last executing test programs:

650.263879ms ago: executing program 0 (id=586):
syz_mount_image$ocfs2(&(0x7f00000048c0), &(0x7f0000004900)='./file0\x00', 0x13, &(0x7f0000000000)={[{@noacl}, {@nouser_xattr}, {@heartbeat_none}, {@acl}, {@grpquota}, {@inode64}, {@localalloc}]}, 0x1, 0x48a8, &(0x7f0000004980)="$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")

506.211684ms ago: executing program 2 (id=588):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x2, 0x4e24, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e21, 0x4e20, @in6=@local}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080)

418.322624ms ago: executing program 1 (id=590):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'veth0_macvtap\x00', {0x2, 0x4e1f, @broadcast}})
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="bd", 0x1}], 0x1)

337.492145ms ago: executing program 0 (id=591):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800)

337.098936ms ago: executing program 1 (id=592):
r0 = syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0xfe, 0x84c, &(0x7f0000000d00)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
brk(0x8000000000000001)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x52e, 0x80001)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0xf00, 0x0)
fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
execveat$binfmt(r0, r4, &(0x7f0000000180)={[&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='iso9660\x00']}, &(0x7f0000000380)={[&(0x7f00000001c0)='&.)}-\x00', &(0x7f0000000200)='/dev/loop#\x00', &(0x7f0000000240)=',!:\x00', &(0x7f0000000280)='/dev/loop#\x00', &(0x7f00000002c0)='+\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00']}, 0x1000)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000700), 0x0)

336.835281ms ago: executing program 2 (id=593):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0xcdc8, 0x2)

291.073358ms ago: executing program 0 (id=594):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff000000, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844)

290.83536ms ago: executing program 2 (id=595):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000f5ffff6b00000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

227.891008ms ago: executing program 0 (id=596):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x3})
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4)

226.765112ms ago: executing program 1 (id=597):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003500)={&(0x7f00000033c0)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbc, 0xb, 0xad6fbf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x38, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd, 0xa8, @random="d03dd0085ae689cb2a"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9f0}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20)

159.75187ms ago: executing program 2 (id=598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x40, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfffff31a}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

159.519738ms ago: executing program 0 (id=599):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x73, 0x1, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

159.229805ms ago: executing program 1 (id=600):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x3, 0xfffffff9, 0x820, 0x4, 0x0, "4b480f8b000a0000000000f64a00001ae400", 0x388, 0x1005})
readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)

159.070594ms ago: executing program 2 (id=601):
r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
io_setup(0x6, &(0x7f0000000540)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0}])
mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0)
mq_timedreceive(r0, &(0x7f0000000400)=""/215, 0xd7, 0x6, 0x0)

101.17988ms ago: executing program 0 (id=602):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r0, 0x0, 0x0, 0x1001f0)
open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)

459.765µs ago: executing program 1 (id=603):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x45c1a3, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0)

233.401µs ago: executing program 1 (id=604):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003f8d18108422cf816245d01020301090212000175fc00050904a3a20006ccf60c"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000900)={0x20, 0x0, 0x56, "278462ae23c60c1b9bd8451b0fd182d20c385cc7ce84c0a67988fccdaadba305cd3d73e6bf2b61617c66941aa405949b3651dc9308f5f175450510d37c5ee189695cfc30df3cd14b8938f193865b87a7513ee7b4dbfb"}, 0x0, 0x0})

0s ago: executing program 2 (id=605):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x109000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10948' (ED25519) to the list of known hosts.
syzkaller login: [   50.049732][ T5585] cgroup: Unknown subsys name 'net'
[   50.154872][ T5585] cgroup: Unknown subsys name 'cpuset'
[   50.158478][ T5585] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.420757][ T5585] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.350267][ T4984] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.354988][ T4984] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.359791][ T4984] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.367585][ T4984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.371087][ T4984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.384157][ T4984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.395317][ T4984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.399215][ T4984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.404236][ T4984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.407644][ T4984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.429151][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.436652][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.440433][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.444001][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.446795][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.936679][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.939776][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.942787][ T5594] bridge_slave_0: entered allmulticast mode
[   55.945696][ T5594] bridge_slave_0: entered promiscuous mode
[   55.970090][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.972786][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.975079][ T5594] bridge_slave_1: entered allmulticast mode
[   55.978196][ T5594] bridge_slave_1: entered promiscuous mode
[   56.008997][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.027749][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.089930][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.092393][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.095089][ T5598] bridge_slave_0: entered allmulticast mode
[   56.098257][ T5598] bridge_slave_0: entered promiscuous mode
[   56.103182][ T5594] team0: Port device team_slave_0 added
[   56.108625][ T5594] team0: Port device team_slave_1 added
[   56.124076][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.126542][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.128847][ T5598] bridge_slave_1: entered allmulticast mode
[   56.131419][ T5598] bridge_slave_1: entered promiscuous mode
[   56.158373][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.161556][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.165642][ T5602] bridge_slave_0: entered allmulticast mode
[   56.169655][ T5602] bridge_slave_0: entered promiscuous mode
[   56.180667][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.184922][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.193971][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.198184][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.201064][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.203505][ T5602] bridge_slave_1: entered allmulticast mode
[   56.206106][ T5602] bridge_slave_1: entered promiscuous mode
[   56.216973][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.219828][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.228003][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.238969][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.256231][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.270368][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.281360][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.299415][ T5598] team0: Port device team_slave_0 added
[   56.309518][ T5602] team0: Port device team_slave_0 added
[   56.312751][ T5602] team0: Port device team_slave_1 added
[   56.323192][ T5598] team0: Port device team_slave_1 added
[   56.341089][ T5594] hsr_slave_0: entered promiscuous mode
[   56.343900][ T5594] hsr_slave_1: entered promiscuous mode
[   56.366153][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.368850][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.378681][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.384667][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.387362][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.397669][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.402745][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.405528][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.414419][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.434775][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.437725][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.446000][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.496392][ T5602] hsr_slave_0: entered promiscuous mode
[   56.498897][ T5602] hsr_slave_1: entered promiscuous mode
[   56.501099][ T5602] debugfs: 'hsr0' already exists in 'hsr'
[   56.503241][ T5602] Cannot create hsr debugfs directory
[   56.528276][ T5598] hsr_slave_0: entered promiscuous mode
[   56.531509][ T5598] hsr_slave_1: entered promiscuous mode
[   56.534897][ T5598] debugfs: 'hsr0' already exists in 'hsr'
[   56.537294][ T5598] Cannot create hsr debugfs directory
[   56.776923][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.786618][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.790811][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.797119][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.818923][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.824007][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.826949][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.831635][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.870470][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.876755][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.888503][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.895179][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.901616][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.907389][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.921743][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.928113][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.987711][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.995786][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.999668][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.006534][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   57.010173][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.017137][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   57.020836][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.027300][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   57.084622][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.121504][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[   57.133019][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.137647][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.140472][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.148950][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.155617][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.157966][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.171030][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[   57.188317][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.190640][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.198396][ T5594] 8021q: adding VLAN 0 to HW filter on device team0
[   57.204089][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.206297][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.221098][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.223466][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.242971][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.245266][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.447167][ T4984] Bluetooth: hci0: command tx timeout
[   57.449574][   T53] Bluetooth: hci1: command tx timeout
[   57.524977][   T53] Bluetooth: hci2: command tx timeout
[   57.550927][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.570072][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.588375][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.630687][ T5602] veth0_vlan: entered promiscuous mode
[   57.648723][ T5598] veth0_vlan: entered promiscuous mode
[   57.652377][ T5602] veth1_vlan: entered promiscuous mode
[   57.674387][ T5594] veth0_vlan: entered promiscuous mode
[   57.676725][ T5598] veth1_vlan: entered promiscuous mode
[   57.690053][ T5602] veth0_macvtap: entered promiscuous mode
[   57.696084][ T5594] veth1_vlan: entered promiscuous mode
[   57.700157][ T5602] veth1_macvtap: entered promiscuous mode
[   57.716094][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.727911][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.748290][ T5598] veth0_macvtap: entered promiscuous mode
[   57.762494][ T5598] veth1_macvtap: entered promiscuous mode
[   57.777192][ T5594] veth0_macvtap: entered promiscuous mode
[   57.794817][ T5594] veth1_macvtap: entered promiscuous mode
[   57.803197][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.817531][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.835621][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.856085][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.856531][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.861123][ T5465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.868789][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.872949][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.882344][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.892750][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.915838][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.916470][ T5648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.919173][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.996922][ T5602] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.011454][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.017750][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.021269][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.025686][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.048857][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.057827][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.087042][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.089910][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.094595][ T5648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.102594][ T5648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.107975][ T5648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.111242][ T5648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.117837][ T5648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.132968][ T5465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.140753][ T5465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.239375][ T5710] input: syz1 as /devices/virtual/input/input4
[   58.427505][ T5723] loop2: detected capacity change from 0 to 64
[   58.434638][ T5723] =======================================================
[   58.434638][ T5723] WARNING: The mand mount option has been deprecated and
[   58.434638][ T5723]          and is ignored by this kernel. Remove the mand
[   58.434638][ T5723]          option from the mount to silence this warning.
[   58.434638][ T5723] =======================================================
[   58.510387][ T5725] process 'syz.2.11' launched './file0' with NULL argv: empty string added
[   58.514780][ T5725] Invalid argument reading file caps for ./file0
[   58.524840][ T5718] loop1: detected capacity change from 0 to 32768
[   58.542611][ T5718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8 (5718)
[   58.577288][ T5718] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   58.586188][ T5718] BTRFS info (device loop1): using sha256 checksum algorithm
[   58.625649][ T5718] BTRFS info (device loop1): enabling ssd optimizations
[   58.627921][ T5718] BTRFS info (device loop1): turning on async discard
[   58.630021][ T5718] BTRFS info (device loop1): enabling free space tree
[   58.663036][ T5594] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.064451][ T5769] Zero length message leads to an empty skb
[   59.067183][ T5769] C: renamed from veth1_to_team (while UP)
[   59.073143][ T5769] netlink: 'syz.1.25': attribute type 4 has an invalid length.
[   59.075645][ T5769] netlink: 116 bytes leftover after parsing attributes in process `syz.1.25'.
[   59.078807][ T5769] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   59.268954][ T5782] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET)
[   59.399030][ T5792] netlink: 358 bytes leftover after parsing attributes in process `syz.1.36'.
[   59.476282][ T5797] loop1: detected capacity change from 0 to 512
[   59.499267][ T5797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.523162][   T53] Bluetooth: hci0: command tx timeout
[   59.532319][   T53] Bluetooth: hci1: command tx timeout
[   59.545810][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.583575][ T5801] loop1: detected capacity change from 0 to 512
[   59.606118][ T5801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.612157][   T53] Bluetooth: hci2: command tx timeout
[   59.619080][ T5801] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.656164][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.748588][ T5807] loop1: detected capacity change from 0 to 512
[   59.776192][ T5807] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.41: iget: bad i_size value: 38620345925642
[   59.785923][ T5807] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   59.787467][ T5807] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.41: couldn't read orphan inode 15 (err -117)
[   59.794106][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   59.794135][    C0] EXT4-fs (loop1): initial error at time 1787039425: ext4_orphan_get:1399: inode 15
[   59.794148][    C0] EXT4-fs (loop1): last error at time 1787039425: ext4_orphan_get:1399: inode 15
[   59.805020][ T5807] loop1: lost filesystem error report for type 5 error -117
[   59.807690][ T5807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.820429][   T33] audit: type=1800 audit(1787039425.508:2): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.41" name="file1" dev="loop1" ino=18 res=0 errno=0
[   59.849373][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.911339][ T5812] loop1: detected capacity change from 0 to 4096
[   59.942617][ T5813] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   60.045099][ T5815] loop1: detected capacity change from 0 to 4096
[   60.069534][ T5815] ntfs3(loop1): Failed to load $Extend (-22).
[   60.072252][ T5815] ntfs3(loop1): Failed to initialize $Extend.
[   60.139850][   T33] audit: type=1326 audit(1787039425.818:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.1.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1add9e0d9 code=0x7ffc0000
[   60.157615][   T33] audit: type=1326 audit(1787039425.818:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.1.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1add9e0d9 code=0x7ffc0000
[   60.165360][   T33] audit: type=1326 audit(1787039425.818:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.1.46" exe="/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fa1add9e0d9 code=0x7ffc0000
[   60.175995][   T33] audit: type=1326 audit(1787039425.818:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.1.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1add9e0d9 code=0x7ffc0000
[   60.183352][   T33] audit: type=1326 audit(1787039425.818:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.1.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1add9e0d9 code=0x7ffc0000
[   60.190023][   T33] audit: type=1326 audit(1787039425.818:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.1.46" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1add5e90e code=0x7ffc0000
[   60.197034][   T33] audit: type=1326 audit(1787039425.818:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.1.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1add9e0d9 code=0x7ffc0000
[   60.203968][   T33] audit: type=1326 audit(1787039425.818:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.1.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1add9e0d9 code=0x7ffc0000
[   60.290889][ T5823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.48'.
[   60.299003][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.302766][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.315438][ T5823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.48'.
[   60.652947][ T5672] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   60.731899][ T5670] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   60.802620][ T5672] usb 3-1: Using ep0 maxpacket: 32
[   60.806502][ T5672] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[   60.814167][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.817186][ T5672] usb 3-1: Product: syz
[   60.818723][ T5672] usb 3-1: Manufacturer: syz
[   60.820157][ T5672] usb 3-1: SerialNumber: syz
[   60.825522][ T5672] usb 3-1: config 0 descriptor??
[   60.831634][ T5672] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[   60.888063][ T5670] usb 2-1: not running at top speed; connect to a high speed hub
[   60.890587][ T5670] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   60.894750][ T5670] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   60.898473][ T5670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.908147][ T5670] gspca_main: spca501-2.14.0 probing 0000:0000
[   61.423401][ T5670] gspca_spca501: reg write: error -110
[   61.425276][ T5670] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   61.427509][ T5670] spca501 2-1:1.0: probe with driver spca501 failed with error -22
[   61.431397][ T5670] uvcvideo 2-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[   61.435498][ T5670] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   61.439074][ T5670] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26).
[   61.442352][ T5670] uvcvideo 2-1:1.1: Failed to initialize the device (-5).
[   61.446650][ T5670] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5
[   61.611951][   T53] Bluetooth: hci1: command tx timeout
[   61.639917][ T5672] gspca_ov534_9: reg_w failed -71
[   61.649044][ T5840] loop0: detected capacity change from 0 to 128
[   61.681964][   T53] Bluetooth: hci2: command tx timeout
[   61.731711][ T5844] loop0: detected capacity change from 0 to 512
[   61.828249][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'.
[   61.879354][ T5851] netlink: 14 bytes leftover after parsing attributes in process `syz.0.61'.
[   61.899114][ T5851] bond0 (unregistering): Released all slaves
[   61.952706][ T5672] gspca_ov534_9: Unknown sensor 0000
[   61.952765][ T5672] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[   61.966888][ T5672] usb 3-1: USB disconnect, device number 2
[   62.119110][  T712] usb 2-1: USB disconnect, device number 2
[   62.163705][   T53] Bluetooth: hci0: command tx timeout
[   62.215144][ T5872] tipc: Started in network mode
[   62.217786][ T5872] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711
[   62.287093][ T5874] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   62.372991][ T5891] loop2: detected capacity change from 0 to 256
[   62.387032][ T5891] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   62.397772][ T5891] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   62.406752][ T5891] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1129abd0)
[   62.410862][ T5891] exFAT-fs (loop2): invalid boot region
[   62.413352][ T5891] exFAT-fs (loop2): failed to recognize exfat type
[   62.490178][ T5901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'.
[   62.498345][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'.
[   62.587920][ T5911] syz_tun: entered allmulticast mode
[   62.605776][ T5910] syz_tun: left allmulticast mode
[   62.747744][ T5921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[   63.127489][ T5953] hub 8-0:1.0: USB hub found
[   63.129611][ T5953] hub 8-0:1.0: 1 port detected
[   63.330881][ T5949] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   63.399462][ T5949] XFS (loop2): Ending clean mount
[   63.408747][ T5949] XFS (loop2): Quotacheck needed: Please wait.
[   63.451494][ T5949] XFS (loop2): Quotacheck: Done.
[   63.731938][   T53] Bluetooth: hci1: command tx timeout
[   63.761956][   T53] Bluetooth: hci2: command tx timeout
[   63.882750][ T5602] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   63.966840][ T5966] set_capacity_and_notify: 2 callbacks suppressed
[   63.966853][ T5966] loop1: detected capacity change from 0 to 32768
[   64.034133][ T5966] JBD2: Unrecognised features on journal
[   64.046524][ T5966] (syz.1.95,5966,0):ocfs2_journal_init:972 ERROR: Linux journal layer error
[   64.055830][ T5966] (syz.1.95,5966,0):ocfs2_check_volume:2344 ERROR: Could not initialize journal!
[   64.063795][ T5966] (syz.1.95,5966,0):ocfs2_check_volume:2429 ERROR: status = -22
[   64.067867][ T5966] (syz.1.95,5966,0):ocfs2_mount_volume:1763 ERROR: status = -22
[   64.078168][ T5966] (syz.1.95,5966,0):ocfs2_fill_super:1177 ERROR: status = -22
[   64.139090][ T5978] warning: `syz.2.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.175619][ T5980] netlink: 76 bytes leftover after parsing attributes in process `syz.2.101'.
[   64.180718][ T5969] loop0: detected capacity change from 0 to 32768
[   64.209947][ T5984] loop2: detected capacity change from 0 to 8
[   64.223325][ T5984] SQUASHFS error: Failed to read block 0x2d7: -5
[   64.225882][ T5984] SQUASHFS error: Unable to read metadata cache entry [2d5]
[   64.241099][ T5969] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.302655][ T5969] XFS (loop0): Ending clean mount
[   64.335173][   T33] audit: type=1800 audit(1787039430.018:11): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.96" name="file1" dev="loop0" ino=9286 res=0 errno=0
[   64.358696][ T5969] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[   64.375551][ T5969] XFS (loop0): Unmount and run xfs_repair
[   64.379587][ T5969] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   64.384629][ T5969] 00000000: 58 41 46 4c 00 00 00 00 bf dc 47 fc 10 d8 4e ed  XAFL......G...N.
[   64.387848][ T5969] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[   64.391626][ T5969] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[   64.396791][ T5969] 00000030: 00 00 00 09 00 00 00 0a 00 07 00 00 00 00 00 00  ................
[   64.405015][ T5969] 00000040: 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   64.408370][ T5969] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   64.411141][ T5969] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   64.415997][ T5969] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   64.423665][ T5969] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74
[   64.470519][ T5598] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.476551][ T5598] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[   64.567836][ T5999] loop2: detected capacity change from 0 to 32768
[   64.642779][ T6008] xt_CT: No such helper "snmp_trap"
[   64.779541][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.783906][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.785458][ T6017] loop1: detected capacity change from 0 to 8192
[   64.788140][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.793287][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.798474][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.807404][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.815565][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.819076][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.823096][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   64.986964][ T6035] capability: warning: `syz.0.124' uses deprecated v2 capabilities in a way that may be insecure
[   65.194304][ T5062] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   65.352908][ T5062] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[   65.357189][ T5062] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[   65.359708][ T5062] usb 2-1: config 0 has no interface number 0
[   65.361642][ T5062] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4
[   65.365163][ T5062] usb 2-1: config 0 interface 83 altsetting 0 has an endpoint descriptor with address 0x6A, changing to 0xA
[   65.368743][ T5062] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   65.379218][ T5062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.383939][ T5062] usb 2-1: Product: syz
[   65.385395][ T5062] usb 2-1: Manufacturer: syz
[   65.386806][ T5062] usb 2-1: SerialNumber: syz
[   65.390803][ T5062] usb 2-1: config 0 descriptor??
[   65.396740][ T5062] redrat3 2-1:0.83: Couldn't find all endpoints
[   65.471893][ T5672] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   65.511980][ T5649] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   65.604430][ T5062] usb 2-1: USB disconnect, device number 3
[   65.631955][ T5672] usb 1-1: Using ep0 maxpacket: 16
[   65.634948][ T5672] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[   65.639731][ T5672] usb 1-1: config index 0 descriptor too short (expected 65, got 36)
[   65.643231][ T5672] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   65.648352][ T5672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   65.653653][ T5672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   65.659509][ T5672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.661991][ T5649] usb 3-1: Using ep0 maxpacket: 32
[   65.665026][ T5672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.671876][ T5649] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   65.672018][ T5672] usb 1-1: config 0 descriptor??
[   65.679358][ T6057] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   65.683090][ T5649] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   65.686363][ T5649] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   65.690093][ T5649] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   65.694168][ T5649] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   65.702766][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.704882][ T5672] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[   65.707896][ T5649] usb 3-1: Product: syz
[   65.712282][ T5649] usb 3-1: Manufacturer: syz
[   65.720130][ T5649] usb 3-1: SerialNumber: syz
[   65.745727][ T5649] imon:imon_find_endpoints: no valid input (IR) endpoint found
[   65.749556][ T5649] imon 3-1:155.0: unable to initialize intf0, err -19
[   65.753697][ T5649] imon:imon_probe: failed to initialize context!
[   65.757344][ T5649] imon 3-1:155.0: unable to register, err -19
[   65.904547][ T5672] usb 1-1: USB disconnect, device number 2
[   65.949228][ T5062] usb 3-1: USB disconnect, device number 3
[   66.219400][ T6066] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   66.344940][ T6072] loop6: detected capacity change from 0 to 2640
[   66.350194][ T6072] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.355798][ T5595] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.359423][ T6072] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.363580][ T5595] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.366186][ T6072] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.369802][ T5595] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.373348][ T6072] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.376527][ T5595] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.379148][ T6072] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.382480][ T5595] Buffer I/O error on dev loop6, logical block 0, async page read
[   66.385145][ T6072] ldm_validate_partition_table(): Disk read failed.
[   66.387502][ T6072] Dev loop6: unable to read RDB block 0
[   66.389752][ T6072]  loop6: unable to read partition table
[   66.395010][ T6072] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[   66.797929][ T6078] loop0: detected capacity change from 0 to 32768
[   66.839734][ T6078] JBD2: Ignoring recovery information on journal
[   66.847208][ T6078] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[   66.860070][ T6078] JBD2: bad block at offset 32
[   66.876357][ T6078] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   66.937070][ T6080] loop2: detected capacity change from 0 to 32768
[   66.956415][ T6080] jfs_mount: Failed to read FILESYSTEM_I
[   66.965923][ T6080] Mount JFS Failure: -5
[   66.980614][ T6080] jfs_mount failed w/return code = -5
[   67.041125][ T5598] ocfs2: Unmounting device (7,0) on (node local)
[   67.274149][ T6088] loop0: detected capacity change from 0 to 764
[   67.433831][ T6100] loop0: detected capacity change from 0 to 512
[   67.438193][ T6100] EXT4-fs: Ignoring removed oldalloc option
[   67.476437][ T6100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.481393][ T6100] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.494971][ T6100] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #2: comm syz.0.154: corrupted inode contents
[   67.502945][ T6100] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #2: comm syz.0.154: mark_inode_dirty error
[   67.507348][ T6100] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #2: comm syz.0.154: corrupted inode contents
[   67.511360][ T6100] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.154: mark_inode_dirty error
[   67.517536][ T6100] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #2: comm syz.0.154: corrupted inode contents
[   67.550069][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.558616][ T6102] JBD2: Ignoring recovery information on journal
[   67.580031][ T6102] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   67.653616][ T5649] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   67.683946][ T5602] ocfs2: Unmounting device (7,2) on (node local)
[   67.750010][ T6113] EXT4-fs: Ignoring removed orlov option
[   67.765694][ T6113] EXT4-fs (loop0): Test dummy encryption mode enabled
[   67.780157][ T6113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.812625][ T5649] usb 2-1: New USB device found, idVendor=056a, idProduct=0117, bcdDevice= 0.00
[   67.817626][ T5649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   67.827218][ T6113] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[   67.830237][ T5649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.838779][ T5649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.854260][ T5649] usb 2-1: config 0 descriptor??
[   67.860058][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.911618][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.914141][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.942935][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.947737][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.389800][ T6137] nvmet: adding nsid 1 to subsystem testnqn
[   68.397789][   T33] audit: type=1800 audit(1787039434.078:12): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.166" name="attr_allow_any_host" dev="configfs" ino=8453 res=0 errno=0
[   68.488499][ T6141] C: renamed from veth1_to_team (while UP)
[   68.491706][ T6141] netlink: 'syz.0.168': attribute type 4 has an invalid length.
[   68.495866][ T6141] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   68.644882][ T6147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   68.649567][ T6147] EXT4-fs (loop0): Test dummy encryption mode enabled
[   68.655458][ T6147] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[   68.658117][ T6147] System zones: 0-5
[   68.660822][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.675166][ T6147] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[   68.678268][ T6147] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[   68.680752][ T6147] EXT4-fs: Cannot change journaled quota options when quota turned on
[   68.698248][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.815964][ T5649] wacom 0003:056A:0117.0001: item fetching failed at offset 6/7
[   68.818869][ T5649] wacom 0003:056A:0117.0001: parse failed
[   68.820720][ T5649] wacom 0003:056A:0117.0001: probe with driver wacom failed with error -22
[   68.828455][ T5649] usb 2-1: USB disconnect, device number 4
[   69.381888][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   69.401912][   T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   69.531894][   T24] usb 1-1: Using ep0 maxpacket: 16
[   69.534484][   T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   69.538643][   T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[   69.541396][   T24] usb 1-1: config 0 has no interface number 0
[   69.543631][   T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   69.547362][   T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   69.552890][   T24] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   69.555613][   T24] usb 1-1: Product: syz
[   69.556939][   T24] usb 1-1: SerialNumber: syz
[   69.560130][   T24] usb 1-1: config 0 descriptor??
[   69.562111][   T31] usb 3-1: Using ep0 maxpacket: 32
[   69.565941][   T24] cm109 1-1:0.8: invalid payload size 0, expected 4
[   69.568369][   T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00
[   69.574110][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input7
[   69.579531][   T31] usb 3-1: config 0 interface 0 altsetting 125 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   69.585775][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[   69.589360][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.601063][   T31] usb 3-1: config 0 descriptor??
[   69.629735][   T31] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[   69.786862][ T6173] set_capacity_and_notify: 4 callbacks suppressed
[   69.786880][ T6173] loop0: detected capacity change from 0 to 1024
[   69.863870][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[   69.863955][ T5649] usb 1-1: USB disconnect, device number 3
[   69.866409][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   69.881345][ T5029] bcm5974 3-1:0.0: could not read from device
[   69.890439][ T5029] bcm5974 3-1:0.0: could not read from device
[   69.897740][ T5029] bcm5974 3-1:0.0: could not read from device
[   69.900524][   T31] usb 3-1: USB disconnect, device number 4
[   69.910123][ T5649] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   69.911520][ T5029] bcm5974 3-1:0.0: could not read from device
[   70.174679][ T6184] loop1: detected capacity change from 0 to 4096
[   70.199476][ T6185] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.255477][ T6187] __nla_validate_parse: 135 callbacks suppressed
[   70.255489][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   70.260530][ T6187] netlink: 'syz.1.187': attribute type 30 has an invalid length.
[   70.264938][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[   70.487220][ T6196] loop0: detected capacity change from 0 to 1024
[   70.731677][ T6205] loop2: detected capacity change from 0 to 512
[   70.762678][ T6205] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   70.811128][   T53] Bluetooth: Wrong link type (-71)
[   71.065792][ T6221] MPI: mpi too large (113288 bits)
[   71.123292][   T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   71.161974][ T5672] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   71.274019][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   71.276465][   T31] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40
[   71.280193][   T31] usb 1-1: config 1 has too many interfaces: 35, using maximum allowed: 32
[   71.283023][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.286120][   T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 35
[   71.296678][   T31] usb 1-1: string descriptor 0 read error: -22
[   71.298749][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.313445][ T5672] usb 3-1: Using ep0 maxpacket: 8
[   71.315480][   T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   71.320717][ T5672] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   71.325370][ T5672] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[   71.328640][ T5672] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   71.335098][ T5672] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   71.337670][ T5672] usb 3-1: Product: syz
[   71.339047][ T5672] usb 3-1: Manufacturer: syz
[   71.340763][ T5672] usb 3-1: SerialNumber: syz
[   71.368531][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[   71.371721][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[   71.553551][ T5672] usb 3-1: Handspring Visor / Palm OS: No valid connect info available
[   71.561456][ T5672] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[   71.566341][ T5672] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   71.572950][ T5672] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[   71.589118][   T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[   71.620839][ T6223] netlink: 'syz.1.203': attribute type 21 has an invalid length.
[   71.736985][ T5649] usb 1-1: USB disconnect, device number 4
[   71.760219][ T5672] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[   71.765913][ T5672] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[   71.779010][ T5672] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[   71.787044][ T5672] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[   71.796331][ T5672] usb 3-1: USB disconnect, device number 5
[   71.806478][ T5672] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[   71.812272][ T5672] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[   71.816130][ T5672] visor 3-1:1.0: device disconnected
[   71.981957][ T5670] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   72.135917][ T5670] usb 2-1: unable to get BOS descriptor or descriptor too short
[   72.139012][ T5670] usb 2-1: not running at top speed; connect to a high speed hub
[   72.141648][ T5670] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   72.145544][ T5670] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[   72.148343][ T5670] usb 2-1: config 0 has no interface number 0
[   72.150391][ T5670] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[   72.154425][ T5670] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   72.157925][ T5670] usb 2-1: config 0 interface 88 has no altsetting 0
[   72.164656][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   72.168536][ T5670] usb 2-1: Product: syz
[   72.170386][ T5670] usb 2-1: Manufacturer: syz
[   72.172852][ T5670] usb 2-1: SerialNumber: syz
[   72.178884][ T5670] usb 2-1: config 0 descriptor??
[   72.392856][ T6238] MTDSB: Device #1 doesn't appear to exist
[   72.392856][ T6238] 
[   72.409858][ T5670] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input9
[   72.435453][ T5670] usb 2-1: USB disconnect, device number 5
[   72.459131][ T6242] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.212'.
[   72.473053][ T6242] netlink: 116 bytes leftover after parsing attributes in process `syz.0.212'.
[   72.620807][ T6249] ovs-s: entered promiscuous mode
[   72.636506][ T6251] vlan0: entered promiscuous mode
[   72.650331][ T6251] vlan0: left promiscuous mode
[   72.734182][ T6257] loop0: detected capacity change from 0 to 256
[   72.736975][ T6257] exfat: Deprecated parameter 'namecase'
[   72.739031][ T6257] exfat: Deprecated parameter 'namecase'
[   72.746767][ T6257] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[   72.920781][ T6269] loop0: detected capacity change from 0 to 4096
[   72.931328][ T6269] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   73.021474][ T6278] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[   73.056930][ T6280] vivid-000: =================  START STATUS  =================
[   73.060630][ T6280] vivid-000: Radio HW Seek Mode: Bounded
[   73.063720][ T6280] vivid-000: Radio Programmable HW Seek: false
[   73.066510][ T6280] vivid-000: RDS Rx I/O Mode: Block I/O
[   73.070016][ T6280] vivid-000: Generate RBDS Instead of RDS: false
[   73.074800][ T6280] vivid-000: RDS Reception: true
[   73.076910][ T6280] vivid-000: RDS Program Type: 0 inactive
[   73.079252][ T6280] vivid-000: RDS PS Name:  inactive
[   73.081227][ T6280] vivid-000: RDS Radio Text:  inactive
[   73.085412][ T6280] vivid-000: RDS Traffic Announcement: false inactive
[   73.088020][ T6280] vivid-000: RDS Traffic Program: false inactive
[   73.090542][ T6280] vivid-000: RDS Music: false inactive
[   73.094824][ T6280] vivid-000: ==================  END STATUS  ==================
[   73.221876][   T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   73.259184][ T6289] Bluetooth: MGMT ver 1.23
[   73.265759][ T6289] Bluetooth: hci0: unsupported parameter 5134
[   73.267726][ T6289] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[   73.372200][   T31] usb 2-1: Using ep0 maxpacket: 16
[   73.376081][   T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   73.386846][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.397716][   T31] usb 2-1: config 0 descriptor??
[   73.408564][   T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   73.605971][   T31] usb 2-1: Detected FT232A
[   73.611295][   T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   73.618423][   T31] usb 2-1: USB disconnect, device number 6
[   73.632167][   T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   73.635508][   T31] ftdi_sio 2-1:0.0: device disconnected
[   73.775977][ T6305] loop0: detected capacity change from 0 to 32768
[   73.781023][ T6305] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.242 (6305)
[   73.800208][ T6305] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   73.810088][ T6305] BTRFS info (device loop0): using sha256 checksum algorithm
[   73.845708][ T6305] BTRFS info (device loop0 state E): enabling free space tree
[   73.851284][ T6305] BTRFS info (device loop0 state E): force clearing of disk cache
[   73.858654][ T6305] BTRFS info (device loop0 state E): ignoring unknown super block flags
[   73.882558][ T6305] BTRFS error (device loop0 state EM): ignoresuperflags must be used with ro mount option
[   73.888562][ T6322] loop2: detected capacity change from 0 to 4096
[   73.947149][ T5598] BTRFS info (device loop0 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   74.175357][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.248'.
[   74.191916][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'.
[   74.501877][ T5672] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   74.651919][ T5672] usb 3-1: Using ep0 maxpacket: 8
[   74.654414][ T5672] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   74.658260][ T5672] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[   74.660952][ T5672] usb 3-1: config 0 has no interface number 0
[   74.663165][ T5672] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   74.666627][ T5672] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   74.670777][ T5672] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   74.674579][ T5672] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   74.678717][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.683436][ T5672] usb 3-1: config 0 descriptor??
[   74.692418][ T5672] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   74.904974][   T31] usb 3-1: USB disconnect, device number 6
[   74.906981][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[   74.915253][   T31] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[   75.228355][ T6369] loop0: detected capacity change from 0 to 64
[   75.830836][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.276'.
[   75.893312][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'.
[   75.903104][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'.
[   75.906706][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'.
[   76.012250][   T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   76.172826][   T31] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[   76.180951][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.184686][   T31] usb 3-1: Product: syz
[   76.186567][   T31] usb 3-1: Manufacturer: syz
[   76.188465][   T31] usb 3-1: SerialNumber: syz
[   76.203335][   T31] usb 3-1: config 0 descriptor??
[   76.230015][   T31] hub 3-1:0.0: bad descriptor, ignoring hub
[   76.232697][   T31] hub 3-1:0.0: probe with driver hub failed with error -5
[   76.344751][ T5670] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   76.420992][   T31] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[   76.434751][   T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   76.439790][   T31] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[   76.443643][   T31] usb 3-1: media controller created
[   76.457908][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   76.513065][ T5670] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[   76.522478][ T5670] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[   76.533690][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.549516][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.566670][ T5670] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[   76.581506][   T31] DVB: Unable to find symbol dib7000p_attach()
[   76.584223][ T5670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.589104][   T31] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[   76.602289][ T5670] usb 2-1: config 0 descriptor??
[   76.664396][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.683148][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.694466][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.707738][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.715639][   T31] rc_core: IR keymap rc-dib0700-rc5 not found
[   76.720911][   T31] Registered IR keymap rc-empty
[   76.729325][   T31] dvb-usb: could not initialize remote control.
[   76.736314][   T31] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[   76.748044][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.758337][   T31] usb 3-1: USB disconnect, device number 7
[   76.782458][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.803728][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.817991][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.830267][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.841723][ T6420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.850699][   T31] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[   77.049578][ T5670] holtek_kbd 0003:04D9:A055.0002: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0
[   77.272268][ T5670] usb 2-1: USB disconnect, device number 7
[   77.333989][ T6426] loop2: detected capacity change from 0 to 256
[   77.883386][ T6431] loop2: detected capacity change from 0 to 32768
[   77.896584][ T6431] 
[   77.896584][ T6431]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   77.896584][ T6431] 
[   77.947209][ T6431] ERROR: (device loop2): xtTruncate_pmap: xt_getpage: xtree page corrupt
[   77.947209][ T6431] 
[   77.965828][ T6431] ERROR: (device loop2): remounting filesystem as read-only
[   77.969056][ T6431] ERROR: (device loop2): jfs_unlink: 
[   77.969056][ T6431] 
[   77.982240][ T5602] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt
[   77.982240][ T5602] 
[   78.177314][ T6449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.300'.
[   78.180649][ T6449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.300'.
[   78.831346][ T6473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'.
[   79.181303][ T6482] nftables ruleset with unbound set
[   79.444954][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'.
[   79.447818][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'.
[   79.463886][ T6496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.320'.
[   79.538389][ T6503] loop1: detected capacity change from 0 to 128
[   79.599079][ T6508] mmap: syz.0.327 (6508) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   79.677659][ T6515] loop0: detected capacity change from 0 to 1024
[   79.698450][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.719622][   T33] audit: type=1800 audit(1787039445.398:13): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.329" name="file1" dev="loop0" ino=15 res=0 errno=0
[   79.725827][ T6515] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.329: missing EA_INODE flag
[   79.728020][ T6515] EXT4-fs (loop0): Remounting filesystem read-only
[   79.734103][ T6515] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   79.805290][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.970020][ T6541] openvswitch: netlink: Actions may not be safe on all matching packets
[   80.091630][ T6552] netlink: 'syz.2.345': attribute type 1 has an invalid length.
[   80.166025][ T6555] loop2: detected capacity change from 0 to 128
[   80.587214][ T6564] loop2: detected capacity change from 0 to 256
[   80.609391][ T6564] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   81.045824][ T6582] loop1: detected capacity change from 0 to 128
[   81.055054][ T6582] msdos: Bad value for 'gid'
[   81.074748][ T6582] msdos: Bad value for 'gid'
[   81.090622][ T6584] loop2: detected capacity change from 0 to 512
[   81.095615][ T6582] type: 2229836882 invalid
[   81.621515][   T10] cfg80211: failed to load regulatory.db
[   81.806204][ T6613] xt_hashlimit: size too large, truncated to 1048576
[   82.355692][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.358565][ T6634] bridge0: port 2(bridge_slave_1) entered listening state
[   82.362341][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.365100][ T6634] bridge0: port 1(bridge_slave_0) entered listening state
[   82.536238][ T6633] loop2: detected capacity change from 0 to 32768
[   82.573191][ T6633] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   82.699447][ T5602] ocfs2: Unmounting device (7,2) on (node local)
[   82.722451][ T6650] __nla_validate_parse: 1 callbacks suppressed
[   82.722462][ T6650] netlink: 104 bytes leftover after parsing attributes in process `syz.0.389'.
[   82.983810][   T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   83.049960][ T6668] loop2: detected capacity change from 0 to 1756
[   83.079898][ T6668] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   83.083818][ T6668] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   83.089796][ T6668] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   83.095070][ T6668] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   83.098335][ T6668] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[   83.154322][   T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   83.168853][   T10] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[   83.174374][   T10] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   83.182521][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[   83.189169][   T10] usb 2-1: config 1 has no interface number 0
[   83.191533][   T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   83.197003][   T10] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   83.202926][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.223667][   T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[   83.432734][   T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[   83.778982][ T6683] loop2: detected capacity change from 0 to 32768
[   83.803636][ T6683] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   83.820797][ T6683] XFS (loop2): Ending clean mount
[   83.846512][   T54] block nbd0: Receive control failed (result -32)
[   83.863064][ T6687] block nbd0: shutting down sockets
[   83.865765][ T5672] usb 2-1: USB disconnect, device number 8
[   83.887064][ T5602] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   83.888560][ T5672] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[   84.231902][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   84.257686][ T6714] loop2: detected capacity change from 0 to 512
[   84.260879][ T6714] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   84.288595][ T6714] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   84.295895][ T6714] EXT4-fs (loop2): mount failed
[   84.351159][ T6719] Format for deleting device is "id" (uint).
[   84.394390][   T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   84.411634][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.419115][   T24] usb 1-1: Product: syz
[   84.422164][   T24] usb 1-1: Manufacturer: syz
[   84.423594][   T24] usb 1-1: SerialNumber: syz
[   84.583294][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'.
[   84.645150][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[   84.652441][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[   84.660002][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   84.666370][   T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[   84.676290][   T24] usb 1-1: USB disconnect, device number 5
[   84.871996][   T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   84.931963][  T712] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   85.032624][   T31] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08
[   85.037775][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.042000][   T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   85.045862][   T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   85.049959][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8
[   85.058975][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.062419][   T31] usb 3-1: Product: syz
[   85.064208][   T31] usb 3-1: Manufacturer: syz
[   85.066252][   T31] usb 3-1: SerialNumber: syz
[   85.091913][  T712] usb 2-1: Using ep0 maxpacket: 32
[   85.095059][  T712] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   85.100357][  T712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.108481][  T712] usb 2-1: config 0 descriptor??
[   85.226189][ T6746] syzkaller0: entered promiscuous mode
[   85.228392][ T6746] syzkaller0: entered allmulticast mode
[   85.235633][ T6746] tipc: Started in network mode
[   85.237637][ T6746] tipc: Node identity 928c233e1474, cluster identity 4711
[   85.242515][ T6746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.247002][ T6745] tipc: Resetting bearer <eth:syzkaller0>
[   85.260240][ T6745] tipc: Disabling bearer <eth:syzkaller0>
[   85.276754][   T31] ath6kl: Failed to submit usb control message: -71
[   85.279369][   T31] ath6kl: unable to send the bmi data to the device: -71
[   85.282596][   T31] ath6kl: Unable to send get target info: -71
[   85.285016][   T31] ath6kl: Failed to init ath6kl core: -71
[   85.294976][   T31] ath6kl_usb 3-1:1.0: probe with driver ath6kl_usb failed with error -71
[   85.307187][   T31] usb 3-1: USB disconnect, device number 8
[   85.319245][  T712] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   85.361314][  T712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   85.373858][  T712] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   85.378921][  T712] usb 2-1: media controller created
[   85.409283][  T712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.720905][  T712] az6027: usb out operation failed. (-71)
[   85.723150][  T712] stb0899_attach: Driver disabled by Kconfig
[   85.725048][  T712] az6027: no front-end attached
[   85.725048][  T712] 
[   85.727643][  T712] az6027: usb out operation failed. (-71)
[   85.729983][  T712] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   85.734852][  T712] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[   85.739338][  T712] dvb-usb: schedule remote query interval to 400 msecs.
[   85.741627][  T712] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   85.746266][  T712] usb 2-1: USB disconnect, device number 9
[   85.769215][  T712] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   85.814837][ T6757] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   85.825483][ T6757] CIFS: Attempting to mount //127.0.0.1/s:e[12harefDr=root
[   85.866729][ T6758] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[   85.875974][ T6757] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11
[   85.881607][ T6757] CIFS: VFS: cifs_mount failed w/return code = -11
[   85.985206][ T6765] loop2: detected capacity change from 0 to 64
[   86.091023][ T6767] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   86.094884][ T6767] overlayfs: failed to set xattr on upper
[   86.098383][ T6767] overlayfs: ...falling back to redirect_dir=nofollow.
[   86.101006][ T6767] overlayfs: ...falling back to index=off.
[   86.268714][ T6769] loop2: detected capacity change from 0 to 32768
[   86.273636][ T6769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.434 (6769)
[   86.288769][ T6769] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.292337][ T6769] BTRFS info (device loop2): using crc32c checksum algorithm
[   86.322680][ T6769] BTRFS info (device loop2): enabling ssd optimizations
[   86.328147][ T6769] BTRFS info (device loop2): turning on flush-on-commit
[   86.330457][ T6769] BTRFS info (device loop2): enabling free space tree
[   86.333754][ T6769] BTRFS info (device loop2): enabling auto defrag
[   86.336573][ T6769] BTRFS info (device loop2): use lzo compression, level 1
[   86.339629][ T6769] BTRFS info (device loop2): max_inline set to 4096
[   86.369860][   T33] audit: type=1800 audit(1787039452.048:14): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.434" name="file1" dev="loop2" ino=260 res=0 errno=0
[   86.397577][ T5602] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.615902][ T6798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.440'.
[   86.778005][ T6810] AppArmor: change_hat: Invalid input '0'
[   86.908801][ T6814] loop2: detected capacity change from 0 to 128
[   87.196625][ T6841] loop2: detected capacity change from 0 to 1024
[   87.480752][ T6857] netlink: 'syz.1.466': attribute type 12 has an invalid length.
[   87.517889][ T6848] loop2: detected capacity change from 0 to 32768
[   87.559483][ T6848] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[   87.559483][ T6848] 
[   87.569640][ T6848] ERROR: (device loop2): remounting filesystem as read-only
[   87.740079][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.742445][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.840973][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.846532][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.081908][ T5648] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.090937][ T5648] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.111657][ T5648] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.125279][ T5648] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.378962][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'.
[   88.536073][   T33] audit: type=1326 audit(1787039454.218:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.2.485" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbe399e0d9 code=0x0
[   89.273398][   T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   89.432324][   T31] usb 1-1: Using ep0 maxpacket: 16
[   89.437587][   T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[   89.443829][   T31] usb 1-1: config 127 has an invalid interface number: 124 but max is 0
[   89.450691][   T31] usb 1-1: config 127 has no interface number 0
[   89.453705][   T31] usb 1-1: config 127 interface 124 has no altsetting 0
[   89.458526][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.462193][   T31] usb 1-1: Product: syz
[   89.463954][   T31] usb 1-1: Manufacturer: syz
[   89.465890][   T31] usb 1-1: SerialNumber: syz
[   90.291194][ T6915] Console: switching to colour dummy device 80x25
[   90.332416][   T31] usb 1-1: reset high-speed USB device number 6 using dummy_hcd
[   90.431177][ T6916] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   90.457338][ T6916] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   90.463943][ T6916] pci 0000:00:01.0: BAR 2 [mem 0xfebf0000-0xfebf0fff]
[   90.466951][ T6916] pci 0000:00:01.0: ROM [mem 0xfebe0000-0xfebeffff pref]
[   90.470687][ T6916] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   90.497245][ T6916] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   90.499908][ T6916] pci 0000:00:01.0: vgaarb: bridge control possible
[   90.502570][ T6916] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   90.528963][ T6916] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   90.538576][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   90.555549][   T31] usb 1-1: device firmware changed
[   90.559432][ T6916] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   90.592698][   T31] usb 1-1: USB disconnect, device number 6
[   90.596370][ T6920] loop1: detected capacity change from 0 to 256
[   90.596786][ T6916] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   90.613944][ T6920] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[   90.627135][ T6916] [drm] Found bochs VGA, ID 0xb0c5.
[   90.630963][ T6916] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   90.668184][ T6916] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   90.807583][ T6925] loop1: detected capacity change from 0 to 16
[   90.813248][ T6925] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   90.833390][ T6925] cramfs: wrong endianness
[   90.893901][ T6916] Console: switching to colour frame buffer device 160x50
[   90.959813][ T6916] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   91.301348][ T6950] loop1: detected capacity change from 0 to 1024
[   91.308090][ T6950] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled
[   91.348356][ T6950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.370194][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.521953][   T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   91.641891][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   91.684882][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   91.688786][   T31] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[   91.696912][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.700440][   T31] usb 1-1: Product: syz
[   91.702634][   T31] usb 1-1: Manufacturer: syz
[   91.704564][   T31] usb 1-1: SerialNumber: syz
[   91.802668][   T24] usb 2-1: Using ep0 maxpacket: 16
[   91.812329][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[   91.820726][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.824519][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.828078][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.845735][   T24] usb 2-1: config 0 descriptor??
[   91.947432][   T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   92.084172][   T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[   92.095530][   T31] usb 1-1: USB disconnect, device number 7
[   92.162174][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.281320][   T24] apple 0003:05AC:024B.0003: bogus close delimiter
[   92.287446][   T24] apple 0003:05AC:024B.0003: item 0 0 2 10 parsing failed
[   92.292711][   T24] apple 0003:05AC:024B.0003: parse failed
[   92.295291][   T24] apple 0003:05AC:024B.0003: probe with driver apple failed with error -22
[   92.478875][   T31] usb 2-1: USB disconnect, device number 10
[   92.723985][    C1] sctp_transport_update_pmtu: 47 callbacks suppressed
[   92.724030][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   92.805588][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   92.810141][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   92.884860][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   92.888473][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   92.972775][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   92.976068][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   92.979199][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   93.045078][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   93.049578][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   93.433697][ T6979] ip_tables: iptables: counters copy to user failed while replacing table
[   94.727608][ T7023] loop2: detected capacity change from 0 to 128
[   94.750284][ T7023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[   94.763578][ T7023] System zones: 1-3, 19-19, 35-36
[   94.790100][ T7023] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   94.802708][ T7023] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   94.839614][ T7023] EXT4-fs warning (device loop2): ext4_group_extend:1890: can't read last block, resize aborted
[   94.897402][ T7019] loop0: detected capacity change from 0 to 32768
[   94.907463][ T5602] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   94.915358][ T7019] ea_get: invalid extended attribute
[   94.919220][ T7019] ffff888113300bf0: 04 00 00 00                                      ....
[   94.944831][   T33] audit: type=1800 audit(1787039460.628:16): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.539" name="bus" dev="tmpfs" ino=840 res=0 errno=0
[   94.989870][ T7034] loop2: detected capacity change from 0 to 2048
[   95.075955][ T7034] loop2: detected capacity change from 0 to 4096
[   95.105687][ T7034] ntfs3(loop2): Failed to load $Extend (-22).
[   95.107750][ T7034] ntfs3(loop2): Failed to initialize $Extend.
[   95.122529][ T7036] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   95.147593][   T33] audit: type=1804 audit(1787039460.828:17): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.540" name="/newroot/189/file1/bus/file1" dev="loop2" ino=34 res=1 errno=0
[   95.186264][ T7040] loop0: detected capacity change from 0 to 512
[   95.189427][ T7040] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   95.200868][ T7040] EXT4-fs (loop0): 1 truncate cleaned up
[   95.208808][ T7040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.221509][ T7040] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.543: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   95.245783][ T7040] EXT4-fs error (device loop0) in ext4_delete_entry:2744: Corrupt filesystem
[   95.280747][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.504845][ T7048] loop0: detected capacity change from 0 to 256
[   95.600823][ T7050] loop0: detected capacity change from 0 to 1024
[   95.610985][ T7050] EXT4-fs: Ignoring removed oldalloc option
[   95.620340][ T7050] EXT4-fs: Ignoring removed orlov option
[   95.667941][ T7050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.716096][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.033224][ T7058] netlink: 14 bytes leftover after parsing attributes in process `syz.0.550'.
[   96.073296][ T7058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.089484][ T7058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.105485][ T7058] bond0 (unregistering): Released all slaves
[   96.461627][ T7067] xt_l2tp: invalid flags combination: 8
[   96.762435][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'.
[   96.767231][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'.
[   96.857237][ T7087] loop0: detected capacity change from 0 to 128
[   96.888801][ T7087] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   96.911596][ T7087] hpfs: filesystem error: improperly stopped
[   96.913893][ T7087] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   96.917989][ T7087] hpfs: You really don't want any checks? You are crazy...
[   96.920761][ T7087] hpfs: hpfs_map_sector(): read error
[   96.923192][ T7087] hpfs: code page support is disabled
[   96.924285][ T7087] hpfs: hpfs_map_4sectors(): unaligned read
[   96.927840][ T7087] hpfs: hpfs_map_4sectors(): unaligned read
[   96.930154][ T7087] hpfs: filesystem error: unable to find root dir
[   96.938108][ T7087] hpfs: hpfs_map_4sectors(): unaligned read
[   96.941230][ T7087] hpfs: hpfs_map_sector(): read error
[   96.975880][ T7071] loop2: detected capacity change from 0 to 128
[   96.979967][ T7071] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.986971][ T7071] EXT4-fs: Ignoring removed bh option
[   96.998469][ T7071] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.002807][ T7071] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   97.171680][ T7097] Invalid argument reading file caps for ./file0
[   97.373740][ T7101] loop0: detected capacity change from 0 to 32768
[   97.380188][ T7101] (syz.0.568,7101,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.385026][ T7101] (syz.0.568,7101,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.397409][ T7101] JBD2: Ignoring recovery information on journal
[   97.417395][ T7101] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   97.600772][ T5602] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.049748][ T7113] netlink: 168 bytes leftover after parsing attributes in process `syz.1.572'.
[   98.985589][ T5598] ocfs2: Unmounting device (7,0) on (node local)
[   99.406815][ T7147] loop1: detected capacity change from 0 to 4096
[   99.418158][ T7147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   99.422489][ T7147] EXT4-fs (loop1): Unsupported encryption level 6
[   99.495245][ T7152] binder: 7151:7152 ioctl 400c620e 200000000100 returned -22
[   99.537425][ T7145] loop0: detected capacity change from 0 to 32768
[   99.552255][ T7145] (syz.0.586,7145,0):ocfs2_verify_heartbeat:839 ERROR: Heartbeat has to be started to mount a read-write clustered device.
[   99.558637][ T7145] (syz.0.586,7145,0):ocfs2_fill_super:1177 ERROR: status = -22
[   99.638655][ T7164] loop1: detected capacity change from 0 to 764
[   99.749706][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'.
[   99.812739][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'.
[   99.997876][ T7191] loop2: detected capacity change from 0 to 512
[  100.001345][ T7184] loop0: detected capacity change from 0 to 32768
[  100.020368][ T7184] JBD2: Ignoring recovery information on journal
[  100.029968][ T7191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.048812][ T7191] EXT4-fs warning (device loop2): ext4_group_add:1735: No reserved GDT blocks, can't resize
[  100.059079][ T7184] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  100.083398][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.105343][ T7184] 
[  100.106156][ T7184] ======================================================
[  100.108356][ T7184] WARNING: possible circular locking dependency detected
[  100.110516][ T7184] syzkaller #0 Tainted: G             L     
[  100.112484][ T7184] ------------------------------------------------------
[  100.114638][ T7184] syz.0.602/7184 is trying to acquire lock:
[  100.116462][ T7184] ffff88801d49da58 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x360
[  100.120042][ T7184] 
[  100.120042][ T7184] but task is already holding lock:
[  100.122328][ T7184] ffff88801d49dae8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x360
[  100.125548][ T7184] 
[  100.125548][ T7184] which lock already depends on the new lock.
[  100.125548][ T7184] 
[  100.128728][ T7184] 
[  100.128728][ T7184] the existing dependency chain (in reverse order) is:
[  100.131488][ T7184] 
[  100.131488][ T7184] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  100.133890][ T7184]        down_read+0x4a/0x330
[  100.135378][ T7184]        ocfs2_init_acl+0x2fd/0x7e0
[  100.137015][ T7184]        ocfs2_mknod+0x166a/0x2240
[  100.138649][ T7184]        ocfs2_create+0x195/0x460
[  100.140377][ T7184]        path_openat+0x133a/0x3830
[  100.142304][ T7184]        do_file_open+0x23e/0x4a0
[  100.144243][ T7184]        do_sys_openat2+0x115/0x200
[  100.145872][ T7184]        __x64_sys_openat+0x138/0x170
[  100.147548][ T7184]        do_syscall_64+0x174/0x580
[  100.149137][ T7184]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.151170][ T7184] 
[  100.151170][ T7184] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  100.154114][ T7184]        down_read+0x4a/0x330
[  100.155962][ T7184]        ocfs2_start_trans+0x3ab/0x700
[  100.158091][ T7184]        ocfs2_setattr+0x9eb/0x1d10
[  100.159761][ T7184]        notify_change+0xbba/0xea0
[  100.161412][ T7184]        chmod_common+0x262/0x470
[  100.163012][ T7184]        do_fchmodat+0x12d/0x230
[  100.164545][ T7184]        __x64_sys_fchmodat+0x7d/0x90
[  100.166234][ T7184]        do_syscall_64+0x174/0x580
[  100.167830][ T7184]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.169810][ T7184] 
[  100.169810][ T7184] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  100.172119][ T7184]        ocfs2_start_trans+0x2ac/0x700
[  100.173807][ T7184]        ocfs2_setattr+0x9eb/0x1d10
[  100.175405][ T7184]        notify_change+0xbba/0xea0
[  100.176963][ T7184]        chmod_common+0x262/0x470
[  100.178492][ T7184]        do_fchmodat+0x12d/0x230
[  100.180095][ T7184]        __x64_sys_fchmodat+0x7d/0x90
[  100.181927][ T7184]        do_syscall_64+0x174/0x580
[  100.183587][ T7184]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.185571][ T7184] 
[  100.185571][ T7184] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  100.188276][ T7184]        __lock_acquire+0x1520/0x2cf0
[  100.189962][ T7184]        lock_acquire+0x106/0x350
[  100.191541][ T7184]        down_write+0x96/0x200
[  100.193054][ T7184]        ocfs2_try_remove_refcount_tree+0xb6/0x360
[  100.195066][ T7184]        ocfs2_truncate_file+0xe90/0x14b0
[  100.196825][ T7184]        ocfs2_setattr+0x1641/0x1d10
[  100.198485][ T7184]        notify_change+0xbba/0xea0
[  100.200116][ T7184]        do_truncate+0x1c2/0x250
[  100.201658][ T7184]        path_openat+0x2fed/0x3830
[  100.203257][ T7184]        do_file_open+0x23e/0x4a0
[  100.204822][ T7184]        do_sys_openat2+0x115/0x200
[  100.206449][ T7184]        __x64_sys_open+0x11e/0x150
[  100.208068][ T7184]        do_syscall_64+0x174/0x580
[  100.209674][ T7184]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.211663][ T7184] 
[  100.211663][ T7184] other info that might help us debug this:
[  100.211663][ T7184] 
[  100.214793][ T7184] Chain exists of:
[  100.214793][ T7184]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  100.214793][ T7184] 
[  100.220543][ T7184]  Possible unsafe locking scenario:
[  100.220543][ T7184] 
[  100.223007][ T7184]        CPU0                    CPU1
[  100.224667][ T7184]        ----                    ----
[  100.226342][ T7184]   lock(&oi->ip_xattr_sem);
[  100.227787][ T7184]                                lock(&journal->j_trans_barrier);
[  100.230193][ T7184]                                lock(&oi->ip_xattr_sem);
[  100.232374][ T7184]   lock(&ocfs2_file_ip_alloc_sem_key);
[  100.234088][ T7184] 
[  100.234088][ T7184]  *** DEADLOCK ***
[  100.234088][ T7184] 
[  100.236781][ T7184] 3 locks held by syz.0.602/7184:
[  100.238762][ T7184]  #0: ffff888115636450 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  100.242372][ T7184]  #1: ffff88801d49dda0 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: do_truncate+0x18f/0x250
[  100.246374][ T7184]  #2: ffff88801d49dae8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x360
[  100.250119][ T7184] 
[  100.250119][ T7184] stack backtrace:
[  100.252423][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.0.602 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  100.252437][ T7184] Tainted: [L]=SOFTLOCKUP
[  100.252440][ T7184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.252446][ T7184] Call Trace:
[  100.252452][ T7184]  <TASK>
[  100.252456][ T7184]  dump_stack_lvl+0xe8/0x150
[  100.252468][ T7184]  print_circular_bug+0x2e1/0x300
[  100.252482][ T7184]  check_noncircular+0x12e/0x150
[  100.252498][ T7184]  __lock_acquire+0x1520/0x2cf0
[  100.252511][ T7184]  ? ocfs2_try_remove_refcount_tree+0xb6/0x360
[  100.252521][ T7184]  lock_acquire+0x106/0x350
[  100.252531][ T7184]  ? ocfs2_try_remove_refcount_tree+0xb6/0x360
[  100.252542][ T7184]  down_write+0x96/0x200
[  100.252553][ T7184]  ? ocfs2_try_remove_refcount_tree+0xb6/0x360
[  100.252562][ T7184]  ? __pfx_down_write+0x10/0x10
[  100.252576][ T7184]  ocfs2_try_remove_refcount_tree+0xb6/0x360
[  100.252586][ T7184]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  100.252595][ T7184]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  100.252602][ T7184]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  100.252612][ T7184]  ocfs2_truncate_file+0xe90/0x14b0
[  100.252626][ T7184]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  100.252638][ T7184]  ? _raw_spin_unlock+0x28/0x50
[  100.252647][ T7184]  ? ocfs2_inode_lock_tracker+0x436/0x710
[  100.252657][ T7184]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  100.252665][ T7184]  ? ocfs2_rw_lock+0x13a/0x250
[  100.252671][ T7184]  ? __pfx___dquot_initialize+0x10/0x10
[  100.252680][ T7184]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  100.252687][ T7184]  ? do_raw_spin_unlock+0x4d/0x210
[  100.252694][ T7184]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  100.252705][ T7184]  ocfs2_setattr+0x1641/0x1d10
[  100.252717][ T7184]  ? __pfx_ocfs2_setattr+0x10/0x10
[  100.252729][ T7184]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  100.252738][ T7184]  ? lockdep_hardirqs_on+0x7a/0x110
[  100.252747][ T7184]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  100.252756][ T7184]  ? seqcount_lockdep_reader_access+0xea/0x100
[  100.252765][ T7184]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  100.252775][ T7184]  ? current_time+0x22f/0x380
[  100.252784][ T7184]  ? evm_inode_setattr+0x1ba/0x7c0
[  100.252794][ T7184]  ? __pfx_current_time+0x10/0x10
[  100.252804][ T7184]  ? try_break_deleg+0x5b/0x180
[  100.252810][ T7184]  ? __pfx_ocfs2_setattr+0x10/0x10
[  100.252821][ T7184]  notify_change+0xbba/0xea0
[  100.252830][ T7184]  do_truncate+0x1c2/0x250
[  100.252841][ T7184]  ? __pfx_do_truncate+0x10/0x10
[  100.252852][ T7184]  ? ima_file_truncate+0x10a/0x170
[  100.252862][ T7184]  path_openat+0x2fed/0x3830
[  100.252872][ T7184]  ? kasan_save_track+0x3e/0x80
[  100.252881][ T7184]  ? do_sys_openat2+0xcc/0x200
[  100.252889][ T7184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.252900][ T7184]  do_file_open+0x23e/0x4a0
[  100.252949][ T7184]  ? __pfx_do_file_open+0x10/0x10
[  100.252972][ T7184]  ? _raw_spin_unlock+0x28/0x50
[  100.252991][ T7184]  ? alloc_fd+0x651/0x6c0
[  100.253003][ T7184]  do_sys_openat2+0x115/0x200
[  100.253013][ T7184]  ? __se_sys_futex+0x3a8/0x450
[  100.253027][ T7184]  ? __pfx_do_sys_openat2+0x10/0x10
[  100.253037][ T7184]  ? rcu_is_watching+0x15/0xb0
[  100.253050][ T7184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.253057][ T7184]  __x64_sys_open+0x11e/0x150
[  100.253068][ T7184]  do_syscall_64+0x174/0x580
[  100.253079][ T7184]  ? trace_irq_disable+0x3b/0x140
[  100.253090][ T7184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.253098][ T7184] RIP: 0033:0x7f02c679e0d9
[  100.253108][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.253114][ T7184] RSP: 002b:00007f02c49f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  100.253122][ T7184] RAX: ffffffffffffffda RBX: 00007f02c6a25fa0 RCX: 00007f02c679e0d9
[  100.253127][ T7184] RDX: 0000000000000006 RSI: 000000000014927e RDI: 00002000000000c0
[  100.253132][ T7184] RBP: 00007f02c6835024 R08: 0000000000000000 R09: 0000000000000000
[  100.253136][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.253140][ T7184] R13: 00007f02c6a26038 R14: 00007f02c6a25fa0 R15: 00007ffecbdb5118
[  100.253148][ T7184]  </TASK>
[  100.416708][ T5598] ocfs2: Unmounting device (7,0) on (node local)
[  100.511946][   T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  100.661878][   T31] usb 2-1: Using ep0 maxpacket: 8
[  100.666181][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  100.669401][   T31] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24
[  100.674308][   T31] usb 2-1: config 117 has an invalid interface number: 163 but max is 0
[  100.677761][   T31] usb 2-1: config 117 has no interface number 0
[  100.681382][   T31] usb 2-1: config 117 interface 163 has no altsetting 0
[  100.686603][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.689680][   T31] usb 2-1: Product: syz
[  100.691327][   T31] usb 2-1: Manufacturer: syz
[  100.693275][   T31] usb 2-1: SerialNumber: syz
[  101.502237][   T31] f81534a_ctrl 2-1:117.163: failed to enable ports: -71
[  101.505834][   T31] f81534a_ctrl 2-1:117.163: probe with driver f81534a_ctrl failed with error -71
[  101.511207][   T31] usb 2-1: USB disconnect, device number 11
