last executing test programs:

3m25.623110285s ago: executing program 0 (id=128):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

3m25.519770741s ago: executing program 0 (id=129):
unshare(0x2c020400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r0, 0x0, 0x0}, 0x10)

3m25.42999305s ago: executing program 0 (id=131):
timer_create(0x1, &(0x7f0000000140)={0x0, 0x12, 0x1}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000380)={{0x77359400}}, &(0x7f0000000400))

3m25.356443362s ago: executing program 0 (id=133):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1002, 0x0, 0x9, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0, 0x0)

3m25.099778364s ago: executing program 0 (id=138):
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x7ac})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})

3m24.706152046s ago: executing program 0 (id=147):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0xffffd000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000002340), r2}}, 0x18)

3m24.570450104s ago: executing program 32 (id=147):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0xffffd000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000002340), r2}}, 0x18)

31.731419747s ago: executing program 2 (id=1964):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0)

31.673905108s ago: executing program 2 (id=1965):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
getdents(r0, &(0x7f00000005c0)=""/173, 0x21)
getdents(r0, 0xfffffffffffffffd, 0x3b)

31.645835038s ago: executing program 2 (id=1966):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)

31.567576684s ago: executing program 2 (id=1967):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x201000a, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0x6, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x810000, &(0x7f0000000f40)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@adinicb}, {@uid_forget}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@bs={'bs', 0x3d, 0x3e8}}, {@nostrict}]}, 0xfe, 0xc32, &(0x7f0000000fc0)="$eJzs3UFsHNd9B+D/Gy3Fld1UTJyodhu3m7ZIZcVyZUkxFatwVzXNNoAsE6GYWwCuyJW6MEUSJNXIRtowvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+FZeUZNGmSFHW99nUb3f2vZn33tAztMA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN975cKp59ODbgUAsJ8ujX/l1Gn3fwB4pFyu/v/fDwAAAAAAAAAAAAAAAHCApSjiiUgxf2k9TVbvu+oXO7M3bk6MjN652pFU1TxUlS+/6s+fPnP2iy8Mn+vlB9e/356K18YvX2i8PHd9fqG9uNiebkzMdqbmpts73sNu6293ohqAxvXXb0xfvbrYOP3cmS0f3xx6f/DxY0Pnh585+XSv7MTI6Oh4X5nawEc++m3uNsHjcBRxMlI8+72fpFZEFLH7sbjH985eO1J14kTViYmR0aojM53W7FL54VhvIIqIRl+lZm+M9uFc7EozYrlsftngE2X3xudbC60rM+3GWGthqbPUmZsdS93Wlv1pRBHnUsRKRKwN3r67gSiiFim+c3Q9XYmIQ71x+EI1Mfju7Sj2sI87ULazMRCxUjwE5+wAG4wiXo0UP32niKlyzPJXfD7i1TJ/EPFWmS9FVLPEzka8d4fvIx5OtSjiz8vzf349TUfExtHu9tHGxa82vjx7da6vbO+68tDfH/bTAb821aOIVnXFX08f/YcdAAAAAAAAAAAAAAAAAO63I1HEU5HilX//o2pecVTz0o+eH/79oU/0zxl/8h77Kcs+FxHLxc7m5B7OU4jH0lhKD3gu8aOsHkX8cZ7/960H3RgAAAAAAAAAAAAAAAAAAIBHWhE/jhQvvns8rUT/muKd2WuNy60rM91VYXtr//bWTN/Y2NhopG42c07mXM65knM151rOKHL9nM2ckzmXc67kXM25ljMO5fo5mzkncy7nXMm5mnMtZ9Ry/ZzNnJM5l3Ou5FzNuZYzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPHtr6+nSBHRjJiMbq4O9soAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/SYCri+5Gi8QfNW9tqEZGqf7uOl3+cjebhMj8VzeEyX4rmhZytKmvNb93zaGlP+sBHN5CK+FGkGKy/fevs5PM/0H23ec7e+sbmu1+udfNQ78Oh9wcfP3b0/PDorz55t9dV3YFtDThxsTN742ZjYmR0dLxvcy2X+1TftqF83CK//8T9GYJH2uIbb77emplpL3jxaLyodV/U4oC0Z79e5OtVHJT2bH/RPBjN2HzxgC9M7Ivy/v9epPjtd//j1q053/9/ofvu1h0+fvYnm/f/F7fvaKf3/+3ucf9/om/bi/mnkYFaRH3p+vzAsYj64htvnuxcb11rX2vPnj116kvDw186c2rgcET9amem3fdq10MFAAAAAAAAAAAAAAAAsL9SEb8bKVo/Wk+NiLhZzdcaOj/8zMmnD8Whar7Vlnlbr41fvtB4ee76/EJ7cbE93ZiY7UzNTbd3erh6Nd1rYmR0TzpzT0f2uP1H6i/Pzb+x0Ln2h0t3/Pyx+oUri0sLrak7fxxHooho9m85UTV4YmS0avRMpzVbVR27T49SGEhF/GekmDrbSJ/L2/L8v+0z/LfM/1/evqM9mv/3yb5t5TFTKuJnkeK3/uLJ+FzVzsfitjHL5f4mUpw499lcLg6X5Xpt6D5XoDszsCz7v5HiH36+tWxvPuQTm2Wf3/HAPiTK8380Unz/z74bv563bX3+w53P/2Pbd7RH5//Tfdse2/K8gl13nXz+T0aKl554O34jb/ug538UsbGx8c2I47nwredz7NH5/0zftqHoHvc371/3AQAAAAAAAAAAHloDqYi/jRRPj9bSC3nbTn7/b3r7jvbo979+qW/b9D6tV7TrQQUAAACAA2IgFfHjSHFt6e1bc6i3zv/um//5O5trr4+kbZ9Wf8/3i9VzA+7n3//1G8rHndx9twEAAAAAAAAAAAAAAAAAAOBASamIF/J66pP3WE99NVK88t/P5nLpWFmutw78UPVn/dLc7MkLMzNzU62l1pWZdmN8vjXVLut+OlKs//Vnc92iWl+9t958d433+kZvLfaFSDH6d72y3bXYe2uTd9cD767FXpb9ZKT4r7/fWra3jvVnNsueLsv+VaT42j/dueyxzbJnyrLfjRQ//FqjV/axsmzv+ajdZ5LWazHTfm5qbua2R6ECAAAAAAAAAAAAAAAAAADAhzWQivjTSPE/11diOU/7z+v/91bgr/XKvvWNvvX+t7lZrfM/VK3/f7fXH2X9/6H71lMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4pCjizUgxf2k9rQ6W77vqFzuzN25OjIzeudqRVNU8VJUvv+rPnz5z9osvDJ/r5QfXv9+eitfGL19ovDx3fX6hvbjYnm5MzHam5qbbO97DbutvDl3XiWoAGtdfvzF99epi4/RzZ7Z8fHPo/cHHjw2dH37m5NO9shMjo6PjfWVqAx/i6B+qcZsORxF/GSme/d5P0j8PRhSx+7G4x/fOXjtSdeJE1YmJkdGqIzOd1uxS+eFYbyCKiEZfpWZvjPbhXOxKM2K5bH7Z4BNl98bnWwutKzPtxlhrYamz1JmbHUvd1pb9aUQR51LESkSsDd6+u4Eo4vVI8Z2j6+lfBiMO9cbhC5fGv3Lq9N3bUexhH3egbGdjIGKl2Dxn9YN6zg6wwSjiHyPFT985Hv86GFGL7ld8PuLVMn8Q8VaZL0WkFLHxzYj37vB9xMOpFkX8X3n+z6+ndwbL60HvunLxq40vz16d6yvbu67s6P7wa3c/5gO/P+ynA34/qUcRP6yu+Ovp3/x3DQAAAAAAAAAAAAAAAHCAFPErkeLFd4+nan7wrTnFndlrjcutKzPdaX29uX+9OdMbGxsbjdTNZs7JnMs5V3Ku5lzLGUWun7OZczLncs6VnKs513LGoVw/ZzPnZM7lnCs5V3Ou5Yxarp+zmXMy53LOlZyrOddyxgGZuwcAAAAAAAAAAAAAAAAAAHy8FNU/Kb799fW0MdhdX3oyurlqPdCPvf8PAAD//+3T/oE=")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

31.413865802s ago: executing program 2 (id=1969):
syz_read_part_table(0x5e5, &(0x7f0000000600)="$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")

31.173492562s ago: executing program 2 (id=1972):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xe, [0xffffffff, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x2, 0x8, 0xc, 0x3, 0x5, 0xfffffffd, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0xffffffff, 0x4, 0x6, 0x10401, 0xf, 0x9, 0x4, 0x2, 0x1, 0x5, 0x200, 0x1, 0x4, 0xa, 0x8, 0x3, 0xb, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x3, 0x4, 0xfffffff7, 0xfffff801, 0xd237, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x5, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0x2, 0x3, 0x40, 0xa1, 0x1, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x4, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x8, 0x6, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x80000001, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x3, 0x9, 0x5, 0x4, 0x7ffbfff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x8001, 0x97f82544, 0x8, 0x0, 0x9, 0x9, 0x80, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x3, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x8004, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0x6, 0x4, 0xffffffff, 0x1f, 0x100002, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x6, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0xffffffff, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x8, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x0, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000240)={0x54}, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000180)=0x8)

30.698675912s ago: executing program 33 (id=1972):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xe, [0xffffffff, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x2, 0x8, 0xc, 0x3, 0x5, 0xfffffffd, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0xffffffff, 0x4, 0x6, 0x10401, 0xf, 0x9, 0x4, 0x2, 0x1, 0x5, 0x200, 0x1, 0x4, 0xa, 0x8, 0x3, 0xb, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x3, 0x4, 0xfffffff7, 0xfffff801, 0xd237, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x5, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0x2, 0x3, 0x40, 0xa1, 0x1, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x4, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x8, 0x6, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x80000001, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x3, 0x9, 0x5, 0x4, 0x7ffbfff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x8001, 0x97f82544, 0x8, 0x0, 0x9, 0x9, 0x80, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x3, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x8004, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0x6, 0x4, 0xffffffff, 0x1f, 0x100002, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x6, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0xffffffff, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x8, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x0, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000240)={0x54}, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000180)=0x8)

19.803281993s ago: executing program 4 (id=2072):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0)
bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc}, 0xc)

19.740745931s ago: executing program 4 (id=2074):
mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})

19.683394794s ago: executing program 4 (id=2076):
syz_emit_ethernet(0x86, &(0x7f00000006c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "b0a20e1fd55628aafc0ab9d1ca290f66f025e1731bfd37ddd7df305b478f93a0", "6ab6e96400005d3ca4bf18c61fae2895", {"84a5518fdce92510afe2237daa5f688d", "6ac1c29318a65bf98dc7cca651ab5ddf"}}}}}}}, 0x0)

19.640599949s ago: executing program 4 (id=2078):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00')

19.582239394s ago: executing program 4 (id=2080):
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x2, @aes256, 0x3, @auto='\t\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0xfd8e49f1ee86724e)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x85)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8)
r2 = getpid()
r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r2, 0x0, 0x7fff, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)

19.361538475s ago: executing program 4 (id=2081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000201e30200000000000000000a00000806001240000200004400018006000340000300002c000180140003000000000000000000000000000000000114000400fc0200000000000000008000000000010c000280040001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

19.244265881s ago: executing program 34 (id=2081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000201e30200000000000000000a00000806001240000200004400018006000340000300002c000180140003000000000000000000000000000000000114000400fc0200000000000000008000000000010c000280040001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

3.070863967s ago: executing program 3 (id=2303):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x44, 0x9, 0x2, 0xfb}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)={0x0, 0x8, 0x4, {0x4, 0x8, "2cf4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

2.443220707s ago: executing program 3 (id=2315):
syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a92000905021010000204070905640208000803080905030010"], 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

2.113301899s ago: executing program 1 (id=2319):
r0 = epoll_create1(0x0)
r1 = eventfd2(0x0, 0x0)
epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x5})

1.943619105s ago: executing program 1 (id=2321):
syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0xc5a, &(0x7f0000000180)=ANY=[], 0x2, 0x5d9, &(0x7f0000000640)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x42102, 0x24)

1.880701256s ago: executing program 3 (id=2322):
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)

1.878595513s ago: executing program 1 (id=2323):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x299)
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
mknod$loop(0x0, 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000200)={[{@order_relaxed}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@errors_remount_ro}, {@errors_remount_ro}]}, 0xf, 0xa02, &(0x7f0000001ec0)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000500)={0x0, @bt={0x8, 0x9, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x4, 0x2800, 0x9, 0x1, 0xba2, 0x0, 0x2a, {0xa, 0x20000a}, 0xce, 0x9}})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='jqfmt=vfsv(,nocheckpoint_merge,alloc_mode=default,active_logs=6,user_xattr,fault_injection=00000000000000000014,mode=lfs,noacl,fsync_mode=posix,!lloc_mode=default,discard_unit=segment,active_logs=2,fault_type=00000000000016777214,\x00'], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")

1.828011716s ago: executing program 3 (id=2324):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38)

1.081803413s ago: executing program 5 (id=2326):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1)
getdents64(r0, 0x0, 0x0)
getdents64(r0, 0x0, 0x2e)

917.838042ms ago: executing program 5 (id=2327):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x200000, [{0x0, 0x1}]}]}}, &(0x7f0000000000)=""/140, 0x42, 0x8c, 0x1}, 0x20)

870.223687ms ago: executing program 3 (id=2328):
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

869.956982ms ago: executing program 3 (id=2329):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r3, 0x1)
recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001240), 0x0, 0x10001, 0x0)

850.77244ms ago: executing program 1 (id=2330):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='\x00', 0x81900)
unshare(0x2a020480)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

626.056405ms ago: executing program 5 (id=2331):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}]}}]}, 0x58}}, 0x0)
pipe2$9p(0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)="5453b4", 0x3}], 0x1}}], 0x1, 0xc0)

625.797607ms ago: executing program 1 (id=2332):
unshare(0x2a020480)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100)=0xfffffffa, 0x4)

202.115483ms ago: executing program 1 (id=2333):
syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000500)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cc85bf8e749e04e", @ANYRES16, @ANYRESOCT, @ANYRES16], 0x11, 0x445c, &(0x7f0000004a80)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

199.714353ms ago: executing program 5 (id=2334):
r0 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12)

63.322466ms ago: executing program 5 (id=2335):
r0 = socket$inet(0x2, 0x3, 0x30)
setuid(0xee01)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000080))

0s ago: executing program 5 (id=2336):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

kernel console output (not intermixed with test programs):

 none.
[  143.573075][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.903070][ T7777] loop1: detected capacity change from 0 to 32768
[  143.981707][ T7777] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  144.047758][ T7777] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[  144.074909][ T7777] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  144.085061][ T7777] OCFS2: Returning error to the calling process.
[  144.087838][ T7777] (syz.1.729,7777,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[  144.095216][ T7777] (syz.1.729,7777,0):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[  144.102504][ T7777] (syz.1.729,7777,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[  144.119348][ T7777] (syz.1.729,7777,0):ocfs2_mknod:309 ERROR: status = -5
[  144.124811][ T7777] (syz.1.729,7777,0):ocfs2_mknod:505 ERROR: status = -5
[  144.127617][ T7777] (syz.1.729,7777,0):ocfs2_mkdir:661 ERROR: status = -5
[  144.132918][ T7777] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[  144.150604][ T7777] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  144.159259][ T7777] OCFS2: Returning error to the calling process.
[  144.162151][ T7777] (syz.1.729,7777,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[  144.172325][ T7777] (syz.1.729,7777,0):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[  144.175829][ T7777] (syz.1.729,7777,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[  144.191166][ T7777] (syz.1.729,7777,0):ocfs2_mknod:309 ERROR: status = -5
[  144.198739][ T7777] (syz.1.729,7777,0):ocfs2_mknod:505 ERROR: status = -5
[  144.209430][ T7777] (syz.1.729,7777,0):ocfs2_mkdir:661 ERROR: status = -5
[  144.244451][ T5953] ocfs2: Unmounting device (7,1) on (node local)
[  144.266760][ T7797] loop2: detected capacity change from 0 to 32768
[  144.269743][ T7797] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.740 (7797)
[  144.309449][ T7797] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  144.313597][ T7797] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  144.438082][ T7797] BTRFS info (device loop2): enabling ssd optimizations
[  144.449237][ T7797] BTRFS info (device loop2): enabling free space tree
[  144.741914][ T5947] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  144.755668][ T7824] loop1: detected capacity change from 0 to 2048
[  144.978902][ T7824] hpfs: filesystem error: improperly stopped; already mounted read-only
[  144.985902][ T7824] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  144.999403][ T7824] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000
[  145.468739][ T7845] input: syz1 as /devices/virtual/input/input10
[  145.633261][ T7851] netlink: 148 bytes leftover after parsing attributes in process `syz.2.756'.
[  145.636643][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'.
[  145.649236][   T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  145.799163][   T47] usb 2-1: Using ep0 maxpacket: 32
[  145.803240][   T47] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  145.806192][   T47] usb 2-1: config 0 has no interface number 0
[  145.808642][   T47] usb 2-1: config 0 interface 89 has no altsetting 0
[  145.813677][   T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  145.817052][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.820359][   T47] usb 2-1: Product: syz
[  145.822102][   T47] usb 2-1: Manufacturer: syz
[  145.824134][   T47] usb 2-1: SerialNumber: syz
[  145.828795][   T47] usb 2-1: config 0 descriptor??
[  145.843431][   T47] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  145.847025][   T47] em28xx 2-1:0.89: Video interface 89 found: bulk
[  146.391466][ T7861] overlayfs: failed to clone lowerpath
[  146.448529][   T47] em28xx 2-1:0.89: unknown em28xx chip ID (64)
[  146.472916][ T7865] capability: warning: `syz.3.763' uses 32-bit capabilities (legacy support in use)
[  146.604001][ T7873] loop2: detected capacity change from 0 to 512
[  146.623090][ T7873] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  146.626824][ T7873] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.767: iget: bad i_size value: 12154757448730
[  146.634676][ T7873] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.767: couldn't read orphan inode 13 (err -117)
[  146.641064][ T7873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.702163][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.838766][   T33] audit: type=1326 audit(1759241010.750:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615938ec29 code=0x7ffc0000
[  146.861128][   T33] audit: type=1326 audit(1759241010.750:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615938ec29 code=0x7ffc0000
[  146.884602][   T33] audit: type=1326 audit(1759241010.770:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.768" exe="/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f615938ec29 code=0x7ffc0000
[  147.002314][  T788] IPVS: starting estimator thread 0...
[  147.102377][ T7880] IPVS: using max 41 ests per chain, 98400 per kthread
[  147.192075][   T33] audit: type=1326 audit(1759241011.110:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615938ec29 code=0x7ffc0000
[  147.201322][   T33] audit: type=1326 audit(1759241011.110:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615938ec29 code=0x7ffc0000
[  147.216011][   T47] em28xx 2-1:0.89: AC97 command still being executed: not handled properly!
[  147.386321][   T47] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  147.403688][   T47] em28xx 2-1:0.89: board has no eeprom
[  147.461372][   T47] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  147.468077][   T47] em28xx 2-1:0.89: analog set to bulk mode.
[  147.471356][ T5829] em28xx 2-1:0.89: Registering V4L2 extension
[  147.498723][   T47] usb 2-1: USB disconnect, device number 8
[  147.511447][   T47] em28xx 2-1:0.89: Disconnecting em28xx
[  147.542040][ T5829] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  147.546203][ T5829] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  147.557030][ T5829] em28xx 2-1:0.89: No AC97 audio processor
[  147.575235][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'.
[  147.581147][ T7891] vlan0: entered promiscuous mode
[  147.587034][ T5829] usb 2-1: Decoder not found
[  147.659248][ T5829] em28xx 2-1:0.89: failed to create media graph
[  147.661813][ T5829] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  147.676834][ T5829] em28xx 2-1:0.89: Registering snapshot button...
[  147.687830][ T5829] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input11
[  147.695421][ T7895] loop2: detected capacity change from 0 to 256
[  147.703533][ T5829] em28xx 2-1:0.89: Remote control support is not available for this card.
[  147.707208][   T47] em28xx 2-1:0.89: Closing input extension
[  147.712784][   T47] em28xx 2-1:0.89: Deregistering snapshot button
[  147.813778][   T47] em28xx 2-1:0.89: Freeing device
[  148.283515][ T5829] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  148.312339][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.788'.
[  148.463457][ T5829] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  148.479760][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.493859][ T5829] usb 3-1: config 0 descriptor??
[  148.505688][ T5829] cp210x 3-1:0.0: cp210x converter detected
[  148.605680][ T7945] loop1: detected capacity change from 0 to 256
[  148.611596][ T7945] exfat: Deprecated parameter 'utf8'
[  148.613922][ T7945] exfat: Deprecated parameter 'utf8'
[  148.616115][ T7945] exfat: Deprecated parameter 'utf8'
[  148.641286][ T7947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  148.645696][ T7945] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  148.887912][ T7959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'.
[  148.897028][ T7959] netlink: 'syz.1.801': attribute type 7 has an invalid length.
[  148.900823][ T7959] netlink: 'syz.1.801': attribute type 8 has an invalid length.
[  148.904291][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'.
[  148.926325][ T7961] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  148.945216][ T7961] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  149.107350][ T5829] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71
[  149.118800][ T5829] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  149.132191][ T5829] usb 3-1: cp210x converter now attached to ttyUSB0
[  149.137892][ T5829] usb 3-1: USB disconnect, device number 8
[  149.144524][ T5829] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  149.154482][ T5829] cp210x 3-1:0.0: device disconnected
[  149.256191][ T7967] loop1: detected capacity change from 0 to 32768
[  149.282823][ T7967] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  149.297609][ T7967] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  149.317725][ T7967] XFS (loop1): Ending clean mount
[  149.328361][ T7967] XFS (loop1): Quotacheck needed: Please wait.
[  149.373051][ T7967] XFS (loop1): Quotacheck: Done.
[  149.394200][ T5953] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  149.576700][ T7989] ref_ctr_offset mismatch. inode: 0x3fd offset: 0x0 ref_ctr_offset(old): 0x200000000100 ref_ctr_offset(new): 0x0
[  149.831460][ T8010] netlink: 248 bytes leftover after parsing attributes in process `syz.3.820'.
[  149.850789][ T8010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.820'.
[  152.049152][ T8031] loop1: detected capacity change from 0 to 256
[  152.058842][ T8031] exfat: Deprecated parameter 'utf8'
[  152.074360][ T8031] exfat: Deprecated parameter 'utf8'
[  152.108644][ T8031] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8ecf9da9, utbl_chksum : 0xe619d30d)
[  153.189686][ T8056] loop1: detected capacity change from 0 to 128
[  153.223520][ T8056] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  153.321333][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.841'.
[  153.789361][  T788] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  153.949366][  T788] usb 2-1: Using ep0 maxpacket: 32
[  153.956501][  T788] usb 2-1: config 5 has an invalid interface number: 190 but max is 2
[  153.960377][  T788] usb 2-1: config 5 has an invalid interface number: 49 but max is 2
[  153.963781][  T788] usb 2-1: config 5 has no interface number 0
[  153.966845][  T788] usb 2-1: config 5 has no interface number 2
[  153.981674][  T788] usb 2-1: config 5 interface 190 has no altsetting 0
[  153.985223][  T788] usb 2-1: config 5 interface 1 has no altsetting 0
[  153.988423][  T788] usb 2-1: config 5 interface 49 has no altsetting 0
[  154.011944][  T788] usb 2-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=f2.82
[  154.015768][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.026002][  T788] usb 2-1: Product: syz
[  154.028069][  T788] usb 2-1: Manufacturer: syz
[  154.039041][  T788] usb 2-1: SerialNumber: syz
[  154.058902][ T8085] loop2: detected capacity change from 0 to 64
[  154.317597][  T788] usb 2-1: USB disconnect, device number 9
[  154.802478][ T8107] fuse: Bad value for 'fd'
[  155.119247][  T788] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  155.281622][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  155.286643][  T788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  155.293650][  T788] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  155.297743][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.305053][  T788] usb 2-1: config 0 descriptor??
[  155.310754][ T8111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  155.734517][  T788] logitech 0003:046D:CA04.0004: unbalanced collection at end of report description
[  155.739321][  T788] logitech 0003:046D:CA04.0004: parse failed
[  155.742376][  T788] logitech 0003:046D:CA04.0004: probe with driver logitech failed with error -22
[  156.071036][  T789] usb 2-1: USB disconnect, device number 10
[  156.084897][ T8133] netlink: 'syz.2.874': attribute type 12 has an invalid length.
[  156.089957][ T8133] netlink: 'syz.2.874': attribute type 29 has an invalid length.
[  156.094220][ T8133] netlink: 148 bytes leftover after parsing attributes in process `syz.2.874'.
[  156.098321][ T8133] netlink: 'syz.2.874': attribute type 2 has an invalid length.
[  156.103025][ T8133] netlink: 23 bytes leftover after parsing attributes in process `syz.2.874'.
[  157.900137][ T8142] macvlan0: entered promiscuous mode
[  157.934895][ T8142] netlink: 'syz.3.877': attribute type 1 has an invalid length.
[  157.954372][ T8142] netlink: 'syz.3.877': attribute type 2 has an invalid length.
[  158.234318][ T8150] trusted_key: encrypted_key: insufficient parameters specified
[  159.732269][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'.
[  159.855568][ T8158] loop2: detected capacity change from 0 to 4096
[  160.046686][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'.
[  160.145300][ T8174] program syz.2.891 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.272043][ T8178] loop2: detected capacity change from 0 to 512
[  160.314169][ T8178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.320521][ T8178] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.352167][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.518704][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  160.538562][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  160.976790][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'.
[  160.986748][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.991691][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.730505][  T788] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  161.883673][  T788] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  161.887274][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.893235][  T788] usb 2-1: config 0 descriptor??
[  161.912907][  T788] usb 2-1: selecting invalid altsetting 3
[  161.922617][  T788] comedi comedi5: could not set alternate setting 3 in high speed
[  161.932666][  T788] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  161.941232][  T788] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22
[  162.825759][  T788] usb 2-1: USB disconnect, device number 11
[  163.487140][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'.
[  163.491483][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.921'.
[  163.522631][ T8247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.922'.
[  163.600130][ T8251] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  163.600130][ T8251] SȘȞZ6'
[  163.752411][ T8259] netlink: 188 bytes leftover after parsing attributes in process `syz.3.928'.
[  163.852261][ T8263] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  163.867105][ T8263] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  163.896125][ T8265] loop1: detected capacity change from 0 to 65
[  163.965988][ T8265] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  163.969022][ T8265] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  164.505295][ T8281] loop2: detected capacity change from 0 to 512
[  164.542519][ T8281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.937: bg 0: block 248: padding at end of block bitmap is not set
[  164.572392][ T8281] Quota error (device loop2): write_blk: dquota write failed
[  164.575603][ T8281] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  164.582037][ T8281] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.937: Failed to acquire dquot type 1
[  164.588268][ T8281] EXT4-fs (loop2): 1 truncate cleaned up
[  164.597339][ T8281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.603460][ T8281] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.630201][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.684007][ T8279] loop1: detected capacity change from 0 to 32768
[  164.691030][ T8286] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.938'.
[  164.694201][ T8279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.936 (8279)
[  164.736419][ T8279] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.823206][ T8279] BTRFS info (device loop1 state S): using crc32c (crc32c-lib) checksum algorithm
[  164.857829][ T1894] BTRFS warning (device loop1 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xb6869543 level 0, ignored
[  164.872035][ T8279] BTRFS error (device loop1 state S): failed to find fsid c9fe44da-de57-406a-8241-570000000000 when attempting to open seed devices
[  164.877900][ T8279] BTRFS error (device loop1 state S): failed to read chunk tree: -2
[  164.906130][ T8279] BTRFS error (device loop1 state S): open_ctree failed: -2
[  165.176007][ T8316] loop2: detected capacity change from 0 to 64
[  165.214751][ T8316] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  165.478267][ T8325] netlink: 'syz.2.950': attribute type 11 has an invalid length.
[  165.485807][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'.
[  165.937108][ T8337] loop2: detected capacity change from 0 to 2048
[  165.947271][ T8337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.398931][ T8346] netlink: 'syz.3.961': attribute type 1 has an invalid length.
[  166.403826][ T8346] netlink: 'syz.3.961': attribute type 2 has an invalid length.
[  166.852033][ T8359] netlink: 'syz.3.965': attribute type 1 has an invalid length.
[  166.925925][ T8361] netlink: 'syz.1.966': attribute type 32 has an invalid length.
[  167.432756][ T8374] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  167.436081][ T8374] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  167.449331][ T8374] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  168.049211][ T5829] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  168.190021][ T8370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.209182][ T5829] usb 2-1: Using ep0 maxpacket: 8
[  168.214041][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  168.218353][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  168.225045][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  168.235179][ T5829] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  168.240413][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.244067][ T5829] usb 2-1: Product: syz
[  168.246076][ T5829] usb 2-1: Manufacturer: syz
[  168.248127][ T5829] usb 2-1: SerialNumber: syz
[  168.253452][ T5829] usb 2-1: config 0 descriptor??
[  168.258527][ T5829] imon_raw 2-1:0.0: IR endpoint missing
[  168.473902][    T9] usb 2-1: USB disconnect, device number 12
[  169.008313][ T8402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.985'.
[  169.011854][ T8402] netlink: 'syz.1.985': attribute type 1 has an invalid length.
[  169.015884][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.985'.
[  169.043155][ T8403] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  169.043155][ T8403] The task syz.3.984 (8403) triggered the difference, watch for misbehavior.
[  169.058876][ T8405] netlink: 'syz.1.986': attribute type 21 has an invalid length.
[  169.062911][ T8405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.986'.
[  169.183424][ T8411] loop1: detected capacity change from 0 to 1024
[  169.188309][ T8411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  169.192375][ T8411] EXT4-fs (loop1): Test dummy encryption mode enabled
[  169.195371][ T8411] EXT4-fs (loop1): filesystem too large to mount safely on this system
[  169.469386][ T8413] loop2: detected capacity change from 0 to 32768
[  169.676432][ T8413] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  169.756024][   T33] audit: type=1800 audit(1759241033.670:17): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.990" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  169.803292][ T8422] fuse: Bad value for 'fd'
[  170.535569][ T5947] ocfs2: Unmounting device (7,2) on (node local)
[  171.119670][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'.
[  171.148048][ T8472] loop1: detected capacity change from 0 to 512
[  171.155788][ T8472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  171.167110][ T8472] EXT4-fs (loop1): 1 truncate cleaned up
[  171.204251][ T8472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.246034][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.884007][   T33] audit: type=1326 audit(1759241035.800:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8494 comm="syz.1.1022" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x0
[  171.989348][ T8497] loop1: detected capacity change from 0 to 2048
[  172.024376][ T8497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.067724][ T8497] EXT4-fs (loop1): shut down requested (0)
[  172.160731][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.311755][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'.
[  172.324506][ T8516] bond0: entered promiscuous mode
[  172.326655][ T8516] bond_slave_0: entered promiscuous mode
[  172.330178][ T8516] bond_slave_1: entered promiscuous mode
[  172.334282][ T8516] bond0: left promiscuous mode
[  172.336340][ T8516] bond_slave_0: left promiscuous mode
[  172.338845][ T8516] bond_slave_1: left promiscuous mode
[  172.676964][ T8522] loop2: detected capacity change from 0 to 32768
[  172.707853][   T33] audit: type=1800 audit(1759241036.620:19): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1033" name="bus" dev="loop2" ino=7 res=0 errno=0
[  172.858191][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1035'.
[  172.904467][ T8528] loop2: detected capacity change from 0 to 512
[  172.914481][ T8528] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1036: iget: bad extended attribute block 1
[  172.926364][ T8528] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1036: couldn't read orphan inode 15 (err -117)
[  172.932500][ T8528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.942294][ T8528] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  172.963627][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.438246][ T8541] loop1: detected capacity change from 0 to 40427
[  173.442476][ T8541] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  173.445662][ T8541] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  173.451103][ T8541] F2FS-fs (loop1): invalid crc value
[  173.502674][ T8541] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.515201][ T8541] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  173.518210][ T8541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  174.174655][ T8560] loop2: detected capacity change from 0 to 32768
[  174.189565][ T8560] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  174.217321][ T8560] XFS (loop2): Ending clean mount
[  174.286411][ T8560] XFS (loop2): Quotacheck needed: Please wait.
[  174.324944][ T8560] XFS (loop2): Quotacheck: Done.
[  174.401403][ T5947] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  174.821448][ T8578] loop2: detected capacity change from 0 to 2048
[  174.825641][ T8578] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  174.831240][ T8578] NILFS (loop2): mounting unchecked fs
[  174.838093][ T5902] udevd[5902]: incorrect nilfs2 checksum on /dev/loop2
[  174.858652][ T8578] NILFS (loop2): recovery complete
[  174.864086][ T8580] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1051'.
[  174.867750][ T8581] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.936984][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1054'.
[  174.948822][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1054'.
[  174.953362][ T8583] netlink: 'syz.1.1054': attribute type 5 has an invalid length.
[  174.993821][ T8585] "syz.2.1055" (8585) uses obsolete ecb(arc4) skcipher
[  175.050866][ T8592] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1057'.
[  175.254351][ T8599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1059'.
[  175.258520][ T8599] unsupported nlmsg_type 40
[  175.766357][ T8613] macsec1: entered promiscuous mode
[  175.768192][ T8613] hsr0: entered promiscuous mode
[  175.777144][ T8613] hsr0: left promiscuous mode
[  176.545588][ T8635] loop1: detected capacity change from 0 to 2048
[  176.824226][ T8635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.843367][   T33] audit: type=1800 audit(1759241040.760:20): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1075" name="file2" dev="loop1" ino=16 res=0 errno=0
[  176.904787][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'.
[  176.907846][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1078'.
[  177.291288][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.347549][ T8653] netlink: 'syz.2.1083': attribute type 4 has an invalid length.
[  177.374157][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'.
[  177.528216][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1088'.
[  177.598509][ T8669] pimreg: entered allmulticast mode
[  177.635601][ T8669] dvmrp8: entered allmulticast mode
[  177.650019][ T8669] pimreg: left allmulticast mode
[  177.652701][ T8669] dvmrp8: left allmulticast mode
[  177.665265][ T8671] loop1: detected capacity change from 0 to 2048
[  177.714480][ T8671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.768296][ T8673] loop1: detected capacity change from 0 to 256
[  177.781680][ T8673] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  177.942509][   T33] audit: type=1326 audit(1759241041.850:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0518ec29 code=0x7ffc0000
[  177.955325][   T33] audit: type=1326 audit(1759241041.870:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0518ec29 code=0x7ffc0000
[  177.965055][   T33] audit: type=1326 audit(1759241041.880:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fab0518ec29 code=0x7ffc0000
[  177.979073][   T33] audit: type=1326 audit(1759241041.880:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1098" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab0518ec29 code=0x0
[  178.113080][ T8698] bridge_slave_0: invalid flags given to default FDB implementation
[  178.129840][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1103'.
[  178.826595][ T8714] overlayfs: failed to clone upperpath
[  178.877613][ T8716] netlink: 'syz.3.1112': attribute type 1 has an invalid length.
[  179.082708][ T8730] loop2: detected capacity change from 0 to 1024
[  179.107881][ T8730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.182846][ T8730] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1117: inode #65079: comm syz.2.1117: iget: illegal inode #
[  179.191236][ T8730] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1117: error while reading EA inode 65079 err=-117
[  179.213832][ T8743] loop1: detected capacity change from 0 to 512
[  179.251374][ T8743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.273592][ T8743] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.285278][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.326467][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.501821][ T8756] ieee802154 phy0 wpan0: encryption failed: -22
[  180.667390][   T33] audit: type=1326 audit(1759241044.580:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.1.1141" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x0
[  181.059123][   T47] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  181.241420][   T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  181.245249][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.248093][   T47] usb 2-1: Product: syz
[  181.250499][   T47] usb 2-1: Manufacturer: syz
[  181.252428][   T47] usb 2-1: SerialNumber: syz
[  181.260981][   T47] usb 2-1: config 0 descriptor??
[  181.335197][ T8806] overlayfs: failed to clone lowerpath
[  181.514295][ T8818] loop2: detected capacity change from 0 to 2048
[  181.522204][ T8818] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2361, location=2361
[  181.535213][ T8818] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  181.540939][ T8818] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  181.545642][ T8818] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 2016: 0x5c != 0x1b
[  181.552280][ T8818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.712830][ T8830] loop2: detected capacity change from 0 to 256
[  181.726489][ T8830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d)
[  182.349426][   T47] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110
[  182.353634][   T47] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  182.742156][ T8843] fuse: Bad value for 'fd'
[  182.814001][ T8849] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  182.931293][ T8854] binder: 8852:8854 ioctl c0306201 200000000480 returned -14
[  183.772285][   T24] kernel write not supported for file /binder/transactions (pid: 24 comm: kworker/1:0)
[  183.855505][ T5941] usb 2-1: USB disconnect, device number 13
[  185.055592][ T8910] loop1: detected capacity change from 0 to 512
[  185.058899][ T8910] EXT4-fs: Ignoring removed mblk_io_submit option
[  185.071664][ T8910] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  185.089460][ T8910] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  185.097849][ T8910] EXT4-fs (loop1): orphan cleanup on readonly fs
[  185.109073][ T8910] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1198: Invalid block bitmap block 0 in block_group 0
[  185.124468][ T8910] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1198: Invalid block bitmap block 0 in block_group 0
[  185.139807][ T8910] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1198: Invalid block bitmap block 0 in block_group 0
[  185.147535][ T8910] Quota error (device loop1): write_blk: dquota write failed
[  185.153828][ T8902] loop2: detected capacity change from 0 to 40427
[  185.157303][ T8910] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  185.167462][ T8910] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.1198: Failed to acquire dquot type 1
[  185.172082][ T8902] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  185.190704][ T8902] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  185.202782][ T8910] EXT4-fs (loop1): 1 orphan inode deleted
[  185.209247][ T1086] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  185.213557][ T1086] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u10:4: Failed to release dquot type 1
[  185.234353][ T8902] F2FS-fs (loop2): invalid crc value
[  185.270596][ T8910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  185.316539][ T8902] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  185.320855][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.353768][ T8902] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  185.359386][ T8902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  185.495334][ T8929] loop1: detected capacity change from 0 to 128
[  185.522789][ T8929] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  185.528879][ T8929] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.538774][ T8929] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.1206: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19
[  185.674687][ T5953] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  185.918471][ T8942] loop2: detected capacity change from 0 to 1024
[  185.930275][ T8942] EXT4-fs: Ignoring removed bh option
[  186.021227][ T8942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.047870][ T8942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #2: comm syz.2.1204: missing EA_INODE flag
[  186.055350][ T8942] EXT4-fs (loop2): Remounting filesystem read-only
[  186.058428][ T8942] EXT4-fs warning (device loop2): ext4_xattr_block_set:2190: inode #19: comm syz.2.1204: dec ref error=-30
[  186.097390][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.166836][ T8954] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  186.173616][ T8954] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  186.488166][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  186.639896][    T9] usb 2-1: Using ep0 maxpacket: 16
[  186.646017][    T9] usb 2-1: config index 0 descriptor too short (expected 12592, got 72)
[  186.652161][    T9] usb 2-1: config 55 has too many interfaces: 55, using maximum allowed: 32
[  186.658158][    T9] usb 2-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config
[  186.667317][    T9] usb 2-1: config 55 has 0 interfaces, different from the descriptor's value: 55
[  186.681302][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  186.687353][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.691428][    T9] usb 2-1: Product: syz
[  186.693310][    T9] usb 2-1: Manufacturer: syz
[  186.695551][    T9] usb 2-1: SerialNumber: syz
[  186.913044][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.918220][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.664477][ T8979] netlink: 'syz.2.1223': attribute type 27 has an invalid length.
[  189.147613][    T9] usb 2-1: USB disconnect, device number 14
[  189.476200][ T9003] tipc: Enabled bearer <udp:syz2>, priority 10
[  189.597440][ T8996] loop1: detected capacity change from 0 to 32768
[  189.613399][ T8996] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1230 (8996)
[  189.649508][ T8996] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  189.663859][ T8996] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  189.764830][ T8996] BTRFS info (device loop1): enabling ssd optimizations
[  189.774265][ T8996] BTRFS info (device loop1): enabling free space tree
[  189.781198][ T8996] BTRFS info (device loop1): use lzo compression, level 1
[  189.849482][   T33] audit: type=1804 audit(1759241053.760:26): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1230" name="/newroot/390/file0/file1" dev="loop1" ino=260 res=1 errno=0
[  190.308295][ T5953] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  190.595014][   T47] tipc: Node number set to 760734597
[  190.850071][ T9040] team1: left promiscuous mode
[  190.852317][ T9040] bridge1: left promiscuous mode
[  191.155996][ T9044] loop1: detected capacity change from 0 to 4096
[  191.276572][ T9044] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  191.686776][   T33] audit: type=1800 audit(1759241055.600:27): pid=9044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1245" name="file1" dev="loop1" ino=30 res=0 errno=0
[  191.768680][   T33] audit: type=1804 audit(1759241055.680:28): pid=9052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1245" name="/newroot/394/file0/file1" dev="loop1" ino=30 res=1 errno=0
[  191.785836][ T9054] loop2: detected capacity change from 0 to 1024
[  191.926431][ T9054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.031076][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.419246][  T789] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  192.453520][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'.
[  192.571118][  T789] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  192.575562][  T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.589484][  T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.592684][ T9097] loop1: detected capacity change from 0 to 256
[  192.593490][  T789] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  192.601784][ T9097] exfat: Deprecated parameter 'namecase'
[  192.603018][ T9097] exfat: Deprecated parameter 'utf8'
[  192.618391][ T9097] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  192.620238][  T789] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  192.627493][  T789] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  192.631209][  T789] usb 3-1: Manufacturer: syz
[  192.639840][  T789] usb 3-1: config 0 descriptor??
[  192.922948][ T9107] bond0: entered promiscuous mode
[  192.925486][ T9107] bond_slave_0: entered promiscuous mode
[  192.928255][ T9107] bond_slave_1: entered promiscuous mode
[  192.934923][ T9107] batadv_slave_0: entered promiscuous mode
[  192.969654][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  193.053658][  T789] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  193.063123][  T789] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  193.122161][    T9] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  193.125991][    T9] usb 2-1: config 0 has no interface number 1
[  193.128521][    T9] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  193.133559][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  193.142520][    T9] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  193.146364][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  193.150254][    T9] usb 2-1: SerialNumber: syz
[  193.159748][    T9] usb 2-1: config 0 descriptor??
[  193.166461][    T9] usb 2-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  193.173039][    T9] usb 2-1: No valid video chain found.
[  193.375124][    T9] usb 2-1: USB disconnect, device number 15
[  193.892941][    T9] usb 3-1: USB disconnect, device number 9
[  194.175667][ T9123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1278'.
[  194.181218][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'.
[  194.184962][ T9123] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  194.198754][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.204330][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.742249][ T9119] loop1: detected capacity change from 0 to 131072
[  194.802421][ T9119] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.807587][ T9119] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  194.843985][ T9119] F2FS-fs (loop1): recover xattr in inode (7), error(0)
[  194.847011][ T9119] F2FS-fs (loop1): set inode (7) has corrupted xattr
[  194.863348][ T9119] F2FS-fs (loop1): lookup inode (7) has corrupted xattr
[  195.406606][ T9160] loop2: detected capacity change from 0 to 2048
[  195.511311][ T9160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.674762][   T33] audit: type=1804 audit(1759241059.580:29): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1301" name="/newroot/412/file1" dev="fuse" ino=1 res=1 errno=0
[  196.198496][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.206683][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  196.389594][    T9] usb 2-1: Using ep0 maxpacket: 32
[  196.396724][    T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  196.401161][    T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  196.405108][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  196.409704][    T9] usb 2-1: config 1 has no interface number 0
[  196.412371][    T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  196.417059][    T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  196.429086][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  196.433107][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.452078][    T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  196.599357][ T5941] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  196.648497][    T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  196.759723][ T5941] usb 3-1: Using ep0 maxpacket: 16
[  196.769758][ T5941] usb 3-1: config 0 has an invalid interface number: 74 but max is 0
[  196.773471][ T5941] usb 3-1: config 0 has no interface number 0
[  196.776038][ T5941] usb 3-1: config 0 interface 74 has no altsetting 0
[  196.783443][ T5941] usb 3-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36
[  196.787856][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.791158][ T5941] usb 3-1: Product: syz
[  196.793433][ T5941] usb 3-1: Manufacturer: syz
[  196.795677][ T5941] usb 3-1: SerialNumber: syz
[  196.806762][ T5941] usb 3-1: config 0 descriptor??
[  197.025790][ T5941] belkin_sa 3-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  197.032500][ T5941] usb 3-1: bcdDevice: 6636, bfc: 0
[  197.038707][ T5941] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  197.047843][ T5941] usb 3-1: USB disconnect, device number 10
[  197.056285][ T5941] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  197.062752][ T5941] belkin_sa 3-1:0.74: device disconnected
[  197.069560][  T789] usb 2-1: USB disconnect, device number 16
[  197.086870][  T789] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  197.713482][ T9228] overlayfs: failed to resolve './file0': -2
[  198.103090][ T9251] loop2: detected capacity change from 0 to 16
[  198.120650][ T9251] erofs (device loop2): mounted with root inode @ nid 36.
[  198.742797][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'.
[  198.986461][ T9281] batadv1: entered promiscuous mode
[  198.993856][ T9281] batadv1: entered allmulticast mode
[  199.474045][ T9318] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1366' resets device
[  199.630953][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'.
[  199.641655][ T9331] loop1: detected capacity change from 0 to 2048
[  199.645004][ T9331] EXT4-fs: Ignoring removed mblk_io_submit option
[  199.656288][ T9331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.695100][ T9331] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1372: bg 0: block 234: padding at end of block bitmap is not set
[  199.717788][ T9331] EXT4-fs (loop1): Remounting filesystem read-only
[  199.776995][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.847241][ T9342] loop1: detected capacity change from 0 to 1024
[  199.872723][ T9342] EXT4-fs: Ignoring removed nobh option
[  199.875387][ T9342] EXT4-fs: Ignoring removed bh option
[  199.921818][ T9342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.987448][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.079774][ T9356] loop1: detected capacity change from 0 to 2048
[  200.092968][ T9356] NILFS (loop1): invalid segment: Magic number mismatch
[  200.096223][ T9356] NILFS (loop1): trying rollback from an earlier position
[  200.107110][ T9356] NILFS (loop1): recovery complete
[  200.113640][ T9359] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.169114][ T9219] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  200.324939][ T9219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.333720][ T9219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.338030][ T9219] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  200.359099][ T9219] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  200.366537][ T9219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.380859][ T9219] usb 3-1: config 0 descriptor??
[  200.808867][ T9219] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  201.017647][ T9219] usb 3-1: USB disconnect, device number 11
[  201.117336][ T9387] loop1: detected capacity change from 0 to 512
[  201.819674][ T9408] loop1: detected capacity change from 0 to 32768
[  201.823715][ T9408] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1405 (9408)
[  201.844136][ T9408] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  201.848497][ T9408] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  201.921875][ T9408] BTRFS info (device loop1): enabling ssd optimizations
[  201.924817][ T9408] BTRFS info (device loop1): enabling free space tree
[  201.927912][ T9408] BTRFS info (device loop1): doing ref verification
[  202.051932][ T5953] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  202.103239][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  202.303669][ T9456] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  202.309816][ T9454] loop2: detected capacity change from 0 to 2048
[  202.382044][ T5824] Alternate GPT is invalid, using primary GPT.
[  202.385322][ T5824]  loop2: p1 p2 p3
[  202.433559][ T9454] Alternate GPT is invalid, using primary GPT.
[  202.436457][ T9454]  loop2: p1 p2 p3
[  202.511764][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  202.515488][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  202.525075][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  202.594199][ T9461] loop1: detected capacity change from 0 to 764
[  202.622200][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  202.631986][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  202.640234][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  202.754687][ T5902] udevd[5902]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  202.760749][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  203.787382][ T9487] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  203.796759][ T9487] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  203.827852][ T9487] overlayfs: conflicting lowerdir path
[  203.890434][ T9489] fuse: Bad value for 'fd'
[  204.253588][ T9500] netlink: 'syz.1.1441': attribute type 56 has an invalid length.
[  204.858155][ T9513] kAFS: unable to lookup cell 'syz169@=R'
[  204.939334][ T9519] netlink: 'syz.1.1449': attribute type 6 has an invalid length.
[  205.311822][   T47] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  205.391612][ T9541] loop2: detected capacity change from 0 to 1764
[  205.409258][ T9541] iso9660: Corrupted directory entry in block 2 of inode 1920
[  205.489194][   T47] usb 2-1: Using ep0 maxpacket: 8
[  205.493276][   T47] usb 2-1: config 0 has an invalid interface number: 242 but max is 3
[  205.496110][   T47] usb 2-1: config 0 has an invalid interface number: 188 but max is 3
[  205.499680][   T47] usb 2-1: config 0 has an invalid interface number: 184 but max is 3
[  205.503465][   T47] usb 2-1: config 0 has an invalid interface number: 146 but max is 3
[  205.507185][   T47] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4
[  205.511209][   T47] usb 2-1: config 0 has no interface number 1
[  205.517920][   T47] usb 2-1: config 0 has no interface number 2
[  205.522044][   T47] usb 2-1: config 0 has no interface number 3
[  205.524099][   T47] usb 2-1: config 0 has no interface number 4
[  205.526674][   T47] usb 2-1: too many endpoints for config 0 interface 184 altsetting 222: 150, using maximum allowed: 30
[  205.532018][   T47] usb 2-1: config 0 interface 184 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 150
[  205.537775][   T47] usb 2-1: config 0 interface 0 has no altsetting 0
[  205.540960][   T47] usb 2-1: config 0 interface 242 has no altsetting 0
[  205.544162][   T47] usb 2-1: config 0 interface 188 has no altsetting 0
[  205.546856][   T47] usb 2-1: config 0 interface 184 has no altsetting 0
[  205.550348][   T47] usb 2-1: config 0 interface 146 has no altsetting 0
[  205.556151][   T47] usb 2-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=9d.2e
[  205.560671][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.566859][   T47] usb 2-1: config 0 descriptor??
[  205.585532][ T9547] loop2: detected capacity change from 0 to 128
[  205.777852][   T47] usb 2-1: string descriptor 0 read error: -71
[  205.791476][   T47] usb 2-1: unknown number of interfaces: 5
[  205.800573][   T47] usb 2-1: USB disconnect, device number 17
[  206.163886][ T9567] netlink: 'syz.3.1471': attribute type 1 has an invalid length.
[  206.198628][ T9567] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.239866][ T9567] bond1: (slave geneve2): making interface the new active one
[  206.244872][ T9567] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  206.381395][ T9578] loop1: detected capacity change from 0 to 128
[  206.406807][ T9578] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  206.415826][ T9578] hpfs: filesystem error: improperly stopped
[  206.418401][ T9578] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  206.422473][ T9578] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  206.426569][ T9578] hpfs: You really don't want any checks? You are crazy...
[  206.431369][ T9578] hpfs: hpfs_map_sector(): read error
[  206.433723][ T9578] hpfs: code page support is disabled
[  206.436998][ T9578] hpfs: hpfs_map_4sectors(): unaligned read
[  206.441416][ T9578] hpfs: hpfs_map_4sectors(): unaligned read
[  206.444541][ T9578] hpfs: filesystem error: unable to find root dir
[  206.522902][ T9584] befs: (nbd1): No write support. Marking filesystem read-only
[  206.529892][ T9584] befs: (nbd1): unable to read superblock
[  206.819224][  T789] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  206.979442][  T789] usb 2-1: Using ep0 maxpacket: 8
[  206.992225][  T789] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.997303][  T789] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.004217][  T789] usb 2-1: config 0 interface 0 has no altsetting 0
[  207.014280][  T789] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  207.026125][  T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.031754][ T9608] loop2: detected capacity change from 0 to 16
[  207.046595][  T789] usb 2-1: config 0 descriptor??
[  207.052649][ T9608] erofs (device loop2): mounted with root inode @ nid 36.
[  207.280234][  T789] usbhid 2-1:0.0: can't add hid device: -71
[  207.282814][  T789] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  207.295517][  T789] usb 2-1: USB disconnect, device number 18
[  207.945230][ T9614] loop1: detected capacity change from 0 to 2048
[  207.986637][ T9614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.019727][ T9614] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.1491: inline data xattr refers to an external xattr inode
[  208.045304][ T9614] EXT4-fs (loop1): Remounting filesystem read-only
[  208.055835][ T9614] EXT4-fs (loop1): shut down requested (0)
[  208.087605][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.092490][ T9625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1496'.
[  208.204364][ T9631] netlink: 'syz.1.1498': attribute type 4 has an invalid length.
[  208.308504][ T9637] netlink: 'syz.2.1501': attribute type 2 has an invalid length.
[  208.314341][ T9637] netlink: 'syz.2.1501': attribute type 1 has an invalid length.
[  208.359390][ T9641] netlink: 'syz.2.1503': attribute type 24 has an invalid length.
[  208.365852][ T9641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1503'.
[  208.514257][ T9650] loop1: detected capacity change from 0 to 512
[  208.561495][ T9650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.566580][ T9650] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  208.638199][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.777758][ T9647] loop2: detected capacity change from 0 to 32768
[  208.845722][ T9647] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  208.868902][ T9647] XFS (loop2): Ending clean mount
[  209.243214][ T5947] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.292368][  T789] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  209.449314][  T789] usb 2-1: Using ep0 maxpacket: 8
[  209.458289][  T789] usb 2-1: unable to get BOS descriptor or descriptor too short
[  209.467770][  T789] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 65535, setting to 1024
[  209.483470][  T789] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024
[  209.493349][  T789] usb 2-1: config 8 interface 0 has no altsetting 0
[  209.498780][  T789] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  209.503110][  T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.506702][  T789] usb 2-1: Product: syz
[  209.508744][  T789] usb 2-1: Manufacturer: syz
[  209.512873][  T789] usb 2-1: SerialNumber: syz
[  209.521989][ T9660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  209.738753][  T789] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  209.744368][  T789] usb 2-1: selecting invalid altsetting 0
[  209.796257][  T789] usb 2-1: USB disconnect, device number 19
[  209.879272][   T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  210.413535][   T47] usb 3-1: Using ep0 maxpacket: 8
[  210.436232][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.444852][   T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  210.449855][   T47] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  210.453419][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.459942][   T47] usb 3-1: config 0 descriptor??
[  210.893747][   T47] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x4
[  210.896698][   T47] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0
[  210.900256][   T47] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0
[  210.905935][   T47] hid-rmi 0003:06CB:81A7.0007: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0
[  211.075427][  T789] usb 3-1: USB disconnect, device number 12
[  211.108698][ T9714] hugetlbfs: Bad value 'x' for mount option 'nr_inodes'
[  211.108698][ T9714] 
[  213.195103][ T9778] netlink: 'syz.2.1555': attribute type 2 has an invalid length.
[  213.392156][ T9770] loop1: detected capacity change from 0 to 32768
[  214.843515][ T9802] loop1: detected capacity change from 0 to 64
[  216.095254][ T9815] loop2: detected capacity change from 0 to 32768
[  216.121500][ T9815] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  216.125477][ T9815] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.148349][ T9815] XFS (loop2): Ending clean mount
[  216.158799][ T9815] XFS (loop2): Quotacheck needed: Please wait.
[  216.206527][ T9815] XFS (loop2): Quotacheck: Done.
[  216.242689][ T5947] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.611842][ T9862] evm: overlay not supported
[  218.391586][ T9877] loop2: detected capacity change from 0 to 8192
[  218.828655][ T9892] syz_tun: entered allmulticast mode
[  218.842393][ T9891] syz_tun: left allmulticast mode
[  218.919333][   T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  219.089174][   T47] usb 3-1: Using ep0 maxpacket: 32
[  219.097740][   T47] usb 3-1: config 0 has an invalid interface number: 111 but max is 1
[  219.101145][   T47] usb 3-1: config 0 has no interface number 1
[  219.103547][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  219.111569][   T47] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  219.115547][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.118894][   T47] usb 3-1: Product: syz
[  219.121619][   T47] usb 3-1: Manufacturer: syz
[  219.123777][   T47] usb 3-1: SerialNumber: syz
[  219.128304][   T47] usb 3-1: config 0 descriptor??
[  219.130848][ T5829] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  219.309106][ T5829] usb 2-1: Using ep0 maxpacket: 8
[  219.315130][ T5829] usb 2-1: config 0 has no interfaces?
[  219.320216][ T5829] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  219.324085][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.326850][ T5829] usb 2-1: Product: syz
[  219.328386][ T5829] usb 2-1: Manufacturer: syz
[  219.332528][ T5829] usb 2-1: SerialNumber: syz
[  219.336549][ T5829] usb 2-1: config 0 descriptor??
[  219.341839][   T47] snd-usb-6fire 3-1:0.111: unable to receive device firmware state.
[  219.351105][   T47] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  219.359431][   T47] usb 3-1: USB disconnect, device number 13
[  219.553214][   T47] usb 2-1: USB disconnect, device number 20
[  219.571583][ T5956] Bluetooth: hci2: unknown advertising packet type: 0x82
[  219.571639][ T5956] Bluetooth: hci2: Malformed LE Event: 0x02
[  219.905324][ T9908] loop2: detected capacity change from 0 to 8
[  219.913106][ T9908] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  219.934794][ T9908] cramfs: Error -3 while decompressing!
[  219.938617][ T9908] cramfs: ffffffff99688708(26)->ffff888112de2000(4096)
[  219.943806][ T9908] cramfs: Error -3 while decompressing!
[  219.946019][ T9908] cramfs: ffffffff99688722(26)->ffff88811a6e2000(4096)
[  219.950360][ T9908] cramfs: Error -3 while decompressing!
[  219.952599][ T9908] cramfs: ffffffff9968873c(16)->ffff88811a6e3000(4096)
[  219.955580][ T9908] cramfs: Error -3 while decompressing!
[  219.958119][ T9908] cramfs: ffffffff99688708(26)->ffff888112de2000(4096)
[  220.717745][ T9918] syzkaller0: entered promiscuous mode
[  220.721736][ T9918] syzkaller0: entered allmulticast mode
[  223.094385][ T9942] loop2: detected capacity change from 0 to 128
[  223.098033][ T9942] hpfs: Bad value for 'case'
[  223.336171][ T9957] netlink: 'syz.3.1629': attribute type 21 has an invalid length.
[  223.341645][ T9957] netlink: 'syz.3.1629': attribute type 6 has an invalid length.
[  223.345068][ T9957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1629'.
[  226.066678][T10037] comedi comedi0: comedi_bond: 3:2 3:3  attached, 16 channels from 2 devices
[  226.331318][T10038] loop2: detected capacity change from 0 to 256
[  227.340865][T10050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1668'.
[  227.975253][T10065] loop2: detected capacity change from 0 to 256
[  228.084476][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1676'.
[  228.281784][T10084] overlayfs: upper fs does not support file handles, falling back to index=off.
[  228.356931][T10093] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1687'.
[  228.412995][T10097] loop2: detected capacity change from 0 to 2048
[  228.435054][T10097] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.1688: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  228.461086][T10097] EXT4-fs (loop2): get root inode failed
[  228.463948][T10097] EXT4-fs (loop2): mount failed
[  229.201345][T10127] loop1: detected capacity change from 0 to 512
[  229.205710][T10127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  229.218466][T10127] EXT4-fs (loop1): 1 truncate cleaned up
[  229.222660][T10127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.301691][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.711469][   T33] audit: type=1326 audit(1759241093.630:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  229.739147][   T33] audit: type=1326 audit(1759241093.630:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  229.753450][   T33] audit: type=1326 audit(1759241093.650:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  229.773942][   T33] audit: type=1326 audit(1759241093.650:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  229.797900][   T33] audit: type=1326 audit(1759241093.650:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  229.809596][   T33] audit: type=1326 audit(1759241093.650:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  229.819455][   T33] audit: type=1326 audit(1759241093.650:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  229.828366][   T33] audit: type=1326 audit(1759241093.650:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  229.838140][   T33] audit: type=1326 audit(1759241093.650:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1700" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  230.007047][T10147] loop1: detected capacity change from 0 to 164
[  230.064383][T10147] iso9660: Corrupted directory entry in block 2 of inode 1792
[  230.302898][T10165] blkio.reset_stats is deprecated
[  230.374463][T10171] loop1: detected capacity change from 0 to 64
[  230.696433][T10196] use of bytesused == 0 is deprecated and will be removed in the future,
[  230.701097][T10196] use the actual size instead.
[  230.749447][   T33] audit: type=1326 audit(1759241094.660:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.1.1732" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  230.905672][T10207] loop2: detected capacity change from 0 to 256
[  230.972281][T10207] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.810973][T10250] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1751'.
[  233.416120][T10257] loop2: detected capacity change from 0 to 4096
[  233.741499][T10269] loop2: detected capacity change from 0 to 64
[  236.507924][T10331] loop1: detected capacity change from 0 to 2048
[  236.523720][T10331] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  236.528915][ T5902] udevd[5902]: incorrect nilfs2 checksum on /dev/loop1
[  236.546209][T10332] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.629432][   T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  236.705143][T10338] loop1: detected capacity change from 0 to 4096
[  236.725568][T10341] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.763149][T10337] syz.1.1779: attempt to access beyond end of device
[  236.763149][T10337] loop1: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096
[  236.772064][T10337] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  236.789125][   T47] usb 3-1: Using ep0 maxpacket: 32
[  236.800623][   T47] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  236.805002][   T47] usb 3-1: config 0 has no interface number 0
[  236.807826][   T47] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  236.812719][   T47] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  236.820038][   T47] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  236.831312][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.840788][   T47] usb 3-1: Product: syz
[  236.845073][   T47] usb 3-1: Manufacturer: syz
[  236.850000][   T47] usb 3-1: SerialNumber: syz
[  236.863405][   T47] usb 3-1: config 0 descriptor??
[  236.880937][T10327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  236.887871][T10327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  236.959237][   T47] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 86:c9:4a:b6:c4:fc
[  237.115022][   T47] usb 3-1: USB disconnect, device number 14
[  237.118856][   T47] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  237.328844][T10354] loop1: detected capacity change from 0 to 32768
[  237.336512][T10354] jfs_mount: Failed to read AGGREGATE_I
[  237.352181][T10354] Mount JFS Failure: -5
[  237.357718][T10354] jfs_mount failed w/return code = -5
[  237.628338][T10370] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  237.644803][T10370] cramfs: wrong magic
[  237.762183][ T6034] block nbd2: Receive control failed (result -32)
[  237.770447][T10375] block nbd2: shutting down sockets
[  237.863497][T10379] loop2: detected capacity change from 0 to 4096
[  237.867375][T10379] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  237.885375][T10379] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  237.888597][T10379] ntfs3(loop2): ino=1a, mi_enum_attr
[  237.891537][T10379] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  237.907591][T10379] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  239.237002][T10408] loop1: detected capacity change from 0 to 4096
[  239.334843][T10408] ntfs3(loop1): ino=19, mi_enum_attr
[  239.336777][T10408] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  240.148872][T10424] loop2: detected capacity change from 0 to 164
[  240.164578][T10424] Unable to read rock-ridge attributes
[  240.188849][T10424] Unable to read rock-ridge attributes
[  240.202047][T10424] iso9660: Corrupted directory entry in block 4 of inode 1792
[  240.801819][T10434] loop1: detected capacity change from 0 to 256
[  240.843051][T10434] FAT-fs (loop1): Directory bread(block 64) failed
[  240.846401][T10434] FAT-fs (loop1): Directory bread(block 65) failed
[  240.873470][T10434] FAT-fs (loop1): Directory bread(block 66) failed
[  240.876652][T10434] FAT-fs (loop1): Directory bread(block 67) failed
[  240.906757][T10434] FAT-fs (loop1): Directory bread(block 68) failed
[  240.912113][T10434] FAT-fs (loop1): Directory bread(block 69) failed
[  240.916561][T10434] FAT-fs (loop1): Directory bread(block 70) failed
[  240.921190][T10434] FAT-fs (loop1): Directory bread(block 71) failed
[  240.924200][T10434] FAT-fs (loop1): Directory bread(block 72) failed
[  240.927244][T10434] FAT-fs (loop1): Directory bread(block 73) failed
[  241.298827][   T33] kauditd_printk_skb: 32 callbacks suppressed
[  241.298840][   T33] audit: type=1326 audit(1759241105.210:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.3.1815" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab0518ec29 code=0x0
[  242.499842][T10461] loop2: detected capacity change from 0 to 32768
[  242.691974][T10484] loop2: detected capacity change from 0 to 64
[  242.917884][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'.
[  243.021911][T10497] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  243.240526][T10504] netlink: 'syz.2.1842': attribute type 21 has an invalid length.
[  243.244479][T10504] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1842'.
[  243.306938][T10506] loop2: detected capacity change from 0 to 512
[  243.334746][T10506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.340577][T10506] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.369367][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.715451][T10519] loop2: detected capacity change from 0 to 65
[  243.727130][T10519] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  243.794235][T10521] loop2: detected capacity change from 0 to 1024
[  243.821272][T10521] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  243.845474][T10521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  243.857647][T10521] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  243.863966][T10521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  243.899697][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.125276][T10530] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.149396][T10539] netlink: 'syz.3.1852': attribute type 16 has an invalid length.
[  244.170114][T10539] netlink: 'syz.3.1852': attribute type 17 has an invalid length.
[  244.187233][T10530] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.316045][T10543] loop1: detected capacity change from 0 to 8
[  244.574438][T10539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.708671][T10551] loop2: detected capacity change from 0 to 2048
[  244.711848][   T33] audit: type=1800 audit(1759241108.620:73): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1860" name="file1" dev="tmpfs" ino=3112 res=0 errno=0
[  244.721875][T10551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  244.736831][T10551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.419588][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'.
[  245.665968][T10569] loop1: detected capacity change from 0 to 8
[  245.685128][T10569] SQUASHFS error: zlib decompression failed, data probably corrupt
[  245.697079][T10569] SQUASHFS error: Failed to read block 0x9b: -5
[  245.702477][T10569] SQUASHFS error: Unable to read metadata cache entry [99]
[  245.705740][T10569] SQUASHFS error: Unable to read inode 0x127
[  246.489120][   T47] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  246.661513][   T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.671182][   T47] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  246.676177][   T47] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  246.690605][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.828112][   T47] usb 3-1: config 0 descriptor??
[  246.833294][   T47] qmi_wwan 3-1:0.0: bogus CDC Union: master=3, slave=0
[  246.838386][   T47] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22
[  247.157743][   T47] usb 3-1: USB disconnect, device number 15
[  247.183453][T10594] loop1: detected capacity change from 0 to 512
[  247.190077][T10594] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  247.201250][T10594] EXT4-fs (loop1): 1 truncate cleaned up
[  247.207822][T10594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.235721][T10594] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.1877: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  247.279665][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.602290][ T5829] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  247.643417][T10610] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1881'.
[  247.647450][T10610] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  247.651896][T10610] openvswitch: netlink: Message has 8454 unknown bytes.
[  247.735708][T10614] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1883'.
[  247.750641][ T5829] usb 2-1: Using ep0 maxpacket: 16
[  247.760547][ T5829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.764051][ T5829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  247.764259][T10616] loop2: detected capacity change from 0 to 2048
[  247.778334][ T5829] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  247.786374][T10616] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  247.792870][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.796040][ T5829] usb 2-1: Product: syz
[  247.797863][ T5829] usb 2-1: Manufacturer: syz
[  247.801872][T10616] UDF-fs: Scanning with blocksize 512 failed
[  247.805275][ T5829] usb 2-1: SerialNumber: syz
[  247.823730][T10616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  248.118609][T10624] fuse: Bad value for 'fd'
[  248.417282][ T5829] usb 2-1: 0:2 : does not exist
[  248.424721][ T5829] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  248.452484][ T5829] usb 2-1: USB disconnect, device number 21
[  248.500442][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'.
[  248.504410][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'.
[  248.515417][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.518152][T10628] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  248.983962][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1900'.
[  249.252901][T10665] loop2: detected capacity change from 0 to 4096
[  249.257141][T10665] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  249.269948][T10665] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  249.273210][T10665] ntfs3(loop2): Failed to load $UpCase (-22).
[  249.869216][ T5941] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  250.020621][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.027875][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.032386][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  250.037285][ T5941] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  250.040940][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.046647][ T5941] usb 2-1: config 0 descriptor??
[  250.229995][T10691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.311699][T10695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1920'.
[  250.493054][ T5941] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  250.678699][T10709] No source specified
[  250.747180][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'.
[  253.141622][ T5941] usb 2-1: USB disconnect, device number 22
[  253.157557][T10772] loop1: detected capacity change from 0 to 128
[  253.167153][T10772] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  254.486009][  T789] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  254.495529][T10798] loop2: detected capacity change from 0 to 512
[  254.521168][T10798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.526045][T10798] ext4 filesystem being mounted at /616/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  254.558847][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.649124][  T789] usb 2-1: Using ep0 maxpacket: 16
[  254.654568][  T789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.658917][  T789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.669316][  T789] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  254.673882][  T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.681555][  T789] usb 2-1: Product: syz
[  254.685868][  T789] usb 2-1: Manufacturer: syz
[  254.690573][  T789] usb 2-1: SerialNumber: syz
[  254.878843][T10811] loop2: detected capacity change from 0 to 2048
[  254.897090][T10811] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.906069][  T789] usb 2-1: 0:2 : does not exist
[  254.916690][  T789] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  254.938341][T10811] overlayfs: upper fs needs to support d_type.
[  254.946717][  T789] usb 2-1: USB disconnect, device number 23
[  254.956462][T10811] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  254.963237][T10811] overlayfs: failed to set xattr on upper
[  254.966557][T10811] overlayfs: ...falling back to redirect_dir=nofollow.
[  254.972043][T10811] overlayfs: ...falling back to index=off.
[  254.974627][T10811] overlayfs: ...falling back to uuid=null.
[  254.984816][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.059032][ T5947] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  255.065466][ T5947] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  255.660753][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.663688][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  256.073321][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.083709][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.091963][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  256.096230][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  256.100064][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  256.116621][T10830] loop1: detected capacity change from 0 to 1764
[  256.234128][T10830] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  256.780064][   T47] IPVS: starting estimator thread 0...
[  256.870520][ T5716] bridge_slave_1: left allmulticast mode
[  256.874893][ T5716] bridge_slave_1: left promiscuous mode
[  256.877673][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.893379][ T5716] bridge_slave_0: left allmulticast mode
[  256.897125][T10843] [U] v3f"S/4:XTzWtlW=
[  256.900187][T10839] IPVS: using max 83 ests per chain, 199200 per kthread
[  256.906079][ T5716] bridge_slave_0: left promiscuous mode
[  256.908643][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.911799][T10843] [U] J"e:"
[  257.701922][   T24] IPVS: starting estimator thread 0...
[  257.789513][T10863] IPVS: using max 82 ests per chain, 196800 per kthread
[  257.967123][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.973008][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.977748][ T5716] bond0 (unregistering): Released all slaves
[  257.991333][ T5716] bond1 (unregistering): Released all slaves
[  258.126172][T10828] chnl_net:caif_netlink_parms(): no params data found
[  258.191220][ T5956] Bluetooth: hci0: command tx timeout
[  258.226849][ T5716] tipc: Disabling bearer <udp:syz2>
[  258.234049][ T5716] tipc: Left network mode
[  258.348074][T10828] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.354763][T10828] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.361772][T10828] bridge_slave_0: entered allmulticast mode
[  258.366921][T10828] bridge_slave_0: entered promiscuous mode
[  258.378267][T10828] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.384410][T10828] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.387159][T10828] bridge_slave_1: entered allmulticast mode
[  258.392483][T10828] bridge_slave_1: entered promiscuous mode
[  258.459848][T10828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.464858][T10828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.511195][T10828] team0: Port device team_slave_0 added
[  258.515047][T10828] team0: Port device team_slave_1 added
[  258.571910][T10828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.578264][T10828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.604897][T10828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.618682][T10828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.625219][T10828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.645629][T10828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.752503][T10828] hsr_slave_0: entered promiscuous mode
[  258.759906][T10828] hsr_slave_1: entered promiscuous mode
[  258.766107][T10828] debugfs: 'hsr0' already exists in 'hsr'
[  258.775546][T10828] Cannot create hsr debugfs directory
[  258.908495][ T5716] hsr_slave_0: left promiscuous mode
[  258.912849][ T5716] hsr_slave_1: left promiscuous mode
[  258.916085][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.921235][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.392535][ T5716] team0 (unregistering): Port device team_slave_1 removed
[  259.432191][ T5716] team0 (unregistering): Port device team_slave_0 removed
[  259.887319][T10894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.938264][T10898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.085758][T10898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.193108][T10898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.270102][ T5956] Bluetooth: hci0: command tx timeout
[  260.313728][T10898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.337427][T10828] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  260.355997][T10828] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  260.379445][T10828] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  260.390167][T10828] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  260.439623][ T5716] IPVS: stop unused estimator thread 0...
[  260.505944][ T5939] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.520193][ T5939] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.542033][ T5939] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.565306][T10828] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.571886][ T5939] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.596902][T10828] 8021q: adding VLAN 0 to HW filter on device team0
[  260.630589][T10934] netlink: 'syz.3.2004': attribute type 1 has an invalid length.
[  260.641272][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.643987][ T7073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.648257][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.651467][ T7073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.816268][T10950] loop1: detected capacity change from 0 to 8
[  260.877464][T10950] SQUASHFS error: zlib decompression failed, data probably corrupt
[  260.890562][T10950] SQUASHFS error: Failed to read block 0x9b: -5
[  260.893209][T10950] SQUASHFS error: Unable to read metadata cache entry [99]
[  260.896300][T10950] SQUASHFS error: Unable to read inode 0x127
[  260.937486][T10828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.573053][T10965] loop1: detected capacity change from 0 to 2048
[  261.591618][T10965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.711577][T10828] veth0_vlan: entered promiscuous mode
[  261.716470][T10828] veth1_vlan: entered promiscuous mode
[  261.747708][T10828] veth0_macvtap: entered promiscuous mode
[  261.758192][T10828] veth1_macvtap: entered promiscuous mode
[  261.796444][T10828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.813945][T10828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.827510][ T5939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.840379][ T5939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.843511][ T5939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.846592][ T5939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.917557][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.924020][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.942938][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.946172][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.358146][ T5956] Bluetooth: hci0: command tx timeout
[  262.876518][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  262.887066][T10998] loop1: detected capacity change from 0 to 4096
[  262.892162][T10998] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  262.906995][T10998] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  262.911358][T10998] ntfs3(loop1): ino=19, mi_enum_attr
[  262.928015][T10998] ntfs3(loop1): failed to convert "c46c" to default
[  262.935231][T10998] ntfs3(loop1): ino=20, mi_enum_attr
[  263.062486][   T24] usb 5-1: config 0 has no interfaces?
[  263.064676][   T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  263.068122][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.079656][   T24] usb 5-1: config 0 descriptor??
[  263.202576][T11000] loop1: detected capacity change from 0 to 40427
[  263.213091][T11000] F2FS-fs (loop1): invalid crc value
[  263.274684][T11000] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  263.283034][T11000] F2FS-fs (loop1): Start checkpoint disabled!
[  263.292973][   T10] usb 5-1: USB disconnect, device number 2
[  263.311804][T11000] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  263.355925][   T28] kworker/u9:1: attempt to access beyond end of device
[  263.355925][   T28] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.365482][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  263.365502][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.365511][   T28] Workqueue: writeback wb_workfn (flush-7:1)
[  263.365533][   T28] Call Trace:
[  263.365538][   T28]  <TASK>
[  263.365545][   T28]  dump_stack_lvl+0x189/0x250
[  263.365563][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.365576][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  263.365586][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  263.365600][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.365620][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  263.365640][   T28]  f2fs_write_end_io+0x886/0xb60
[  263.365670][   T28]  __submit_merged_bio+0x27a/0x6a0
[  263.365690][   T28]  __submit_merged_write_cond+0x255/0x530
[  263.365714][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  263.365758][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  263.365784][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  263.365829][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  263.365862][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  263.365876][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  263.365893][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  263.365918][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  263.365933][   T28]  do_writepages+0x32e/0x550
[  263.365955][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  263.365968][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  263.365992][   T28]  __writeback_single_inode+0x145/0xff0
[  263.366007][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  263.366026][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  263.366066][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  263.366119][   T28]  ? rcu_is_watching+0x15/0xb0
[  263.366141][   T28]  wb_writeback+0x43b/0xaf0
[  263.366165][   T28]  ? queue_io+0x331/0x590
[  263.366183][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  263.366206][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.366222][   T28]  wb_workfn+0x409/0xef0
[  263.366250][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  263.366269][   T28]  ? __lock_acquire+0xab9/0xd20
[  263.366289][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  263.366335][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.366346][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  263.366356][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  263.366370][   T28]  process_scheduled_works+0xae1/0x17b0
[  263.366409][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  263.366437][   T28]  worker_thread+0x8a0/0xda0
[  263.366474][   T28]  kthread+0x711/0x8a0
[  263.366492][   T28]  ? __pfx_worker_thread+0x10/0x10
[  263.366504][   T28]  ? __pfx_kthread+0x10/0x10
[  263.366521][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.366532][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.366543][   T28]  ? __pfx_kthread+0x10/0x10
[  263.366560][   T28]  ret_from_fork+0x439/0x7d0
[  263.366575][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  263.366594][   T28]  ? __switch_to_asm+0x39/0x70
[  263.366607][   T28]  ? __switch_to_asm+0x33/0x70
[  263.366620][   T28]  ? __pfx_kthread+0x10/0x10
[  263.366636][   T28]  ret_from_fork_asm+0x1a/0x30
[  263.366665][   T28]  </TASK>
[  263.366671][   T28] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  264.135089][T11021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  264.138904][T11021] IPv6: NLM_F_CREATE should be set when creating new route
[  264.437764][ T5956] Bluetooth: hci0: command tx timeout
[  264.703317][T11031] loop1: detected capacity change from 0 to 40427
[  264.712395][T11031] F2FS-fs: heap/no_heap options were deprecated
[  264.734699][T11031] F2FS-fs (loop1): build fault injection rate: 23
[  264.737492][T11031] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  264.751932][T11031] F2FS-fs (loop1): invalid crc value
[  264.759548][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  264.768039][T11031] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  264.833627][T11031] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  264.838595][T11031] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  264.848847][T11031] F2FS-fs (loop1): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  264.920369][   T24] usb 5-1: Using ep0 maxpacket: 16
[  265.257525][   T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  265.284843][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.290075][   T24] usb 5-1: too many endpoints for config 1 interface 1 altsetting 48: 49, using maximum allowed: 30
[  265.294589][   T24] usb 5-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49
[  265.300079][   T24] usb 5-1: config 1 interface 1 has no altsetting 0
[  265.305190][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.309177][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.312589][   T24] usb 5-1: Product: syz
[  265.314430][   T24] usb 5-1: Manufacturer: syz
[  265.316411][   T24] usb 5-1: SerialNumber: syz
[  265.327904][   T24] usb 5-1: selecting invalid altsetting 1
[  265.330953][   T24] usb 5-1: selecting invalid altsetting 0
[  265.333453][   T24] usb 5-1: selecting invalid altsetting 0
[  265.336036][   T24] cdc_ncm 5-1:1.0: bind() failure
[  265.532772][   T24] usb 5-1: selecting invalid altsetting 0
[  265.539975][   T24] usbtest 5-1:1.1: probe with driver usbtest failed with error -22
[  265.555880][   T24] usb 5-1: USB disconnect, device number 3
[  266.845553][T11121] 9pnet_fd: Insufficient options for proto=fd
[  267.081585][ T5939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.181593][ T5939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.265575][ T5939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.382694][ T5939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.521714][ T5213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  267.527846][ T5213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  267.536464][ T5213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  267.548267][ T5213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  267.556170][ T5213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  267.658766][ T5939] bridge_slave_1: left allmulticast mode
[  267.661859][ T5939] bridge_slave_1: left promiscuous mode
[  267.666589][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.701047][ T5939] bridge_slave_0: left allmulticast mode
[  267.702995][ T5939] bridge_slave_0: left promiscuous mode
[  267.705091][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.730754][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2089'.
[  268.182451][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.188411][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.194136][ T5939] bond0 (unregistering): Released all slaves
[  268.205594][T11138] netlink: 'syz.1.2088': attribute type 1 has an invalid length.
[  268.841892][ T5939] hsr_slave_0: left promiscuous mode
[  268.931410][T11170] loop1: detected capacity change from 0 to 1024
[  268.995666][T11170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.001082][T11170] ext4 filesystem being mounted at /636/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.059523][   T33] audit: type=1326 audit(1759241132.940:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.1.2096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  269.109920][   T33] audit: type=1326 audit(1759241132.940:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.1.2096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  269.156280][   T33] audit: type=1326 audit(1759241132.940:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.1.2096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  269.206405][   T33] audit: type=1326 audit(1759241132.940:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.1.2096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  269.223817][ T5939] hsr_slave_1: left promiscuous mode
[  269.227838][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.230003][   T33] audit: type=1326 audit(1759241132.940:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.1.2096" exe="/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  269.236026][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.240881][   T33] audit: type=1326 audit(1759241133.140:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.1.2096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  269.252420][   T33] audit: type=1326 audit(1759241133.140:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.1.2096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491198ec29 code=0x7ffc0000
[  269.252830][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.264482][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.282769][ T5939] veth1_macvtap: left promiscuous mode
[  269.285253][ T5939] veth0_macvtap: left promiscuous mode
[  269.287264][ T5939] veth1_vlan: left promiscuous mode
[  269.290705][ T5939] veth0_vlan: left promiscuous mode
[  269.313063][T11179] hugetlbfs: syz.3.2099 (11179): Using mlock ulimits for SHM_HUGETLB is obsolete
[  269.521035][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.596935][T11188] loop1: detected capacity change from 0 to 256
[  269.619350][T11188] FAT-fs (loop1): Directory bread(block 64) failed
[  269.621910][T11188] FAT-fs (loop1): Directory bread(block 65) failed
[  269.629703][ T5956] Bluetooth: hci0: command tx timeout
[  269.650888][T11188] FAT-fs (loop1): Directory bread(block 66) failed
[  269.654178][T11188] FAT-fs (loop1): Directory bread(block 67) failed
[  269.657047][T11188] FAT-fs (loop1): Directory bread(block 68) failed
[  269.663084][T11188] FAT-fs (loop1): Directory bread(block 69) failed
[  269.666450][T11188] FAT-fs (loop1): Directory bread(block 70) failed
[  269.668822][T11188] FAT-fs (loop1): Directory bread(block 71) failed
[  269.671378][T11188] FAT-fs (loop1): Directory bread(block 72) failed
[  269.674058][T11188] FAT-fs (loop1): Directory bread(block 73) failed
[  270.204788][ T5939] team0 (unregistering): Port device team_slave_1 removed
[  270.306886][ T5939] team0 (unregistering): Port device team_slave_0 removed
[  270.837737][T11207] loop1: detected capacity change from 0 to 4096
[  270.854315][T11207] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  270.865436][T11207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.945326][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.094517][T11130] chnl_net:caif_netlink_parms(): no params data found
[  271.315803][T11130] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.321470][T11130] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.324681][T11130] bridge_slave_0: entered allmulticast mode
[  271.328874][T11130] bridge_slave_0: entered promiscuous mode
[  271.351255][T11130] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.364672][T11130] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.367697][T11130] bridge_slave_1: entered allmulticast mode
[  271.383625][T11130] bridge_slave_1: entered promiscuous mode
[  271.541636][T11130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.548081][T11130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.613603][T11130] team0: Port device team_slave_0 added
[  271.628739][T11130] team0: Port device team_slave_1 added
[  271.709106][ T5956] Bluetooth: hci0: command tx timeout
[  271.721067][T11130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.725675][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.741605][T11130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.757418][T11130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.760749][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.776708][T11130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.999939][T11238] loop1: detected capacity change from 0 to 32768
[  272.016566][T11238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2120 (11238)
[  272.074361][T11238] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.080278][T11238] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  272.168009][T11130] hsr_slave_0: entered promiscuous mode
[  272.188613][T11130] hsr_slave_1: entered promiscuous mode
[  272.204354][T11130] debugfs: 'hsr0' already exists in 'hsr'
[  272.206976][T11130] Cannot create hsr debugfs directory
[  272.222803][T11238] BTRFS info (device loop1): enabling ssd optimizations
[  272.225634][T11238] BTRFS info (device loop1): enabling free space tree
[  272.374881][ T5953] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.626298][T11274] loop1: detected capacity change from 0 to 16
[  272.652807][T11274] erofs (device loop1): mounted with root inode @ nid 36.
[  272.728849][T11130] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  272.756850][T11130] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  272.772759][T11130] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  272.778858][T11130] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  272.887596][T11130] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.914248][T11130] 8021q: adding VLAN 0 to HW filter on device team0
[  272.932530][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.935741][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.962214][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.965482][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.303042][T11130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.450442][  T789] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  273.495525][T11130] veth0_vlan: entered promiscuous mode
[  273.507078][T11130] veth1_vlan: entered promiscuous mode
[  273.546285][T11130] veth0_macvtap: entered promiscuous mode
[  273.556420][T11130] veth1_macvtap: entered promiscuous mode
[  273.571681][T11130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.584853][T11130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.598726][ T5923] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.606683][ T5923] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.611698][  T789] usb 2-1: Using ep0 maxpacket: 16
[  273.615727][  T789] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  273.620268][  T789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.626030][  T789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  273.633872][  T789] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  273.636422][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.637839][  T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.646255][  T789] usb 2-1: Product: syz
[  273.648112][  T789] usb 2-1: Manufacturer: syz
[  273.653945][  T789] usb 2-1: SerialNumber: syz
[  273.672814][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.746680][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.759808][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.789461][ T5956] Bluetooth: hci0: command tx timeout
[  273.790098][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.795257][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.928856][T11327] loop8: detected capacity change from 0 to 8
[  273.954052][T11327] Dev loop8: unable to read RDB block 8
[  273.956457][T11327]  loop8: unable to read partition table
[  273.963253][T11327] loop8: partition table beyond EOD, truncated
[  273.966669][T11327] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  274.079698][  T789] usb 2-1: 0:2 : does not exist
[  274.208486][T11342] loop5: detected capacity change from 0 to 64
[  274.703885][  T789] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  274.734542][  T789] usb 2-1: USB disconnect, device number 24
[  274.779446][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  274.946869][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'.
[  275.089294][ T6229] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  275.239096][ T6229] usb 6-1: Using ep0 maxpacket: 16
[  275.252471][ T6229] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.256627][ T6229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  275.264447][ T6229] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  275.273220][ T6229] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  275.277578][ T6229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.282002][ T6229] usb 6-1: Product: syz
[  275.283713][ T6229] usb 6-1: Manufacturer: syz
[  275.285705][ T6229] usb 6-1: SerialNumber: syz
[  275.292329][ T6229] usb 6-1: config 0 descriptor??
[  275.302107][ T6229] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  275.305435][ T6229] gspca_stv06xx: st6422 sensor detected
[  275.569827][ T6229] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71
[  275.586730][ T6229] usb 6-1: USB disconnect, device number 2
[  275.874473][ T5956] Bluetooth: hci0: command tx timeout
[  276.591262][   T33] audit: type=1326 audit(1759241140.490:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ffc0000
[  276.603284][   T33] audit: type=1326 audit(1759241140.490:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ffc0000
[  276.634240][   T33] audit: type=1326 audit(1759241140.510:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7ff205d8ec29 code=0x7ffc0000
[  276.700070][   T33] audit: type=1326 audit(1759241140.510:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ffc0000
[  276.774009][   T33] audit: type=1326 audit(1759241140.510:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.5.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ffc0000
[  276.977264][T11407] loop5: detected capacity change from 0 to 2048
[  276.981196][T11407] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  277.006352][T11410] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.207903][T11424] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  277.211932][T11424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.294476][T11432] Device name cannot be null; rc = [-22]
[  277.530086][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2186'.
[  277.572219][T11458] loop5: detected capacity change from 0 to 128
[  277.580793][T11458] EXT4-fs (loop5): Test dummy encryption mode enabled
[  277.620573][T11458] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  277.630864][T11458] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  277.670848][T11469] RDS: rds_bind could not find a transport for ::4006:0:20:0, load rds_tcp or rds_rdma?
[  277.802936][T11458] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  277.840497][   T33] audit: type=1800 audit(1759241141.750:86): pid=11458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2189" name="file1" dev="loop5" ino=12 res=0 errno=0
[  277.868001][T11130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  277.925404][T11474] loop1: detected capacity change from 0 to 32768
[  277.933713][T11474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2195 (11474)
[  277.989638][T11474] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  277.993927][T11474] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  278.037299][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'.
[  278.116931][T11474] BTRFS info (device loop1): enabling ssd optimizations
[  278.122081][T11474] BTRFS info (device loop1): enabling free space tree
[  278.181338][T11513] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  278.210961][ T5953] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.744524][T11545] loop5: detected capacity change from 0 to 4096
[  278.774307][T11546] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.788651][   T33] audit: type=1800 audit(1759241142.700:87): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2218" name="file1" dev="loop5" ino=15 res=0 errno=0
[  279.082736][T11551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.185369][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'.
[  279.851294][T11581] loop5: detected capacity change from 0 to 32768
[  280.118346][T11593] dlm: non-version read from control device 36
[  280.381948][T11595] loop5: detected capacity change from 0 to 32768
[  280.831153][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'.
[  281.448585][T11651] loop5: detected capacity change from 0 to 1024
[  281.474597][T11651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.483638][T11651] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.5.2265: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  281.521406][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.786706][T11668] loop8: detected capacity change from 0 to 8
[  281.790632][T11668] Dev loop8: unable to read RDB block 8
[  281.793092][T11668]  loop8: unable to read partition table
[  281.795754][T11668] loop8: partition table beyond EOD, truncated
[  281.798504][T11668] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  281.854207][T11670] loop5: detected capacity change from 0 to 256
[  281.874132][T11670] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  281.880623][T11670] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  281.885448][T11670] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  281.946701][T11672] loop5: detected capacity change from 0 to 1024
[  282.027290][ T1087] hfsplus: bad catalog file entry
[  282.033258][ T1087] hfsplus: b-tree write err: -5, ino 3
[  282.312189][T11688] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2281'.
[  282.367124][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2283'.
[  282.797960][T11717] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  282.820477][T11705] loop5: detected capacity change from 0 to 32768
[  282.832580][T11705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2290 (11705)
[  282.854826][T11705] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.860241][T11719] loop1: detected capacity change from 0 to 256
[  282.867261][T11705] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  282.872266][T11719] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  282.974760][T11705] BTRFS info (device loop5): setting nodatasum
[  282.981254][T11705] BTRFS info (device loop5): setting nodatacow
[  282.984073][T11705] BTRFS info (device loop5): enabling free space tree
[  282.986870][T11705] BTRFS info (device loop5): max_inline set to 0
[  283.088868][T11130] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.706175][T11742] loop1: detected capacity change from 0 to 40427
[  283.719707][T11742] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  283.722412][T11742] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  283.726614][T11742] F2FS-fs (loop1): invalid crc value
[  283.784647][T11742] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  283.791191][T11742] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  283.795860][T11742] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  283.826550][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'.
[  283.984757][T11782] loop5: detected capacity change from 0 to 2048
[  284.015381][T11784] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.164815][T11788] loop1: detected capacity change from 0 to 512
[  284.171474][T11788] EXT4-fs (loop1): Test dummy encryption mode enabled
[  284.174151][T11788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  284.193033][T11788] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2312: bad orphan inode 131083
[  284.203098][T11788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.296892][ T5953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.503274][T11807] loop1: detected capacity change from 0 to 736
[  284.546548][T11809] /dev/nullb0: Can't lookup blockdev
[  284.607834][T11811] loop1: detected capacity change from 0 to 2048
[  284.614502][T11811] NILFS (loop1): invalid segment: Magic number mismatch
[  284.617465][T11811] NILFS (loop1): trying rollback from an earlier position
[  284.627128][T11811] NILFS (loop1): recovery complete
[  284.635200][T11812] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.083799][   T33] audit: type=1326 audit(1759241148.980:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.093635][   T33] audit: type=1326 audit(1759241148.980:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.106747][   T33] audit: type=1326 audit(1759241148.980:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.117049][   T33] audit: type=1326 audit(1759241148.980:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.126567][   T33] audit: type=1326 audit(1759241148.980:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.138017][   T33] audit: type=1326 audit(1759241148.980:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.147928][   T33] audit: type=1326 audit(1759241148.980:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.166026][   T33] audit: type=1326 audit(1759241148.980:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.176764][   T33] audit: type=1326 audit(1759241148.980:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.191899][   T33] audit: type=1326 audit(1759241148.980:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205d8ec29 code=0x7ff00000
[  285.415874][T11828] loop5: detected capacity change from 0 to 1024
[  285.419191][T11828] EXT4-fs: Ignoring removed nobh option
[  285.421241][T11828] EXT4-fs: Ignoring removed bh option
[  285.444277][T11828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.480522][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.186524][T11848] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[  286.496392][T11853] loop1: detected capacity change from 0 to 32768
[  286.504808][T11853] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  286.515467][T11853] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  286.559463][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  286.564732][T11853] 
[  286.568417][T11853] ======================================================
[  286.570625][T11853] WARNING: possible circular locking dependency detected
[  286.572913][T11853] syzkaller #0 Not tainted
[  286.574566][T11853] ------------------------------------------------------
[  286.577602][T11853] syz.1.2333/11853 is trying to acquire lock:
[  286.579791][T11853] ffff888118d623f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  286.583564][T11853] 
[  286.583564][T11853] but task is already holding lock:
[  286.586331][T11853] ffff888033e34950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  286.589711][T11853] 
[  286.589711][T11853] which lock already depends on the new lock.
[  286.589711][T11853] 
[  286.593191][T11853] 
[  286.593191][T11853] the existing dependency chain (in reverse order) is:
[  286.596287][T11853] 
[  286.596287][T11853] -> #4 (jbd2_handle){++++}-{0:0}:
[  286.599235][T11853]        lock_acquire+0x120/0x360
[  286.601097][T11853]        start_this_handle+0x1fa7/0x21c0
[  286.603274][T11853]        jbd2__journal_start+0x2c1/0x5b0
[  286.605132][T11853]        jbd2_journal_start+0x2a/0x40
[  286.607080][T11853]        ocfs2_start_trans+0x376/0x6d0
[  286.609099][T11853]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  286.611569][T11853]        ocfs2_dismount_volume+0x201/0x8d0
[  286.614067][T11853]        generic_shutdown_super+0x135/0x2c0
[  286.616463][T11853]        kill_block_super+0x44/0x90
[  286.618635][T11853]        deactivate_locked_super+0xbc/0x130
[  286.621123][T11853]        cleanup_mnt+0x425/0x4c0
[  286.623211][T11853]        task_work_run+0x1d4/0x260
[  286.625405][T11853]        exit_to_user_mode_loop+0xec/0x110
[  286.627919][T11853]        do_syscall_64+0x2bd/0x3b0
[  286.630178][T11853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.632883][T11853] 
[  286.632883][T11853] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  286.636485][T11853]        lock_acquire+0x120/0x360
[  286.638640][T11853]        down_read+0x46/0x2e0
[  286.640718][T11853]        ocfs2_start_trans+0x36a/0x6d0
[  286.643167][T11853]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  286.645500][T11853]        ocfs2_dismount_volume+0x201/0x8d0
[  286.647444][T11853]        generic_shutdown_super+0x135/0x2c0
[  286.649802][T11853]        kill_block_super+0x44/0x90
[  286.652026][T11853]        deactivate_locked_super+0xbc/0x130
[  286.654405][T11853]        cleanup_mnt+0x425/0x4c0
[  286.656210][T11853]        task_work_run+0x1d4/0x260
[  286.658173][T11853]        exit_to_user_mode_loop+0xec/0x110
[  286.660455][T11853]        do_syscall_64+0x2bd/0x3b0
[  286.662242][T11853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.664509][T11853] 
[  286.664509][T11853] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  286.666999][T11853]        lock_acquire+0x120/0x360
[  286.668692][T11853]        ocfs2_start_trans+0x26b/0x6d0
[  286.670568][T11853]        ocfs2_setattr+0x969/0x1b40
[  286.672312][T11853]        notify_change+0xb36/0xe40
[  286.674064][T11853]        do_truncate+0x1a4/0x220
[  286.675816][T11853]        do_ftruncate+0x489/0x540
[  286.677630][T11853]        __x64_sys_ftruncate+0x92/0xf0
[  286.679845][T11853]        do_syscall_64+0xfa/0x3b0
[  286.681897][T11853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.684216][T11853] 
[  286.684216][T11853] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  286.687102][T11853]        lock_acquire+0x120/0x360
[  286.688762][T11853]        down_write+0x96/0x1f0
[  286.690357][T11853]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  286.692869][T11853]        ocfs2_xattr_set+0x595/0x11f0
[  286.694663][T11853]        ocfs2_set_acl+0x701/0x7b0
[  286.696322][T11853]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  286.698112][T11853]        vfs_set_acl+0x887/0xb00
[  286.699741][T11853]        filename_setxattr+0x2e0/0x600
[  286.701526][T11853]        path_setxattrat+0x364/0x3a0
[  286.703245][T11853]        __x64_sys_setxattr+0xbc/0xe0
[  286.705012][T11853]        do_syscall_64+0xfa/0x3b0
[  286.706792][T11853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.709364][T11853] 
[  286.709364][T11853] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  286.712062][T11853]        validate_chain+0xb9b/0x2140
[  286.713907][T11853]        __lock_acquire+0xab9/0xd20
[  286.715725][T11853]        lock_acquire+0x120/0x360
[  286.717386][T11853]        down_read+0x46/0x2e0
[  286.719222][T11853]        ocfs2_init_acl+0x2f9/0x720
[  286.721236][T11853]        ocfs2_mknod+0x1321/0x2050
[  286.723181][T11853]        ocfs2_mkdir+0x191/0x440
[  286.725014][T11853]        vfs_mkdir+0x306/0x510
[  286.726935][T11853]        do_mkdirat+0x247/0x590
[  286.728650][T11853]        __x64_sys_mkdirat+0x87/0xa0
[  286.730478][T11853]        do_syscall_64+0xfa/0x3b0
[  286.732362][T11853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.734489][T11853] 
[  286.734489][T11853] other info that might help us debug this:
[  286.734489][T11853] 
[  286.738224][T11853] Chain exists of:
[  286.738224][T11853]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  286.738224][T11853] 
[  286.743826][T11853]  Possible unsafe locking scenario:
[  286.743826][T11853] 
[  286.746997][T11853]        CPU0                    CPU1
[  286.749305][T11853]        ----                    ----
[  286.751571][T11853]   rlock(jbd2_handle);
[  286.753349][T11853]                                lock(&journal->j_trans_barrier);
[  286.756618][T11853]                                lock(jbd2_handle);
[  286.759355][T11853]   rlock(&oi->ip_xattr_sem);
[  286.761309][T11853] 
[  286.761309][T11853]  *** DEADLOCK ***
[  286.761309][T11853] 
[  286.764667][T11853] 8 locks held by syz.1.2333/11853:
[  286.766834][T11853]  #0: ffff88804368a428 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  286.770857][T11853]  #1: ffff888118d626c0 (&type->i_mutex_dir_key#19/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
[  286.775373][T11853]  #2: ffff888111693540 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.780998][T11853]  #3: ffff888118d643c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.786750][T11853]  #4: ffff888118d66f40 (&ocfs2_sysfile_lock_key[GLOBAL_BITMAP_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.791942][T11853]  #5: ffff88804368a618 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  286.795817][T11853]  #6: ffff88803f8dc8e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  286.800079][T11853]  #7: ffff888033e34950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  286.803887][T11853] 
[  286.803887][T11853] stack backtrace:
[  286.806390][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.1.2333 Not tainted syzkaller #0 PREEMPT(full) 
[  286.806408][T11853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.806415][T11853] Call Trace:
[  286.806424][T11853]  <TASK>
[  286.806431][T11853]  dump_stack_lvl+0x189/0x250
[  286.806450][T11853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.806464][T11853]  ? __pfx__printk+0x10/0x10
[  286.806472][T11853]  ? stack_trace_save+0x9c/0xe0
[  286.806490][T11853]  print_circular_bug+0x2ee/0x310
[  286.806504][T11853]  check_noncircular+0x134/0x160
[  286.806517][T11853]  validate_chain+0xb9b/0x2140
[  286.806529][T11853]  ? __pfx___mutex_trylock_common+0x10/0x10
[  286.806541][T11853]  ? rcu_is_watching+0x15/0xb0
[  286.806556][T11853]  __lock_acquire+0xab9/0xd20
[  286.806567][T11853]  ? ocfs2_init_acl+0x2f9/0x720
[  286.806579][T11853]  lock_acquire+0x120/0x360
[  286.806589][T11853]  ? ocfs2_init_acl+0x2f9/0x720
[  286.806604][T11853]  ? jbd2_write_access_granted+0x69/0x310
[  286.806615][T11853]  down_read+0x46/0x2e0
[  286.806631][T11853]  ? ocfs2_init_acl+0x2f9/0x720
[  286.806646][T11853]  ocfs2_init_acl+0x2f9/0x720
[  286.806662][T11853]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  286.806676][T11853]  ? dquot_alloc_inode+0x216/0xa50
[  286.806688][T11853]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  286.806698][T11853]  ? ocfs2_block_signals+0x94/0xe0
[  286.806709][T11853]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  286.806721][T11853]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  286.806734][T11853]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  286.806747][T11853]  ocfs2_mknod+0x1321/0x2050
[  286.806764][T11853]  ? __pfx_ocfs2_mknod+0x10/0x10
[  286.806775][T11853]  ? do_raw_spin_unlock+0x4d/0x240
[  286.806789][T11853]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  286.806807][T11853]  ? __lock_acquire+0xab9/0xd20
[  286.806821][T11853]  ? __lock_acquire+0xab9/0xd20
[  286.806833][T11853]  ? do_raw_spin_lock+0x121/0x290
[  286.806847][T11853]  ? do_raw_spin_unlock+0x4d/0x240
[  286.806861][T11853]  ? put_pid+0xe9/0x130
[  286.806873][T11853]  ocfs2_mkdir+0x191/0x440
[  286.806886][T11853]  ? __pfx_from_kgid+0x10/0x10
[  286.806898][T11853]  ? apparmor_path_mkdir+0x1a7/0x220
[  286.806912][T11853]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  286.806924][T11853]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  286.806935][T11853]  ? inode_permission+0x149/0x470
[  286.806945][T11853]  ? __pfx_ocfs2_permission+0x10/0x10
[  286.806956][T11853]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  286.806994][T11853]  vfs_mkdir+0x306/0x510
[  286.807010][T11853]  do_mkdirat+0x247/0x590
[  286.807025][T11853]  ? __pfx_do_mkdirat+0x10/0x10
[  286.807039][T11853]  ? getname_flags+0x1e5/0x540
[  286.807050][T11853]  __x64_sys_mkdirat+0x87/0xa0
[  286.807067][T11853]  do_syscall_64+0xfa/0x3b0
[  286.807078][T11853]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.807090][T11853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.807100][T11853]  ? exc_page_fault+0x9f/0xf0
[  286.807109][T11853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.807120][T11853] RIP: 0033:0x7f491198d497
[  286.807132][T11853] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.807140][T11853] RSP: 002b:00007f491282ee68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  286.807154][T11853] RAX: ffffffffffffffda RBX: 00007f491282eef0 RCX: 00007f491198d497
[  286.807161][T11853] RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c
[  286.807167][T11853] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000
[  286.807174][T11853] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680
[  286.807180][T11853] R13: 00007f491282eeb0 R14: 0000000000000000 R15: 0000000000000000
[  286.807192][T11853]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  286.963607][T11865] loop5: detected capacity change from 0 to 512
[  287.023485][T11865] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5.
[  287.264684][ T5939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.311785][ T5939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.373892][ T5939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.459510][ T5939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.547402][ T5939] bridge_slave_1: left allmulticast mode
[  287.550292][ T5939] bridge_slave_1: left promiscuous mode
[  287.552136][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.555471][ T5939] bridge_slave_0: left allmulticast mode
[  287.557785][ T5939] bridge_slave_0: left promiscuous mode
[  287.562122][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.624189][ T5939] bond1 (unregistering): (slave geneve2): Releasing active interface
[  287.644033][T11852] ocfs2: Unmounting device (7,1) on (node local)
[  287.814000][ T5939] bond0 (unregistering): left promiscuous mode
[  287.816717][ T5939] bond_slave_0: left promiscuous mode
[  287.819758][ T5939] bond_slave_1: left promiscuous mode
[  287.823306][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.828394][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.833648][ T5939] bond0 (unregistering): Released all slaves
[  287.978552][ T5939] bond1 (unregistering): Released all slaves
[  288.199663][ T5939] batadv_slave_0: left promiscuous mode
[  288.205250][ T5939] hsr_slave_0: left promiscuous mode
[  288.207820][ T5939] hsr_slave_1: left promiscuous mode
[  288.211032][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.214684][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.217995][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.223857][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.228521][ T5939] veth1_macvtap: left promiscuous mode
[  288.231044][ T5939] veth0_macvtap: left promiscuous mode
[  288.233335][ T5939] veth1_vlan: left promiscuous mode
[  288.773090][ T5939] IPVS: stop unused estimator thread 0...
[  288.852303][ T5939] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.892733][ T5939] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.952343][ T5939] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.992886][ T5939] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.048455][ T5939] bridge_slave_1: left allmulticast mode
[  289.050579][ T5939] bridge_slave_1: left promiscuous mode
[  289.052581][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.055745][ T5939] bridge_slave_0: left allmulticast mode
[  289.057657][ T5939] bridge_slave_0: left promiscuous mode
[  289.060095][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.193282][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.198311][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.204380][ T5939] bond0 (unregistering): Released all slaves
[  289.210714][ T5939] bond1 (unregistering): Released all slaves
[  289.300473][ T5939] IPVS: stopping backup sync thread 9456 ...
[  289.417611][ T5939] hsr_slave_0: left promiscuous mode
[  289.421280][ T5939] hsr_slave_1: left promiscuous mode
[  289.424269][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.427607][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.431613][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.434743][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.444613][ T5939] veth1_macvtap: left promiscuous mode
[  289.447031][ T5939] veth0_macvtap: left promiscuous mode
[  289.449758][ T5939] veth1_vlan: left promiscuous mode
[  289.452192][ T5939] veth0_vlan: left promiscuous mode
[  289.491354][ T5939] pim6reg (unregistering): left allmulticast mode
[  289.627698][ T5939] team0 (unregistering): Port device team_slave_1 removed
[  289.660629][ T5939] team0 (unregistering): Port device team_slave_0 removed
[  290.038710][ T5939] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
14:05:50  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000028b40 RDI=0000000000028b41 RBP=00000000000003f8 RSP=ffffc9000403ed10
R8 =ffff888020528237 R9 =1ffff110040a5046 R10=dffffc0000000000 R11=ffffffff850b3ff0
R12=dffffc0000000000 R13=ffffffff995968e2 R14=ffffffff99889380 R15=0000000000000000
RIP=ffffffff850b406c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f491282f6c0 ffffffff 00c00000
GS =0000 ffff8880b8d7e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30b1dff8 CR3=0000000029872000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f4911a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b2b7fb RBX=1ffff11009648341 RCX=ffff88801ea11cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002a3f6c0 RSP=ffffc90002a3f540
R8 =ffffffff8f5cac37 R9 =1ffffffff1eb9586 R10=dffffc0000000000 R11=fffffbfff1eb9587
R12=ffff88804b241a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b2b7e1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556869e500 ffffffff 00c00000
GS =0000 ffff8881a417e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fab05f056c0 CR3=000000003c0b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fab05212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
