last executing test programs:

4m25.005513061s ago: executing program 2 (id=198):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0)

4m25.004722913s ago: executing program 2 (id=200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x4000000, 0xffffffff}, 0x10)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)

4m23.81326671s ago: executing program 2 (id=205):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0043}]})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

4m23.646604556s ago: executing program 2 (id=206):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0), 0x1, 0x55e, &(0x7f0000001bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x40)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m23.49404113s ago: executing program 2 (id=207):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1}}}}]}, 0x40}}, 0x400a1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m23.108853287s ago: executing program 2 (id=208):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x2000000)

4m22.819242671s ago: executing program 32 (id=208):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x2000000)

2m41.698885705s ago: executing program 0 (id=1458):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

2m41.651460926s ago: executing program 0 (id=1459):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0x4}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x6c4, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0x13, 0x2e, 0x2, 0x5, {0x10001, 0x7fff, 0xffffffff, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c840}, 0x800)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f0000000100)=""/213, 0xd5)

2m40.64146484s ago: executing program 0 (id=1463):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000080)=ANY=[], 0x1, 0x1528, &(0x7f0000002ac0)="$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")
rmdir(&(0x7f0000000340)='./file0\x00')

2m40.63355117s ago: executing program 0 (id=1465):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

2m40.474136912s ago: executing program 0 (id=1467):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

2m40.335842121s ago: executing program 0 (id=1471):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)

2m25.291223312s ago: executing program 33 (id=1471):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)

33.681204442s ago: executing program 1 (id=3048):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xff42)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)

33.611880124s ago: executing program 1 (id=3050):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00')
exit(0x4)
getdents64(r0, 0x0, 0x0)

32.737645155s ago: executing program 1 (id=3060):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
r1 = syz_io_uring_setup(0xd1, &(0x7f0000000700)={0x0, 0xc2af, 0x100, 0x0, 0x333}, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)=""/158, 0x9e}], 0x2})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

32.737284417s ago: executing program 1 (id=3061):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[], 0x7, 0xf08, &(0x7f0000001e40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

32.592212535s ago: executing program 1 (id=3062):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
unshare(0x2a020400)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, r0, 0x37, 0x203c}, 0x20)

32.274797411s ago: executing program 1 (id=3065):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x39, 0x0, &(0x7f0000000180)="fdb1145673fa4a9e4734f6a21430f2871f02681c0bbb2cebd3b2d74de4f4e18010a7b4c35afd062499543b1087fe9110a2c7b56c7d607c8ed2", 0x0}, 0x50)

32.201261156s ago: executing program 34 (id=3065):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x39, 0x0, &(0x7f0000000180)="fdb1145673fa4a9e4734f6a21430f2871f02681c0bbb2cebd3b2d74de4f4e18010a7b4c35afd062499543b1087fe9110a2c7b56c7d607c8ed2", 0x0}, 0x50)

10.120040551s ago: executing program 4 (id=3372):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e5c, &(0x7f0000005d80)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

9.888833931s ago: executing program 4 (id=3373):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0x7f0}, 0x8)

9.840665445s ago: executing program 4 (id=3374):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0xf, 0x6, 0x401, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_usb_ep_write(r0, 0x8d, 0x4d, &(0x7f0000000340)="d021ed84d3c1eea58d3d2b029b1945627a56bc555d815a952755b2b8aa4221e8c7b5c5104751c1452ad98ce2b38265a4f9085473f67f3ccbcd292de2cae81a50f251afa72ca17981c9700b2e8b")

8.359729083s ago: executing program 4 (id=3386):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1041006, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f000000c280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="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", @ANYBLOB="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", @ANYRES16, @ANYBLOB="7586a035f55c6293d0f1b99c9b1885d532ab5c9f7209d3d9472bc4f6ae44ee7a08ce61001daaba6032a03b61fba7f6b0299550c27826218b7c1898ec7cb416ad734679ede2e5f49b3ef825c5f8f4441b01e9e4a78d86b9f7a56f4d2ce1c37c28d615601630e01709cfcf262367e0418aa422f760e4569bca22c7bf82b1f192a3e4f618e5978e7e8a188486fa2a380915715ef67da718b0037e943a2e8bbcd8265aef7abcca6f6e85d9d36ec4da2d8a8c1ddd4a0f9dcb5a717640ce47b6559045244e04e11052d376", @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0xc1, 0x1521, &(0x7f0000003fc0)="$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")

8.106310031s ago: executing program 4 (id=3389):
r0 = socket(0x2, 0x3, 0xff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0xac6c)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

7.819515729s ago: executing program 4 (id=3394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x15, 0xf71, 0x3}})

7.585628697s ago: executing program 35 (id=3394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x15, 0xf71, 0x3}})

3.826499289s ago: executing program 3 (id=3439):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)

1.998551145s ago: executing program 6 (id=3395):
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000280)=[{0x2, 0x1, 0x1, &(0x7f0000000100)='a'}, {0x9, 0x10, 0x0, 0x0}], 0x2})

1.729009957s ago: executing program 3 (id=3449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804)

1.728443498s ago: executing program 3 (id=3450):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGwL+hzNxwDYnAwu76xM4xGCSkD8lPVAS0qYlNY69Nk58qnfNSahsCm2JglSk9oJeNCVRGkVqK1AVqalEI6RGau+aq0bcRK3EhS+gclBSNVVgq3fmeR7PzM7OrLHHnnmfzyfCP3vmfWeeeeed2f1u9J0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGq3/5MyfDBVFUf5X+2NNUVxY/n1VsbP85/y2871CAAAA4Ey9V/vzby9OF+xcxk4N2/zLNf/2vYWFhYXiS++eeP/PFhbSFeuKYmRlUdSui/71Fz9faNwmeK4YHxpu+Pdwl7sf6XL9aJfrx7pcv6LL9Su7XD/e5fpFB2CRVfWfx9Ru7PraX9fUD2lxaTFWu+76Nns9N7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68r/uLeF/DDfe1tiiKkz99Zk9cw1A4xtcXTXdW0/jcvXNvse7dnz6z5ztzb1/VbnY9DItWWhQbN5TrfL4oTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuXfW9d5cpnrjI97PKzzRx3WuTZc9uR1RVHMF0tu0+q5YrhY3XKv6XiP18+I8jbKp/LDxehpnSfrl3GelPu8dV3zedJ6Tsbjvz4ck9El1tD4dLzz1RWLjvsHPU/KR90P52p52w+Wdzo+3vij1aZztdzmmRuWPgfaPndtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1e7rxA2dz4HJuUNHJ2efevq2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1P0/vkA6Q1cVwOgc3hPeaeA7e1LJt4ym58M2z9zoY75PXQfnYP3djuaALh4slzvFym+c3nvnrIH3db3gdjDa8Dtq+p7Z5HYwu43VQbnNy4/K+Zo42/NduDb16L1zTcA6cz6+H5X0+cvPS74Vrw7peuOV0vx6OLDoH4sMaCq+98pL0/d74neG4LD4vri6vuGBFcXx25tjtT+6emzs2XYRxTlzS8Fy1ni+rGx5Tseh8GT7t82Xn3/zyxqvbXL4mHKvxWzs/V+U2WyY6P1e1d/f2x7Pp0k1FGGfZuT6e7b6alcczZYkOx7Pc5vnbzvx7wZRLGt7/xrq9/42Mjdbf/0bS0Rhrev9b/NSM1FZWFCdvW97731j471y//13aJ+9/5bF65PbO50C5zQuTp3sOjHZ8/7suzKGwnptDYhhvyP3v166fr5+mDc9l1/NmdHQsnDej8R6bz5vNi/Ypb628741TH+y82Xhd83PV9H1LBc+b8lj9+VTn86bc5o3pM3/vWBX/2vDesaLbOTA2sqJc71g6Cervdwur4jlwe7GnOFIcLPamfcpnubyviU3LOwdWhP/O9XvHlX1yDpTH6uVNnc+Bcpsfbj673zttDJekbRq+d2r9+cJSmf/q0VO313rYznbmL9f5qS2dfzZUbvP2ltPNGZ2P063hkgvaHKfW189S5/Te4twcpyvDOg9u7fyzqXKbS7ct83zaWRTFm9Nv1n7eFX6++/fH//17TT/3bfcz5Ten33xg8qEfn876AQD44N6v/Tm/ov69ZsP/Y72c//8fAAAAGAgx9w+Hmcj/AAAAUBkx94+Emcj/AAAAUBkx94+GmWSS/x+7c/ur7z1bpE8DXAji9fEwPHh3fbvY8Z4P/163cEp5+Se+Pfbq155d3n0PF0Xxywc+0nb7x+6O66o7Gtf5sebLF7ny2mXd/6MPn9qu8fMTTm6v3358PMs9DWJX+fXJTbXbXffUdG2+8UBRmw/Nv/Bc/fbr/47bn9hc3/4vw4eW7Nw31LT/xrCe68NcFz5T5sGdp45DOeN+r6695p8v+fyp+4v7DW24qPYwX/6D+u3Gz4h66ZL69vFxL7X+f/r6d18tt3/yhvbrf3a4/fpPhNt9K8xf7Khv33jMv9aw/j8K64/3F/e7/Vs/aLv+166ob/9aOC9eCbN1/ff+6Uffa/d8xfvZeVd9v3j/U/+9pbZfvL14+63rH392uul4tN7+G+/Wb2fH4z8badw+Xh7vJ3r0rubzeyg8v0098qIovvvHRdNxLj5e3+8fW9Yfb+/oXe3Xf2vLOo8OXVvb/9TjWdP0uL7x15vaPt64np1/t6bp8bx0Xzh+707+sLzdEw+F8zFc/78/qt9e62eZvnZf8/tN3P6VNfXXbby9yZb1v9Sy/vlry2PXff33v1tf/2v3rGxa/85Ph/Pp/vrstv79f3Vx0/7f/E79+Tj2xMThI7PHD+xtOKqNr+OV46tWX3Dhhy66OLyXtv5715G5x2aOrZtaN1UU6wbwIwN7vf5vhflf9TF/9u+h7sc/q593L36m/nXrpp/X//1SuPzR8HzGr4/f+IuxpvO19Xmfv6c+z3T9t4R1LNcVX//Pa5e14Ykvvn78H/7w7dbvC+LjOXrZeO3xvbz+8tp1Q2/Ur299v+rmPy5rfl3/ZHSqNr8fjutC+GTmDZfX76/19uNnk7z42frrN34nF/cvWj5PZM1I8+M40/X/JHwf84Mrm9//4vnx/WdbPs15TTFULmE+vD8U8/Xr41bxeL948vK29xc/h6eYv+p0lrmk2admJw8eOHz8ycm5mdm5ydmnnt516Mjxw3O7ap9duuvL3fY/9fpeXXt9753ZtqWovdqP1EePne/1H314z947pm7cO7Nv9/F9cw8fnTm2f8/s7J6ZvbM37t63b+aJbvsf2LtjetP2zXdsmth/YO+OO7dv37x94sDhI+Uy6ovqYtvUVyYOH9tV22V2x5bt01u3bpmaOHRk78yOO6amJo5327/2tWmi3PvxiWMzB3fPHTg0MzF74OmZHdPbt23b1PXTHw8d3Te7bvLY8cOTx2dnjk3WH8u6udrF5de+bvuTh9kj4f2uxVD47vwLt25Ln49b+vZXl7yp+ibN354W74TPgopf37r9O+b+sTCTTPI/AAAA5CDm/vDB/6eukP8BAACgMmLuXxlmIv8DAABAZcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAACoj5v4LwkzkfwAAAKiMmPsvDDPJI/+Ptf5V/1//X/+/sf8ft9X/L/T/9f8/IP1//f9O9P/1/wd5/X3Y/1+l/0+/6bf+f8z9HwozySP/AwAAQBZi7r8ozET+BwAAgMqIuf/iMBP5HwAAACoj5v41YSaZ5H+//1//X//f7//X/9f/P8uaDrH+v/5/J/r/+v+DvP4+7P/7/f/0nX7r/8fc///CTDLJ/wAAAJCDmPs/HGYi/wMAAEBlxNx/SZiJ/A8AAACVEXP/pWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5/7Iwk0zyPwAAAOQg5v7Lw0zkfwAAAKiMmPuvCDOR/wEAAKAyYu6/Mswkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3XxVmkkn+BwAAgBzE3H91mIn8DwAAAJURc/9HwkzkfwAAAKiMmPvXhplkkv/1//X/9f/1//X/9f97abD6/8NLXqP/X6f/30z/X/9f/1//n876rf8fc/9Hw0wyyf8AAACQg5j7rwkzkf8BAACgMmLuvzbMRP4HAACAyoi5f12YSSb5X/9f/1//X/9f/1//v5cGq/+/NP3/Ov3/Zvr/+v/6//r/dNZv/f+Y+9eHmWSS/wEAACAHMfdvCDOR/wEAAKAyYu6/LsxE/gcAAIDKiLn/+jCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/X17/f0W3G6LS+q3/H3P/DWEmmeR/AAAAyEHM/TeGmcj/AAAAUBkx998UZiL/AwAAQGXE3L8xzCST/K//r/+v/6//r/+v/99L+v+L+v9v/U+h/x/p/+v/D/L69f/9/n+667f+f8z9N4eZZJL/AQAAIAcx998SZiL/AwAAQGXE3H9rmIn8DwAAAJURc/9EmEkm+V//X/9f/1//X/9f/7+Xqtr/T++jfv+//r/+v/6//r/+P0vqt/5/zP23hZlkkv8BAAAgBzH33x5mIv8DAABAZcTcPxlmIv8DAABAZcTcPxVmkkn+1//X/9f/1//X/9f/76Wq9v/P4Pf/6/830P/X/x/k9ev/6//TXb/1/2Punw4zyST/AwAAQA5i7t8UZiL/AwAAQGXE3L85zET+BwAAgMqIuX9LmEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9NsuM1l/db/j7l/a5hJJvkfAAAAchBz/7YwE/kfAAAAKiPm/jvCTOR/AAAAqIyY++8MM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP3bw0wyyf8AAACQg5j7PxZmIv8DAABAZcTcf1eYifwPAAAAA6Xd7yGMYu7/eJhJJvlf/7/q/f+Flfr/+v/6/53Xr//fW/r/+v+d6P/r/w/y+vX/9f/prt/6/zH37wgzyST/AwAAQA5i7r87zET+BwAAgMqIuf+eMBP5HwAAACoj5v6dYSaZ5H/9/6r3//3+f/1//f9u69f/7y39f/3/TvT/B7P/H75t0f8/N/3/8aX2b+z/l+eQ/j/9qN/6/zH33xtmkkn+BwAAgBzE3P+JMBP5HwAAACoj5v5PhpnI/wAAAFAZMfd/Kswkk/yv/6//r/+v/6//r//fS/r/+v+d6P8PZv8/0v/3+//1/+mm3/r/MfffF2aSSf4HAACAHMTc/+kwE/kfAAAAKiPm/v8fZiL/AwAAQGXE3H9/mEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/lTCTTPI/AAAA5CDm/gfCTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P+rYSaZ5H/9/3PT/x9Ot6//r/+v/6//r/9/Nun/6/8X+v8f2Pnuzw/6+vX/9f/prt/6/zH3/1qYSSb5HwAAAHIQc/+vh5nI/wAAAFAZMff/RpiJ/A8AAACVEXP/g2EmmeR//X+//1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7v/NMJNM8j8AAADkIOb+h8JM5H8AAACojJj7PxtmIv8DAABAZcTc/7kwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3P9wmEkm+R8AAAByEHP/58NM5H8AAACojJj7fyvMRP4HAACAyoi5/7fDTDLJ//r/+v/6//r/+v/6/72k/7+4/1++h53P/v+K5Wyo/78s+v/6//r/+v901m/9/5j7vxBmkkn+BwAAgBzE3P87YSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/SJhJJvlf/1//X/9f/1//X/+/l/T//f7/TvT/9f8Hef36//r/dNdv/f+Y+78YZpJJ/gcAAIAcxNz/e2Em8j8AAABURsz9u8JM5H8AAACojJj7Hw0zyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/bvDTDLJ/wAAAJCDmPu/FGYi/wMAAEBlxNy/J8xE/gcAAIDKiLl/b5hJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2PunwkzyST/AwAAQA5i7t8XZiL/AwAAQGXE3L8/zET+BwAAgMqIuf+xMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9x/IMwkk/wPAAAAOYi5/8thJvI/AAAAVEbM/V8JM5H/AQAAoDJi7j8YZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPsPhZlkkv8BAAAgBzH3Hw4zkf8BAACgMmLuPxJmIv8DAABAZcTcfzTMJJP8r/+v/6//r/+v/6//30v6//r/nej/6/8P8vr1//X/6a7f+v8x9/9+mEkm+R8AAAByEHP/sTAT+R8AAAAqI+b+2TAT+R8AAAAqI+b+uTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfzzMJJP8DwAAADmIuf/xMBP5HwAAACoj5v4nwkzkfwAAAKiMmPufDDPJJP/r/+v/6/+f6v+/sr9++Xnq/9d7fv/H3l3vanZWcRx/y2SAhBCuhSvgErgGLgN3Ke7u7u7u7u7uUCiuSUmYtdaB6XTvc9529332sz6ff1bamUyfdpImv0y+2fp//b/+/0L0//r/g/7/aKfu5/f+fv2//p91o/X/ufvvHbc02f8AAADQQe7++8Qt9j8AAABMI3f/feMW+x8AAACmkbv/fnFLk/2v/9f/6/99/1//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7r9/3NJk/wMAAEAHufsfELfY/wAAADCN3P0PjFvsfwAAAJhG7v4HxS1N9r/+X/+v/9f/6//1/1vS/+v/l+j/9f97fr/+X//PutH6/9z9D45bmux/AAAA6CB3/0PiFvsfAAAAppG7/6Fxi/0PAAAA08jd/7C4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v1//r/1k3Wv+fu//hcUuT/Q8AAAAd5O5/RNxi/wMAAMA0cvc/Mm6x/wEAAGAaufsfFbc02f/6f/2//l//r//X/29J/6//X6L/1//v+f36f/0/6zbv/+95/X/vefv/3P3Xxy1N9j8AAAB0kLv/0XGL/Q8AAADTyN3/mLjF/gcAAIBp5O5/bNzSZP/r//X/Z/3/Tdfp//X/+v+zv6//v23o//X/S/T/o/b/5/svof/X/+v/WbN5/7/S+1/917n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7/4lxS5P9r//X//v+v/5f/6//35L+X/+/RP8/av/v+/+3tv+/xzner/+ng9H6/9z9T4pbmux/AAAA6CB3/5PjFvsfAAAAppG7/ylxi/0PAAAA08jd/9S4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v9/1//T/rRuv/c/c/LW5psv8BAACgg9z9T49b7H8AAACYRu7+Z8Qt9j8AAABMI3f/M+OWJvtf/6//1//r/29V/39J/6//X6b/1/8v0f/r//f8fv2//p91o/X/ufufFbc02f8AAADQQe7+Z8ct9j8AAABMI3f/c+IW+x8AAACmkbv/uXFLk/2v/9f/6//1/77/r//fkv5/uv7/Ov3/Gf2//l//r/9n2Wj9f+7+58UtTfY/AAAAdJC7//lxi/0PAAAA08jd/4K4xf4HAACAaeTuf2Hc0mT/6//1//p//b/+X/+/Jf3/dP2/7///D/2//l//r/9n2Wj9f+7+F8Uta8Pv8sqPAwAAAMPI3f/iuKXJn/8DAABAB7n7XxK32P8AAAAwjdz9L41bmux//b/+X/+v/9f/6/+3pP/X/y/R/1+7/7/zLfzz9P9jvV//r/9n3Wj9f+7+l8UtTfY/AAAAdJC7/+Vxi/0PAAAA08jd/4q4xf4HAACAaeTuf2Xc0mT/31L/f+Ndrvy4/v989P/Xfr/+X/+v/9f/6//1/0v0/77/v+f36//1/6wbrf/P3f+quKXJ/gcAAIAOcve/Om6x/wEAAGAauftfE7fY/wAAADCN3P2vjVua7H/f/9f/6//1//p//f+W9P/6/yX6f/3/nt+v/9f/s260/j93/+vilib7HwAAADrI3f/6uMX+BwAAgGnk7n9D3GL/AwAAwDRy978xbmmy//X/+v+T9/930P8n/X/8vur/9f8XoP/X/x/0/0c7dT+/9/fr//X/rBut/8/d/6a4pcn+BwAAgA5y9785brH/AQAAYBq5+98St9j/AAAAMI3c/W+NW5rsf/2//v/k/b/v/xf9f/y+6v/1/xeg/9f/H/T/Rzt1P7/39+v/9f+sG63/z93/trilyf4HAACADnL3vz1usf8BAABgGrn73xG32P8AAAAwjdz974xbmux//b/+X/+v/9f/6/+3pP/X/y/R/+v/9/x+/b/+n3Wj9f+5+98VtzTZ/wAAANBB7v53xy32PwAAAEwjd/974hb7HwAAAKaRu/+9cUuT/a//33v/f68b4gX6f/2//l//PyT9v/5/if5f/7/n9+v/9f+sG63/z93/vrilyf4HAACADnL3vz9usf8BAABgGrn7PxC32P8AAAAwjdz9H4xbmuz/Hv3/5Zv9tHn6f9//1//r//X/Y9P/6/+X6P/1/3t+v/5f/8+60fr/3P0filua7H8AAADoIHf/h+MW+x8AAACmkbv/I3GL/Q8AAADTyN3/0bilyf7v0f/fXIP+P/+1bt/+/6a76f/1/0X/r/8/6P/1/yv0//r/Pb9f/6//Z91o/X/u/o/FLU32PwAAAHSQu//jcYv9DwAAANPI3f+JuMX+BwAAgGnk7v9k3HD3u57uSbcr/f+0/b/v/+v/9f/6/yHo//X/S/T/+v89v1//r/9n3Wj9f+7+T8Ut/vwfAAAAppG7/9Nxi/0PAAAA08jd/5m4xf4HAACAaeTu/2zc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+5uKXJ/gcAAIAOcvd/Pm6x/wEAAGAaufu/ELfY/wAAADCN3P1fjFua7H/9v/5f/3+b9f+Xr/719f/6f/2//l//v0z/r//f8/v1//p/1o3W/+fu/1Lc0mT/AwAAQAe5+78ct9j/AAAAMI3c/V+JW+x/AAAAmEbu/q/GLU32v/5f/6//9/1//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/a3FLk/0PAAAAHeTu/3rcYv8DAADANHL3fyNusf8BAABgGrn7vxm3NNn/M/f/Sz9N/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/934hb7HwAAAKaRu/+7cUuT/T9z/79E/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+HcUuT/a//1//r//X/+n/9/5b0//r/Jfp//f+e36//1/+zbrT+P3f/j+KWJvsfAAAAOsjd/+O4xf4HAACAaeTu/0ncYv8DAADANHL3/zRuabL/9f/6f/3/UP3/Ha/+dfT/+n/9/zL9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v6fxS1N9j8AAAB0kLv/53GL/Q8AAADTyN3/i7jF/gcAAIBp5O7/ZdzSZP/r//X/+v+j+/9LB9///7/36P/1/9ei/9f/L9H/6//3/H79v/6fdaP1/7n7fxW3NNn/AAAA0EHu/l/HLfY/AAAATCN3/2/iFvsfAAAAppG7/7dxS5P9r//X/+v/h/r+v/5f/6//vyD9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v4b4pYm+x8AAAA6yN3/u7jF/gcAAIBp5O7/fdxi/wMAAMA0cvffGLc02f/6f/3/lP3/nfT/+n/9/yj0//r/Jfp//f+e36//1/+zbrT+P3f/H+KWJvsfAAAAOsjd/8e4xf4HAACAaeTu/1PcYv8DAADANHL3/zluabL/9f/6/yn7f9//1//vrf+/dPY/YP3/xej/9f8H/f/RTt3P7/39+n/9P+tG6/9z9/8lbmmy/wEAAKCD3P1/jVvsfwAAAJhG7v6/xS32PwAAAEwjd//f45Ym+1//r//X/+v/9f8D9P++/380/b/+/6D/P9qp+/m9v1//r/9n3Wj9f+7+f8QtTfY/AAAAdJC7/59xi/0PAAAA08jd/6+4xf4HAACAaeTu/3fc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+fAAAA//9nkS0F")
quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000005880)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000007900))

859.954501ms ago: executing program 3 (id=3452):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r0, 0x0)
listen(r0, 0x0)
r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0xa25d, 0x0, 0x0, 0x0)

691.380056ms ago: executing program 3 (id=3453):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x9575, 0x10100}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0, 0x0, 0x800}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1})
syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
io_uring_enter(r1, 0x2e06, 0x3071, 0x0, 0x0, 0xa5)

577.18983ms ago: executing program 5 (id=3454):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

412.740347ms ago: executing program 5 (id=3455):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=")
pipe2$9p(0x0, 0x800)
write$tcp_mem(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, <r1=>0x0}, &(0x7f00000002c0)=0xc)
lchown(&(0x7f0000000980)='./file1\x00', 0xee01, r1)

407.437741ms ago: executing program 6 (id=3456):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xa, @local, 0x806}, 0x1c)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)

310.190169ms ago: executing program 6 (id=3457):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4)
write$binfmt_script(r0, 0x0, 0x6f4000)

260.719354ms ago: executing program 5 (id=3458):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)

260.29965ms ago: executing program 6 (id=3459):
setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0)
getitimer(0x1, &(0x7f00000001c0))

168.895124ms ago: executing program 6 (id=3460):
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x7f, 0x4, 0xffff, 0xba03, 0x89, "0300"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"})
r1 = syz_open_pts(r0, 0x101000)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

95.878065ms ago: executing program 5 (id=3461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0xe, 0x4, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000004e8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)

91.424172ms ago: executing program 3 (id=3462):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x8, 0x20}, 0xc)

87.872893ms ago: executing program 5 (id=3463):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000d060102000000000000000006000007050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000844)

0s ago: executing program 5 (id=3464):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x2)
lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

sing attributes in process `syz.3.1848'.
[  221.379316][T10536] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  221.494983][   T34] audit: type=1800 audit(2000000141.130:39): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1853" name="/" dev="tmpfs" ino=129 res=0 errno=0
[  221.598994][T10549] loop4: detected capacity change from 0 to 4096
[  221.602429][T10549] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  221.665234][T10549] ntfs3(loop4): ino=19, mi_enum_attr
[  221.682749][T10549] ntfs3(loop4): failed to convert "c46c" to cp857
[  221.722050][T10549] ntfs3(loop4): ino=20, mi_enum_attr
[  221.884790][T10563] syz_tun: entered allmulticast mode
[  221.899949][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'.
[  221.937373][T10563] syz_tun (unregistering): left allmulticast mode
[  222.834597][T10584] loop1: detected capacity change from 0 to 40427
[  222.838882][T10584] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  222.841776][T10584] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  222.845981][T10584] F2FS-fs (loop1): invalid crc value
[  222.918576][T10584] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  222.926552][T10584] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  222.929725][T10584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  224.391072][T10615] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1879'.
[  225.639716][T10668] loop1: detected capacity change from 0 to 1024
[  225.656204][T10668] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  225.685316][T10668] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  225.693064][T10668] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1905: Failed to acquire dquot type 0
[  225.696606][T10668] loop1: lost filesystem error report for type 5 error -5
[  225.698517][T10668] EXT4-fs (loop1): 1 truncate cleaned up
[  225.703123][T10668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.764097][T10668] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  225.805367][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.952435][T10683] ipvlan2: entered promiscuous mode
[  226.048851][T10689] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  226.111233][T10692] xt_hashlimit: size too large, truncated to 1048576
[  226.686382][   T32] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  226.861487][   T32] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  226.869474][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.875832][   T32] usb 2-1: Product: syz
[  226.878798][   T32] usb 2-1: Manufacturer: syz
[  226.881009][   T32] usb 2-1: SerialNumber: syz
[  226.886698][   T32] usb 2-1: config 0 descriptor??
[  227.097801][   T32] usb 2-1: USB disconnect, device number 19
[  227.425781][T10744] loop4: detected capacity change from 0 to 2048
[  227.432837][T10744] UDF-fs: error (device loop4): udf_load_sparable_map: error loading logical volume descriptor: Too big sparing table size (134218040)
[  227.437278][T10744] UDF-fs: Scanning with blocksize 512 failed
[  227.443148][T10744] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  227.445647][T10744] UDF-fs: Scanning with blocksize 1024 failed
[  227.450382][T10744] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  227.453679][T10744] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  227.457900][T10744] UDF-fs: Scanning with blocksize 2048 failed
[  227.460344][T10744] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  227.464284][T10744] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  227.468250][T10744] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  227.471081][T10744] UDF-fs: Scanning with blocksize 4096 failed
[  227.473304][T10744] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  227.491171][T10744] binder: 10743:10744 ioctl c018620c 2000000001c0 returned -22
[  227.494636][T10744] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1936'.
[  228.514615][ T5841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  228.534490][ T5841] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  230.220147][T10810] loop1: detected capacity change from 0 to 32768
[  230.481489][T10831] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1969'.
[  230.615024][T10841] loop1: detected capacity change from 0 to 8
[  230.640699][T10841] SQUASHFS error: lzo decompression failed, data probably corrupt
[  230.651452][T10841] SQUASHFS error: Failed to read block 0x91: -5
[  230.653894][T10841] SQUASHFS error: Unable to read metadata cache entry [8f]
[  230.663941][T10841] SQUASHFS error: Unable to read inode 0x11f
[  231.987229][T10876] loop4: detected capacity change from 0 to 2048
[  232.033379][T10876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.049665][T10876] EXT4-fs (loop4): shut down requested (2)
[  232.084627][ T9940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.906397][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  232.919173][T10899] xt_hashlimit: size too large, truncated to 1048576
[  233.062185][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.076476][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.080650][ T5875] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  233.084124][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.117417][ T5875] usb 5-1: config 0 descriptor??
[  233.405885][T10905] tc_dump_action: action bad kind
[  233.531827][ T5875] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  233.534550][ T5875] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  233.541484][ T5875] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  233.544353][ T5875] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  233.547625][ T5875] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  233.549924][ T5875] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  233.552035][ T5875] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  233.557648][ T5875] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  233.726577][ T5875] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE
[  233.747521][T10907] loop1: detected capacity change from 0 to 40427
[  233.753697][T10907] F2FS-fs (loop1): Corrupted extension count (720933 + 1 > 64)
[  233.756027][T10907] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  233.759430][T10907] F2FS-fs (loop1): Image doesn't support compression
[  233.761581][T10907] F2FS-fs (loop1): build fault injection rate: 690
[  233.765264][T10907] F2FS-fs (loop1): invalid crc value
[  234.048682][T10907] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  234.052174][T10907] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  234.054602][T10907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  234.298970][T10924] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  234.298970][T10924] The task syz.1.1999 (10924) triggered the difference, watch for misbehavior.
[  234.488165][T10926] ipt_rpfilter: unknown options
[  234.535249][ T5863] usb 5-1: USB disconnect, device number 6
[  235.782829][T10947] loop4: detected capacity change from 0 to 32768
[  236.183194][T10960] loop4: detected capacity change from 0 to 256
[  236.193258][T10960] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  236.264072][T10967] binder: 10966:10967 ioctl c00c6211 0 returned -14
[  236.317279][T10971] loop1: detected capacity change from 0 to 512
[  236.323323][T10971] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  236.345230][T10971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  236.350245][T10973] ip6t_rpfilter: unknown options
[  236.356617][T10971] EXT4-fs (loop1): 1 orphan inode deleted
[  236.358335][T10971] EXT4-fs (loop1): 1 truncate cleaned up
[  236.361149][T10971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.392248][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.415012][T10977] loop4: detected capacity change from 0 to 2048
[  236.440298][T10978] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.449435][   T34] audit: type=1800 audit(2000000156.090:40): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2021" name="file1" dev="loop4" ino=15 res=0 errno=0
[  237.257459][T11003] loop1: detected capacity change from 0 to 1024
[  239.269034][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2061'.
[  239.279752][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2061'.
[  239.289131][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2061'.
[  239.291734][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2061'.
[  239.395000][T11067] loop1: detected capacity change from 0 to 32768
[  239.443090][T11067] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  239.443090][T11067] 
[  239.460720][T11067] ERROR: (device loop1): remounting filesystem as read-only
[  239.650055][T11088] loop1: detected capacity change from 0 to 1024
[  241.289144][T11131] loop1: detected capacity change from 0 to 2048
[  241.305665][T11133] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.315929][   T34] audit: type=1800 audit(2000000160.950:41): pid=11131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2087" name="file1" dev="loop1" ino=15 res=0 errno=0
[  241.332522][T11134] loop4: detected capacity change from 0 to 512
[  241.360465][T11134] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  241.363996][T11134] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  241.398528][T11134] EXT4-fs (loop4): orphan cleanup on readonly fs
[  241.402011][T11134] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2088: bad orphan inode 15
[  241.412113][T11134] loop4: lost filesystem error report for type 5 error -117
[  241.416318][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  241.421663][    C1] EXT4-fs (loop4): initial error at time 2000000161: ext4_orphan_get:1417
[  241.425395][    C1] EXT4-fs (loop4): last error at time 2000000161: ext4_orphan_get:1417
[  241.431077][T11134] ext4_test_bit(bit=14, block=18) = 1
[  241.433603][T11134] is_bad_inode(inode)=0
[  241.435183][T11134] NEXT_ORPHAN(inode)=1023
[  241.438098][T11134] max_ino=32
[  241.439360][T11134] i_nlink=0
[  241.449711][T11134] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2970: inode #15: comm syz.4.2088: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  241.459671][T11134] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  241.460100][T11134] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117)
[  241.479937][T11134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  241.497510][T11140] overlayfs: failed to clone upperpath
[  241.522689][ T9940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.612158][T11144] loop4: detected capacity change from 0 to 764
[  241.692077][ T5841] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  241.849517][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.855774][ T5841] usb 2-1: config 0 has no interfaces?
[  241.859687][ T5841] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  241.863582][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.868907][ T5841] usb 2-1: config 0 descriptor??
[  242.076929][ T5863] usb 2-1: USB disconnect, device number 20
[  242.143179][T11173] program syz.4.2106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.771432][T11187] loop4: detected capacity change from 0 to 1024
[  242.788378][T11187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.800751][T11187] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.429839][T11202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2117'.
[  243.436500][T11202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2117'.
[  243.856741][ T9940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  243.867584][T11212] loop1: detected capacity change from 0 to 764
[  243.953780][T11215] Symlink component flag not implemented
[  243.955976][T11215] Symlink component flag not implemented
[  243.959603][T11215] Symlink component flag not implemented (128)
[  243.961611][T11215] Symlink component flag not implemented (122)
[  243.964656][T11214] netlink: 'syz.4.2122': attribute type 8 has an invalid length.
[  244.140694][T11217] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  244.679479][   T34] audit: type=1326 audit(2000000164.320:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.717393][   T34] audit: type=1326 audit(2000000164.320:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.754475][   T34] audit: type=1326 audit(2000000164.320:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.794582][   T34] audit: type=1326 audit(2000000164.320:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.834498][   T34] audit: type=1326 audit(2000000164.320:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.851190][   T34] audit: type=1326 audit(2000000164.320:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.861160][   T34] audit: type=1326 audit(2000000164.320:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.870954][   T34] audit: type=1326 audit(2000000164.320:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.881269][   T34] audit: type=1326 audit(2000000164.320:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  244.889843][   T34] audit: type=1326 audit(2000000164.320:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.3.2130" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d0f9c799 code=0x7ffc0000
[  245.500437][T11266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  245.876435][   T32] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  246.154715][   T32] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  246.159913][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.163767][   T32] usb 2-1: Product: syz
[  246.165413][   T32] usb 2-1: Manufacturer: syz
[  246.168049][   T32] usb 2-1: SerialNumber: syz
[  246.190219][   T32] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  246.231125][ T5863] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  246.937711][T11292] netlink: 'syz.3.2158': attribute type 30 has an invalid length.
[  246.973477][T11294] xt_hashlimit: size too large, truncated to 1048576
[  247.036791][T11297] x9: renamed from bridge_slave_0 (while UP)
[  247.538299][ T5863] usb 2-1: Service connection timeout for: 256
[  247.543207][ T5863] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  247.573469][ T5863] ath9k_htc: Failed to initialize the device
[  247.587409][ T5863] usb 2-1: ath9k_htc: USB layer deinitialized
[  247.801704][ T5863] usb 2-1: USB disconnect, device number 21
[  247.963243][T11322] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2171'.
[  248.592807][T11352] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2186'.
[  248.618599][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'.
[  248.621350][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'.
[  248.770828][T11361] netlink: 'syz.4.2190': attribute type 1 has an invalid length.
[  248.799419][T11361] 8021q: adding VLAN 0 to HW filter on device bond2
[  248.812659][T11361] bond2: (slave gretap1): making interface the new active one
[  248.817220][T11361] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  249.106529][ T5841] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  249.258381][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.262326][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  249.268822][ T5841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.271601][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  249.273871][ T5841] usb 5-1: SerialNumber: syz
[  249.279036][ T5841] cdc_ether 5-1:1.0: invalid descriptor buffer length
[  249.281136][ T5841] usb 5-1: bad CDC descriptors
[  249.490161][ T5841] usb 5-1: USB disconnect, device number 7
[  249.577163][T11376] team0: Port device dummy0 removed
[  249.584683][T11376] batman_adv: batadv0: Adding interface: dummy0
[  249.589153][T11376] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.604646][T11376] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  249.652025][T11383] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2200'.
[  249.695954][T11383] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2200'.
[  250.062667][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'.
[  250.167248][T11403] loop4: detected capacity change from 0 to 512
[  250.174956][T11403] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2209: Directory hole found for htree index block 0
[  250.183394][T11403] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  250.192010][T11403] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  250.197514][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  250.197529][    C1] EXT4-fs (loop4): initial error at time 2000000169: dx_probe:791: inode 2
[  250.197544][    C1] EXT4-fs (loop4): last error at time 2000000169: dx_probe:791: inode 2
[  250.207272][T11403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.217225][T11403] EXT4-fs (loop4): shut down requested (2)
[  250.230496][ T9940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.425077][   T34] kauditd_printk_skb: 4 callbacks suppressed
[  250.425096][   T34] audit: type=1326 audit(2000000170.060:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11415 comm="syz.4.2214" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x0
[  250.657703][T11425] sctp: [Deprecated]: syz.4.2219 (pid 11425) Use of int in maxseg socket option.
[  250.657703][T11425] Use struct sctp_assoc_value instead
[  250.665271][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'.
[  250.738020][T11428] loop4: detected capacity change from 0 to 4096
[  250.741239][T11428] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  250.817028][T11432] loop4: detected capacity change from 0 to 256
[  250.825272][T11432] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  251.010365][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'.
[  251.139132][T11446] bond2: option all_slaves_active: invalid value (13)
[  251.339019][T11446] bond2 (unregistering): Released all slaves
[  251.616550][T11463] loop1: detected capacity change from 0 to 4096
[  251.625288][T11463] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  251.663058][T11459] loop4: detected capacity change from 0 to 32768
[  251.677222][T11459] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2234 (11459)
[  252.114229][T11459] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.118068][T11459] BTRFS info (device loop4): using sha256 checksum algorithm
[  252.239848][T11459] BTRFS info (device loop4): rebuilding free space tree
[  252.264804][T11459] BTRFS info (device loop4): enabling ssd optimizations
[  252.267732][T11459] BTRFS info (device loop4): using spread ssd allocation scheme
[  252.270005][T11459] BTRFS info (device loop4): turning on async discard
[  252.272021][T11459] BTRFS info (device loop4): enabling free space tree
[  252.286679][T11459] BTRFS info (device loop4): force clearing of disk cache
[  252.318115][ T9940] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.455009][T11480] loop1: detected capacity change from 0 to 32768
[  252.469791][T11480] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2239 (11480)
[  252.521055][T11480] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.524347][T11480] BTRFS info (device loop1): using sha256 checksum algorithm
[  252.590143][T11480] BTRFS info (device loop1): enabling ssd optimizations
[  252.592187][T11480] BTRFS info (device loop1): turning on async discard
[  252.606969][T11480] BTRFS info (device loop1): enabling free space tree
[  252.656146][ T5812] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  255.092777][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'.
[  255.098670][T11661] netlink: 'syz.3.2273': attribute type 1 has an invalid length.
[  255.100479][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'.
[  255.638110][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'.
[  255.641848][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'.
[  255.817467][T11685] team0: Device vlan2 is already an upper device of the team interface
[  255.960915][T11697] loop1: detected capacity change from 0 to 1024
[  256.806651][   T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  256.969965][   T32] usb 5-1: Using ep0 maxpacket: 32
[  256.973707][   T32] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  256.987500][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7
[  256.996512][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  257.009443][   T32] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  257.014087][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.017956][   T32] usb 5-1: Product: syz
[  257.019641][   T32] usb 5-1: Manufacturer: syz
[  257.021600][   T32] usb 5-1: SerialNumber: syz
[  257.032087][   T32] usb 5-1: config 0 descriptor??
[  257.041426][   T32] usb 5-1: no audio or video endpoints found
[  257.044006][T11726] tipc: Started in network mode
[  257.056509][T11726] tipc: Node identity , cluster identity 4711
[  257.107660][T11728] netlink: 'syz.1.2303': attribute type 2 has an invalid length.
[  257.110252][T11728] netlink: 'syz.1.2303': attribute type 1 has an invalid length.
[  257.112598][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'.
[  257.290374][   T32] usb 5-1: USB disconnect, device number 8
[  257.508442][   T86] wlan1: Trigger new scan to find an IBSS to join
[  258.044656][T11754] loop4: detected capacity change from 0 to 32768
[  258.128070][T11757] ubi31: attaching mtd0
[  258.130118][T11757] ubi31 error: ubi_attach_mtd_dev: bad VID header (262144) or data offsets (262208)
[  258.280983][T11765] loop1: detected capacity change from 0 to 2048
[  258.289309][T11765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.586842][   T32] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  258.622872][T11777] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  258.749321][   T32] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  258.757002][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.765799][   T32] usb 5-1: config 0 descriptor??
[  258.784135][   T32] pwc: Samsung MPC-C10 USB webcam detected.
[  258.996470][   T32] pwc: send_video_command error -71
[  258.998457][   T32] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  259.001878][   T32] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  259.689495][   T32] usb 5-1: USB disconnect, device number 9
[  260.195052][T11823] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2341'.
[  260.346431][   T32] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  260.506424][   T32] usb 2-1: Using ep0 maxpacket: 16
[  260.510542][   T32] usb 2-1: unable to get BOS descriptor or descriptor too short
[  260.518565][   T32] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 511
[  260.529264][   T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  260.542954][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.551323][   T32] usb 2-1: Product: syz
[  260.552862][   T32] usb 2-1: Manufacturer: syz
[  260.555348][   T32] usb 2-1: SerialNumber: syz
[  260.785111][   T32] cdc_ncm 2-1:1.0: bind() failure
[  260.797644][   T32] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  260.800379][   T32] cdc_ncm 2-1:1.1: bind() failure
[  260.811571][   T32] usb 2-1: USB disconnect, device number 22
[  260.959373][ T5821] Bluetooth: hci3: hcon ffff88816bdc0000 sent 0 < count 137
[  260.962633][ T5821] Bluetooth: hci3: hcon ffff88816bdc0000 sent 0 < count 6
[  260.965951][ T5821] Bluetooth: hci3: hcon ffff88816bdc0000 sent 0 < count 255
[  261.289470][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  261.291630][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  261.864146][T11870] netlink: 'syz.3.2360': attribute type 20 has an invalid length.
[  261.868769][T11870] IPv6: NLM_F_CREATE should be specified when creating new route
[  261.871259][T11870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  261.874346][T11870] IPv6: NLM_F_CREATE should be set when creating new route
[  262.327293][ T1096] wlan1: Trigger new scan to find an IBSS to join
[  262.626482][   T32] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  262.792384][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.797400][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.801014][   T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  262.805823][   T32] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  262.809783][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.818593][   T32] usb 2-1: config 0 descriptor??
[  262.993285][T11917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2384'.
[  262.999223][T11917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2384'.
[  263.243977][   T32] hid (null): bogus close delimiter
[  263.253312][   T32] hid-multitouch 0003:0EEF:72D0.000F: bogus close delimiter
[  263.258467][ T9469] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  263.296855][   T32] hid-multitouch 0003:0EEF:72D0.000F: item 0 0 2 10 parsing failed
[  263.368967][   T32] hid-multitouch 0003:0EEF:72D0.000F: probe with driver hid-multitouch failed with error -22
[  263.463749][   T32] usb 2-1: USB disconnect, device number 23
[  263.531533][T11932] syz.4.2391: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  263.537714][T11932] CPU: 0 UID: 0 PID: 11932 Comm: syz.4.2391 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.537738][T11932] Tainted: [L]=SOFTLOCKUP
[  263.537742][T11932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.537752][T11932] Call Trace:
[  263.537759][T11932]  <TASK>
[  263.537766][T11932]  dump_stack_lvl+0xe8/0x150
[  263.537794][T11932]  warn_alloc+0x249/0x340
[  263.537813][T11932]  ? stack_trace_save+0xa9/0x100
[  263.537830][T11932]  ? __pfx_warn_alloc+0x10/0x10
[  263.537850][T11932]  ? kasan_save_track+0x4f/0x80
[  263.537863][T11932]  ? kasan_save_track+0x3e/0x80
[  263.537907][T11932]  ? __kasan_kmalloc+0x93/0xb0
[  263.537921][T11932]  ? __kmalloc_cache_noprof+0x31c/0x660
[  263.537938][T11932]  ? xskq_create+0x56/0x170
[  263.537951][T11932]  ? xsk_setsockopt+0x54c/0x990
[  263.537969][T11932]  ? do_sock_setsockopt+0x17c/0x1b0
[  263.537982][T11932]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  263.537993][T11932]  ? do_syscall_64+0x14d/0xf80
[  263.538009][T11932]  __vmalloc_node_range_noprof+0x132/0x1730
[  263.538046][T11932]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  263.538066][T11932]  ? __kasan_kmalloc+0x93/0xb0
[  263.538085][T11932]  vmalloc_user_noprof+0xad/0xe0
[  263.538101][T11932]  ? xskq_create+0xbf/0x170
[  263.538114][T11932]  xskq_create+0xbf/0x170
[  263.538130][T11932]  xsk_init_queue+0x8a/0xe0
[  263.538153][T11932]  xsk_setsockopt+0x54c/0x990
[  263.538172][T11932]  ? __pfx_xsk_setsockopt+0x10/0x10
[  263.538190][T11932]  ? __pfx_aa_sk_perm+0x10/0x10
[  263.538213][T11932]  ? aa_sock_opt_perm+0xff/0x1a0
[  263.538235][T11932]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  263.538250][T11932]  ? __pfx_xsk_setsockopt+0x10/0x10
[  263.538271][T11932]  do_sock_setsockopt+0x17c/0x1b0
[  263.538291][T11932]  __x64_sys_setsockopt+0x13d/0x1b0
[  263.538308][T11932]  do_syscall_64+0x14d/0xf80
[  263.538322][T11932]  ? trace_irq_disable+0x3b/0x150
[  263.538344][T11932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.538362][T11932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.538378][T11932] RIP: 0033:0x7ff9f179c799
[  263.538393][T11932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.538408][T11932] RSP: 002b:00007ff9f2715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  263.538423][T11932] RAX: ffffffffffffffda RBX: 00007ff9f1a16090 RCX: 00007ff9f179c799
[  263.538433][T11932] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  263.538441][T11932] RBP: 00007ff9f1832c99 R08: 0000000000007e00 R09: 0000000000000000
[  263.538450][T11932] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.538458][T11932] R13: 00007ff9f1a16128 R14: 00007ff9f1a16090 R15: 00007fffcba048d8
[  263.538480][T11932]  </TASK>
[  263.538487][T11932] Mem-Info:
[  263.643198][T11932] active_anon:10045 inactive_anon:0 isolated_anon:0
[  263.643198][T11932]  active_file:19458 inactive_file:38447 isolated_file:0
[  263.643198][T11932]  unevictable:1768 dirty:303 writeback:0
[  263.643198][T11932]  slab_reclaimable:11122 slab_unreclaimable:84965
[  263.643198][T11932]  mapped:22197 shmem:5443 pagetables:1353
[  263.643198][T11932]  sec_pagetables:0 bounce:0
[  263.643198][T11932]  kernel_misc_reclaimable:0
[  263.643198][T11932]  free:1110101 free_pcp:22461 free_cma:0
[  263.660841][T11932] Node 0 active_anon:22780kB inactive_anon:0kB active_file:25124kB inactive_file:127896kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32968kB dirty:312kB writeback:0kB shmem:16728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  263.672695][T11932] Node 1 active_anon:17400kB inactive_anon:0kB active_file:52708kB inactive_file:25892kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55820kB dirty:900kB writeback:0kB shmem:5044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5116kB pagetables:2964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  263.684830][T11932] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  263.696503][T11932] lowmem_reserve[]: 0 1587 2117 2117 2117
[  263.698696][T11932] Node 0 DMA32 free:1440140kB boost:0kB min:25028kB low:31284kB high:37540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10592kB inactive_anon:0kB active_file:23900kB inactive_file:43196kB unevictable:0kB writepending:188kB zspages:0kB present:2080636kB managed:1625436kB mlocked:0kB bounce:0kB free_pcp:37824kB local_pcp:24588kB free_cma:0kB
[  263.711532][T11932] lowmem_reserve[]: 0 0 530 530 530
[  263.713520][T11932] Node 0 Normal free:16552kB boost:6144kB min:14656kB low:16784kB high:18912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12188kB inactive_anon:0kB active_file:1224kB inactive_file:84700kB unevictable:3536kB writepending:124kB zspages:0kB present:1572868kB managed:543364kB mlocked:0kB bounce:0kB free_pcp:2428kB local_pcp:2288kB free_cma:0kB
[  263.726370][T11932] lowmem_reserve[]: 0 0 0 0 0
[  263.728198][T11932] Node 1 Normal free:2968096kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17400kB inactive_anon:0kB active_file:52708kB inactive_file:25892kB unevictable:3536kB writepending:900kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:49644kB local_pcp:28628kB free_cma:0kB
[  263.740963][T11932] lowmem_reserve[]: 0 0 0 0 0
[  263.742845][T11932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  263.748159][T11932] Node 0 DMA32: 17*4kB (E) 23*8kB (UME) 59*16kB (UM) 9*32kB (UME) 24*64kB (U) 69*128kB (UME) 59*256kB (UME) 32*512kB (UM) 28*1024kB (UM) 14*2048kB (UM) 327*4096kB (UM) = 1440076kB
[  263.756560][T11932] Node 0 Normal: 434*4kB (UME) 195*8kB (UE) 173*16kB (UME) 63*32kB (UME) 17*64kB (M) 32*128kB (UM) 11*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 16592kB
[  263.762912][T11932] Node 1 Normal: 790*4kB (UME) 331*8kB (UME) 519*16kB (UME) 516*32kB (UME) 313*64kB (UME) 221*128kB (UME) 106*256kB (UM) 37*512kB (UM) 16*1024kB (UME) 4*2048kB (UE) 688*4096kB (UM) = 2967648kB
[  263.771034][T11932] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  263.774459][T11932] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  263.778002][T11932] 63312 total pagecache pages
[  263.780253][T11932] 0 pages in swap cache
[  263.781822][T11932] Free swap  = 124996kB
[  263.783383][T11932] Total swap = 124996kB
[  263.784932][T11932] 1834877 pages RAM
[  263.786542][T11932] 0 pages HighMem/MovableOnly
[  263.788264][T11932] 390165 pages reserved
[  263.789818][T11932] 0 pages cma reserved
[  264.372433][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2401'.
[  264.452119][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2401'.
[  264.704664][T11973] loop1: detected capacity change from 0 to 4096
[  264.715229][T11973] EXT4-fs (loop1): Test dummy encryption mode enabled
[  264.727468][T11973] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  264.730509][T11973] System zones: 0-5
[  264.736160][T11973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.773395][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.919231][T12022] vxcan1: entered allmulticast mode
[  265.929495][T12022] vxcan1: left allmulticast mode
[  265.937901][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2430'.
[  266.360889][T12050] loop1: detected capacity change from 0 to 256
[  266.378247][T12050] FAT-fs (loop1): Directory bread(block 64) failed
[  266.380792][T12050] FAT-fs (loop1): Directory bread(block 65) failed
[  266.383254][T12050] FAT-fs (loop1): Directory bread(block 66) failed
[  266.402977][T12050] FAT-fs (loop1): Directory bread(block 67) failed
[  266.406167][T12050] FAT-fs (loop1): Directory bread(block 68) failed
[  266.422301][T12050] FAT-fs (loop1): Directory bread(block 69) failed
[  266.424785][T12050] FAT-fs (loop1): Directory bread(block 70) failed
[  266.428996][T12050] FAT-fs (loop1): Directory bread(block 71) failed
[  266.431386][T12050] FAT-fs (loop1): Directory bread(block 72) failed
[  266.433972][T12050] FAT-fs (loop1): Directory bread(block 73) failed
[  266.537870][T12048] loop4: detected capacity change from 0 to 40427
[  266.543913][T12048] F2FS-fs (loop4): invalid crc value
[  266.619110][T12048] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  266.625484][T12048] F2FS-fs (loop4): Start checkpoint disabled!
[  266.632100][T12048] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  266.635373][T12048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  266.644425][   T34] audit: type=1800 audit(2000000187.273:57): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2442" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  266.712937][   T34] audit: type=1800 audit(2000000187.343:58): pid=12058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2442" name="bus" dev="loop4" ino=10 res=0 errno=0
[  266.756149][T12058] syz.4.2442: attempt to access beyond end of device
[  266.756149][T12058] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  266.777880][T12058] syz.4.2442: attempt to access beyond end of device
[  266.777880][T12058] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.799745][T12058] syz.4.2442: attempt to access beyond end of device
[  266.799745][T12058] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.816015][T12058] syz.4.2442: attempt to access beyond end of device
[  266.816015][T12058] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.830451][T12058] syz.4.2442: attempt to access beyond end of device
[  266.830451][T12058] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.851088][T12058] syz.4.2442: attempt to access beyond end of device
[  266.851088][T12058] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  266.865333][T12058] syz.4.2442: attempt to access beyond end of device
[  266.865333][T12058] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.882120][T12058] syz.4.2442: attempt to access beyond end of device
[  266.882120][T12058] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  266.896175][T12058] syz.4.2442: attempt to access beyond end of device
[  266.896175][T12058] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  266.908976][T12058] syz.4.2442: attempt to access beyond end of device
[  266.908976][T12058] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  267.208500][T11581] CPU: 1 UID: 0 PID: 11581 Comm: kworker/u10:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  267.208531][T11581] Tainted: [L]=SOFTLOCKUP
[  267.208536][T11581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.208545][T11581] Workqueue: writeback wb_workfn (flush-7:4)
[  267.208572][T11581] Call Trace:
[  267.208580][T11581]  <TASK>
[  267.208586][T11581]  dump_stack_lvl+0xe8/0x150
[  267.208649][T11581]  f2fs_handle_critical_error+0x37c/0x540
[  267.208672][T11581]  f2fs_write_end_io+0xcdb/0xff0
[  267.208704][T11581]  __submit_merged_bio+0x256/0x700
[  267.208726][T11581]  __submit_merged_write_cond+0x3c9/0x4e0
[  267.208749][T11581]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  267.208778][T11581]  f2fs_write_data_pages+0x2975/0x35e0
[  267.208821][T11581]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  267.208848][T11581]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  267.208886][T11581]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  267.208919][T11581]  ? __lock_acquire+0x6b5/0x2cf0
[  267.208945][T11581]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  267.208962][T11581]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  267.208979][T11581]  do_writepages+0x32e/0x550
[  267.209004][T11581]  ? reacquire_held_locks+0x104/0x190
[  267.209022][T11581]  ? writeback_sb_inodes+0x477/0x1a20
[  267.209041][T11581]  __writeback_single_inode+0x133/0x11a0
[  267.209060][T11581]  ? do_raw_spin_unlock+0x4d/0x210
[  267.209077][T11581]  writeback_sb_inodes+0x992/0x1a20
[  267.209114][T11581]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  267.209129][T11581]  ? do_raw_spin_lock+0x12b/0x2f0
[  267.209168][T11581]  ? rcu_is_watching+0x15/0xb0
[  267.209195][T11581]  wb_writeback+0x456/0xb70
[  267.209213][T11581]  ? queue_io+0x211/0x4a0
[  267.209235][T11581]  ? __pfx_wb_writeback+0x10/0x10
[  267.209251][T11581]  ? do_raw_spin_lock+0x12b/0x2f0
[  267.209274][T11581]  wb_workfn+0x414/0xf50
[  267.209290][T11581]  ? look_up_lock_class+0x57/0x110
[  267.209314][T11581]  ? __pfx_wb_workfn+0x10/0x10
[  267.209332][T11581]  ? do_raw_spin_lock+0x12b/0x2f0
[  267.209348][T11581]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  267.209373][T11581]  ? process_scheduled_works+0xa8d/0x18c0
[  267.209397][T11581]  ? process_scheduled_works+0xa8d/0x18c0
[  267.209415][T11581]  process_scheduled_works+0xb6e/0x18c0
[  267.209445][T11581]  ? __pfx_process_scheduled_works+0x10/0x10
[  267.209461][T11581]  ? assign_work+0x3d5/0x5e0
[  267.209475][T11581]  worker_thread+0xa53/0xfc0
[  267.209502][T11581]  kthread+0x388/0x470
[  267.209513][T11581]  ? __pfx_worker_thread+0x10/0x10
[  267.209526][T11581]  ? __pfx_kthread+0x10/0x10
[  267.209537][T11581]  ret_from_fork+0x51e/0xb90
[  267.209554][T11581]  ? __pfx_ret_from_fork+0x10/0x10
[  267.209567][T11581]  ? __switch_to+0xc7d/0x1450
[  267.209587][T11581]  ? __pfx_kthread+0x10/0x10
[  267.209599][T11581]  ret_from_fork_asm+0x1a/0x30
[  267.209662][T11581]  </TASK>
[  267.210456][T11581] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  267.566156][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'.
[  267.838126][T12091] loop1: detected capacity change from 0 to 2048
[  267.844395][T12091] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[  268.097075][T12107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.714783][   T34] audit: type=1326 audit(2000000190.343:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.4.2488" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x0
[  270.598412][T12174] loop4: detected capacity change from 0 to 256
[  270.625769][T12174] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  270.713195][T12182] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  270.949897][T12200] loop1: detected capacity change from 0 to 256
[  270.960892][T12200] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  271.026669][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  271.178397][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  271.182185][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.197446][   T10] usb 5-1: config 0 descriptor??
[  271.205734][   T10] cp210x 5-1:0.0: cp210x converter detected
[  271.428347][T12212] loop1: detected capacity change from 0 to 40427
[  271.431498][T12212] F2FS-fs: inline encryption not supported
[  271.434152][T12212] F2FS-fs (loop1): build fault injection rate: 6
[  271.437275][T12212] F2FS-fs (loop1): build fault injection type: 0x77
[  271.440493][T12212] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of get_checkpoint_version+0x3e/0x400
[  271.445046][T12212] F2FS-fs (loop1): invalid crc value
[  271.448236][T12212] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x491a/0x7740
[  271.452327][T12212] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  271.627582][   T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  271.635362][T12230] loop1: detected capacity change from 0 to 1764
[  271.845368][   T10] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71
[  271.854236][   T10] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  271.872307][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[  272.829822][   T10] usb 5-1: USB disconnect, device number 10
[  272.854866][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  272.866741][   T10] cp210x 5-1:0.0: device disconnected
[  273.325145][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2535'.
[  273.353044][T12255] netlink: 'syz.4.2535': attribute type 7 has an invalid length.
[  273.355484][T12255] netlink: 'syz.4.2535': attribute type 8 has an invalid length.
[  273.363553][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2535'.
[  273.385936][T12255] erspan0: entered promiscuous mode
[  273.394737][T12255] gretap0: entered promiscuous mode
[  273.400543][T12255] erspan0: left promiscuous mode
[  273.405863][T12255] gretap0: left promiscuous mode
[  273.744533][T12259] loop1: detected capacity change from 0 to 32768
[  273.759846][T12259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2537 (12259)
[  273.795080][T12259] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.803936][T12259] BTRFS info (device loop1): using crc32c checksum algorithm
[  273.853414][T12259] BTRFS info (device loop1): enabling ssd optimizations
[  273.856076][T12259] BTRFS info (device loop1): turning on flush-on-commit
[  273.867070][T12259] BTRFS info (device loop1): enabling free space tree
[  273.874773][T12259] BTRFS info (device loop1): enabling auto defrag
[  273.882366][T12259] BTRFS info (device loop1): use lzo compression, level 1
[  273.884587][T12259] BTRFS info (device loop1): max_inline set to 4096
[  273.936591][ T5812] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.108076][T12293] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.221923][T12299] openvswitch: netlink: IP tunnel dst address not specified
[  275.563619][T12360] loop4: detected capacity change from 0 to 1024
[  275.698518][T12366] loop1: detected capacity change from 0 to 4096
[  275.703490][T12366] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  275.724303][T12366] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  275.735906][ T6718] udevd[6718]: incorrect nilfs2 checksum on /dev/loop1
[  275.739228][T12366] NILFS (loop1): mounting unchecked fs
[  275.750887][T12366] NILFS (loop1): invalid segment: Checksum error in segment payload
[  275.753882][T12366] NILFS (loop1): unable to fall back to spare super block
[  275.775679][ T6718] udevd[6718]: incorrect nilfs2 checksum on /dev/loop1
[  275.779859][T12366] NILFS (loop1): error -22 while searching super root
[  275.988781][   T32] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  276.040829][T12383] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[  276.173379][   T32] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  276.186611][   T32] usb 5-1: config 1 has no interface number 0
[  276.189559][   T32] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  276.193886][   T32] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  276.204264][   T32] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  276.214487][   T32] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  276.220679][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.223666][   T32] usb 5-1: Product: syz
[  276.230643][   T32] usb 5-1: Manufacturer: syz
[  276.233010][   T32] usb 5-1: SerialNumber: syz
[  276.248773][T12370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  276.287035][T12398] netlink: 'syz.3.2592': attribute type 29 has an invalid length.
[  276.292093][T12398] netlink: 'syz.3.2592': attribute type 29 has an invalid length.
[  276.296073][T12398] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2592'.
[  276.464770][T12370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  276.473095][   T32] usb 5-1: No status endpoint found
[  276.686470][   T32] usb 5-1: USB disconnect, device number 11
[  276.800131][T12411] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  277.319156][T12438] loop4: detected capacity change from 0 to 512
[  277.360042][T12438] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2607: inode has both inline data and extents flags
[  277.364842][T12438] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  277.367623][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  277.373988][    C1] EXT4-fs (loop4): initial error at time 2000000197: ext4_orphan_get:1391: inode 15
[  277.377562][    C1] EXT4-fs (loop4): last error at time 2000000197: ext4_orphan_get:1391: inode 15
[  277.392961][T12438] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2607: couldn't read orphan inode 15 (err -117)
[  277.412123][T12438] loop4: lost filesystem error report for type 5 error -117
[  277.413544][T12438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  277.536020][ T9940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  277.592316][T12450] loop1: detected capacity change from 0 to 256
[  277.625360][T12450] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  278.691945][T12469] loop3: detected capacity change from 0 to 7
[  278.747579][T12470] smc: net device wlan0 applied user defined pnetid SYZ0
[  278.876822][T12469] Dev loop3: unable to read RDB block 7
[  278.879083][T12469]  loop3: unable to read partition table
[  278.881467][T12469] loop3: partition table beyond EOD, truncated
[  278.884172][T12469] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[  279.057574][   T33] IPVS: starting estimator thread 0...
[  279.120243][T12472] loop4: detected capacity change from 0 to 32768
[  279.132676][T12472] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  279.150574][T12472] XFS (loop4): Ending clean mount
[  279.157972][T12472] XFS (loop4): Quotacheck needed: Please wait.
[  279.166641][T12476] IPVS: using max 67 ests per chain, 160800 per kthread
[  279.188629][T12472] XFS (loop4): Quotacheck: Done.
[  279.193616][   T34] audit: type=1800 audit(2000000199.823:60): pid=12472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2621" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  279.229610][T12488] loop1: detected capacity change from 0 to 1024
[  279.261078][T12488] hfsplus: bad catalog entry type
[  279.288823][   T54] hfsplus: b-tree write err: -5, ino 25
[  279.290528][   T54] hfsplus: b-tree write err: -5, ino 4
[  279.293882][   T54] hfsplus: b-tree write err: -5, ino 2
[  279.476571][ T9940] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  279.568430][   T33] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  279.766777][   T33] usb 2-1: Using ep0 maxpacket: 32
[  279.778976][   T33] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  279.784743][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.797836][   T33] usb 2-1: Product: syz
[  279.799329][   T33] usb 2-1: Manufacturer: syz
[  279.801012][   T33] usb 2-1: SerialNumber: syz
[  279.814083][   T33] usb 2-1: config 0 descriptor??
[  280.021072][   T33] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device:
[  280.024420][   T33] 00 00 00 00 00 00 00 00 
[  280.026202][   T33] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  280.061011][T12515] loop4: detected capacity change from 0 to 1024
[  280.092945][T11581] hfsplus: b-tree write err: -5, ino 25
[  280.094804][T11581] hfsplus: b-tree write err: -5, ino 4
[  280.096664][T11581] hfsplus: b-tree write err: -5, ino 2
[  280.099072][T11581] hfsplus: b-tree write err: -5, ino 17
[  280.248268][   T10] usb 2-1: USB disconnect, device number 24
[  280.995220][T12542] 9p: Bad value for 'rfdno'
[  282.818039][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'.
[  283.376345][   T33] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  283.538881][   T33] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x46, changing to 0x6
[  283.543165][   T33] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  283.547869][   T33] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  283.553526][   T33] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  283.557033][   T33] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  283.560883][   T33] usb 5-1: Manufacturer: syz
[  283.562738][   T33] usb 5-1: SerialNumber: syz
[  283.778917][   T33] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  283.783961][   T33] usb 5-1: USB disconnect, device number 12
[  284.505280][   T34] audit: type=1800 audit(2000000205.133:61): pid=12590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2664" name="file1" dev="tmpfs" ino=4824 res=0 errno=0
[  285.841077][T12567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  285.959352][T12614] loop1: detected capacity change from 0 to 128
[  285.974873][T12614] EXT4-fs (loop1): Test dummy encryption mode enabled
[  285.988683][T12614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  285.992618][T12614] System zones: 1-3, 19-19, 35-36
[  286.010709][T12614] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  286.029315][T12614] ext4 filesystem being mounted at /852/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.083792][ T5812] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  286.323413][T12637] bond3: entered allmulticast mode
[  286.328061][T12637] 8021q: adding VLAN 0 to HW filter on device bond3
[  286.523041][T12649] netlink: 'syz.1.2688': attribute type 2 has an invalid length.
[  286.537725][T12649] #{6c: entered promiscuous mode
[  286.553978][T12649] netlink: 'syz.1.2688': attribute type 2 has an invalid length.
[  287.233498][T12665] loop4: detected capacity change from 0 to 32768
[  287.240037][T12665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2695 (12665)
[  287.255440][T12665] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.259396][T12665] BTRFS info (device loop4): using sha256 checksum algorithm
[  287.390005][T12665] BTRFS info (device loop4): enabling ssd optimizations
[  287.392767][T12665] BTRFS info (device loop4): turning on async discard
[  287.395280][T12665] BTRFS info (device loop4): enabling free space tree
[  288.708136][ T9940] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  288.751634][T12702] 9p: Bad value for 'rfdno'
[  289.026389][T12715] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2710'.
[  289.158833][T12723] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2713'.
[  289.261821][T12729] loop4: detected capacity change from 0 to 4096
[  289.264959][T12729] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  289.269739][T12729] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  289.284913][T12730] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.331107][T12721] loop1: detected capacity change from 0 to 32768
[  289.370685][T12721] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  289.389512][T12721] XFS (loop1): Ending clean mount
[  289.416217][ T5812] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  289.551150][T12742] netlink: 'syz.4.2720': attribute type 4 has an invalid length.
[  289.554088][T12742] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2720'.
[  289.580120][T12742] .`: renamed from bond0 (while UP)
[  290.024932][T12754] loop4: detected capacity change from 0 to 32768
[  290.045840][T12768] loop1: detected capacity change from 0 to 1024
[  290.071843][T12768] EXT4-fs: Ignoring removed orlov option
[  290.085126][T12768] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945)
[  290.110447][T12768] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  290.127375][T12768] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  290.134867][T12768] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[  290.134867][T12768] 
[  290.149914][T12768] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[  290.163340][T12768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  290.189285][T12768] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.2732: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  290.203165][T12768] EXT4-fs (loop1): Remounting filesystem read-only
[  290.227265][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.558499][T12781] netlink: 'syz.3.2739': attribute type 4 has an invalid length.
[  290.616464][   T10] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  290.749781][T12787] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  290.792036][   T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  290.794572][   T10] usb 2-1: config 0 has no interface number 0
[  290.796935][   T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  290.807666][   T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  290.810857][   T10] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  290.814596][   T10] usb 2-1: Manufacturer: syz
[  290.816041][   T10] usb 2-1: SerialNumber: syz
[  290.826000][   T10] usb 2-1: config 0 descriptor??
[  290.963781][T12801] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2748'.
[  290.968251][T12801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2748'.
[  290.971430][T12801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2748'.
[  290.974231][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2748'.
[  291.276636][T12808] loop4: detected capacity change from 0 to 2048
[  291.288214][   T10] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[  291.290797][T12808] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  291.299211][T12811] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2752'.
[  291.310603][T12812] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.326139][   T34] audit: type=1800 audit(2000000211.943:62): pid=12808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2751" name="file2" dev="loop4" ino=16 res=0 errno=0
[  291.336541][   T10] usb 2-1: USB disconnect, device number 25
[  291.704095][T12810] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12
[  291.717903][T12810] Remounting filesystem read-only
[  292.007109][ T9940] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  292.306901][   T10] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  292.458570][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  292.461397][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  292.464742][   T10] usb 2-1: config 2 has an invalid interface number: 212 but max is 1
[  292.468301][   T10] usb 2-1: config 2 has an invalid interface number: 226 but max is 1
[  292.470626][   T10] usb 2-1: config 2 has no interface number 0
[  292.472871][   T10] usb 2-1: config 2 has no interface number 1
[  292.475313][   T10] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  292.480525][   T10] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  292.484555][   T10] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  292.489250][   T10] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  292.493419][   T10] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  292.497374][   T10] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  292.502264][   T10] usb 2-1: config 2 interface 212 has no altsetting 0
[  292.507671][   T10] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  292.511240][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.514496][   T10] usb 2-1: Product: syz
[  292.516181][   T10] usb 2-1: Manufacturer: syz
[  292.518664][   T10] usb 2-1: SerialNumber: syz
[  292.739215][   T10] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input16
[  292.751195][   T10] usb 2-1: USB disconnect, device number 26
[  292.751216][    C1] xpad 2-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  293.256505][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  293.320606][T12855] loop1: detected capacity change from 0 to 136
[  293.332983][T12855] Attempt to read inode for relocated directory
[  293.349067][ T9485] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  293.428396][   T10] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16
[  293.437051][   T10] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32
[  293.446400][   T10] usb 5-1: config 1 interface 0 has no altsetting 0
[  293.452515][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  293.455897][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.463752][   T10] usb 5-1: Product: syz
[  293.465851][   T10] usb 5-1: Manufacturer: syz
[  293.468637][   T10] usb 5-1: SerialNumber: syz
[  293.474271][T12849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  293.477442][T12849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  293.649615][T12864] loop1: detected capacity change from 0 to 32768
[  293.656036][T12864] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2776 (12864)
[  293.680082][T12864] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  293.684844][ T5821] Bluetooth: hci3: Unknown advertising packet type: 0x30
[  293.684869][ T5821] Bluetooth: hci3: adv larger than maximum supported
[  293.687229][ T5821] Bluetooth: hci3: Unknown advertising packet type: 0x7f
[  293.689504][ T5821] Bluetooth: hci3: Malformed LE Event: 0x0d
[  293.694715][T12864] BTRFS info (device loop1): using blake2b checksum algorithm
[  293.707242][   T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  293.720629][   T10] usb 5-1: USB disconnect, device number 13
[  293.749305][T12864] BTRFS info (device loop1): enabling ssd optimizations
[  293.751741][T12864] BTRFS info (device loop1): turning on async discard
[  293.755665][T12864] BTRFS info (device loop1): enabling free space tree
[  293.758251][T12864] BTRFS info (device loop1): use lzo compression, level 1
[  293.776645][   T34] audit: type=1800 audit(2000000214.403:63): pid=12864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2776" name="file1" dev="loop1" ino=260 res=0 errno=0
[  294.428726][T12895] loop4: detected capacity change from 0 to 64
[  294.513945][ T5812] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  294.589436][T12900] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2784'.
[  294.713653][T12902] loop4: detected capacity change from 0 to 4096
[  294.724526][T12902] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  294.931791][T12916] netlink: 'syz.3.2792': attribute type 9 has an invalid length.
[  294.935226][T12916] netlink: 'syz.3.2792': attribute type 11 has an invalid length.
[  294.938368][T12916] netlink: 'syz.3.2792': attribute type 12 has an invalid length.
[  294.941500][T12916] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2792'.
[  294.945070][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2792'.
[  295.453579][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2799'.
[  295.462969][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2799'.
[  295.537660][T12940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2801'.
[  296.001121][T12961] loop4: detected capacity change from 0 to 512
[  296.031673][T12961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.036195][T12961] ext4 filesystem being mounted at /349/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.750788][T12977] overlayfs: failed to clone upperpath
[  296.786352][   T33] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  296.910341][ T9940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.966587][   T33] usb 2-1: Using ep0 maxpacket: 16
[  296.970672][   T33] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  296.974819][   T33] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  296.980026][   T33] usb 2-1: config 0 interface 0 has no altsetting 0
[  296.983103][   T33] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.00
[  296.986562][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.035230][   T33] usb 2-1: config 0 descriptor??
[  297.069108][T12975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  297.084939][   T33] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17
[  297.194153][T12987] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  297.294972][ T5841] usb 2-1: USB disconnect, device number 27
[  297.296407][ T5241] bcm5974 2-1:0.0: could not read from device
[  297.319700][ T6718] bcm5974 2-1:0.0: could not read from device
[  297.350213][T12991] SET target dimension over the limit!
[  297.525753][T12993] overlayfs: invalid origin (0000)
[  297.535326][T12993] overlayfs: failed lookup in lower (newroot/353, name='file0', err=-40): overlapping layers
[  297.988558][ T5841] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  298.146426][ T5841] usb 5-1: Using ep0 maxpacket: 16
[  298.157988][ T5841] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  298.170292][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.177272][ T5841] usb 5-1: Product: syz
[  298.178831][ T5841] usb 5-1: Manufacturer: syz
[  298.180506][ T5841] usb 5-1: SerialNumber: syz
[  298.619276][ T5841] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  298.786422][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  298.844524][ T5841] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2
[  298.878876][ T8697] udevd[8697]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  299.107636][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.114506][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.118326][   T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  299.122907][   T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  299.127736][   T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  299.131501][   T10] usb 2-1: config 220 has no interface number 2
[  299.133864][   T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  299.139605][ T5841] usb 5-1: USB disconnect, device number 14
[  299.145279][   T10] usb 2-1: config 220 interface 0 has no altsetting 0
[  299.148069][   T10] usb 2-1: config 220 interface 76 has no altsetting 0
[  299.150686][   T10] usb 2-1: config 220 interface 1 has no altsetting 0
[  299.155776][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  299.159932][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.163041][   T10] usb 2-1: Product: syz
[  299.164610][   T10] usb 2-1: Manufacturer: syz
[  299.166453][   T10] usb 2-1: SerialNumber: syz
[  299.386674][   T10] usb 2-1: selecting invalid altsetting 0
[  299.392857][   T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  299.395686][   T10] uvcvideo 2-1:220.0: No valid video chain found.
[  299.403405][   T10] usb 2-1: selecting invalid altsetting 0
[  299.405712][   T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  299.412388][   T10] usb 2-1: USB disconnect, device number 28
[  299.819680][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2855'.
[  299.824795][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2856'.
[  299.895630][T13062] 9p: Bad value for 'rfdno'
[  300.011978][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2863'.
[  300.366452][   T32] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  300.496581][ T5841] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  300.520911][   T32] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  300.524079][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.537072][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.541262][   T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  300.548199][   T32] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  300.550838][   T32] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  300.553388][   T32] usb 2-1: Manufacturer: syz
[  300.567297][   T32] usb 2-1: config 0 descriptor??
[  300.656526][ T5841] usb 5-1: Using ep0 maxpacket: 16
[  300.666614][ T5841] usb 5-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  300.670733][ T5841] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  300.674717][ T5841] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  300.679337][ T5841] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  300.684224][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0
[  300.688565][ T5841] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  300.691365][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.694295][ T5841] usb 5-1: Product: syz
[  300.695514][ T5841] usb 5-1: Manufacturer: syz
[  300.697724][ T5841] usb 5-1: SerialNumber: syz
[  300.700939][ T5841] usb 5-1: config 0 descriptor??
[  300.705576][T13086] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  300.711070][ T5841] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18
[  300.922881][ T5841] usb 5-1: USB disconnect, device number 15
[  300.987401][   T32] appleir 0003:05AC:8243.0010: unknown main item tag 0x0
[  301.010931][   T32] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  301.251310][   T32] usb 2-1: USB disconnect, device number 29
[  301.734636][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.737441][T13116] batadv_slave_0: entered promiscuous mode
[  302.098840][T13125] netlink: 'syz.1.2886': attribute type 32 has an invalid length.
[  302.098885][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'.
[  302.098915][T13125] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  302.462913][T13133] loop1: detected capacity change from 0 to 32768
[  302.475398][T13133] ERROR: (device loop1): dtReadFirst: stbl[0] out of bound
[  302.475398][T13133] 
[  302.508424][T13133] ERROR: (device loop1): remounting filesystem as read-only
[  303.030936][T13158] bond0: option all_slaves_active: invalid value (13)
[  303.046748][T13158] bond0 (unregistering): Released all slaves
[  303.123550][T13148] loop1: detected capacity change from 0 to 131072
[  303.127908][T13148] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  303.130459][T13148] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  303.136391][T13148] F2FS-fs (loop1): invalid crc value
[  303.160674][T13171] netlink: 'syz.3.2905': attribute type 2 has an invalid length.
[  303.186218][T13148] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  303.193308][T13148] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  303.195867][T13148] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  303.638908][T13190] gretap0: entered promiscuous mode
[  303.687901][ T5841] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  303.851229][ T5841] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  303.854321][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.864284][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  304.007023][ T5841] usb 5-1: config 1 has no interface number 0
[  304.009962][ T5841] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  304.013969][ T5841] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  304.299098][ T5841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  304.310437][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.318610][ T5841] usb 5-1: Product: syz
[  304.322555][ T5841] usb 5-1: Manufacturer: syz
[  304.330138][ T5841] usb 5-1: SerialNumber: syz
[  304.875326][   T10] usb 5-1: USB disconnect, device number 16
[  305.016605][   T32] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  305.178517][   T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.182420][   T32] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  305.186571][   T32] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  305.194223][   T32] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  305.197652][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.201131][   T32] usb 2-1: Product: syz
[  305.202828][   T32] usb 2-1: Manufacturer: syz
[  305.204505][   T32] usb 2-1: SerialNumber: syz
[  305.209923][   T32] usb 2-1: config 0 descriptor??
[  305.215651][   T32] uvcvideo 2-1:0.0: Found UVC 34.00 device syz (8086:0b5b)
[  305.218486][   T32] uvcvideo 2-1:0.0: No valid video chain found.
[  305.425334][   T32] usb 2-1: USB disconnect, device number 30
[  305.666467][T13235] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2935'.
[  305.670559][T13235] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2935'.
[  305.986529][  T784] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  306.138573][  T784] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[  306.141859][  T784] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.147303][  T784] usb 5-1: config 0 has no interfaces?
[  306.151108][  T784] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  306.154844][  T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.170373][  T784] usb 5-1: config 0 descriptor??
[  306.336027][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'.
[  306.342320][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'.
[  306.348939][T13248] netlink: 'syz.3.2940': attribute type 11 has an invalid length.
[  306.352164][T13248] netlink: 'syz.3.2940': attribute type 14 has an invalid length.
[  306.979496][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2945'.
[  307.027835][T13263] loop1: detected capacity change from 0 to 1024
[  307.045935][T13263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.077887][T13263] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.2946: Attempting to read directory block (623) that is past i_size (638464)
[  307.086999][T13263] EXT4-fs (loop1): Remounting filesystem read-only
[  307.107851][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.173047][T13272] loop1: detected capacity change from 0 to 128
[  307.218855][T13272] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[  307.221536][T13272] FAT-fs (loop1): Filesystem has been set read-only
[  307.470019][T13289] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  307.924232][T13297] loop1: detected capacity change from 0 to 32768
[  307.951503][T13297] blkno = 8ed2c, nblocks = 1
[  307.953576][T13297] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  307.953576][T13297] 
[  307.963132][T13297] ERROR: (device loop1): remounting filesystem as read-only
[  307.966067][T13297] ialloc: diAlloc returned -17!
[  308.164561][T13299] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  308.697516][  T784] usb 5-1: USB disconnect, device number 17
[  309.137593][T13330] loop1: detected capacity change from 0 to 1024
[  309.516763][  T784] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  309.578754][T13353] bridge_slave_0: left allmulticast mode
[  309.581008][T13353] bridge_slave_0: left promiscuous mode
[  309.584694][T13353] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.593213][T13353] bridge_slave_1: left allmulticast mode
[  309.601300][T13353] bridge_slave_1: left promiscuous mode
[  309.610695][T13353] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.617852][T13353] .`: (slave bond_slave_0): Releasing backup interface
[  309.629996][T13353] .`: (slave bond_slave_1): Releasing backup interface
[  309.646137][T13353] team0: Port device team_slave_0 removed
[  309.668955][T13353] team0: Port device team_slave_1 removed
[  309.671155][T13353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.673410][T13353] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.676463][  T784] usb 2-1: Using ep0 maxpacket: 16
[  309.679808][T13353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.681820][  T784] usb 2-1: unable to get BOS descriptor or descriptor too short
[  309.683201][T13353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.689635][  T784] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  309.700386][T13353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  309.703306][  T784] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  309.716239][  T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.719832][  T784] usb 2-1: Product: syz
[  309.721669][  T784] usb 2-1: Manufacturer: syz
[  309.723459][  T784] usb 2-1: SerialNumber: syz
[  309.935678][  T784] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  309.939256][  T784] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  310.244916][T13366] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2992'.
[  310.336904][  T784] usb 2-1: 2:1 : invalid Cluster Descriptor size
[  310.516660][  T784] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  310.541325][   T32] usb 2-1: USB disconnect, device number 31
[  310.666567][  T784] usb 5-1: Using ep0 maxpacket: 16
[  310.670915][  T784] usb 5-1: unable to get BOS descriptor or descriptor too short
[  310.678479][  T784] usb 5-1: string descriptor 0 read error: -22
[  310.680421][  T784] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  310.683403][  T784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.698360][  T784] usb 5-1: unit 5 not found!
[  310.699826][  T784] usb 5-1: unit 3 not found!
[  310.701211][  T784] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  310.706486][  T784] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  310.740988][  T784] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  310.905487][  T784] usb 5-1: USB disconnect, device number 18
[  311.238302][T13378] loop1: detected capacity change from 0 to 32768
[  311.245876][T13378] JBD2: Ignoring recovery information on journal
[  311.288639][T13378] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  311.377470][ T5812] ocfs2: Unmounting device (7,1) on (node local)
[  311.462351][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3006'.
[  311.671769][T13409] 9p: Bad value for 'rfdno'
[  312.926411][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'.
[  312.929149][T13442] bridge_slave_1: left allmulticast mode
[  312.931244][T13442] bridge_slave_1: left promiscuous mode
[  312.933729][T13442] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.937799][T13442] x9: left allmulticast mode
[  312.939551][T13442] x9: left promiscuous mode
[  312.941517][T13442] bridge0: port 1(1x9) entered disabled state
[  313.224449][T13428] orangefs_mount: mount request failed with -4
[  313.559724][T13472] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3037'.
[  314.235457][T13497] loop4: detected capacity change from 0 to 512
[  314.347693][T13504] loop4: detected capacity change from 0 to 2048
[  314.354341][T13504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  314.412737][T13506] loop4: detected capacity change from 0 to 512
[  314.437741][T13506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.541259][ T9940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.596695][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3055'.
[  315.180054][T13525] loop1: detected capacity change from 0 to 4096
[  315.204942][T13526] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.701830][T13535] tipc: Started in network mode
[  315.703323][T13535] tipc: Node identity 84e, cluster identity 4711
[  315.705193][T13535] tipc: Node number set to 2126
[  315.804457][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  315.814449][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  315.819978][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  315.823894][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  315.837850][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  315.969666][T13541] chnl_net:caif_netlink_parms(): no params data found
[  316.063350][T13541] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.065486][T13541] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.069553][T13541] bridge_slave_0: entered allmulticast mode
[  316.072238][T13541] bridge_slave_0: entered promiscuous mode
[  316.076747][T13541] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.078843][T13541] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.081460][T13541] bridge_slave_1: entered allmulticast mode
[  316.084472][T13541] bridge_slave_1: entered promiscuous mode
[  316.108860][T13541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.113736][T13541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.132942][T13541] team0: Port device team_slave_0 added
[  316.136983][T13541] team0: Port device team_slave_1 added
[  316.153619][T13541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.155899][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  316.165117][T13541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.170218][T13541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.172276][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  316.182754][T13541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.210510][T13541] hsr_slave_0: entered promiscuous mode
[  316.212899][T13541] hsr_slave_1: entered promiscuous mode
[  316.215531][T13541] debugfs: 'hsr0' already exists in 'hsr'
[  316.218889][T13541] Cannot create hsr debugfs directory
[  316.343754][T13541] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  316.348458][T13541] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  316.352893][T13541] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  316.360218][T13541] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  316.380695][T13541] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.383142][T13541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.386518][T13541] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.388926][T13541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.438997][T13541] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.449977][T11575] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.453178][T11575] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.462483][T13541] 8021q: adding VLAN 0 to HW filter on device team0
[  316.469588][T11575] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.471859][T11575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.482230][T11575] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.484393][T11575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.661856][T13541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.787693][ T5841] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  316.868604][T13541] veth0_vlan: entered promiscuous mode
[  316.888819][T13541] veth1_vlan: entered promiscuous mode
[  316.918053][T13541] veth0_macvtap: entered promiscuous mode
[  316.928842][T13541] veth1_macvtap: entered promiscuous mode
[  316.940340][T13541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.951851][T13541] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.958471][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.961684][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.964555][ T5841] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  316.972074][ T5854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.975290][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.980305][ T5841] usb 5-1: config 0 descriptor??
[  316.984201][ T5854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.999375][ T5854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.002172][ T5854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.074738][T11575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.087029][T11575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.094344][T13587] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3081'.
[  317.130004][T11575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.132968][T11575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.405795][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.410442][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.414993][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.421168][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.423789][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.427753][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.430348][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.432872][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.434811][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.439700][ T5841] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0
[  317.455746][ T5841] asus 0003:0B05:1ABE.0011: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0
[  317.594856][ T5863] usb 5-1: USB disconnect, device number 19
[  317.736691][   T33] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  317.898853][   T33] usb 6-1: unable to get BOS descriptor or descriptor too short
[  317.910587][   T33] usb 6-1: string descriptor 0 read error: -22
[  317.912910][   T33] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40
[  317.916201][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.929324][   T33] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  317.933183][ T5821] Bluetooth: hci1: command tx timeout
[  318.029353][   T33] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  318.139263][   T33] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -22
[  318.363056][   T33] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -22
[  318.389846][T13629] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3101'.
[  318.390264][T13628] loop4: detected capacity change from 0 to 1024
[  318.397715][T13628] hfsplus: failed to load extents file
[  318.615929][   T33] usb 6-1: can't set first interface for hiFace device.
[  318.622403][   T33] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5
[  318.628907][   T33] usb 6-1: USB disconnect, device number 2
[  319.504709][T13663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3116'.
[  319.855518][T13658] loop5: detected capacity change from 0 to 131072
[  319.860065][T13658] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  319.863133][T13658] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  319.868076][T13658] F2FS-fs (loop5): invalid crc value
[  319.970932][T13658] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  319.986555][T13658] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  319.989120][T13658] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  320.006635][ T5821] Bluetooth: hci1: command tx timeout
[  320.780572][T13699] loop4: detected capacity change from 0 to 1024
[  321.813590][T13756] netlink: 'syz.3.3152': attribute type 2 has an invalid length.
[  321.974892][T13764] : renamed from team_slave_1
[  322.056945][T13768] netlink: 'syz.4.3158': attribute type 29 has an invalid length.
[  322.059882][T13768] netlink: 'syz.4.3158': attribute type 29 has an invalid length.
[  322.062959][T13768] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3158'.
[  322.087680][ T5821] Bluetooth: hci1: command tx timeout
[  322.489279][T13791] loop4: detected capacity change from 0 to 1024
[  322.491756][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3167'.
[  322.504671][T13791] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3164'.
[  322.520552][T13785] bridge4: entered promiscuous mode
[  322.522651][T13785] bridge4: entered allmulticast mode
[  322.608684][T13794] netlink: 'syz.5.3168': attribute type 4 has an invalid length.
[  322.611041][T13794] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3168'.
[  322.687053][T13796] loop5: detected capacity change from 0 to 512
[  322.702108][T13796] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  322.737466][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  322.740196][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  323.686788][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  323.966507][   T24] usb 6-1: Using ep0 maxpacket: 16
[  323.973050][   T24] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  323.977308][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.981634][   T24] usb 6-1: Product: syz
[  323.983283][   T24] usb 6-1: Manufacturer: syz
[  323.985121][   T24] usb 6-1: SerialNumber: syz
[  323.991427][   T24] usb 6-1: config 0 descriptor??
[  324.083365][T13824] IPv6: NLM_F_CREATE should be specified when creating new route
[  324.086589][T13824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  324.089051][T13824] IPv6: NLM_F_CREATE should be set when creating new route
[  324.093871][T13824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  324.188373][ T5821] Bluetooth: hci1: command tx timeout
[  324.346904][   T86] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  325.019501][T13828] loop4: detected capacity change from 0 to 40427
[  325.461446][T13860] loop4: detected capacity change from 0 to 4096
[  325.912137][T13866] loop4: detected capacity change from 0 to 4096
[  326.365775][   T10] usb 6-1: USB disconnect, device number 3
[  326.392003][T13868] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3199'.
[  326.424418][T13870] syzkaller1: entered promiscuous mode
[  326.426129][T13870] syzkaller1: entered allmulticast mode
[  326.684549][T13882] Bluetooth: MGMT ver 1.23
[  326.802235][T13890] loop5: detected capacity change from 0 to 512
[  326.835610][T13890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.850944][T13890] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.899676][T13541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.931546][T13897] Invalid source name
[  327.233004][T13915] loop5: detected capacity change from 0 to 1024
[  327.325118][T13915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.342308][T13915] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.5.3218: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  327.384922][T13915] EXT4-fs (loop5): Remounting filesystem read-only
[  327.477851][T13541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.065979][T13953] IPv6: NLM_F_REPLACE set, but no existing node found!
[  328.069387][   T33] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  328.104813][T13955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3235'.
[  328.226387][   T33] usb 5-1: Using ep0 maxpacket: 8
[  328.231320][   T33] usb 5-1: unable to get BOS descriptor or descriptor too short
[  328.235688][   T33] usb 5-1: config index 0 descriptor too short (expected 45, got 18)
[  328.239350][   T33] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  328.245253][   T33] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice= 0.00
[  328.248547][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.251402][   T33] usb 5-1: Product: syz
[  328.252801][   T33] usb 5-1: Manufacturer: syz
[  328.254531][   T33] usb 5-1: SerialNumber: syz
[  328.623075][   T33] usb 5-1: USB disconnect, device number 20
[  328.978416][T13976] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3244'.
[  328.982997][T13976] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.987238][T13976] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.997970][T13976] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3244'.
[  329.001042][T13976] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.003354][T13976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.005792][T13976] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.007968][T13976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.013794][T13976] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3244'.
[  329.017883][T13976] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.020697][T13976] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.602721][T14010] loop4: detected capacity change from 0 to 512
[  329.642149][T14010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.648586][T14010] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.650889][T14014] loop5: detected capacity change from 0 to 128
[  329.667749][T14014] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  329.672851][T14014] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  329.703280][T13541] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  330.445587][ T9940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.008124][   T34] audit: type=1326 audit(2000000251.633:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.3290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  331.026455][   T34] audit: type=1326 audit(2000000251.633:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.3290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  331.038175][   T34] audit: type=1326 audit(2000000251.663:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.3290" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  331.045504][   T34] audit: type=1326 audit(2000000251.663:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.3290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  331.086730][   T34] audit: type=1326 audit(2000000251.663:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.3290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  331.094867][   T34] audit: type=1326 audit(2000000251.663:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.3290" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  331.126394][   T34] audit: type=1326 audit(2000000251.663:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.3290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  331.146397][   T34] audit: type=1326 audit(2000000251.663:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.4.3290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  331.163254][T14088] netlink: 'syz.4.3292': attribute type 1 has an invalid length.
[  331.166789][T14088] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3292'.
[  332.066381][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  332.218352][   T24] usb 6-1: config 128 has an invalid interface number: 148 but max is 0
[  332.228906][   T24] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  332.232086][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3302'.
[  332.232328][   T24] usb 6-1: config 128 has no interface number 0
[  332.273171][   T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  332.276485][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.278991][   T24] usb 6-1: Product: syz
[  332.280244][   T24] usb 6-1: Manufacturer: syz
[  332.281803][   T24] usb 6-1: SerialNumber: syz
[  332.514829][   T24] usb 6-1: USB disconnect, device number 4
[  333.083784][T14129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3310'.
[  333.383215][T14144] Invalid ELF header magic: != ELF
[  333.486479][   T33] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  333.647538][   T33] usb 6-1: Using ep0 maxpacket: 8
[  333.652185][   T33] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  333.660303][   T33] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  333.663678][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.677403][   T33] usb 6-1: Product: syz
[  333.679084][   T33] usb 6-1: Manufacturer: syz
[  333.682114][   T33] usb 6-1: SerialNumber: syz
[  333.707310][   T33] usb 6-1: config 0 descriptor??
[  333.714604][   T33] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  333.726375][   T33] usb 6-1: setting power ON
[  333.728749][   T33] dvb-usb: bulk message failed: -22 (2/0)
[  333.749165][   T33] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  333.766745][   T33] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  333.770066][   T33] usb 6-1: media controller created
[  333.788031][   T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  333.848404][T14167] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  333.935629][   T33] usb 6-1: selecting invalid altsetting 6
[  333.937715][   T33] usb 6-1: digital interface selection failed (-22)
[  333.939692][   T33] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  333.943218][   T33] usb 6-1: setting power OFF
[  333.945024][   T33] dvb-usb: bulk message failed: -22 (2/0)
[  333.947418][   T33] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  333.950121][   T33] (NULL device *): no alternate interface
[  333.966023][   T33] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  333.972407][   T33] usb 6-1: USB disconnect, device number 5
[  334.620359][T14173] netlink: 'syz.5.3331': attribute type 8 has an invalid length.
[  334.778413][T14179] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3334'.
[  334.904041][T14185] loop5: detected capacity change from 0 to 4096
[  334.908324][T14185] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  335.023421][T14185] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  335.035143][T14185] ntfs3(loop5): ino=1b, mi_enum_attr
[  335.041897][T14185] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  335.604218][   T24] IPVS: starting estimator thread 0...
[  335.716474][T14210] IPVS: using max 67 ests per chain, 160800 per kthread
[  336.345119][T14218] openvswitch: netlink: EtherType 50a is less than min 600
[  336.474230][T14220] overlayfs: failed to clone upperpath
[  336.532350][   T34] audit: type=1326 audit(2000000257.163:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.568153][   T34] audit: type=1326 audit(2000000257.163:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.608151][   T34] audit: type=1326 audit(2000000257.163:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.658870][   T34] audit: type=1326 audit(2000000257.163:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.676225][   T34] audit: type=1326 audit(2000000257.163:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.685996][   T34] audit: type=1326 audit(2000000257.163:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.697210][   T34] audit: type=1326 audit(2000000257.163:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.704719][   T34] audit: type=1326 audit(2000000257.163:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.713300][   T34] audit: type=1326 audit(2000000257.163:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.720371][   T34] audit: type=1326 audit(2000000257.163:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.4.3353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f179c799 code=0x7ffc0000
[  336.811573][T14230] xt_hashlimit: max too large, truncated to 1048576
[  336.970139][T14238] loop4: detected capacity change from 0 to 4096
[  337.139166][T14240] loop4: detected capacity change from 0 to 8192
[  337.381447][T14243] dvmrp0: entered allmulticast mode
[  337.686460][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  337.837408][   T24] usb 6-1: Using ep0 maxpacket: 8
[  337.840784][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  337.847814][   T24] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=8b.09
[  337.850491][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.853289][   T24] usb 6-1: Product: syz
[  337.854500][   T24] usb 6-1: Manufacturer: syz
[  337.855857][   T24] usb 6-1: SerialNumber: syz
[  337.868960][   T24] usb 6-1: config 0 descriptor??
[  337.877354][   T24] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  337.900341][T14263] loop4: detected capacity change from 0 to 32768
[  338.084527][ T5274] usb 6-1: USB disconnect, device number 6
[  338.260473][   T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  338.436853][   T24] usb 5-1: Using ep0 maxpacket: 8
[  338.460010][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  338.463662][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  338.478377][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  338.481367][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  338.485177][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  338.498272][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  338.501181][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.511864][   T24] usb 5-1: config 0 descriptor??
[  338.520376][T14267] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  338.742726][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.743137][    C0] Bluetooth: hci2: Unexpected continuation: 1 bytes
[  338.747274][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.749943][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.752204][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.754282][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.756800][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.759476][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.761479][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.764042][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.766011][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.769579][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.771589][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.773549][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.776057][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.778371][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.780638][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.782902][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.785499][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.792330][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.794797][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.797148][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.799511][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.802041][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.804571][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.808034][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.810559][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.813047][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.815539][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.818124][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.820640][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.823594][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.826063][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.828727][ T5816] Bluetooth: hci2: unexpected event 0x14 length: 0 < 6
[  338.831024][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  338.834301][ T5816] Bluetooth: hci2: unexpected event 0x0f length: 6 > 4
[  338.834321][ T5816] Bluetooth: hci2: unexpected event for opcode 0x0000
[  338.958765][ T5274] usb 5-1: USB disconnect, device number 21
[  338.964792][ T5821] Bluetooth: hci2: Opcode 0x0c03 failed: -71
[  339.119362][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3381'.
[  339.635641][T14296] loop4: detected capacity change from 0 to 256
[  339.657620][T14296] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  340.038216][T14309] netlink: 'syz.5.3393': attribute type 1 has an invalid length.
[  340.041619][T14309] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3393'.
[  340.045829][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3393'.
[  340.194349][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.297598][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.408318][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.491854][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.500679][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.504695][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.514227][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.540368][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.541223][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.470400][   T12] bond2 (unregistering): (slave gretap1): Releasing active interface
[  341.608504][   T12] .` (unregistering): Released all slaves
[  341.624394][   T12] bond1 (unregistering): Released all slaves
[  341.649039][   T12] bond2 (unregistering): Released all slaves
[  341.665122][   T12] bond3 (unregistering): Released all slaves
[  341.756026][T14323] chnl_net:caif_netlink_parms(): no params data found
[  341.806216][   T12] : left promiscuous mode
[  341.903012][   T12] tipc: Left network mode
[  342.214425][T14323] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.219927][T14323] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.222875][T14323] bridge_slave_0: entered allmulticast mode
[  342.228916][T14323] bridge_slave_0: entered promiscuous mode
[  342.241315][T14323] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.267553][T14323] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.270407][T14323] bridge_slave_1: entered allmulticast mode
[  342.297340][T14323] bridge_slave_1: entered promiscuous mode
[  342.394482][T14323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.405448][T14323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.509983][T14323] team0: Port device team_slave_0 added
[  342.513650][T14323] team0: Port device team_slave_1 added
[  342.562912][T14323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.581838][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.601349][T14323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.616495][   T12] hsr_slave_0: left promiscuous mode
[  342.627917][   T12] hsr_slave_1: left promiscuous mode
[  342.638317][   T12] veth1_macvtap: left promiscuous mode
[  342.640900][   T12] veth0_macvtap: left promiscuous mode
[  342.643101][   T12] veth1_vlan: left promiscuous mode
[  342.645451][   T12] veth0_vlan: left promiscuous mode
[  342.648525][ T5816] Bluetooth: hci2: command tx timeout
[  342.790786][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3421'.
[  342.854573][T14395] netlink: 'syz.5.3423': attribute type 1 has an invalid length.
[  343.119896][T14411] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3
[  343.332126][T14417] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  343.335258][T14417] PKCS7: Only support pkcs7_signedData type
[  343.527912][T14323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.530830][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.548269][T14323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.701420][T14323] hsr_slave_0: entered promiscuous mode
[  343.706209][T14323] hsr_slave_1: entered promiscuous mode
[  343.710717][T14323] debugfs: 'hsr0' already exists in 'hsr'
[  343.727639][T14323] Cannot create hsr debugfs directory
[  344.210181][T14323] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  344.224731][T14323] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  344.230547][T14323] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  344.239578][T14323] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  344.311634][T14438] infiniband syz1: set active
[  344.320355][T14438] infiniband syz1: added syz_tun
[  344.396164][T14438] RDS/IB: syz1: added
[  344.425501][T14438] smc: adding ib device syz1 with port count 1
[  344.430112][T14438] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  344.462370][T14323] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.505714][T14323] 8021q: adding VLAN 0 to HW filter on device team0
[  344.540042][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.542379][ T9469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.558221][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.560942][ T9469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.629564][T14323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  344.728102][ T5816] Bluetooth: hci2: command tx timeout
[  344.901280][T14323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.094780][T14323] veth0_vlan: entered promiscuous mode
[  345.103548][T14323] veth1_vlan: entered promiscuous mode
[  345.138472][T14323] veth0_macvtap: entered promiscuous mode
[  345.156695][T14323] veth1_macvtap: entered promiscuous mode
[  345.173903][T14323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.182698][T14323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.190207][ T5699] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.193178][ T5699] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.199568][ T5699] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.203500][ T5699] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.416561][ T9469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.419487][ T9469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.478532][ T9485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.482984][ T9485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.126370][   T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  346.278299][   T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  346.283726][   T24] usb 7-1: config 0 has no interface number 0
[  346.294161][   T24] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  346.301805][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.314557][   T24] usb 7-1: Product: syz
[  346.337922][   T24] usb 7-1: Manufacturer: syz
[  346.339807][   T24] usb 7-1: SerialNumber: syz
[  346.378366][   T24] usb 7-1: config 0 descriptor??
[  346.521284][   T24] usb 7-1: selecting invalid altsetting 1
[  346.525960][   T24] dvb_ttusb_budget: ttusb_init_controller: error
[  346.529071][   T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  346.563022][   T24] DVB: Unable to find symbol stv0299_attach()
[  346.598015][   T24] DVB: Unable to find symbol tda8083_attach()
[  346.605783][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  346.686535][T14502] loop5: detected capacity change from 0 to 512
[  346.705311][T14502] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  346.798469][T14502] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3451: Allocating blocks 41-42 which overlap fs metadata
[  346.804047][T14502] loop5: lost filesystem error report for type 5 error -117
[  346.807050][    C1] EXT4-fs (loop5): initial error at time 2000000267: ext4_mb_mark_diskspace_used:4222
[  346.812852][    C1] EXT4-fs (loop5): last error at time 2000000267: ext4_mb_mark_diskspace_used:4222
[  346.835651][T14502] EXT4-fs (loop5): Remounting filesystem read-only
[  346.840126][T14502] __quota_error: 4 callbacks suppressed
[  346.840185][T14502] Quota error (device loop5): write_blk: dquota write failed
[  346.845323][T14502] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  346.860141][T14502] Quota error (device loop5): write_blk: dquota write failed
[  346.863637][T14502] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  346.872417][T14502] EXT4-fs (loop5): 1 truncate cleaned up
[  346.876619][T14502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.880991][ T5816] Bluetooth: hci2: command tx timeout
[  346.933451][ T5841] usb 7-1: USB disconnect, device number 2
[  347.317547][T13541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.457023][T14514] loop5: detected capacity change from 0 to 512
[  347.465181][T14514] EXT4-fs: Ignoring removed bh option
[  347.467213][T14514] EXT4-fs: inline encryption not supported
[  347.471126][T14514] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  347.482638][T14514] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  347.489892][T14514] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3455: bg 0: block 248: padding at end of block bitmap is not set
[  347.494469][T14514] loop5: lost filesystem error report for type 5 error -117
[  347.494894][T14514] Quota error (device loop5): write_blk: dquota write failed
[  347.497279][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  347.497290][    C0] EXT4-fs (loop5): last error at time 2000000268: ext4_validate_block_bitmap:441
[  347.505855][T14514] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  347.509583][T14514] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3455: Failed to acquire dquot type 1
[  347.513095][T14514] loop5: lost filesystem error report for type 5 error -117
[  347.532868][T14514] EXT4-fs (loop5): 1 truncate cleaned up
[  347.538162][T14514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  347.603582][T13541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  347.616834][T11569] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5
[  347.621729][T11569] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u10:14: Failed to release dquot type 1
[  347.632007][T11569] loop5: lost filesystem error report for type 5 error -117
[  347.814262][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3463'.
[  348.075436][T14536] loop5: detected capacity change from 0 to 32768
[  348.112318][T14536] JBD2: Ignoring recovery information on journal
[  348.154292][T14536] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  348.186222][T14536] 
[  348.187192][T14536] ======================================================
[  348.189316][T14536] WARNING: possible circular locking dependency detected
[  348.191328][T14536] syzkaller #0 Tainted: G             L     
[  348.193151][T14536] ------------------------------------------------------
[  348.195133][T14536] syz.5.3464/14536 is trying to acquire lock:
[  348.196949][T14536] ffff8881b3c526c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  348.201067][T14536] 
[  348.201067][T14536] but task is already holding lock:
[  348.203766][T14536] ffff8880237f1578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0
[  348.207456][T14536] 
[  348.207456][T14536] which lock already depends on the new lock.
[  348.207456][T14536] 
[  348.211120][T14536] 
[  348.211120][T14536] the existing dependency chain (in reverse order) is:
[  348.213793][T14536] 
[  348.213793][T14536] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  348.216068][T14536]        down_read+0x47/0x2e0
[  348.217450][T14536]        ocfs2_init_acl+0x2fd/0x7e0
[  348.219211][T14536]        ocfs2_mknod+0x1679/0x2290
[  348.221072][T14536]        ocfs2_mkdir+0x181/0x490
[  348.222498][T14536]        vfs_mkdir+0x413/0x630
[  348.223892][T14536]        filename_mkdirat+0x285/0x510
[  348.225439][T14536]        __se_sys_mkdirat+0x35/0x150
[  348.227037][T14536]        do_syscall_64+0x14d/0xf80
[  348.228504][T14536]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.230168][T14536] 
[  348.230168][T14536] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  348.232503][T14536]        down_read+0x47/0x2e0
[  348.233925][T14536]        ocfs2_start_trans+0x3ab/0x700
[  348.235519][T14536]        ocfs2_modify_bh+0xe3/0x4d0
[  348.237079][T14536]        ocfs2_local_read_info+0x1454/0x1810
[  348.238832][T14536]        dquot_load_quota_sb+0x791/0xbd0
[  348.240476][T14536]        dquot_load_quota_inode+0x2e1/0x5d0
[  348.242469][T14536]        ocfs2_enable_quotas+0x1c8/0x4a0
[  348.244423][T14536]        ocfs2_fill_super+0x5305/0x6900
[  348.246435][T14536]        get_tree_bdev_flags+0x431/0x4f0
[  348.248473][T14536]        vfs_get_tree+0x92/0x2a0
[  348.250270][T14536]        do_new_mount+0x341/0xd30
[  348.252096][T14536]        __se_sys_mount+0x31d/0x420
[  348.253967][T14536]        do_syscall_64+0x14d/0xf80
[  348.255808][T14536]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.257751][T14536] 
[  348.257751][T14536] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  348.260522][T14536]        ocfs2_start_trans+0x2ac/0x700
[  348.262334][T14536]        ocfs2_mknod+0x1181/0x2290
[  348.263876][T14536]        ocfs2_mkdir+0x181/0x490
[  348.265319][T14536]        vfs_mkdir+0x413/0x630
[  348.266822][T14536]        filename_mkdirat+0x285/0x510
[  348.268753][T14536]        __se_sys_mkdirat+0x35/0x150
[  348.270536][T14536]        do_syscall_64+0x14d/0xf80
[  348.272092][T14536]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.274129][T14536] 
[  348.274129][T14536] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  348.277900][T14536]        down_write+0x96/0x200
[  348.279662][T14536]        ocfs2_reserve_local_alloc_bits+0x11f/0x26f0
[  348.282110][T14536]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  348.284584][T14536]        ocfs2_mknod+0x111f/0x2290
[  348.286451][T14536]        ocfs2_mkdir+0x181/0x490
[  348.288281][T14536]        vfs_mkdir+0x413/0x630
[  348.289953][T14536]        filename_mkdirat+0x285/0x510
[  348.291491][T14536]        __se_sys_mkdirat+0x35/0x150
[  348.293026][T14536]        do_syscall_64+0x14d/0xf80
[  348.294584][T14536]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.296484][T14536] 
[  348.296484][T14536] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  348.299620][T14536]        __lock_acquire+0x15a5/0x2cf0
[  348.301161][T14536]        lock_acquire+0xf0/0x2e0
[  348.302573][T14536]        down_write+0x96/0x200
[  348.303976][T14536]        ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  348.305960][T14536]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  348.307883][T14536]        ocfs2_init_xattr_set_ctxt+0x2f5/0x790
[  348.309640][T14536]        ocfs2_xattr_set+0xc42/0x13e0
[  348.311244][T14536]        __vfs_setxattr+0x43c/0x480
[  348.313051][T14536]        __vfs_setxattr_noperm+0x12d/0x660
[  348.315144][T14536]        vfs_setxattr+0x163/0x360
[  348.316781][T14536]        filename_setxattr+0x296/0x630
[  348.318331][T14536]        path_setxattrat+0x3eb/0x440
[  348.319923][T14536]        __x64_sys_setxattr+0xbc/0xe0
[  348.321657][T14536]        do_syscall_64+0x14d/0xf80
[  348.323154][T14536]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.324995][T14536] 
[  348.324995][T14536] other info that might help us debug this:
[  348.324995][T14536] 
[  348.327904][T14536] Chain exists of:
[  348.327904][T14536]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  348.327904][T14536] 
[  348.332837][T14536]  Possible unsafe locking scenario:
[  348.332837][T14536] 
[  348.334993][T14536]        CPU0                    CPU1
[  348.336660][T14536]        ----                    ----
[  348.338214][T14536]   lock(&oi->ip_xattr_sem);
[  348.339596][T14536]                                lock(&journal->j_trans_barrier);
[  348.341974][T14536]                                lock(&oi->ip_xattr_sem);
[  348.343999][T14536]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  348.346106][T14536] 
[  348.346106][T14536]  *** DEADLOCK ***
[  348.346106][T14536] 
[  348.348406][T14536] 3 locks held by syz.5.3464/14536:
[  348.349919][T14536]  #0: ffff88811766a420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  348.352690][T14536]  #1: ffff8880237f1840 (&sb->s_type->i_mutex_key#47){++++}-{4:4}, at: vfs_setxattr+0x13e/0x360
[  348.355533][T14536]  #2: ffff8880237f1578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0
[  348.358313][T14536] 
[  348.358313][T14536] stack backtrace:
[  348.360053][T14536] CPU: 0 UID: 0 PID: 14536 Comm: syz.5.3464 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  348.360067][T14536] Tainted: [L]=SOFTLOCKUP
[  348.360071][T14536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  348.360077][T14536] Call Trace:
[  348.360084][T14536]  <TASK>
[  348.360090][T14536]  dump_stack_lvl+0xe8/0x150
[  348.360105][T14536]  print_circular_bug+0x2e1/0x300
[  348.360120][T14536]  check_noncircular+0x12e/0x150
[  348.360132][T14536]  __lock_acquire+0x15a5/0x2cf0
[  348.360144][T14536]  ? _raw_spin_unlock+0x28/0x50
[  348.360157][T14536]  ? ocfs2_get_system_file_inode+0x202/0x7e0
[  348.360168][T14536]  lock_acquire+0xf0/0x2e0
[  348.360177][T14536]  ? ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  348.360189][T14536]  down_write+0x96/0x200
[  348.360198][T14536]  ? ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  348.360208][T14536]  ? __pfx_down_write+0x10/0x10
[  348.360219][T14536]  ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  348.360234][T14536]  ? do_raw_spin_lock+0x12b/0x2f0
[  348.360243][T14536]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  348.360252][T14536]  ? lockdep_hardirqs_on+0x7a/0x110
[  348.360260][T14536]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  348.360272][T14536]  ? stack_depot_save_flags+0x3f3/0x810
[  348.360284][T14536]  ? kasan_save_track+0x4f/0x80
[  348.360299][T14536]  ? kasan_save_track+0x3e/0x80
[  348.360307][T14536]  ? __kasan_kmalloc+0x93/0xb0
[  348.360317][T14536]  ? __kmalloc_cache_noprof+0x31c/0x660
[  348.360326][T14536]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  348.360339][T14536]  ? ocfs2_init_xattr_set_ctxt+0x2f5/0x790
[  348.360356][T14536]  ? ocfs2_xattr_set+0xc42/0x13e0
[  348.360369][T14536]  ? __vfs_setxattr+0x43c/0x480
[  348.360384][T14536]  ? __vfs_setxattr_noperm+0x12d/0x660
[  348.360399][T14536]  ? vfs_setxattr+0x163/0x360
[  348.360408][T14536]  ? filename_setxattr+0x296/0x630
[  348.360418][T14536]  ? path_setxattrat+0x3eb/0x440
[  348.360426][T14536]  ? __x64_sys_setxattr+0xbc/0xe0
[  348.360436][T14536]  ? do_syscall_64+0x14d/0xf80
[  348.360444][T14536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.360459][T14536]  ? __kasan_kmalloc+0x93/0xb0
[  348.360467][T14536]  ? __kmalloc_cache_noprof+0x31c/0x660
[  348.360475][T14536]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  348.360484][T14536]  ? __kmalloc_cache_noprof+0x15b/0x660
[  348.360493][T14536]  ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  348.360503][T14536]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  348.360513][T14536]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  348.360524][T14536]  ocfs2_init_xattr_set_ctxt+0x2f5/0x790
[  348.360536][T14536]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  348.360547][T14536]  ? ocfs2_xattr_set+0xc08/0x13e0
[  348.360558][T14536]  ? up_write+0x1ab/0x410
[  348.360565][T14536]  ? __kmalloc_cache_noprof+0x15b/0x660
[  348.360573][T14536]  ocfs2_xattr_set+0xc42/0x13e0
[  348.360588][T14536]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  348.360598][T14536]  ? stack_trace_save+0xa9/0x100
[  348.360608][T14536]  ? check_path+0x21/0x40
[  348.360619][T14536]  ? add_lock_to_list+0xc7/0x100
[  348.360630][T14536]  ? __lock_acquire+0x146e/0x2cf0
[  348.360641][T14536]  ? posix_xattr_acl+0x93/0xc0
[  348.360650][T14536]  ? evm_protect_xattr+0x4d4/0xac0
[  348.360659][T14536]  ? __pfx_evm_protect_xattr+0x10/0x10
[  348.360667][T14536]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  348.360678][T14536]  __vfs_setxattr+0x43c/0x480
[  348.360690][T14536]  __vfs_setxattr_noperm+0x12d/0x660
[  348.360730][T14536]  vfs_setxattr+0x163/0x360
[  348.360744][T14536]  ? __pfx_vfs_setxattr+0x10/0x10
[  348.360757][T14536]  filename_setxattr+0x296/0x630
[  348.360774][T14536]  ? __pfx_filename_setxattr+0x10/0x10
[  348.360786][T14536]  ? do_getname+0x151/0x250
[  348.360799][T14536]  path_setxattrat+0x3eb/0x440
[  348.360811][T14536]  ? __pfx_path_setxattrat+0x10/0x10
[  348.360819][T14536]  ? do_futex+0x333/0x420
[  348.360833][T14536]  ? __pfx___se_sys_futex+0x10/0x10
[  348.360842][T14536]  ? rcu_is_watching+0x15/0xb0
[  348.360853][T14536]  __x64_sys_setxattr+0xbc/0xe0
[  348.360865][T14536]  do_syscall_64+0x14d/0xf80
[  348.360873][T14536]  ? trace_irq_disable+0x3b/0x150
[  348.360884][T14536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.360892][T14536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.360900][T14536] RIP: 0033:0x7ff6b359c799
[  348.360911][T14536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.360920][T14536] RSP: 002b:00007ff6b43e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  348.360929][T14536] RAX: ffffffffffffffda RBX: 00007ff6b3815fa0 RCX: 00007ff6b359c799
[  348.360935][T14536] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000
[  348.360942][T14536] RBP: 00007ff6b3632c99 R08: 0000000000000000 R09: 0000000000000000
[  348.360947][T14536] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[  348.360953][T14536] R13: 00007ff6b3816038 R14: 00007ff6b3815fa0 R15: 00007ffe331ec018
[  348.360963][T14536]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  348.801444][ T1069] smc: removing ib device syz1
[  348.838385][   T24] syz1: Port: 1 Link DOWN
[  349.040327][T14373] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.123189][T14373] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.220892][T14540] ocfs2: Unmounting device (7,5) on (node local)
[  349.245668][T14373] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.291926][T14373] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.370878][T14373] bridge_slave_1: left allmulticast mode
[  349.373289][T14373] bridge_slave_1: left promiscuous mode
[  349.375174][T14373] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.378745][T14373] bridge_slave_0: left allmulticast mode
[  349.380513][T14373] bridge_slave_0: left promiscuous mode
[  349.382286][T14373] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.441036][T14373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.446094][T14373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.451276][T14373] bond0 (unregistering): Released all slaves
[  349.667346][T14373] hsr_slave_0: left promiscuous mode
[  349.670013][T14373] hsr_slave_1: left promiscuous mode
[  349.672385][T14373] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.675033][T14373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.680713][T14373] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.683464][T14373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.694105][T14373] veth1_macvtap: left promiscuous mode
[  349.699222][T14373] veth0_macvtap: left promiscuous mode
[  349.701435][T14373] veth1_vlan: left promiscuous mode
[  349.703450][T14373] veth0_vlan: left promiscuous mode
[  349.812861][T14373] team0 (unregistering): Port device team_slave_1 removed
[  349.824519][T14373] team0 (unregistering): Port device team_slave_0 removed
[  350.238855][T14373] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.291271][T14373] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.330440][T14373] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.398181][T14373] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.469394][T14373] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.501854][T14373] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.533957][T14373] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.603288][T14373] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.689226][T14373] bridge_slave_1: left allmulticast mode
[  350.691289][T14373] bridge_slave_1: left promiscuous mode
[  350.693654][T14373] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.708451][T14373] bridge_slave_0: left allmulticast mode
[  350.710566][T14373] bridge_slave_0: left promiscuous mode
[  350.713299][T14373] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.068975][T14373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.073387][T14373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.078182][T14373] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  351.082075][T14373] bond0 (unregistering): Released all slaves
[  351.085128][T14373] bond1 (unregistering): Released all slaves
[  351.091542][T14373] bond2 (unregistering): Released all slaves
[  351.096050][T14373] bond3 (unregistering): Released all slaves
[  351.117899][T14373] dvmrp0 (unregistering): left allmulticast mode
[  351.210409][T14373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.215709][T14373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.220521][T14373] bond0 (unregistering): Released all slaves
[  351.639753][T14373] hsr_slave_0: left promiscuous mode
[  351.642236][T14373] hsr_slave_1: left promiscuous mode
[  351.644646][T14373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.649098][T14373] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.651872][T14373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.654898][T14373] batman_adv: batadv0: Removing interface: dummy0
[  351.661804][T14373] hsr_slave_0: left promiscuous mode
[  351.664822][T14373] hsr_slave_1: left promiscuous mode
[  351.667348][T14373] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.670074][T14373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.673083][T14373] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.675654][T14373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.684237][T14373] veth1_macvtap: left promiscuous mode
[  351.687073][T14373] veth0_macvtap: left promiscuous mode
[  351.689198][T14373] veth1_vlan: left promiscuous mode
[  351.691165][T14373] veth0_vlan: left promiscuous mode
[  351.694038][T14373] veth1_macvtap: left promiscuous mode
[  351.696972][T14373] veth0_macvtap: left promiscuous mode
[  351.699062][T14373] veth1_vlan: left promiscuous mode
[  351.701008][T14373] veth0_vlan: left promiscuous mode
[  351.876953][T14373] team0 (unregistering): Port device team_slave_1 removed
[  351.881770][T14373] team0 (unregistering): Port device team_slave_0 removed
[  351.983578][T14373] team0 (unregistering): Port device team_slave_1 removed
[  351.994661][T14373] team0 (unregistering): Port device team_slave_0 removed
[  352.612259][T14373] IPVS: stop unused estimator thread 0...
[  352.619906][T14373] IPVS: stop unused estimator thread 0...
