAAKCD3P3fiVvsfwAAABhG7v7vxi32PwAAAAwjd//34pYm+3+m/68GTv8/Tf+/2fv3R/9/8PfX/+v/vf9f/6//n6b/1/+v+fn1//p/5i2t/8/d//245a7hd+b4/5QAAADAkuTu/0Hc0uT7/wAAANBB7v474hb7HwAAAIaRu/+HcUuT/e/9//p/7//X/+v/9f+7pP/X/0/R/+v/1/z8+n/9P/OW1v/n7v9R3NJk/wMAAEAHuft/HLfY/wAAADCM3P0/iVvsfwAAABhG7v6fxi1N9r/+X/+v/9f/6//1/7uk/9f/T9H/6//X/Pz6f/0/85bW/+fu/1nc0mT/AwAAwPqdnv0Vuft/HrfY/wAAADCM3P2/iFvsfwAAABhG7v5fxi1N9r/+X/+v/9f/6//1/7uk/9f/T9H/6//X/Pz6f/0/85bW/+fu/1Xc0mT/AwAAQAe5+38dt9j/AAAAMIzc/b+JW+x/AAAAGEbu/t/GLU32v/5/F/3/7fp//f8e/b/+X/+//v7/VHzB0f/v0/8fpP/X/+v/9f9MW1r/n7v/d3FLk/0PAAAAHeTu/33cYv8DAADAMHL3/yFusf8BAABgGLn7/xi3NNn/4/T/8aSL6P+9/1//v0//r//X/6+//0/6/336/4P0//p//b/+n2lL6/9z9/8pbmmy/wEAAKCD3P1/jlvsfwAAABhG7v6/xC32PwAAAAwjd/9f45Ym+3+c/j/o//X/+n/9f/z/+v9l0P/r/6fo//X/a35+/b/+n3lL6/9z9/8tbmmy/wEAAKCD3P1/j1vsfwAAABhG7v5/xC32PwAAAAwjd/+dccsl+//MVXyqq0f/r//fXf9/4R6bjf5f/6//1//r//X/R9P/6//X/Pz6f/0/85bW/9+599/a6zb/3Pto3/8HAACAEeXu/1fcYv8DAADAMHL3/ztusf8BAABgGLn7/xO3NNn/+n/9v/f//1/9//VTfx/0//p//b/+X/8/Tf+v/1/z8+v/9f/MW1r/n7v/vwEAAP//mCmX8Q==")
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000000c0)=""/182, 0xb6)

0s ago: executing program 9 (id=17574):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
close(0xffffffffffffffff)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x325)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000200)={0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f0000000240)={<r6=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="020000008000000000080070d40000000000", @ANYRES64=r5/1000+10000, @ANYRES64=r6, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
ftruncate(r3, 0x6000000)
copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)

kernel console output (not intermixed with test programs):


[ 1396.930520][  T357] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[ 1396.936033][  T357] usb 5-1: config 0 has no interface number 0
[ 1396.938799][  T357] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1396.952595][  T357] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1396.958200][  T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.965479][  T357] usb 5-1: Product: syz
[ 1396.969329][  T357] usb 5-1: Manufacturer: syz
[ 1396.974695][  T357] usb 5-1: SerialNumber: syz
[ 1396.986595][ T5805] usb 9-1: USB disconnect, device number 45
[ 1396.990745][  T357] usb 5-1: config 0 descriptor??
[ 1397.049619][  T357] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[ 1397.452696][ T5805] usb 5-1: USB disconnect, device number 52
[ 1397.461156][ T5805] yurex 5-1:0.50: USB YUREX #0 now disconnected
[ 1397.531161][T14545] loop8: detected capacity change from 0 to 1024
[ 1397.534383][T14545] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1397.568584][T14547] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.16408'.
[ 1398.046792][T14565] fuse: root generation should be zero
[ 1398.608697][T14584] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1398.754609][   T33] audit: type=1326 audit(2000001119.308:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.8.16427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c1f9ce59 code=0x7ffc0000
[ 1398.763195][   T33] audit: type=1326 audit(2000001119.318:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.8.16427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c1f9ce59 code=0x7ffc0000
[ 1398.771875][   T33] audit: type=1326 audit(2000001119.328:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.8.16427" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37c1f9ce59 code=0x7ffc0000
[ 1398.781225][T14587] veth0: entered promiscuous mode
[ 1398.784037][   T33] audit: type=1326 audit(2000001119.328:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.8.16427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c1f9ce59 code=0x7ffc0000
[ 1398.793031][   T33] audit: type=1326 audit(2000001119.328:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.8.16427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c1f9ce59 code=0x7ffc0000
[ 1398.800613][   T33] audit: type=1326 audit(2000001119.338:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.8.16427" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37c1f9ce59 code=0x7ffc0000
[ 1398.809790][   T33] audit: type=1326 audit(2000001119.338:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.8.16427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c1f9ce59 code=0x7ffc0000
[ 1398.817859][T14586] veth0: left promiscuous mode
[ 1398.817960][   T33] audit: type=1326 audit(2000001119.338:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.8.16427" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c1f9ce59 code=0x7ffc0000
[ 1399.204434][T30458] usb 9-1: new full-speed USB device number 46 using dummy_hcd
[ 1400.091874][T14608] loop4: detected capacity change from 0 to 1024
[ 1400.094733][T14608] EXT4-fs: Ignoring removed bh option
[ 1400.104803][T14608] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1400.115123][T14608] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1400.123882][T14608] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.16433: Bad quota inum: 4294934528, type: 0
[ 1400.128122][T14608] loop4: lost filesystem error report for type 5 error -117
[ 1400.128369][T14608] EXT4-fs (loop4): Remounting filesystem read-only
[ 1400.133296][T14608] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix.
[ 1400.138876][T14608] EXT4-fs (loop4): Cannot turn on quotas: error -117
[ 1400.142198][T14608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1400.159148][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1400.360302][T30458] usb 9-1: config 0 has an invalid interface number: 52 but max is 0
[ 1400.364011][T30458] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1400.368607][T30458] usb 9-1: config 0 has no interface number 0
[ 1400.383957][T30458] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64
[ 1400.387643][T30458] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1400.393154][T30458] usb 9-1: config 0 interface 52 has no altsetting 0
[ 1400.397708][T30458] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1400.405009][T30458] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1400.410220][T30458] usb 9-1: Manufacturer: syz
[ 1400.432675][T30458] usb 9-1: config 0 descriptor??
[ 1400.459402][T30458] hub 9-1:0.52: bad descriptor, ignoring hub
[ 1400.463207][T30458] hub 9-1:0.52: probe with driver hub failed with error -5
[ 1400.511090][    T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1400.667139][    T9] usb 5-1: config 2 has an invalid interface number: 43 but max is 0
[ 1400.680743][    T9] usb 5-1: config 2 has no interface number 0
[ 1400.691797][    T9] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[ 1400.695867][T30458] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input56
[ 1400.702172][    T9] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8
[ 1400.719670][    T9] usb 5-1: config 2 interface 43 has no altsetting 0
[ 1400.758563][    T9] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 1400.771631][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1400.786107][    T9] usb 5-1: Product: syz
[ 1400.797137][    T9] usb 5-1: Manufacturer: syz
[ 1400.799435][    T9] usb 5-1: SerialNumber: syz
[ 1400.899421][T30458] usb 9-1: Failed to suspend device, error -71
[ 1400.912743][T30458] usb 9-1: USB disconnect, device number 46
[ 1400.922989][T14611] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1400.927917][T14611] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1401.150242][    T9] ums-usbat 5-1:2.43: USB Mass Storage device detected
[ 1401.162120][    T9] ums-usbat 5-1:2.43: Quirks match for vid 0781 pid 0005: 1
[ 1401.200372][    T9] ums-usbat 5-1:2.43: probe with driver ums-usbat failed with error -5
[ 1401.217639][    T9] usb 5-1: USB disconnect, device number 53
[ 1402.101207][T14633] CIFS mount error: No usable UNC path provided in device string!
[ 1402.101207][T14633] 
[ 1402.105234][T14633] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1405.058104][T14666] SET target dimension over the limit!
[ 1405.193636][T14672] loop8: detected capacity change from 0 to 8
[ 1405.255961][T14672] SQUASHFS error: Failed to read block 0x730: -5
[ 1405.262365][T14672] SQUASHFS error: Unable to read metadata cache entry [72e]
[ 1406.116956][T14713] loop8: detected capacity change from 0 to 2048
[ 1406.150744][T14713] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1406.191159][T14713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1406.306199][T14716] netlink: 'syz.7.16480': attribute type 10 has an invalid length.
[ 1406.334466][T14716] syz_tun: entered promiscuous mode
[ 1406.348274][T14716] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1406.384638][T14716] netlink: 'syz.7.16480': attribute type 10 has an invalid length.
[ 1406.398927][T14716] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1406.411425][T14716] team0: Port device bond0 added
[ 1406.431690][T14719] loop4: detected capacity change from 0 to 1024
[ 1406.483845][T14719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1406.527453][T14724] loop7: detected capacity change from 0 to 2048
[ 1406.532653][T14724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1406.684453][T14726] loop7: detected capacity change from 0 to 32768
[ 1406.691911][T14726] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16483 (14726)
[ 1406.729307][T14726] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1406.733168][T14726] BTRFS info (device loop7): using xxhash64 checksum algorithm
[ 1406.743191][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1406.998231][T14726] BTRFS info (device loop7): setting nodatasum
[ 1407.000562][T14726] BTRFS info (device loop7): allowing degraded mounts
[ 1407.002920][T14726] BTRFS info (device loop7): turning on async discard
[ 1407.005646][T14726] BTRFS info (device loop7): enabling free space tree
[ 1407.008184][T14726] BTRFS info (device loop7): force zlib compression, level 3
[ 1407.098315][T14726] BTRFS info (device loop7): balance: start -susage=1,usage=1..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3
[ 1407.105253][T14726] BTRFS info (device loop7): balance: ended with status: 0
[ 1407.686262][T12278] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1408.562444][T14775] loop8: detected capacity change from 0 to 4096
[ 1408.850444][T14775] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0003]
[ 1408.918225][T14775] System zones: 0-5
[ 1408.929406][T14775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1409.157982][T12280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1409.575641][T14789] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1410.292734][T14794] overlayfs: workdir and upperdir must be separate subtrees
[ 1410.797800][T12287] Bluetooth: hci3: command 0x0406 tx timeout
[ 1410.925360][ T5755] Bluetooth: hci0: command 0x0c20 tx timeout
[ 1410.948741][T12287] Bluetooth: hci4: command 0x0406 tx timeout
[ 1411.660396][   T33] kauditd_printk_skb: 9 callbacks suppressed
[ 1411.660411][   T33] audit: type=1800 audit(2000001132.186:3948): pid=14799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.16506" name="/" dev="sockfs" ino=142923 res=0 errno=0
[ 1412.664642][T14815] loop7: detected capacity change from 0 to 2048
[ 1412.844884][T14801] loop8: detected capacity change from 0 to 32768
[ 1412.986907][T14801] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1413.086721][T14801] XFS (loop8): Ending clean mount
[ 1413.206111][T14838] netlink: 'syz.7.16518': attribute type 1 has an invalid length.
[ 1413.474203][    T9] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[ 1413.625593][T12280] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1413.790935][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1413.806227][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1413.816666][    T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1413.832947][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.895871][    T9] usb 5-1: config 0 descriptor??
[ 1414.507644][T14856] comedi comedi3: 8255: I/O base address not correctly aligned
[ 1414.972544][    T9] elan 0003:04F3:0755.0033: item fetching failed at offset 3/5
[ 1414.987506][    T9] elan 0003:04F3:0755.0033: Hid Parse failed
[ 1414.990957][    T9] elan 0003:04F3:0755.0033: probe with driver elan failed with error -22
[ 1415.171972][ T2305] usb 5-1: USB disconnect, device number 54
[ 1415.757631][T14869] loop4: detected capacity change from 0 to 128
[ 1415.857941][ T2305] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1415.915233][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.915233][T14869] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128
[ 1415.933533][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.933533][T14869] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128
[ 1415.942869][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.942869][T14869] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128
[ 1415.948649][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.948649][T14869] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128
[ 1415.954949][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.954949][T14869] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[ 1415.963855][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.963855][T14869] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[ 1415.971360][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.971360][T14869] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[ 1415.984612][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.984612][T14869] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128
[ 1415.997776][T14869] syz.4.16531: attempt to access beyond end of device
[ 1415.997776][T14869] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128
[ 1416.016511][T14869] syz.4.16531: attempt to access beyond end of device
[ 1416.016511][T14869] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128
[ 1416.057960][ T2305] usb 9-1: Using ep0 maxpacket: 8
[ 1416.074880][ T2305] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1416.084415][ T2305] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1416.097251][ T2305] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1416.115009][ T2305] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1416.120795][T14875] loop7: detected capacity change from 0 to 736
[ 1416.133749][ T2305] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1416.139851][ T2305] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1416.144637][ T3900] Buffer I/O error on dev loop4, logical block 166, lost async page write
[ 1416.151205][ T2305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.253623][T14879] openvswitch: netlink: IPv4 tun info is not correct
[ 1416.381212][ T2305] usb 9-1: usb_control_msg returned -32
[ 1416.385927][ T2305] usbtmc 9-1:16.0: can't read capabilities
[ 1416.574583][T14881] netlink: 120 bytes leftover after parsing attributes in process `syz.7.16535'.
[ 1416.650963][ T2305] usb 9-1: USB disconnect, device number 47
[ 1416.653560][T14867] usbtmc 9-1:16.0: usb_control_msg returned -71
[ 1416.695253][T14892] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1416.708864][T14892] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1417.226970][T14900] dvmrp12: entered allmulticast mode
[ 1417.233593][T14899] dvmrp12: left allmulticast mode
[ 1417.846431][T14917] binder_alloc: 14916: pid 14916 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1417.912925][T14920] (syz.4.16552,14920,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1417.916879][T14920] (syz.4.16552,14920,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1417.952444][T14920] (syz.4.16552,14920,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1417.964938][T14920] (syz.4.16552,14920,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1418.078936][T14923] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size.
[ 1418.227201][T14932] loop7: detected capacity change from 0 to 1764
[ 1418.298156][T12278] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1418.303755][T12278] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1418.389761][T14938] netlink: 'syz.7.16560': attribute type 1 has an invalid length.
[ 1418.418042][T14938] netlink: 'syz.7.16560': attribute type 2 has an invalid length.
[ 1418.428680][T30458] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1418.550295][T14940] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1418.553020][T14940] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1418.555510][T14940] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1418.572844][T14940] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1418.575284][T14940] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1418.785376][T14954] loop4: detected capacity change from 0 to 256
[ 1418.788206][T14954] vfat: Deprecated parameter 'posix'
[ 1418.790580][T14954] FAT-fs: "posix" option is obsolete, not supported now
[ 1419.098589][T30458] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1419.244433][T14962] netlink: 'syz.4.16569': attribute type 4 has an invalid length.
[ 1420.055238][T30458] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1420.074236][T30458] usb 9-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[ 1420.077518][T30458] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1420.080431][T30458] usb 9-1: Product: syz
[ 1420.082075][T30458] usb 9-1: Manufacturer: syz
[ 1420.083756][T30458] usb 9-1: SerialNumber: syz
[ 1420.587725][ T5753] Bluetooth: hci0: command 0x0c20 tx timeout
[ 1420.587960][T12286] Bluetooth: hci3: command 0x0406 tx timeout
[ 1420.592793][ T2418] Bluetooth: hci4: command 0x0406 tx timeout
[ 1420.781740][T16569] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[ 1420.789441][T14980] loop7: detected capacity change from 0 to 2048
[ 1420.830080][T14980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1420.838048][T14980] EXT4-fs (loop7): shut down requested (2)
[ 1420.878943][T12278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1420.968905][T16569] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1420.973171][T16569] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1420.998237][T16569] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1421.013602][T16569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1421.020955][T16569] usb 5-1: SerialNumber: syz
[ 1421.178721][T16569] usb 5-1: 0:2 : does not exist
[ 1421.531102][T30458] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1421.574359][T30458] usb 9-1: USB disconnect, device number 48
[ 1421.740231][T16569] usb 5-1: USB disconnect, device number 55
[ 1422.657077][ T2418] Bluetooth: hci0: command 0x0c20 tx timeout
[ 1422.659777][ T2418] Bluetooth: hci4: command 0x0406 tx timeout
[ 1422.902329][T15030] kAFS: unable to lookup cell '.,'
[ 1423.037053][ T2305] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1423.202931][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1423.212749][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16606'.
[ 1423.216532][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1423.225457][ T2305] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1423.232947][ T2305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.259875][ T2305] usb 5-1: config 0 descriptor??
[ 1423.721404][ T2305] hid-steam 0003:28DE:1142.0034: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[ 1423.799058][ T2305] hid-steam 0003:28DE:1142.0034: Steam wireless receiver connected
[ 1424.021466][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1424.222863][ T2305] hid-steam 0003:28DE:1142.0035: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[ 1424.378724][  T357] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1424.538954][  T357] usb 9-1: Using ep0 maxpacket: 32
[ 1424.543612][  T357] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1424.548268][  T357] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1424.556510][  T357] usb 9-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37
[ 1424.562690][  T357] usb 9-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0
[ 1424.566248][  T357] usb 9-1: Product: syz
[ 1424.568114][  T357] usb 9-1: Manufacturer: syz
[ 1424.575383][  T357] usb 9-1: config 0 descriptor??
[ 1425.006839][  T357] hid-generic 0003:25DD:F3D2.0036: hiddev0,hidraw1: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.8-1/input0
[ 1425.272879][  T357] usb 9-1: USB disconnect, device number 49
[ 1425.648094][ T5805] usb 5-1: USB disconnect, device number 56
[ 1425.715463][ T5805] hid-steam 0003:28DE:1142.0034: Steam wireless receiver disconnected
[ 1426.063336][T15068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16619'.
[ 1426.068344][T15066] loop8: detected capacity change from 0 to 512
[ 1426.078563][T15066] EXT4-fs: Ignoring removed i_version option
[ 1426.116304][T15066] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1426.120689][T15066] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1426.142552][T12280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1426.237949][T15077] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1426.279354][T15081] openvswitch: netlink: Multiple metadata blocks provided
[ 1426.531964][ T2305] usb 9-1: new full-speed USB device number 50 using dummy_hcd
[ 1426.642159][ T5805] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[ 1426.724285][ T2305] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64
[ 1426.728987][ T2305] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1426.732838][ T2305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.743899][ T2305] hub 9-1:4.0: USB hub found
[ 1426.821547][ T5805] usb 5-1: config 150 has an invalid interface number: 204 but max is 2
[ 1426.829188][ T5805] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[ 1426.834060][ T5805] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3
[ 1426.838332][ T5805] usb 5-1: config 150 has no interface number 0
[ 1426.841035][ T5805] usb 5-1: config 150 interface 204 has no altsetting 0
[ 1426.848450][ T5805] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 1426.852410][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1426.855525][ T5805] usb 5-1: Product: syz
[ 1426.857173][ T5805] usb 5-1: Manufacturer: syz
[ 1426.859178][ T5805] usb 5-1: SerialNumber: syz
[ 1426.953701][ T2305] hub 9-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1426.996565][ T2305] usb 9-1: USB disconnect, device number 50
[ 1427.083301][ T5805] xr_serial 5-1:150.204: skipping garbage
[ 1427.089257][ T5805] xr_serial 5-1:150.204: invalid descriptor buffer length
[ 1427.096248][ T5805] usb 5-1: USB disconnect, device number 57
[ 1427.125231][T15079] loop8: detected capacity change from 0 to 512
[ 1427.163146][T15079] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[ 1427.178261][T15079] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1427.180905][T15079] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.16621: bad orphan inode 15
[ 1427.184934][T15079] loop8: lost filesystem error report for type 5 error -117
[ 1427.185268][T15079] ext4_test_bit(bit=14, block=18) = 1
[ 1427.190705][T15079] is_bad_inode(inode)=0
[ 1427.192717][    C1] EXT4-fs (loop8): error count since last fsck: 1
[ 1427.195239][    C1] EXT4-fs (loop8): initial error at time 2000001147: ext4_orphan_get:1423
[ 1427.198383][    C1] EXT4-fs (loop8): last error at time 2000001147: ext4_orphan_get:1423
[ 1427.203259][T15079] NEXT_ORPHAN(inode)=1023
[ 1427.205321][T15079] max_ino=32
[ 1427.209235][T15079] i_nlink=0
[ 1427.249735][T15079] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.16621: bg 0: block 161: padding at end of block bitmap is not set
[ 1427.255075][T15079] loop8: lost filesystem error report for type 5 error -117
[ 1427.257018][T15079] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1427.269584][T15079] loop8: lost filesystem error report for type 5 error -117
[ 1427.293562][T15079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1427.910648][T12280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1428.047189][T15103] loop8: detected capacity change from 0 to 512
[ 1428.062694][T15103] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1428.071857][T15103] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[ 1428.083281][T15103] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[ 1428.096126][T15103] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1428.099417][T15103] System zones: 0-2, 18-18, 34-35
[ 1428.120430][T15103] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1428.333291][T15114] loop4: detected capacity change from 0 to 128
[ 1428.362795][T15114] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1428.368126][T15114] ext4 filesystem being mounted at /377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1428.624686][T12279] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1428.878239][T15125] loop4: detected capacity change from 0 to 1764
[ 1429.104965][T15127] loop4: detected capacity change from 0 to 8192
[ 1429.187937][T12280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1429.221890][T15129] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1429.252768][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[ 1429.312567][T15133] loop4: detected capacity change from 0 to 512
[ 1429.367762][T15135] loop8: detected capacity change from 0 to 256
[ 1429.380141][T15135] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1429.389158][T15133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1429.397343][T15133] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1429.400894][T15135] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff)
[ 1429.436411][T15133] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1429.539731][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1429.741659][T15142] pimreg: entered allmulticast mode
[ 1431.051861][T15145] loop4: detected capacity change from 0 to 131072
[ 1431.428703][T15145] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1431.442081][T15145] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1431.490230][T15145] F2FS-fs (loop4): list inode (7) has corrupted xattr
[ 1432.172017][T15148] loop8: detected capacity change from 0 to 4096
[ 1432.185807][T15148] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[ 1432.398346][T15160] loop7: detected capacity change from 0 to 4096
[ 1432.447361][T15161] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1432.447591][T15160] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[ 1432.576800][T15160] Remounting filesystem read-only
[ 1433.100669][T15163] loop8: detected capacity change from 0 to 32768
[ 1433.527636][T15175] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.16661'.
[ 1433.830023][T15190] loop8: detected capacity change from 0 to 16
[ 1433.836051][T15190] erofs (device loop8): mounted with root inode @ nid 36.
[ 1433.841130][   T55] erofs (device loop8): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 9000
[ 1433.846089][T15190] erofs (device loop8): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[ 1433.850419][T15190] erofs (device loop8): read error -117 @ 1 of nid 89
[ 1433.852895][   T33] audit: type=1800 audit(2000001154.362:3949): pid=15190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.16666" name="file3" dev="loop8" ino=89 res=0 errno=0
[ 1433.919175][T15195] QAT: failed to copy from user cfg_data.
[ 1435.040448][T15219] __vm_enough_memory: pid: 15219, comm: syz.4.16681, bytes: 4503599627366400 not enough memory for the allocation
[ 1435.142974][T15224] loop8: detected capacity change from 0 to 128
[ 1435.877927][T15252] loop4: detected capacity change from 0 to 128
[ 1435.883228][T15252] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1435.890709][T15252] hpfs: filesystem error: improperly stopped
[ 1435.893442][T15252] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1435.917396][T15252] hpfs: You really don't want any checks? You are crazy...
[ 1435.933674][T15252] hpfs: hpfs_map_sector(): read error
[ 1435.941148][T15252] hpfs: code page support is disabled
[ 1435.946053][T15252] hpfs: hpfs_map_4sectors(): unaligned read
[ 1435.951398][T15252] hpfs: hpfs_map_4sectors(): unaligned read
[ 1435.960160][T15252] hpfs: filesystem error: unable to find root dir
[ 1436.309396][T15256] vlan2: entered promiscuous mode
[ 1436.311602][T15256] dummy0: entered promiscuous mode
[ 1436.600840][T15263] loop4: detected capacity change from 0 to 32768
[ 1436.608738][T15263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16702 (15263)
[ 1436.616668][T15263] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1436.620965][T15263] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1436.896470][ T2418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1436.934876][ T2418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1436.939599][ T2418] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1436.942533][ T2418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1436.945232][ T2418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1437.034848][T15275] binder: 15267:15275 ioctl c0285840 200000000000 returned -22
[ 1437.438918][T15263] BTRFS info (device loop4): enabling ssd optimizations
[ 1437.442226][T15263] BTRFS info (device loop4): turning on sync discard
[ 1437.445671][T15263] BTRFS info (device loop4): enabling free space tree
[ 1437.575751][T15261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1437.578106][T15261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1437.580415][T15261] bridge_slave_0: entered allmulticast mode
[ 1437.583579][T15261] bridge_slave_0: entered promiscuous mode
[ 1437.587058][T15261] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1437.590240][T15261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1437.592954][T15261] bridge_slave_1: entered allmulticast mode
[ 1437.595706][T15261] bridge_slave_1: entered promiscuous mode
[ 1437.639395][T15261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1437.646878][T15261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1437.686978][T15261] team0: Port device team_slave_0 added
[ 1437.695442][T15261] team0: Port device team_slave_1 added
[ 1437.721315][T15304] netlink: 'syz.4.16702': attribute type 29 has an invalid length.
[ 1437.722370][T15261] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1437.727668][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1437.738783][   T33] audit: type=1800 audit(2000001158.177:3950): pid=15304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16702" name="file1" dev="loop4" ino=260 res=0 errno=0
[ 1437.747859][T15261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1437.755401][T15261] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1437.758346][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1437.768265][T15261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1437.811038][T15261] hsr_slave_0: entered promiscuous mode
[ 1437.814389][T15261] hsr_slave_1: entered promiscuous mode
[ 1437.817447][T15261] debugfs: 'hsr0' already exists in 'hsr'
[ 1437.820347][T15261] Cannot create hsr debugfs directory
[ 1438.383763][T12279] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1438.886757][T15311] netlink: 'syz.4.16706': attribute type 10 has an invalid length.
[ 1439.117219][T12286] Bluetooth: hci1: command tx timeout
[ 1439.274454][T15311] 8021q: adding VLAN 0 to HW filter on device team0
[ 1439.279015][T15311] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1439.572163][T15316] loop4: detected capacity change from 0 to 2048
[ 1439.659093][T15318] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1440.665432][T15332] loop7: detected capacity change from 0 to 131072
[ 1440.668946][T15332] F2FS-fs (loop7): Test dummy encryption mode enabled
[ 1440.672776][T15332] F2FS-fs (loop7): invalid crc value
[ 1440.712771][T15332] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1440.730932][T15332] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1441.031928][T15344] loop4: detected capacity change from 0 to 4096
[ 1441.052068][T15344] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[ 1441.230648][T12286] Bluetooth: hci1: command tx timeout
[ 1442.284562][T15368] loop4: detected capacity change from 0 to 2048
[ 1442.333264][T15261] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1442.339180][T15261] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1442.342585][T15261] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1442.402366][T15261] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1442.417280][T12286] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff
[ 1442.549096][T15261] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1442.568196][T15368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1442.574342][T15368] ext4 filesystem being mounted at /420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1442.598869][T15261] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1442.602656][T15261] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1442.620373][T15261] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1442.808637][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1442.897881][T15261] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1442.916040][T15261] 8021q: adding VLAN 0 to HW filter on device team0
[ 1442.933581][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1442.936318][ T9480] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1442.968123][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1442.970570][ T9480] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1443.038763][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16725'.
[ 1443.270882][ T2418] Bluetooth: hci1: command tx timeout
[ 1443.833098][T15261] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1444.265920][T15463] tmpfs: Bad value for 'mpol'
[ 1444.387284][T15261] veth0_vlan: entered promiscuous mode
[ 1444.403111][T15261] veth1_vlan: entered promiscuous mode
[ 1444.461308][T15261] veth0_macvtap: entered promiscuous mode
[ 1444.474615][T15261] veth1_macvtap: entered promiscuous mode
[ 1444.495627][T15261] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1444.505247][T15261] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1444.514973][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.523499][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.544401][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.548190][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.887771][T25131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1444.893218][T25131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.056134][T15469] loop7: detected capacity change from 0 to 32768
[ 1445.065702][T15469] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16739 (15469)
[ 1445.329553][ T2418] Bluetooth: hci1: command tx timeout
[ 1445.364705][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1445.367350][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.381440][T15469] BTRFS info (device loop7): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[ 1445.387565][T15469] BTRFS info (device loop7): using xxhash64 checksum algorithm
[ 1445.559756][T15469] BTRFS info (device loop7): enabling ssd optimizations
[ 1445.566665][T15469] BTRFS info (device loop7): turning on async discard
[ 1445.574369][T15469] BTRFS info (device loop7): enabling free space tree
[ 1445.625727][T15500] loop9: detected capacity change from 0 to 1024
[ 1445.649276][ T2305] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1445.664750][T15500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1445.732312][T15500] fscrypt (loop9, inode 15): Error -61 getting encryption context
[ 1445.752647][T15261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1445.756423][T12278] BTRFS info (device loop7): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[ 1445.912143][ T2305] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1445.930445][ T2305] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1445.961209][ T2305] usb 5-1: New USB device found, idVendor=0763, idProduct=2008, bcdDevice= 0.40
[ 1445.964948][ T2305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.978032][ T2305] usb 5-1: Product: syz
[ 1445.985251][ T2305] usb 5-1: Manufacturer: syz
[ 1445.994172][ T2305] usb 5-1: SerialNumber: syz
[ 1446.289682][   T33] audit: type=1326 audit(2000001166.735:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.301863][   T33] audit: type=1326 audit(2000001166.785:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.332090][   T33] audit: type=1326 audit(2000001166.785:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.354713][ T2305] usb 5-1: unit 5 not found!
[ 1446.374455][   T33] audit: type=1326 audit(2000001166.785:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.448664][   T33] audit: type=1326 audit(2000001166.785:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.463769][   T33] audit: type=1326 audit(2000001166.785:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.466799][ T2418] Bluetooth: hci0: command 0x0c20 tx timeout
[ 1446.474807][   T33] audit: type=1326 audit(2000001166.785:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.474942][   T33] audit: type=1326 audit(2000001166.785:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.474977][   T33] audit: type=1326 audit(2000001166.785:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.475011][   T33] audit: type=1326 audit(2000001166.835:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.9.16747" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f599bf9ce59 code=0x7ffc0000
[ 1446.507471][ T2305] usb 5-1: USB disconnect, device number 58
[ 1446.684796][T11901] udevd[11901]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1446.848608][T15528] binder: 15526:15528 ioctl 40046205 0 returned -22
[ 1446.850191][T15529] loop9: detected capacity change from 0 to 1024
[ 1446.854976][T15528] binder: 15526:15528 ioctl 4008586f 0 returned -22
[ 1446.907880][T15529] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1446.954996][T15531] loop7: detected capacity change from 0 to 2048
[ 1446.958885][T15531] EXT4-fs (loop7): unsupported descriptor size 1600
[ 1447.086059][T15529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1447.090852][T15529] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1447.141333][ T4775] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm kworker/u10:1: lblock 3 mapped to illegal pblock 3 (length 3)
[ 1447.148445][ T4775] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 1447.153853][ T4775] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1447.153853][ T4775] 
[ 1447.160694][ T4775] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 8: comm kworker/u10:1: lblock 8 mapped to illegal pblock 8 (length 5)
[ 1447.167541][ T4775] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117
[ 1447.173044][ T4775] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1447.173044][ T4775] 
[ 1447.179079][T15261] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1447.187025][T15261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1448.483069][T15573] loop9: detected capacity change from 0 to 131072
[ 1448.502696][T15573] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[ 1448.505059][T15573] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1448.509397][T15573] F2FS-fs (loop9): invalid crc value
[ 1448.550685][T15573] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1448.571201][T15573] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1448.573630][T15573] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1449.952486][T15587] loop9: detected capacity change from 0 to 2048
[ 1449.964650][T15587] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[ 1449.975483][T15587] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[ 1449.991216][T15587] UDF-fs: Scanning with blocksize 512 failed
[ 1450.006685][T15587] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[ 1450.011530][T15587] UDF-fs: Scanning with blocksize 1024 failed
[ 1450.066051][T15587] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[ 1450.074024][T15587] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[ 1450.080734][T15587] UDF-fs: Scanning with blocksize 2048 failed
[ 1450.132233][T15587] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 1450.158145][T15587] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[ 1450.169948][T15587] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[ 1450.172860][T15587] UDF-fs: Scanning with blocksize 4096 failed
[ 1450.174834][T15587] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1)
[ 1450.314678][T15601] loop4: detected capacity change from 0 to 512
[ 1450.346223][T15601] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.16782: iget: bad i_size value: 38620345925642
[ 1450.357323][T15601] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1450.357780][T15601] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.16782: couldn't read orphan inode 15 (err -117)
[ 1450.365188][T15601] loop4: lost filesystem error report for type 5 error -117
[ 1450.365385][    C1] EXT4-fs (loop4): error count since last fsck: 2
[ 1450.370004][    C1] EXT4-fs (loop4): initial error at time 2000001170: ext4_orphan_get:1397: inode 15
[ 1450.373322][    C1] EXT4-fs (loop4): last error at time 2000001170: ext4_orphan_get:1402
[ 1450.379896][T15601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1450.515204][T15601] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.16782: bg 0: block 5: invalid block bitmap
[ 1450.623942][T15601] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1928 with error 28
[ 1450.629858][T15601] EXT4-fs (loop4): This should not happen!! Data will be lost
[ 1450.629858][T15601] 
[ 1450.638609][T15601] EXT4-fs (loop4): Total free blocks count 0
[ 1450.640559][T15601] EXT4-fs (loop4): Free/Dirty block details
[ 1450.642766][T15601] EXT4-fs (loop4): free_blocks=0
[ 1450.644414][T15601] EXT4-fs (loop4): dirty_blocks=1928
[ 1450.648292][T15601] EXT4-fs (loop4): Block reservation details
[ 1450.650846][T15601] EXT4-fs (loop4): i_reserved_data_blocks=1928
[ 1450.748448][T15612] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[ 1450.768314][T15612] exFAT-fs (nullb0): invalid boot record signature
[ 1450.771425][T15612] exFAT-fs (nullb0): failed to read boot sector
[ 1450.773759][T15612] exFAT-fs (nullb0): failed to recognize exfat type
[ 1451.132763][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1451.932424][T15628] loop9: detected capacity change from 0 to 131072
[ 1451.941317][T15628] F2FS-fs (loop9): invalid crc value
[ 1451.986316][T15628] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1452.000208][T15628] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1452.032154][   T33] kauditd_printk_skb: 90 callbacks suppressed
[ 1452.032165][   T33] audit: type=1800 audit(2000001172.507:4051): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.16794" name="file1" dev="loop9" ino=7 res=0 errno=0
[ 1453.212615][T15643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1453.267886][T15643] batadv_slave_1: entered promiscuous mode
[ 1453.371219][T15644] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1454.063674][T15653] loop7: detected capacity change from 0 to 32768
[ 1454.112562][   T33] audit: type=1800 audit(2000001174.565:4052): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.16800" name="file1" dev="loop7" ino=4 res=0 errno=0
[ 1454.138296][   T33] audit: type=1800 audit(2000001174.565:4053): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.16800" name="file1" dev="loop7" ino=4 res=0 errno=0
[ 1454.561948][T15664] loop4: detected capacity change from 0 to 512
[ 1454.569670][T15664] EXT4-fs (loop4): Unsupported encryption level 158
[ 1455.537082][T15669] loop7: detected capacity change from 0 to 40427
[ 1455.544376][T15669] F2FS-fs (loop7): invalid crc value
[ 1455.655571][T15669] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1455.741252][T15669] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1456.145392][T15686] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1456.468218][T15699] loop7: detected capacity change from 0 to 4096
[ 1456.478160][T15699] NILFS (loop7): invalid segment: Checksum error in segment payload
[ 1456.484806][T15699] NILFS (loop7): trying rollback from an earlier position
[ 1456.552164][T15699] NILFS (loop7): recovery complete
[ 1456.555170][T15700] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1456.563603][ T2305] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[ 1457.307457][T15704] loop7: detected capacity change from 0 to 131072
[ 1457.310899][T15704] F2FS-fs (loop7): invalid crc value
[ 1457.316231][ T2305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1457.319967][ T2305] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[ 1457.324019][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[ 1457.328932][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[ 1457.332606][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1457.335992][ T2305] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1457.340110][ T2305] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice= 0.c8
[ 1457.342973][ T2305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1457.348755][ T2305] usb 5-1: config 0 descriptor??
[ 1457.351135][T15695] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1457.355695][ T2305] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_out
[ 1457.421630][T15704] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1457.460870][T15704] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1457.586386][ T2305] usb 5-1: USB disconnect, device number 59
[ 1458.495706][T15729] loop9: detected capacity change from 0 to 256
[ 1459.018552][T15743] loop9: detected capacity change from 0 to 512
[ 1459.026454][T15743] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[ 1459.052307][T15743] EXT4-fs (loop9): invalid journal inode
[ 1459.054813][T15743] EXT4-fs (loop9): can't get journal size
[ 1459.102397][T15743] EXT4-fs (loop9): 1 truncate cleaned up
[ 1459.105924][T15743] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1459.221729][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16839'.
[ 1459.300865][T15261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1459.450242][T15749] loop4: detected capacity change from 0 to 32768
[ 1459.470314][T15749] JBD2: Ignoring recovery information on journal
[ 1459.484825][T15749] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1459.527469][T15749] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1459.817704][ T2305] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1459.979831][ T2305] usb 10-1: config 9 has an invalid interface number: 48 but max is 0
[ 1459.982701][ T2305] usb 10-1: config 9 has no interface number 0
[ 1459.984765][ T2305] usb 10-1: config 9 interface 48 has no altsetting 0
[ 1459.992502][ T2305] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[ 1459.995441][ T2305] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.998214][ T2305] usb 10-1: Product: syz
[ 1460.000011][ T2305] usb 10-1: Manufacturer: syz
[ 1460.001509][ T2305] usb 10-1: SerialNumber: syz
[ 1460.248332][ T2305] usb 10-1: USB disconnect, device number 13
[ 1460.925887][T12279] ocfs2: Unmounting device (7,4) on (node local)
[ 1461.499126][T16569] IPVS: starting estimator thread 0...
[ 1461.564787][T15788] loop9: detected capacity change from 0 to 1024
[ 1461.568852][T15788] EXT4-fs (loop9): Can't support bigalloc feature without extents feature
[ 1461.568852][T15788] 
[ 1461.573194][T15788] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities
[ 1461.650046][T15785] IPVS: using max 45 ests per chain, 108000 per kthread
[ 1461.693203][T15792] loop9: detected capacity change from 0 to 256
[ 1461.696783][T15792] vfat: Unknown parameter 'Q/w'
[ 1461.973447][T16569] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1462.124284][T16569] usb 10-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[ 1462.127686][T16569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.217320][T16569] pwc: Logitech/Cisco VT Camera webcam detected.
[ 1462.229583][T15806] loop4: detected capacity change from 0 to 512
[ 1462.242131][T15806] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 0
[ 1462.295893][T15808] netlink: 'syz.7.16866': attribute type 3 has an invalid length.
[ 1462.439060][T16569] pwc: Failed to set LED on/off time (-71)
[ 1462.450058][T16569] pwc: send_video_command error -71
[ 1462.591266][T16569] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1462.594911][T16569] Philips webcam 10-1:127.0: probe with driver Philips webcam failed with error -71
[ 1462.659054][T16569] usb 10-1: USB disconnect, device number 14
[ 1463.361785][T15841] loop4: detected capacity change from 0 to 256
[ 1463.365764][T15841] exfat: Deprecated parameter 'namecase'
[ 1463.375381][T15841] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d)
[ 1463.592140][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16887'.
[ 1463.972883][ T5805] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1464.133103][ T5805] usb 5-1: Using ep0 maxpacket: 8
[ 1464.140097][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1464.146014][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1464.150072][ T5805] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[ 1464.154173][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1464.161766][ T5805] usb 5-1: config 0 descriptor??
[ 1464.663977][ T5805] sunplus 0003:04FC:05D8.0037: unknown global tag 0xe
[ 1464.666652][ T5805] sunplus 0003:04FC:05D8.0037: item 0 4 1 14 parsing failed
[ 1464.669341][ T5805] sunplus 0003:04FC:05D8.0037: probe with driver sunplus failed with error -22
[ 1464.833263][ T5805] usb 5-1: USB disconnect, device number 60
[ 1465.552553][T15876] ip6t_srh: unknown srh invflags 4000
[ 1465.781970][ T2305] kernel read not supported for file /video9 (pid: 2305 comm: kworker/1:3)
[ 1466.228068][T15885] loop4: detected capacity change from 0 to 32768
[ 1466.636757][T15889] 9pnet_fd: Insufficient options for proto=fd
[ 1466.729759][T15893] x_tables: ip6_tables: mh match: only valid for protocol 135
[ 1467.477837][ T5805] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[ 1467.632139][ T5805] usb 10-1: config 0 has an invalid interface number: 207 but max is 0
[ 1467.641679][ T5805] usb 10-1: config 0 has no interface number 0
[ 1467.650390][ T5805] usb 10-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=1c.66
[ 1467.654397][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1467.658403][ T5805] usb 10-1: Product: syz
[ 1467.660297][ T5805] usb 10-1: Manufacturer: syz
[ 1467.662319][ T5805] usb 10-1: SerialNumber: syz
[ 1467.668728][ T5805] usb 10-1: config 0 descriptor??
[ 1467.894464][T15924] loop4: detected capacity change from 0 to 4096
[ 1467.955868][ T5805] usb 10-1: USB disconnect, device number 15
[ 1468.003442][T15924] ntfs3(loop4): ino=9, attr_set_size_ex
[ 1468.079746][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16922'.
[ 1468.445341][T15931] loop4: detected capacity change from 0 to 1024
[ 1468.451076][T15931] EXT4-fs: Ignoring removed orlov option
[ 1468.457627][T15931] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945)
[ 1468.468915][T15931] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1468.479496][T15931] EXT4-fs (loop4): revision level too high, forcing read-only mode
[ 1468.485114][T15931] EXT4-fs (loop4): Can't support bigalloc feature without extents feature
[ 1468.485114][T15931] 
[ 1468.503268][T15931] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[ 1468.507909][T15931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1468.605916][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1468.634656][T15934] tc_dump_action: action bad kind
[ 1468.734059][T15936] loop4: detected capacity change from 0 to 512
[ 1468.757249][T15936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1468.769481][T15936] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1468.861354][T15936] EXT4-fs error (device loop4): ext4_get_first_dir_block:3548: inode #12: comm syz.4.16926: directory missing '.'
[ 1468.932497][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1469.055659][T15940] loop9: detected capacity change from 0 to 4096
[ 1469.171338][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16929'.
[ 1469.175178][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16929'.
[ 1469.188250][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16929'.
[ 1469.192438][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16929'.
[ 1469.370561][T15950] comedi comedi3: pcl711: I/O port conflict (0x140,16)
[ 1469.569493][T15956] loop9: detected capacity change from 0 to 2048
[ 1469.612667][T15956] NILFS (loop9): bad btree root (ino=6): level = 5, flags = 0xbd, nchildren = 0
[ 1469.617018][T15956] NILFS (loop9): ifile inode (checkpoint number=2) corrupted
[ 1469.623360][T15956] NILFS (loop9): error -5 while loading last checkpoint (checkpoint number=2)
[ 1469.771368][T15958] loop4: detected capacity change from 0 to 512
[ 1469.799734][T15958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1469.864849][T15958] EXT4-fs error (device loop4): ext4_readdir:225: inode #12: comm syz.4.16935: path /500/file0/file0: directory fails checksum at offset 0
[ 1470.087286][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1470.198441][T15970] syz_tun: entered allmulticast mode
[ 1470.203567][T15969] syz_tun: left allmulticast mode
[ 1470.236980][T15972] loop4: detected capacity change from 0 to 1024
[ 1470.437549][T15976] loop9: detected capacity change from 0 to 1764
[ 1470.694332][   T33] audit: type=1800 audit(2000001191.114:4054): pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.16943" name="file0" dev="loop9" ino=1923 res=0 errno=0
[ 1470.932000][T15995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16951'.
[ 1470.945979][T15998] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1471.008194][T16000] loop4: detected capacity change from 0 to 1024
[ 1471.038210][T16000] hfsplus: bad catalog file entry
[ 1471.062870][T15705] hfsplus: bad catalog file entry
[ 1471.272452][T16006] syzkaller0: entered promiscuous mode
[ 1471.274638][T16006] syzkaller0: entered allmulticast mode
[ 1471.729225][  T391] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1471.983146][  T391] usb 5-1: Using ep0 maxpacket: 8
[ 1472.214759][  T391] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1472.634273][  T391] usb 5-1: config 243 has an invalid interface number: 244 but max is 0
[ 1472.637955][  T391] usb 5-1: config 243 has no interface number 0
[ 1472.650535][  T391] usb 5-1: config 243 interface 244 has no altsetting 0
[ 1472.855502][  T391] usb 5-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=1d.23
[ 1472.910226][  T391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1472.913363][  T391] usb 5-1: Product: syz
[ 1472.916856][  T391] usb 5-1: Manufacturer: syz
[ 1472.918688][  T391] usb 5-1: SerialNumber: syz
[ 1473.307044][  T391] quatech2 5-1:243.244: Quatech 2nd gen USB to Serial Driver converter detected
[ 1473.325933][  T391] usb 5-1: qt2_attach - failed to power on unit: -71
[ 1473.328861][  T391] quatech2 5-1:243.244: probe with driver quatech2 failed with error -71
[ 1473.370907][  T391] usb 5-1: USB disconnect, device number 61
[ 1473.843016][T16035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1474.958596][T16049] --map-set only usable from mangle table
[ 1475.059741][T16043] loop4: detected capacity change from 0 to 131072
[ 1475.064475][T16043] F2FS-fs (loop4): invalid crc value
[ 1475.086482][T16043] F2FS-fs (loop4): invalid journal entries nats 129 sits 6
[ 1475.088898][T16043] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-22)
[ 1475.412371][T16058] loop4: detected capacity change from 0 to 2048
[ 1475.433404][T16059] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1475.559813][T16059] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1475.563915][T16059] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1475.602427][T16059] Remounting filesystem read-only
[ 1475.640308][T12279] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[ 1475.786412][T16068] loop9: detected capacity change from 0 to 1024
[ 1475.813346][T16068] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1475.838257][T16068] EXT4-fs error (device loop9): ext4_lookup:1785: inode #15: comm syz.9.16982: iget: bad extended attribute block 8388352
[ 1475.843517][T16068] EXT4-fs (loop9): Remounting filesystem read-only
[ 1475.867751][T15261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1476.033262][T16076] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16985'.
[ 1476.174363][T16077] netlink: 'syz.9.16984': attribute type 13 has an invalid length.
[ 1476.488151][T16079] loop4: detected capacity change from 0 to 32768
[ 1477.273987][T16111] loop9: detected capacity change from 0 to 4096
[ 1477.277999][T16111] ntfs3: Invalid value for dmask.
[ 1477.602334][T16126] openvswitch: netlink: Invalid MD length 0 for MD type 0
[ 1477.607941][T16126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1477.750788][T26472] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1477.913227][T26472] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1477.918033][T26472] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1477.924203][T26472] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1477.931016][T26472] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1477.938163][T26472] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1477.941653][T26472] usb 5-1: config 1 interface 0 has no altsetting 1
[ 1477.947221][T26472] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1477.954431][T26472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.957848][T26472] usb 5-1: Product: syz
[ 1477.962186][T26472] usb 5-1: Manufacturer: syz
[ 1477.965989][T26472] usb 5-1: SerialNumber: syz
[ 1478.091176][T16138] openvswitch: netlink: Message has 1 unknown bytes.
[ 1478.093678][T16138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1478.107139][T16137] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17009'.
[ 1478.192752][T26472] smsusb:smsusb_probe: board id=8, interface number 0
[ 1478.204488][T26472] usb 5-1: selecting invalid altsetting 0
[ 1478.214075][T26472] smsusb:smsusb_probe: usb_set_interface failed, rc -22
[ 1478.223956][T26472] smsusb 5-1:1.0: probe with driver smsusb failed with error -22
[ 1478.248768][T26472] usb 5-1: USB disconnect, device number 62
[ 1478.660498][ T2305] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1478.762770][T16148] loop7: detected capacity change from 0 to 256
[ 1478.779518][T16148] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[ 1478.812590][ T2305] usb 10-1: Using ep0 maxpacket: 8
[ 1478.818843][ T2305] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1478.828134][ T2305] usb 10-1: config 4 has an invalid interface number: 163 but max is 0
[ 1478.835346][ T2305] usb 10-1: config 4 has no interface number 0
[ 1478.839670][ T2305] usb 10-1: config 4 interface 163 has no altsetting 0
[ 1478.850244][ T2305] usb 10-1: New USB device found, idVendor=106c, idProduct=caa3, bcdDevice=49.b0
[ 1478.853342][ T2305] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.860140][ T2305] usb 10-1: Product: syz
[ 1478.879513][ T2305] usb 10-1: Manufacturer: syz
[ 1478.883744][ T2305] usb 10-1: SerialNumber: syz
[ 1478.950714][T16154] loop4: detected capacity change from 0 to 256
[ 1478.969788][T16154] exfat: Deprecated parameter 'namecase'
[ 1478.973849][T16154] exfat: Deprecated parameter 'namecase'
[ 1478.976267][T16154] exfat: Deprecated parameter 'utf8'
[ 1478.979772][T16154] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[ 1478.988799][T16154] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x02ffffff)
[ 1478.992974][T16154] exFAT-fs (loop4): Filesystem has been set read-only
[ 1478.995357][T16154] exFAT-fs (loop4): failed to count the number of clusters in root
[ 1478.998114][T16154] exFAT-fs (loop4): failed to recognize exfat type
[ 1479.300646][ T2305] qmi_wwan 10-1:4.163: bogus CDC Union: master=0, slave=0
[ 1479.308423][ T2305] qmi_wwan 10-1:4.163: probe with driver qmi_wwan failed with error -22
[ 1479.321795][ T2305] usb 10-1: USB disconnect, device number 16
[ 1479.365648][T16162] netlink: 'syz.4.17021': attribute type 1 has an invalid length.
[ 1479.722062][T26472] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1479.871863][T26472] usb 5-1: Using ep0 maxpacket: 8
[ 1479.877966][T26472] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.883759][T26472] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 1479.887805][T26472] usb 5-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac
[ 1479.891481][T26472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.900950][T26472] usb 5-1: config 0 descriptor??
[ 1479.915190][T26472] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22
[ 1480.111884][T26472] usb 5-1: USB disconnect, device number 63
[ 1480.737294][T16174] loop9: detected capacity change from 0 to 32768
[ 1481.226103][T16185] loop4: detected capacity change from 0 to 4096
[ 1481.231789][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17032'.
[ 1481.249352][T16187] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1481.311161][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17032'.
[ 1481.426245][T16190] loop4: detected capacity change from 0 to 512
[ 1481.441245][T16190] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1481.479488][T16190] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.17034: Bad quota inum: 2, type: 1
[ 1481.485515][T16190] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[ 1481.607474][T16197] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[ 1481.655931][T16197] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.17034: Bad quota inum: 2, type: 1
[ 1481.684637][T16197] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[ 1481.783043][T12279] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1481.925173][T16214] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17043'.
[ 1482.111572][T16220] loop4: detected capacity change from 0 to 2048
[ 1482.120626][T16220] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[ 1482.136724][T16220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1482.206745][T16222] loop7: detected capacity change from 0 to 512
[ 1482.221638][T16222] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1482.273804][T16210] loop9: detected capacity change from 0 to 32768
[ 1482.286578][T16222] EXT4-fs (loop7): 1 truncate cleaned up
[ 1482.293346][T16222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1482.383116][T16210] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1482.396603][T16210] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 1482.406289][T16210] XFS (loop9): Tail block (0x29) overwrite detected. Updated to 0x30
[ 1482.418697][T16210] XFS (loop9): Ending clean mount
[ 1482.567591][T15261] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1482.776466][T12278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1483.420029][T16250] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[ 1483.866490][ T5805] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[ 1484.029822][ T5805] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[ 1484.033171][ T5805] usb 5-1: config 0 has no interface number 0
[ 1484.035229][ T5805] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1484.039228][ T5805] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1484.046818][ T5805] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[ 1484.050526][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1484.053429][ T5805] usb 5-1: Product: syz
[ 1484.054978][ T5805] usb 5-1: SerialNumber: syz
[ 1484.068631][ T5805] usb 5-1: config 0 descriptor??
[ 1484.079086][ T5805] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input59
[ 1484.338055][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.348770][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.351254][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.353777][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.356778][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.359452][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.361885][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.364143][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.366561][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.369118][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1484.375578][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1484.378447][ T5805] usb 5-1: USB disconnect, device number 64
[ 1484.418263][ T5805] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1486.919363][T16287] loop9: detected capacity change from 0 to 32768
[ 1486.971075][T16287] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1486.982516][T16287] XFS (loop9): Ending clean mount
[ 1486.991659][T16287] XFS (loop9): Quotacheck needed: Please wait.
[ 1487.437895][T16287] XFS (loop9): Quotacheck: Done.
[ 1487.476518][T15261] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1488.238382][T16319] ipt_REJECT: ECHOREPLY no longer supported.
[ 1489.961571][T16354] qrtr: Invalid version 12
[ 1490.727746][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[ 1490.918405][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17111'.
[ 1490.925000][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17111'.
[ 1490.964824][T16569] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1491.155779][T16569] usb 10-1: Using ep0 maxpacket: 16
[ 1491.169811][T16569] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64
[ 1491.185196][T16569] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[ 1491.189504][T16569] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1491.192984][T16569] usb 10-1: Product: syz
[ 1491.197439][T16569] usb 10-1: Manufacturer: syz
[ 1491.200235][T16569] usb 10-1: SerialNumber: syz
[ 1491.220960][T16569] usb 10-1: config 0 descriptor??
[ 1491.309040][T16569] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1491.395385][  T391] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1491.492291][T16569] usb 10-1: USB disconnect, device number 17
[ 1491.546881][  T391] usb 5-1: Using ep0 maxpacket: 16
[ 1491.599407][T13479] usb 10-1: Failed to submit usb control message: -71
[ 1491.609423][T13479] usb 10-1: unable to send the bmi data to the device: -71
[ 1491.612317][T13479] usb 10-1: unable to get target info from device
[ 1491.615298][T13479] usb 10-1: could not get target info (-71)
[ 1491.617409][T13479] usb 10-1: could not probe fw (-71)
[ 1491.688660][  T391] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1491.692955][  T391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1491.909794][  T391] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1491.918530][  T391] usb 5-1: New USB device strings: Mfr=140, Product=215, SerialNumber=3
[ 1491.921746][  T391] usb 5-1: Product: syz
[ 1491.923709][  T391] usb 5-1: Manufacturer: syz
[ 1491.931814][  T391] usb 5-1: SerialNumber: syz
[ 1491.960480][  T391] usb 5-1: config 0 descriptor??
[ 1491.982200][  T391] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22
[ 1492.194985][ T2305] usb 5-1: USB disconnect, device number 65
[ 1492.561951][T16420] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[ 1492.966625][ T2305] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1493.720376][ T2305] usb 10-1: Using ep0 maxpacket: 32
[ 1493.726588][ T2305] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1493.740040][ T2305] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1493.755485][ T2305] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1493.772636][ T2305] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1493.808955][ T2305] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1493.824637][ T2305] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1493.845182][ T2305] usb 10-1: Product: syz
[ 1493.852302][ T2305] usb 10-1: Manufacturer: syz
[ 1493.901139][ T2305] usb 10-1: SerialNumber: syz
[ 1494.305787][    C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1494.915818][ T2305] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input61
[ 1496.209318][T16441] loop7: detected capacity change from 0 to 2048
[ 1496.295567][T16445] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1497.045995][ T2305] imon:send_packet: packet tx failed (-71)
[ 1497.101105][ T2305] imon 10-1:155.0: panel buttons/knobs setup failed
[ 1497.109554][ T2305] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1497.126722][ T2305]  (id 0x00)
[ 1497.274599][ T2305] rc_core: IR keymap rc-imon-pad not found
[ 1497.300039][ T2305] Registered IR keymap rc-empty
[ 1497.308516][ T2305] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1497.327974][ T2305] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1497.343731][ T2305] imon:send_packet: packet tx failed (-71)
[ 1497.371372][ T2305] imon 10-1:155.0: remote input dev register failed
[ 1497.379116][ T2305] imon 10-1:155.0: imon_init_intf0: rc device setup failed
[ 1497.915334][T16476] netlink: 'syz.4.17142': attribute type 1 has an invalid length.
[ 1497.918745][T16476] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17142'.
[ 1497.934129][T16469] loop7: detected capacity change from 0 to 512
[ 1498.041652][T16469] EXT4-fs (loop7): 1 truncate cleaned up
[ 1498.053512][T16469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1498.264635][T16469] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.17140: bg 0: block 465: padding at end of block bitmap is not set
[ 1498.390312][T16469] EXT4-fs (loop7): Remounting filesystem read-only
[ 1498.413803][T16469] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[ 1498.449137][ T2305] imon 10-1:155.0: unable to initialize intf0, err 0
[ 1498.453297][ T2305] imon:imon_probe: failed to initialize context!
[ 1498.459039][ T2305] imon 10-1:155.0: unable to register, err -19
[ 1498.466942][T12278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1498.475175][ T2305] usb 10-1: USB disconnect, device number 18
[ 1498.682715][ T5805] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1498.686250][T16486] loop7: detected capacity change from 0 to 128
[ 1498.705149][T16486] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1498.716374][T16486] hpfs: filesystem error: improperly stopped
[ 1498.721256][T16486] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1498.727773][T16486] hpfs: You really don't want any checks? You are crazy...
[ 1498.746737][T16486] hpfs: hpfs_map_sector(): read error
[ 1498.749441][T16486] hpfs: code page support is disabled
[ 1498.758133][T16486] hpfs: hpfs_map_4sectors(): unaligned read
[ 1498.761035][T16486] hpfs: hpfs_map_4sectors(): unaligned read
[ 1498.763740][T16486] hpfs: filesystem error: unable to find root dir
[ 1498.851962][T16486] hpfs: hpfs_map_4sectors(): unaligned read
[ 1498.856876][ T5805] usb 5-1: Using ep0 maxpacket: 32
[ 1498.866278][ T5805] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[ 1498.869216][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1498.872525][ T5805] usb 5-1: config 0 has no interface number 0
[ 1498.890468][ T5805] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1498.897946][ T5805] usb 5-1: config 0 interface 6 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1498.901591][T16486] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[ 1498.912398][ T5805] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[ 1498.918592][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.921190][ T5805] usb 5-1: Product: syz
[ 1498.926282][ T5805] usb 5-1: Manufacturer: syz
[ 1498.931056][ T5805] usb 5-1: SerialNumber: syz
[ 1498.960446][ T5805] usb 5-1: config 0 descriptor??
[ 1499.673509][ T5805] vmk80xx 5-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[ 1499.680111][ T5805] vmk80xx 5-1:0.6: probe with driver vmk80xx failed with error -22
[ 1499.685876][ T5805] usb 5-1: USB disconnect, device number 66
[ 1499.867278][T16505] loop4: detected capacity change from 0 to 256
[ 1500.399288][T16521] loop4: detected capacity change from 0 to 512
[ 1500.490705][T16521] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[ 1500.503957][T16521] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.17159: corrupted in-inode xattr: e_value size too large
[ 1500.524683][T16521] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1500.525512][T16521] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.17159: couldn't read orphan inode 15 (err -117)
[ 1500.534567][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1500.536840][    C1] EXT4-fs (loop4): initial error at time 2000001220: ext4_iget_extra_inode:5128: inode 15
[ 1500.540040][    C1] EXT4-fs (loop4): last error at time 2000001220: ext4_iget_extra_inode:5128: inode 15
[ 1500.544254][T16521] loop4: lost filesystem error report for type 5 error -117
[ 1500.545424][T16521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1500.662050][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1500.680764][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17164'.
[ 1501.186325][T16553] loop4: detected capacity change from 0 to 256
[ 1501.227501][T16539] "syz.7.17168" (16539) uses obsolete ecb(arc4) skcipher
[ 1501.517777][T16565] loop7: detected capacity change from 0 to 40427
[ 1501.520958][T16565] F2FS-fs (loop7): Image doesn't support compression
[ 1501.523169][T16565] F2FS-fs (loop7): build fault injection rate: 690
[ 1501.529200][T16565] F2FS-fs (loop7): invalid crc value
[ 1501.559355][T16565] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1501.585206][T16565] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1502.767576][T16570] ceph: No mds server is up or the cluster is laggy
[ 1502.773477][ T5805] libceph: connect (1)[c::]:6789 error -101
[ 1502.782280][ T5805] libceph: mon0 (1)[c::]:6789 connect error
[ 1504.171359][T16594] loop7: detected capacity change from 0 to 128
[ 1504.179583][T16594] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1504.184965][T16594] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1504.268288][T12278] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1504.334533][T16601] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17188'.
[ 1504.339884][T16601] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1504.342350][T16601] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1504.360805][T16601] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17188'.
[ 1504.497191][T16606] netlink: 40 bytes leftover after parsing attributes in process `syz.7.17190'.
[ 1504.651290][T16613] netlink: 'syz.7.17193': attribute type 7 has an invalid length.
[ 1504.654556][T16613] netlink: 29 bytes leftover after parsing attributes in process `syz.7.17193'.
[ 1504.660424][T16613] netlink: 140 bytes leftover after parsing attributes in process `syz.7.17193'.
[ 1504.716568][T16613] netlink: 'syz.7.17193': attribute type 7 has an invalid length.
[ 1504.735602][T16613] netlink: 29 bytes leftover after parsing attributes in process `syz.7.17193'.
[ 1505.746737][T16657] netlink: 'syz.4.17210': attribute type 8 has an invalid length.
[ 1505.840648][T16653] 9pnet: p9_errstr2errno: server reported unknown error L҉
[ 1505.865668][T16656] loop7: detected capacity change from 0 to 32768
[ 1506.030423][T16656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.17211 (16656)
[ 1506.179714][T16656] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1506.184916][T16656] BTRFS info (device loop7): using crc32c checksum algorithm
[ 1506.343031][T16427] BTRFS warning (device loop7): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xfe3cb471 level 0
[ 1506.364042][T16656] BTRFS warning (device loop7): failed to read root (objectid=4): -5
[ 1506.564584][T16656] BTRFS error (device loop7): open_ctree failed: -5
[ 1507.140884][T16694] loop7: detected capacity change from 0 to 1024
[ 1507.193725][T16694] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1507.213816][T16694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1507.295997][T16698] loop9: detected capacity change from 0 to 4096
[ 1507.300091][T12278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1507.386276][T16698] NILFS (loop9): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0
[ 1507.394033][T16698] NILFS (loop9): error -5 getting root inode
[ 1507.397042][T16701] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1507.890698][T16716] loop9: detected capacity change from 0 to 512
[ 1507.907086][T16716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[ 1507.909959][T16716] System zones: 0-2, 18-18, 34-34
[ 1507.913030][T16716] EXT4-fs (loop9): too many log groups per flexible block group
[ 1507.916177][T16716] EXT4-fs (loop9): failed to initialize mballoc (-12)
[ 1507.918693][T16716] EXT4-fs (loop9): mount failed
[ 1508.266878][T16732] loop4: detected capacity change from 0 to 4096
[ 1508.274319][T16732] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1508.286203][T16732] ntfs3(loop4): It is recommended to use chkdsk.
[ 1508.344789][T16732] ntfs3(loop4): $Secure::$SDH is corrupted.
[ 1508.351370][T16732] ntfs3(loop4): Failed to initialize $Secure (-22).
[ 1508.378000][T16729] loop9: detected capacity change from 0 to 40427
[ 1508.488185][T16729] F2FS-fs (loop9): invalid crc value
[ 1508.526145][T16739] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[ 1508.690626][T16729] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1508.751494][T16729] F2FS-fs (loop9): Start checkpoint disabled!
[ 1508.810343][T16729] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[ 1508.816689][T16729] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[ 1510.665595][T16754] loop9: detected capacity change from 0 to 1024
[ 1510.668472][T16754] EXT4-fs: Ignoring removed bh option
[ 1510.670993][T16754] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1510.677487][T16754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000]
[ 1510.680389][T16754] System zones: 0-1, 3-12
[ 1510.695223][T16754] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #3: block 1: comm syz.9.17243: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1510.699940][T16754] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 1510.700142][T16754] EXT4-fs (loop9): Remounting filesystem read-only
[ 1510.705844][    C1] EXT4-fs (loop9): error count since last fsck: 1
[ 1510.705858][    C1] EXT4-fs (loop9): initial error at time 2000001231: ext4_map_blocks:833: inode 3: block 1
[ 1510.705874][    C1] EXT4-fs (loop9): last error at time 2000001231: ext4_map_blocks:833: inode 3: block 1
[ 1510.719014][T16754] Quota error (device loop9): write_blk: dquota write failed
[ 1510.722116][T16754] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1510.726205][T16754] Quota error (device loop9): v2_write_file_info: Can't write info structure
[ 1510.729399][T16754] EXT4-fs (loop9): 1 orphan inode deleted
[ 1510.732156][T16754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1510.808538][T15261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1511.932512][T16778] netlink: 56 bytes leftover after parsing attributes in process `syz.7.17250'.
[ 1512.239909][ T5746] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1512.247989][ T5746] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.609270][ T5746] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1512.612604][ T5746] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.969232][T16797] loop9: detected capacity change from 0 to 32768
[ 1512.972997][ T5746] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1512.981053][T16797] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.17259 (16797)
[ 1513.025263][T16797] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1513.042802][T16797] BTRFS info (device loop9): using crc32c checksum algorithm
[ 1513.052256][ T5746] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1513.200498][T16801] loop7: detected capacity change from 0 to 2048
[ 1513.210747][T16801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1513.588726][T16820] loop4: detected capacity change from 0 to 512
[ 1513.657045][T16797] BTRFS info (device loop9): enabling ssd optimizations
[ 1513.684600][T16797] BTRFS info (device loop9): turning on async discard
[ 1513.704698][T16797] BTRFS info (device loop9): enabling free space tree
[ 1513.780016][T16797] BTRFS critical (device loop9 state E): emergency shutdown
[ 1513.785716][   T33] audit: type=1800 audit(2000001234.177:4055): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.17259" name="file2" dev="loop9" ino=261 res=0 errno=0
[ 1513.872424][T15261] BTRFS info (device loop9 state E): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1514.126323][ T5746] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1514.131124][ T5746] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1514.279392][T16826] loop7: detected capacity change from 0 to 32768
[ 1514.291602][T16826] JBD2: Ignoring recovery information on journal
[ 1514.319189][T16826] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1514.770039][T12278] ocfs2: Unmounting device (7,7) on (node local)
[ 1515.262902][T26472] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1515.267182][ T2418] Bluetooth: hci0: unexpected event for opcode 0x0809
[ 1515.426920][T26472] usb 10-1: Using ep0 maxpacket: 8
[ 1515.443898][T26472] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1515.447239][T26472] usb 10-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[ 1515.453713][T26472] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1515.468260][T26472] usb 10-1: config 0 descriptor??
[ 1515.694604][ T5805] usb 10-1: USB disconnect, device number 19
[ 1516.579309][ T5746] bond1 (unregistering): (slave vti0): Releasing backup interface
[ 1516.588812][ T5746] vti0 (unregistering): left promiscuous mode
[ 1516.992927][T16898] netlink: 'syz.7.17284': attribute type 10 has an invalid length.
[ 1517.017889][ T5746] bond2 (unregistering): (slave geneve2): Releasing backup interface
[ 1517.078067][ T5746] team0: Port device vxlan0 removed
[ 1517.422234][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17286'.
[ 1517.425559][T16908] netlink: 348 bytes leftover after parsing attributes in process `syz.4.17286'.
[ 1517.429501][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17286'.
[ 1517.434006][T16908] netlink: 348 bytes leftover after parsing attributes in process `syz.4.17286'.
[ 1517.437914][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17286'.
[ 1517.720600][T16912] netlink: 228 bytes leftover after parsing attributes in process `syz.9.17289'.
[ 1517.839087][ T5746] .` (unregistering): Released all slaves
[ 1517.855517][ T5746] bond1 (unregistering): Released all slaves
[ 1517.864645][ T5746] bond2 (unregistering): Released all slaves
[ 1517.873472][ T5746] bond3 (unregistering): Released all slaves
[ 1517.884219][ T5746] bond4 (unregistering): Released all slaves
[ 1517.910052][ T5362] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1518.066795][ T5746] tipc: Disabling bearer <udp:syz2>
[ 1518.069089][ T5746] tipc: Left network mode
[ 1518.520484][ T5746] IPVS: stopping master sync thread 7335 ...
[ 1518.577815][T16920] loop4: detected capacity change from 0 to 32768
[ 1518.583901][T16920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.17292 (16920)
[ 1518.668449][T16920] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1518.689897][T16920] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1518.909794][T16920] BTRFS info (device loop4): enabling ssd optimizations
[ 1518.912261][T16920] BTRFS info (device loop4): turning on async discard
[ 1518.920693][T16920] BTRFS info (device loop4): enabling free space tree
[ 1519.011166][T12279] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1519.251670][T16946] loop9: detected capacity change from 0 to 32768
[ 1519.259231][T16946] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.17295 (16946)
[ 1519.418849][ T5362] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1519.430996][T16946] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1519.441766][T16946] BTRFS info (device loop9): using sha256 checksum algorithm
[ 1519.752129][T16946] BTRFS info (device loop9): enabling ssd optimizations
[ 1519.754349][T16946] BTRFS info (device loop9): turning on async discard
[ 1519.759504][T16946] BTRFS info (device loop9): enabling free space tree
[ 1519.973250][T15261] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1519.990818][ T5362] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1520.270371][T16978] netlink: 220 bytes leftover after parsing attributes in process `syz.4.17299'.
[ 1520.273447][T16978] netlink: 'syz.4.17299': attribute type 2 has an invalid length.
[ 1520.394097][T16981] loop4: detected capacity change from 0 to 1024
[ 1520.423296][T16981] EXT4-fs: Ignoring removed bh option
[ 1520.434967][T16981] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[ 1520.621813][T16981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1520.855414][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1520.859428][ T5746] hsr_slave_0: left promiscuous mode
[ 1520.862234][ T5746] hsr_slave_1: left promiscuous mode
[ 1520.887334][ T5746] veth1_macvtap: left promiscuous mode
[ 1520.889261][ T5746] veth0_macvtap: left promiscuous mode
[ 1520.954908][ T5746] veth1_vlan: left promiscuous mode
[ 1520.957240][ T5746] veth0_vlan: left promiscuous mode
[ 1521.669731][ T2305] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1521.899333][ T2305] usb 5-1: Using ep0 maxpacket: 8
[ 1521.903418][ T2305] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1521.909256][ T2305] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1521.913476][ T2305] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1521.917519][ T2305] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1521.922840][ T2305] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1521.927280][ T2305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.114826][ T5362] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1522.118827][T16995] lo: Caught tx_queue_len zero misconfig
[ 1522.122466][T16995] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1522.158854][ T2305] usb 5-1: GET_CAPABILITIES returned 0
[ 1522.163488][ T2305] usbtmc 5-1:16.0: can't read capabilities
[ 1522.403593][    C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1522.409061][    C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1522.413094][    C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1522.424563][ T5805] usb 5-1: USB disconnect, device number 67
[ 1522.931938][T17018] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1524.246019][ T5746] IPVS: stop unused estimator thread 0...
[ 1524.326044][T17034] netlink: 208240 bytes leftover after parsing attributes in process `syz.7.17317'.
[ 1524.779405][ T5805] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1524.881526][ T2305] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1525.041809][ T5805] usb 5-1: Using ep0 maxpacket: 8
[ 1525.048662][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.053254][ T5805] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1525.057138][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.063208][ T5805] usb 5-1: config 0 descriptor??
[ 1525.068403][ T5805] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1525.153430][ T2305] usb 10-1: Using ep0 maxpacket: 16
[ 1525.165392][ T2305] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1525.171531][ T2305] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1525.180100][ T2305] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1525.188853][ T2305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.202005][ T2305] usb 10-1: config 0 descriptor??
[ 1525.501563][T17066] dlm: no locking on control device
[ 1525.650602][ T2305] nzxt-smart2 0003:1E71:2009.0038: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0
[ 1525.884078][T17083] loop7: detected capacity change from 0 to 4096
[ 1525.890679][T17083] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[ 1525.908037][T17083] ntfs3(loop7): ino=19, mi_enum_attr
[ 1525.910338][T17083] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1525.930938][T17083] ntfs3(loop7): ino=1a, mi_enum_attr
[ 1525.933270][T17083] ntfs3(loop7): ino=1a, mi_enum_attr
[ 1525.935447][T17083] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[ 1526.049130][T16534] usb 10-1: USB disconnect, device number 20
[ 1526.354072][T17096] loop7: detected capacity change from 0 to 4096
[ 1526.357839][T17096] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1526.388619][T17096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1526.429695][T17096] EXT4-fs (loop7): shut down requested (1)
[ 1526.460763][T12278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1526.467330][   T40] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[ 1526.628022][ T5805] gspca_vc032x: reg_w err -71
[ 1526.630276][ T5805] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[ 1526.640066][ T5805] usb 5-1: USB disconnect, device number 68
[ 1526.718602][T17106] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17350'.
[ 1526.752047][T17106] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17350'.
[ 1526.885845][T17116] loop9: detected capacity change from 0 to 1024
[ 1527.065045][T17118] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1527.077551][T17118] /dev/nullb0: Can't open blockdev
[ 1527.872912][T17147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1527.912655][ T5805] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1528.080887][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1528.090155][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1528.097896][ T5805] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1528.112608][ T5805] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1528.126388][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1528.148690][ T5805] usb 5-1: config 0 descriptor??
[ 1528.585613][ T5805] plantronics 0003:047F:FFFF.0039: item 0 0 0 8 parsing failed
[ 1528.596776][ T5805] plantronics 0003:047F:FFFF.0039: parse failed
[ 1528.598924][ T5805] plantronics 0003:047F:FFFF.0039: probe with driver plantronics failed with error -22
[ 1528.665746][T17143] loop9: detected capacity change from 0 to 32768
[ 1528.725903][T17143] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1528.761668][T17143] XFS (loop9): Ending clean mount
[ 1528.764788][T17143] XFS (loop9): Quotacheck needed: Please wait.
[ 1528.793124][ T5805] usb 5-1: USB disconnect, device number 69
[ 1528.935767][T17143] XFS (loop9): Quotacheck: Done.
[ 1529.145869][T15261] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1529.486845][T17174] loop9: detected capacity change from 0 to 1764
[ 1529.775026][T17183] loop7: detected capacity change from 0 to 4096
[ 1529.819539][T17183] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1529.832310][T17183] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[ 1529.913388][T12278] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[ 1529.959175][T17188] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1530.361078][T17206] loop7: detected capacity change from 0 to 64
[ 1530.369440][T17206] minix: block size(59136) > page size(4096) not supported by filesystem
[ 1531.086645][T17217] netlink: 'syz.9.17397': attribute type 1 has an invalid length.
[ 1531.089588][T17217] netlink: 228 bytes leftover after parsing attributes in process `syz.9.17397'.
[ 1532.013970][T17231] loop4: detected capacity change from 0 to 512
[ 1532.136873][T17231] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1532.208175][T17231] EXT4-fs (loop4): invalid journal inode
[ 1532.211132][T17231] EXT4-fs (loop4): can't get journal size
[ 1532.235699][T17231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[ 1532.239699][T17231] System zones: 1-12, 13-13
[ 1532.290681][T17231] EXT4-fs (loop4): 1 truncate cleaned up
[ 1532.311201][T17231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1532.412229][   T33] audit: type=1800 audit(2000001252.799:4056): pid=17231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17403" name="file1" dev="loop4" ino=15 res=0 errno=0
[ 1532.804795][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1533.321029][T17265] tipc: Started in network mode
[ 1533.323244][T17265] tipc: Node identity 7a23bbc39e4f, cluster identity 4711
[ 1533.326162][T17265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1533.332196][T17265] syzkaller0: entered promiscuous mode
[ 1533.334872][T17265] syzkaller0: entered allmulticast mode
[ 1533.341159][T17265] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1533.402443][T17265] tipc: Resetting bearer <eth:syzkaller0>
[ 1533.408668][T17264] tipc: Resetting bearer <eth:syzkaller0>
[ 1533.471704][T17264] tipc: Disabling bearer <eth:syzkaller0>
[ 1533.551707][T17269] ptrace attach of "/syz-executor exec"[12279] was attempted by ""[17269]
[ 1533.804935][T17281] netlink: 40 bytes leftover after parsing attributes in process `syz.9.17424'.
[ 1534.069552][T17283] loop4: detected capacity change from 0 to 4096
[ 1534.111720][T17283] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[ 1534.379657][T17292] loop7: detected capacity change from 0 to 32768
[ 1534.389353][T17297] netlink: 'syz.9.17429': attribute type 3 has an invalid length.
[ 1534.392563][T17297] netlink: 'syz.9.17429': attribute type 1 has an invalid length.
[ 1534.395232][T17297] netlink: 224 bytes leftover after parsing attributes in process `syz.9.17429'.
[ 1534.500595][T17292] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1534.556309][T17292] XFS (loop7): Ending clean mount
[ 1534.581240][T17310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1534.666527][T17292] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[ 1534.672372][T17292] XFS (loop7): Unmount and run xfs_repair
[ 1534.681507][T17292] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[ 1534.684732][T17292] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[ 1534.688973][T17292] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[ 1534.692776][T17292] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1534.696462][T17292] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[ 1534.701178][T17292] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1534.704960][T17292] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1534.709257][T17292] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1534.713108][T17292] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1534.717068][T17292] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74
[ 1534.799855][T12278] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1534.862617][T12278] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair.
[ 1534.987640][ T2305] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1535.199029][ T2305] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1535.203216][ T2305] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1535.207382][ T2305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1535.227099][ T2305] usb 10-1: config 0 descriptor??
[ 1535.240560][ T2305] pwc: Askey VC010 type 2 USB webcam detected.
[ 1535.695599][ T2305] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1535.704665][ T2305] pwc: recv_control_msg error -32 req 02 val 2700
[ 1535.707280][ T2305] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1535.714480][ T2305] pwc: recv_control_msg error -32 req 04 val 1000
[ 1535.717843][ T2305] pwc: recv_control_msg error -32 req 04 val 1300
[ 1535.722298][ T2305] pwc: recv_control_msg error -32 req 04 val 1400
[ 1535.726183][ T2305] pwc: recv_control_msg error -32 req 02 val 2000
[ 1535.730462][ T2305] pwc: recv_control_msg error -32 req 02 val 2100
[ 1535.738936][ T2305] pwc: recv_control_msg error -32 req 04 val 1500
[ 1535.744022][ T2305] pwc: recv_control_msg error -32 req 02 val 2500
[ 1535.748175][ T2305] pwc: recv_control_msg error -32 req 02 val 2400
[ 1535.954735][ T2305] pwc: recv_control_msg error -71 req 02 val 2900
[ 1535.962468][ T2305] pwc: recv_control_msg error -71 req 02 val 2800
[ 1535.967934][ T2305] pwc: recv_control_msg error -71 req 04 val 1100
[ 1535.973133][ T2305] pwc: recv_control_msg error -71 req 04 val 1200
[ 1535.985481][ T2305] pwc: Registered as video103.
[ 1535.998806][ T2305] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input63
[ 1536.070853][T17335] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[ 1536.074606][T17335] PKCS7: Only support pkcs7_signedData type
[ 1536.163383][ T2305] usb 10-1: USB disconnect, device number 21
[ 1536.716660][T17367] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1536.747538][T30458] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1536.792309][ T2418] Bluetooth: hci1: link tx timeout
[ 1536.796406][ T2418] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1536.807802][T12286] Bluetooth: hci1: link tx timeout
[ 1536.813778][T12286] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1536.828043][T12286] Bluetooth: hci1: link tx timeout
[ 1536.830147][T12286] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1537.079919][T17386] futex_wake_op: syz.9.17459 tries to shift op by 32; fix this program
[ 1537.201335][T30458] usb 5-1: Using ep0 maxpacket: 32
[ 1537.219135][T30458] usb 5-1: config 4 has an invalid interface number: 174 but max is 0
[ 1537.224544][T30458] usb 5-1: config 4 has no interface number 0
[ 1537.226620][T30458] usb 5-1: config 4 interface 174 has no altsetting 0
[ 1537.244520][T30458] usb 5-1: New USB device found, idVendor=0b05, idProduct=1779, bcdDevice=45.8a
[ 1537.248914][T30458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1537.261059][T30458] usb 5-1: Product: syz
[ 1537.265809][T30458] usb 5-1: Manufacturer: syz
[ 1537.273385][T30458] usb 5-1: SerialNumber: syz
[ 1537.415261][T17398] loop7: detected capacity change from 0 to 128
[ 1537.552161][ T2305] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1537.703696][ T2305] usb 10-1: Using ep0 maxpacket: 8
[ 1537.713134][ T2305] usb 10-1: config index 0 descriptor too short (expected 134, got 36)
[ 1537.721032][ T2305] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1537.727838][ T2305] usb 10-1: string descriptor 0 read error: -22
[ 1537.733600][ T2305] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.40
[ 1537.747313][ T2305] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1537.862952][T30458] usb 5-1: USB disconnect, device number 70
[ 1538.189565][ T2305] apple 0003:05AC:0219.003A: unknown main item tag 0x3
[ 1538.194474][ T2305] apple 0003:05AC:0219.003A: invalid report_size 2133616522
[ 1538.199994][ T2305] apple 0003:05AC:0219.003A: item 0 4 1 7 parsing failed
[ 1538.204794][ T2305] apple 0003:05AC:0219.003A: parse failed
[ 1538.208225][ T2305] apple 0003:05AC:0219.003A: probe with driver apple failed with error -22
[ 1538.385559][ T2305] usb 10-1: USB disconnect, device number 22
[ 1538.829580][T17417] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17474'.
[ 1538.838767][T17417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17474'.
[ 1538.845929][T17417] netlink: 84 bytes leftover after parsing attributes in process `syz.4.17474'.
[ 1538.872311][T12286] Bluetooth: hci1: command 0x0406 tx timeout
[ 1539.071331][T17421] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1539.115057][T12286] Bluetooth: hci2: sending frame failed (-49)
[ 1539.130488][ T2418] Bluetooth: hci2: Opcode 0x1003 failed: -49
[ 1539.370635][T17429] ieee802154 phy1 wpan1: encryption failed: -22
[ 1539.764101][ T2305] usb 10-1: new full-speed USB device number 23 using dummy_hcd
[ 1539.948962][ T2305] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1539.957925][ T2305] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1539.962851][ T2305] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1539.972320][ T2305] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1539.982072][ T2305] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1539.989791][T17443] loop4: detected capacity change from 0 to 256
[ 1540.010321][ T2305] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1540.036121][ T2305] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1540.047285][T17443] FAT-fs (loop4): Directory bread(block 64) failed
[ 1540.050832][ T2305] usb 10-1: Product: syz
[ 1540.055964][ T2305] usb 10-1: Manufacturer: syz
[ 1540.059191][T17443] FAT-fs (loop4): Directory bread(block 65) failed
[ 1540.061458][ T2305] usb 10-1: SerialNumber: syz
[ 1540.062050][T17443] FAT-fs (loop4): Directory bread(block 66) failed
[ 1540.065752][T17443] FAT-fs (loop4): Directory bread(block 67) failed
[ 1540.068736][T17443] FAT-fs (loop4): Directory bread(block 68) failed
[ 1540.069745][ T2305] usb 10-1: config 0 descriptor??
[ 1540.090629][T17443] FAT-fs (loop4): Directory bread(block 69) failed
[ 1540.101550][T17443] FAT-fs (loop4): Directory bread(block 70) failed
[ 1540.115102][T17443] FAT-fs (loop4): Directory bread(block 71) failed
[ 1540.124845][T17443] FAT-fs (loop4): Directory bread(block 72) failed
[ 1540.133726][T17443] FAT-fs (loop4): Directory bread(block 73) failed
[ 1540.301020][ T2305] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1540.309731][ T2305] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1540.502130][ T2305] radio-si470x 10-1:0.0: software version 0, hardware version 0
[ 1540.505517][ T2305] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[ 1540.510122][ T2305] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1540.534791][T16569] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1540.704238][ T2305] radio-si470x 10-1:0.0: submitting int urb failed (-90)
[ 1541.222047][T17447] loop7: detected capacity change from 0 to 2048
[ 1541.242467][T17447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1541.247248][T17447] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1541.320435][T12278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1541.509860][T16569] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1541.512567][ T2305] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1541.523002][ T2305] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22
[ 1541.531882][ T2305] usb 10-1: USB disconnect, device number 23
[ 1541.588125][T16569] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1541.610065][T16569] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1541.614102][T16569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.618126][T16569] usb 5-1: Product: syz
[ 1541.620203][T16569] usb 5-1: Manufacturer: syz
[ 1541.622494][T16569] usb 5-1: SerialNumber: syz
[ 1541.699456][T17462] veth0: entered promiscuous mode
[ 1541.702536][T17462] veth0: left promiscuous mode
[ 1541.750786][T17464] loop7: detected capacity change from 0 to 256
[ 1541.754143][T17464] exfat: Deprecated parameter 'utf8'
[ 1541.764167][T17464] exfat: Deprecated parameter 'utf8'
[ 1541.767272][T17464] exfat: Deprecated parameter 'utf8'
[ 1541.778835][T17464] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[ 1541.853975][T17466] loop7: detected capacity change from 0 to 1024
[ 1542.092113][T16569] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1542.219717][T17476] loop9: detected capacity change from 0 to 512
[ 1542.238243][T17476] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.17502: bad orphan inode 13
[ 1542.254209][T17476] loop9: lost filesystem error report for type 5 error -117
[ 1542.254776][T17476] ext4_test_bit(bit=12, block=4) = 1
[ 1542.257967][    C1] EXT4-fs (loop9): error count since last fsck: 1
[ 1542.258008][    C1] EXT4-fs (loop9): initial error at time 2000001262: ext4_orphan_get:1423
[ 1542.258027][    C1] EXT4-fs (loop9): last error at time 2000001262: ext4_orphan_get:1423
[ 1542.290523][T17476] is_bad_inode(inode)=0
[ 1542.292761][T17476] NEXT_ORPHAN(inode)=0
[ 1542.300959][T16569] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1542.301546][T17476] max_ino=32
[ 1542.304446][T16569] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[ 1542.346269][T17476] i_nlink=1
[ 1542.370555][T17476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1542.471516][T17476] EXT4-fs warning (device loop9): dx_probe:813: inode #2: comm syz.9.17502: Hash code is SIPHASH, but hash not in dirent
[ 1542.483905][T17476] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.17502: Corrupt directory, running e2fsck is recommended
[ 1542.484188][T17487] loop7: detected capacity change from 0 to 2048
[ 1542.490000][T17476] EXT4-fs warning (device loop9): dx_probe:813: inode #2: comm syz.9.17502: Hash code is SIPHASH, but hash not in dirent
[ 1542.496072][T17487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1542.517943][T17476] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.17502: Corrupt directory, running e2fsck is recommended
[ 1542.567566][T15261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1542.787340][T16569] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1542.790751][T16569] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[ 1543.016217][T16569] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1543.311501][T16569] usb 5-1: USB disconnect, device number 71
[ 1543.402300][T11901] udevd[11901]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1543.632806][T17504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17513'.
[ 1543.647516][T17502] loop9: detected capacity change from 0 to 40427
[ 1543.652884][T17502] F2FS-fs: heap/no_heap options were deprecated
[ 1543.662583][T17502] F2FS-fs: Quota file already specified
[ 1544.277546][T17524] ubi31: detaching mtd0
[ 1544.517493][T17524] ubi31: mtd0 is detached
[ 1545.341673][T17535] loop7: detected capacity change from 0 to 128
[ 1545.365631][T17517] loop4: detected capacity change from 0 to 32768
[ 1545.372406][T17517] (syz.4.17518,17517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1545.378064][T17517] (syz.4.17518,17517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1545.392447][T17517] JBD2: Ignoring recovery information on journal
[ 1545.443256][T17517] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1545.677792][T17541] loop9: detected capacity change from 0 to 512
[ 1545.686620][T17541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1545.715651][T17543] loop7: detected capacity change from 0 to 128
[ 1545.792865][T17541] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1545.797916][T17541] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1545.807243][T17543] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1545.868874][T17543] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1545.897218][T15261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1546.013011][T12279] ocfs2: Unmounting device (7,4) on (node local)
[ 1546.117577][T12278] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1546.200712][T17552] veth1_to_team: Caught tx_queue_len zero misconfig
[ 1546.805025][T17577] netlink: 'syz.4.17543': attribute type 12 has an invalid length.
[ 1546.808072][T17577] netlink: 'syz.4.17543': attribute type 4 has an invalid length.
[ 1547.239731][   T32] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1547.393088][   T32] usb 5-1: Using ep0 maxpacket: 32
[ 1547.402703][   T32] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1547.406567][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1547.409964][   T32] usb 5-1: Product: syz
[ 1547.411586][   T32] usb 5-1: Manufacturer: syz
[ 1547.413365][   T32] usb 5-1: SerialNumber: syz
[ 1547.417642][   T32] usb 5-1: config 0 descriptor??
[ 1547.529504][ T2305] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1547.626894][   T32] airspy 5-1:0.0: usb_control_msg() failed -71 request 09
[ 1547.631825][   T32] airspy 5-1:0.0: Could not detect board
[ 1547.635175][   T32] airspy 5-1:0.0: probe with driver airspy failed with error -71
[ 1547.639721][   T32] usb 5-1: USB disconnect, device number 72
[ 1547.679898][ T2305] usb 10-1: Using ep0 maxpacket: 8
[ 1547.685895][ T2305] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1547.689233][ T2305] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1547.693568][ T2305] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1547.697462][ T2305] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1547.702638][ T2305] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1547.706322][ T2305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1547.798281][T17593] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1547.916010][ T2305] usb 10-1: GET_CAPABILITIES returned 0
[ 1547.918707][ T2305] usbtmc 10-1:16.0: can't read capabilities
[ 1547.961649][T17599] loop7: detected capacity change from 0 to 2048
[ 1547.966351][T17599] EXT4-fs (loop7): bad geometry: first data block 0 is beyond end of filesystem (0)
[ 1548.121617][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1548.127333][  T391] usb 10-1: USB disconnect, device number 24
[ 1548.283756][T17606] netlink: 92 bytes leftover after parsing attributes in process `syz.4.17557'.
[ 1548.560120][ T2305] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[ 1548.711854][ T2305] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[ 1548.716014][ T2305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1548.720632][ T2305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1548.724274][ T2305] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1548.735473][ T2305] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1548.741127][ T2305] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[ 1548.748474][ T2305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1548.760144][ T2305] usb 5-1: config 0 descriptor??
[ 1548.895150][T17620] loop7: detected capacity change from 0 to 128
[ 1548.899885][T17620] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[ 1548.907355][T17620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1549.030271][T30458] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1549.182887][T30458] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1549.187015][T30458] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.188784][ T2305] ryos 0003:1E7D:3138.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0
[ 1549.191273][T30458] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1549.202644][T30458] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1549.206592][T30458] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1549.209925][T30458] usb 10-1: Product: syz
[ 1549.212272][T30458] usb 10-1: Manufacturer: syz
[ 1549.214769][T30458] usb 10-1: SerialNumber: syz
[ 1549.259184][T30458] usb 10-1: 0:1 : does not exist
[ 1549.389106][T30458] usb 5-1: USB disconnect, device number 73
[ 1549.424905][  T391] usb 10-1: USB disconnect, device number 25
[ 1550.037404][T17632] loop7: detected capacity change from 0 to 1024
[ 1550.088466][T17635] loop4: detected capacity change from 0 to 512
[ 1550.121123][T17635] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1550.151587][   T33] audit: type=1800 audit(1549.402:4057): pid=17632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.17570" name="file1" dev="loop7" ino=20 res=0 errno=0
[ 1550.225193][T17635] 
[ 1550.226153][T17635] ======================================================
[ 1550.228745][T17635] WARNING: possible circular locking dependency detected
[ 1550.231186][T17635] syzkaller #0 Tainted: G             L     
[ 1550.233319][T17635] ------------------------------------------------------
[ 1550.235955][T17635] syz.4.17571/17635 is trying to acquire lock:
[ 1550.238546][T17635] ffff888199058c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[ 1550.242558][T17635] 
[ 1550.242558][T17635] but task is already holding lock:
[ 1550.245049][T17635] ffff8881afc12620 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[ 1550.248204][T17635] 
[ 1550.248204][T17635] which lock already depends on the new lock.
[ 1550.248204][T17635] 
[ 1550.251458][T17635] 
[ 1550.251458][T17635] the existing dependency chain (in reverse order) is:
[ 1550.254919][T17635] 
[ 1550.254919][T17635] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[ 1550.257729][T17635]        down_write+0x96/0x200
[ 1550.259482][T17635]        ext4_destroy_inline_data+0x28/0xe0
[ 1550.261823][T17635]        ext4_do_writepages+0x51e/0x4670
[ 1550.264010][T17635]        ext4_writepages+0x241/0x3b0
[ 1550.265903][T17635]        do_writepages+0x32e/0x550
[ 1550.267560][T17635]        file_write_and_wait_range+0x36e/0x440
[ 1550.269481][T17635]        mmb_fsync_noflush+0x76/0x1c0
[ 1550.271202][T17635]        ext4_sync_file+0x437/0xd50
[ 1550.272847][T17635]        ext4_buffered_write_iter+0x2ca/0x3a0
[ 1550.274736][T17635]        ext4_file_write_iter+0x298/0x1bf0
[ 1550.276916][T17635]        vfs_write+0x61d/0xb90
[ 1550.278758][T17635]        __x64_sys_pwrite64+0x199/0x230
[ 1550.280894][T17635]        do_syscall_64+0x174/0x580
[ 1550.282909][T17635]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1550.285430][T17635] 
[ 1550.285430][T17635] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 1550.288650][T17635]        __lock_acquire+0x15a5/0x2cf0
[ 1550.290785][T17635]        lock_acquire+0x106/0x350
[ 1550.292728][T17635]        percpu_down_read_internal+0x48/0x1c0
[ 1550.295084][T17635]        ext4_writepages+0x205/0x3b0
[ 1550.297102][T17635]        do_writepages+0x32e/0x550
[ 1550.299093][T17635]        __writeback_single_inode+0x133/0x10e0
[ 1550.301516][T17635]        writeback_single_inode+0x4ac/0xdc0
[ 1550.303816][T17635]        write_inode_now+0x1c2/0x290
[ 1550.305819][T17635]        iput+0x8c1/0xe80
[ 1550.307460][T17635]        ext4_xattr_block_set+0x1fd4/0x2ad0
[ 1550.309763][T17635]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[ 1550.312197][T17635]        __ext4_expand_extra_isize+0x30d/0x400
[ 1550.314603][T17635]        __ext4_mark_inode_dirty+0x45c/0x710
[ 1550.316776][T17635]        ext4_evict_inode+0x986/0x10e0
[ 1550.318708][T17635]        evict+0x61e/0xb10
[ 1550.320324][T17635]        ext4_orphan_cleanup+0xc38/0x1470
[ 1550.322491][T17635]        ext4_fill_super+0x5a19/0x6330
[ 1550.324540][T17635]        get_tree_bdev_flags+0x431/0x4f0
[ 1550.326361][T17635]        vfs_get_tree+0x92/0x2a0
[ 1550.327918][T17635]        do_new_mount+0x341/0xd30
[ 1550.329502][T17635]        __se_sys_mount+0x31d/0x420
[ 1550.331212][T17635]        do_syscall_64+0x174/0x580
[ 1550.333157][T17635]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1550.335533][T17635] 
[ 1550.335533][T17635] other info that might help us debug this:
[ 1550.335533][T17635] 
[ 1550.338738][T17635]  Possible unsafe locking scenario:
[ 1550.338738][T17635] 
[ 1550.341508][T17635]        CPU0                    CPU1
[ 1550.343524][T17635]        ----                    ----
[ 1550.345174][T17635]   lock(&ei->xattr_sem);
[ 1550.346728][T17635]                                lock(&sbi->s_writepages_rwsem);
[ 1550.349533][T17635]                                lock(&ei->xattr_sem);
[ 1550.351806][T17635]   rlock(&sbi->s_writepages_rwsem);
[ 1550.353451][T17635] 
[ 1550.353451][T17635]  *** DEADLOCK ***
[ 1550.353451][T17635] 
[ 1550.356084][T17635] 3 locks held by syz.4.17571/17635:
[ 1550.357755][T17635]  #0: ffff88819905c0d8 (&type->s_umount_key#29/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[ 1550.360879][T17635]  #1: ffff88819905c600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[ 1550.363914][T17635]  #2: ffff8881afc12620 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[ 1550.367454][T17635] 
[ 1550.367454][T17635] stack backtrace:
[ 1550.369412][T17635] CPU: 1 UID: 0 PID: 17635 Comm: syz.4.17571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1550.369433][T17635] Tainted: [L]=SOFTLOCKUP
[ 1550.369438][T17635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1550.369447][T17635] Call Trace:
[ 1550.369457][T17635]  <TASK>
[ 1550.369465][T17635]  dump_stack_lvl+0xe8/0x150
[ 1550.369485][T17635]  print_circular_bug+0x2e1/0x300
[ 1550.369505][T17635]  check_noncircular+0x12e/0x150
[ 1550.369522][T17635]  __lock_acquire+0x15a5/0x2cf0
[ 1550.369536][T17635]  ? unwind_next_frame+0xa6/0x2550
[ 1550.369657][T17635]  ? ext4_writepages+0x205/0x3b0
[ 1550.369676][T17635]  lock_acquire+0x106/0x350
[ 1550.369691][T17635]  ? ext4_writepages+0x205/0x3b0
[ 1550.369710][T17635]  percpu_down_read_internal+0x48/0x1c0
[ 1550.369726][T17635]  ? ext4_writepages+0x205/0x3b0
[ 1550.369741][T17635]  ext4_writepages+0x205/0x3b0
[ 1550.369754][T17635]  ? __pfx_ext4_writepages+0x10/0x10
[ 1550.369768][T17635]  ? do_raw_spin_unlock+0x4d/0x210
[ 1550.369783][T17635]  ? __pfx_ext4_writepages+0x10/0x10
[ 1550.369796][T17635]  do_writepages+0x32e/0x550
[ 1550.369814][T17635]  __writeback_single_inode+0x133/0x10e0
[ 1550.369829][T17635]  ? do_raw_spin_unlock+0x4d/0x210
[ 1550.369844][T17635]  writeback_single_inode+0x4ac/0xdc0
[ 1550.369855][T17635]  write_inode_now+0x1c2/0x290
[ 1550.369864][T17635]  ? __pfx_write_inode_now+0x10/0x10
[ 1550.369885][T17635]  ? do_raw_spin_unlock+0x4d/0x210
[ 1550.369902][T17635]  iput+0x8c1/0xe80
[ 1550.369918][T17635]  ext4_xattr_block_set+0x1fd4/0x2ad0
[ 1550.369937][T17635]  ? __pfx_check_xattrs+0x10/0x10
[ 1550.369951][T17635]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 1550.369964][T17635]  ? ext4_xattr_block_find+0x2d4/0x350
[ 1550.369980][T17635]  ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[ 1550.370013][T17635]  __ext4_expand_extra_isize+0x30d/0x400
[ 1550.370031][T17635]  __ext4_mark_inode_dirty+0x45c/0x710
[ 1550.370053][T17635]  ext4_evict_inode+0x986/0x10e0
[ 1550.370065][T17635]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1550.370075][T17635]  ? do_raw_spin_unlock+0x4d/0x210
[ 1550.370084][T17635]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1550.370093][T17635]  evict+0x61e/0xb10
[ 1550.370102][T17635]  ? __pfx_evict+0x10/0x10
[ 1550.370108][T17635]  ? _raw_spin_unlock+0x28/0x50
[ 1550.370119][T17635]  ? iput+0xb25/0xe80
[ 1550.370128][T17635]  ext4_orphan_cleanup+0xc38/0x1470
[ 1550.370141][T17635]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 1550.370150][T17635]  ? ext4_register_li_request+0x259/0x720
[ 1550.370160][T17635]  ? errseq_check_and_advance+0x66/0x120
[ 1550.370173][T17635]  ext4_fill_super+0x5a19/0x6330
[ 1550.370186][T17635]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1550.370194][T17635]  ? snprintf+0xe8/0x140
[ 1550.370204][T17635]  ? __pfx_snprintf+0x10/0x10
[ 1550.370212][T17635]  ? set_blocksize+0x1c9/0x440
[ 1550.370222][T17635]  ? sb_set_blocksize+0x155/0x240
[ 1550.370230][T17635]  ? setup_bdev_super+0x4c1/0x5b0
[ 1550.370242][T17635]  get_tree_bdev_flags+0x431/0x4f0
[ 1550.370320][T17635]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1550.370335][T17635]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1550.370355][T17635]  vfs_get_tree+0x92/0x2a0
[ 1550.370372][T17635]  do_new_mount+0x341/0xd30
[ 1550.370384][T17635]  ? apparmor_capable+0x126/0x170
[ 1550.370400][T17635]  ? __pfx_do_new_mount+0x10/0x10
[ 1550.370412][T17635]  ? ns_capable+0x89/0xe0
[ 1550.370428][T17635]  ? user_path_at+0xd4/0x160
[ 1550.370441][T17635]  __se_sys_mount+0x31d/0x420
[ 1550.370452][T17635]  ? __pfx___se_sys_mount+0x10/0x10
[ 1550.370461][T17635]  ? __x64_sys_mount+0x20/0xc0
[ 1550.370473][T17635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1550.370484][T17635]  do_syscall_64+0x174/0x580
[ 1550.370495][T17635]  ? trace_irq_disable+0x3b/0x140
[ 1550.370512][T17635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1550.370524][T17635] RIP: 0033:0x7f5b04f9e0ca
[ 1550.370539][T17635] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1550.370549][T17635] RSP: 002b:00007f5b05f2ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1550.370566][T17635] RAX: ffffffffffffffda RBX: 00007f5b05f2cee0 RCX: 00007f5b04f9e0ca
[ 1550.370577][T17635] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f5b05f2cea0
[ 1550.370585][T17635] RBP: 0000200000000180 R08: 00007f5b05f2cee0 R09: 0000000000004c95
[ 1550.370593][T17635] R10: 0000000000004c95 R11: 0000000000000246 R12: 0000200000000000
[ 1550.370599][T17635] R13: 00007f5b05f2cea0 R14: 000000000000047a R15: 0000200000001ac0
[ 1550.370610][T17635]  </TASK>
[ 1550.523803][T17635] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.17571: iget: bad extra_isize 90 (inode size 256)
[ 1550.551059][T17635] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1550.551906][T17635] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.17571: error while reading EA inode 11 err=-117
[ 1550.559687][T17635] loop4: lost filesystem error report for type 5 error -117
[ 1550.560494][T17635] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1550.563356][    C1] EXT4-fs (loop4): error count since last fsck: 2
[ 1550.563371][    C1] EXT4-fs (loop4): initial error at time 1549: ext4_xattr_inode_iget:441: inode 11
[ 1550.563392][    C1] EXT4-fs (loop4): last error at time 1549: ext4_xattr_inode_iget:446
[ 1550.582255][T17635] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.17571: iget: bad extra_isize 90 (inode size 256)
[ 1550.587094][T17635] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1550.588442][T17635] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.17571: error while reading EA inode 11 err=-117
[ 1550.597423][T17635] loop4: lost filesystem error report for type 5 error -117
[ 1550.598529][T17635] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.17571: iget: bad extra_isize 90 (inode size 256)
[ 1550.607035][T17635] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[ 1550.608788][T17635] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.17571: error while reading EA inode 18 err=-117
[ 1550.616690][T17635] loop4: lost filesystem error report for type 5 error -117
[ 1550.617805][T17635] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.17571: iget: bad extra_isize 90 (inode size 256)
[ 1550.626344][T17635] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[ 1550.626977][T17635] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.17571: error while reading EA inode 18 err=-117
[ 1550.636418][T17635] loop4: lost filesystem error report for type 5 error -117
[ 1550.637154][T17635] EXT4-fs (loop4): 1 orphan inode deleted
[ 1550.644568][T17635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1550.664937][T17642] loop7: detected capacity change from 0 to 32768
[ 1550.725993][T12279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1550.728573][T17642] non-latin1 character 0xffff found in JFS file name
[ 1550.736310][T17642] mount with iocharset=utf8 to access
[ 1552.165987][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
