last executing test programs:

1m4.315049042s ago: executing program 0 (id=69):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40)

1m4.165038057s ago: executing program 0 (id=71):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403fd03f180100002020782500000000002020207b1af8ff000000006d0afeff000000000701b092f8ffffffb70200000800fffeb70300000f20ffd0a500feff0600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x101a, &(0x7f0000000840)=""/4122, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

1m4.084557442s ago: executing program 0 (id=72):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10)

1m3.993588075s ago: executing program 0 (id=76):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

1m3.924513529s ago: executing program 0 (id=78):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000002000010300000000000000000200200444000001f8ffffff070002"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

1m3.063290037s ago: executing program 0 (id=91):
r0 = socket$kcm(0x28, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0)

1m2.882603683s ago: executing program 32 (id=91):
r0 = socket$kcm(0x28, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0)

3.472502847s ago: executing program 1 (id=656):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.368739808s ago: executing program 2 (id=666):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r0, 0x1)
shutdown(r0, 0x1)

2.267937113s ago: executing program 2 (id=667):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.151248978s ago: executing program 2 (id=668):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000065c0)=ANY=[@ANYBLOB='discard=0x0000000000000004,quota,errors=continue,discard=0x0000000000000004,errors=continue,usrquota,nodiscard\x00nodiscard,resize=0x0000000000010000,umask=0x0000000000000002,quota,iocharset=koi8-u,resize=0x0000000000008045,resize,fsmagic=0x00000000000003ff,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c6673632cf8ffe300000000060004000100000000"], 0x1, 0x6215, &(0x7f0000006700)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1700, 0x103)

2.017522445s ago: executing program 1 (id=669):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00')
getdents64(r0, &(0x7f0000000980)=""/4096, 0x1000)

1.900445274s ago: executing program 1 (id=670):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0)={0x0, 0x2710}, 0x10)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)

1.811140031s ago: executing program 1 (id=671):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_setup(0x5f45, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1}, 0x38)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)

1.743886691s ago: executing program 2 (id=672):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@nouid32}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r2, 0x0, 0x3, 0x800000)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

772.427513ms ago: executing program 2 (id=675):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r0, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
connect$inet6(r0, &(0x7f0000000940)={0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfc}, 0x1c)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)

654.666198ms ago: executing program 3 (id=676):
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c)

541.711443ms ago: executing program 3 (id=677):
lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000180)=0xdf, 0x1)

446.584797ms ago: executing program 3 (id=678):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0)

446.402163ms ago: executing program 2 (id=679):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711831000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

197.424761ms ago: executing program 33 (id=679):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711831000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

139.659794ms ago: executing program 3 (id=681):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x2)

139.36676ms ago: executing program 1 (id=682):
syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$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")
unlink(&(0x7f0000000180)='./file1\x00')

60.482546ms ago: executing program 3 (id=683):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f000000a600)={0x0, 0x0, &(0x7f000000a5c0)={&(0x7f000000a540)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8010)

1.098021ms ago: executing program 3 (id=684):
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x3, 0xa, 0x2, 0x0, 0x0, 0x102)

0s ago: executing program 1 (id=685):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$eJzs3c1PHOcdAOB3BlyD6w9wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXtYLrG3ahbVgqXqwFHKzlFOkHKIcrETKjZPFIVfnT8glR+dsKTnkEimSFaLdnYWdYVds0C7EzvMcmJ33e/c3H+8chjdOVB4ureWW1nKFlVx54f7axdz/yqX15WKID0nL/o8dXv90phfHyVEfez9lt65c+8fdiyF8uvj5y+3t7e1Q1R9aGmv6/M3Xjxeatw1xpk613datdcu/Qwjn9oyrqi+E8K9PQohCCJeTtMlkOxhCOBXqeXcfv3Mv16XRPHtRvJR/Nfdka/zC7ObTrfbfPQrhg9Iv//hg+cvf9I1/8fsudQ8AAAAAAAAAAAAAAAAAwGtu+vatO38fHQvPo9C/Ge19X3c62bZ7P3a7a37d+y8LAAAAAAAAAAAAAAAAAAAAP1K77//norMt3v+fSrYTbepv/7VNxvHujpPemPnbramro2PJ+u/Rnvw/JUlfXe4Lwy3Wfc+u/345U7/1+u97+zmoxvga/Q6FKB7ZfmsnfyjE8chICB8lC7+fj07EpfJa5Q/3y+sri10bxmsrHf/66v2p6CQL+nca/8lM+71f//8Xe46m6v697h1ib7R0/Pvalvv47aij+F/J1DuM+HNw6fj319IGmwtM1C8A1fi/279//Kcy7fcq/qdDCLmoOtZc6gpQncNU09vNV0hLx/9YLS116Ux+yHbn/7eZ+F/NtN8u/me69g1aX/83sjciWkrH/2e1tIFUid3zfzje//y/lmn/KO7/1fFvuP93JB3/5KGtP1Wk9kt2ev2fzrTfq/jfiZNxno5SR8BmVE9v9//qSEvHf2BP/u7zX9zR/O96pv5hPf81+q09/zU9h/wuqj//0Vo6/oNty3V6/s9k6vX6+j9Rm/9xUOn4n6ilpefOQ7W/ncZ/NtN+r+Jfm5UMNOK/ez357ng9/UPzv46k4//zemLcXGKj9rc2/4v2n//fyLR/FPO/6vg34t72+qZIx/9k23LV+H/Wwf3/ZqZe7+Mfwqi5/oGl43+qbbna+T+wf/znMvV6Hf/f9rJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNfAZLIdClE8ktqP45GREK4k++fDiWi+sJifL5UX/rsWwlSSngtnowel8nyhlF9aKS8W84VSqbwQwtUk/1wYiNZK5Up+ufDo2k5bg9HDYmG1Ml8sVEII00n6r8KpRlvzS5XlwqMQwvWdvDNxefXRw8JKfnFp9S+jo6OjYWZnDMNR8f+V4kql3ns9N4TZnbpDUdPgatk3dsZyMvpPeX11pVCqpd9sqlMqLxRKTXXmkrz3wnBUWV1fWShUivlS+UGjv6M0kWynZm7/8/bNsT3596L6dvJwhwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD/R8/M/vhxD663txCGGi8SFqVf7Zi+Kl/Ku5J1vjF2Y3n269bFcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBLxygRA1EYgN+Mhdp5DKuQdLYJimhhRPAEegwPE4/iJbyDhYWthQhmBjTuQprd6vuaB/l5eT8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsc3k33t+2XUSKo6/DiJfH17ff+XWZ0zDPvNg/2FNPduPqZjy/aLvy3dO//Kw8eu/zT/r58fQQG2b1PPzdX/5Ps3rneGuvaVjXv/ard08i5SYi+pKfppybZt27AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhmBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//78SIGU=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000540), 0x4)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0xfbff, 0x40, 0x40000000002})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58214' (ED25519) to the list of known hosts.
syzkaller login: [   63.322346][ T5843] cgroup: Unknown subsys name 'net'
[   63.442223][ T5843] cgroup: Unknown subsys name 'cpuset'
[   63.446643][ T5843] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.367944][ T5843] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.353442][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.355485][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   79.352148][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.356334][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.360321][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.364144][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.364986][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.367823][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.383379][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.399630][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.402793][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.405326][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.410789][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.415506][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.419817][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.422665][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.425237][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.728014][ T5930] chnl_net:caif_netlink_parms(): no params data found
[   79.821090][ T5931] chnl_net:caif_netlink_parms(): no params data found
[   79.908783][ T5938] chnl_net:caif_netlink_parms(): no params data found
[   79.920343][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.923456][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.926815][ T5930] bridge_slave_0: entered allmulticast mode
[   79.932490][ T5930] bridge_slave_0: entered promiscuous mode
[   79.976478][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.979033][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.981998][ T5930] bridge_slave_1: entered allmulticast mode
[   79.985021][ T5930] bridge_slave_1: entered promiscuous mode
[   80.035835][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.061544][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.065093][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.068078][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.071561][ T5931] bridge_slave_0: entered allmulticast mode
[   80.075206][ T5931] bridge_slave_0: entered promiscuous mode
[   80.105454][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.108060][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.111184][ T5931] bridge_slave_1: entered allmulticast mode
[   80.114427][ T5931] bridge_slave_1: entered promiscuous mode
[   80.162813][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.165559][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.167953][ T5938] bridge_slave_0: entered allmulticast mode
[   80.171453][ T5938] bridge_slave_0: entered promiscuous mode
[   80.175966][ T5930] team0: Port device team_slave_0 added
[   80.181602][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.187232][ T5930] team0: Port device team_slave_1 added
[   80.189452][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.192321][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.194651][ T5938] bridge_slave_1: entered allmulticast mode
[   80.197328][ T5938] bridge_slave_1: entered promiscuous mode
[   80.211618][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.266648][ T5931] team0: Port device team_slave_0 added
[   80.270795][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.272939][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.281007][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.289036][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.295203][ T5931] team0: Port device team_slave_1 added
[   80.307837][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.310433][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.320020][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.326408][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.344247][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.346835][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.356217][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.386502][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.388615][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.397818][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.417316][ T5938] team0: Port device team_slave_0 added
[   80.458505][ T5938] team0: Port device team_slave_1 added
[   80.478635][ T5930] hsr_slave_0: entered promiscuous mode
[   80.482446][ T5930] hsr_slave_1: entered promiscuous mode
[   80.506528][ T5931] hsr_slave_0: entered promiscuous mode
[   80.510292][ T5931] hsr_slave_1: entered promiscuous mode
[   80.513103][ T5931] debugfs: 'hsr0' already exists in 'hsr'
[   80.515297][ T5931] Cannot create hsr debugfs directory
[   80.527696][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.530067][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.538823][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.544865][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.547401][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.556728][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.693839][ T5938] hsr_slave_0: entered promiscuous mode
[   80.697115][ T5938] hsr_slave_1: entered promiscuous mode
[   80.700527][ T5938] debugfs: 'hsr0' already exists in 'hsr'
[   80.702786][ T5938] Cannot create hsr debugfs directory
[   80.935211][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.943132][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.957032][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.987890][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.027722][ T5930] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.041262][ T5930] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.047987][ T5930] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.075575][ T5930] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.135844][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.142788][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.151470][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.165994][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.264361][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.301265][ T5931] 8021q: adding VLAN 0 to HW filter on device team0
[   81.310695][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.322178][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.325449][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.357255][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.359542][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.373143][ T5930] 8021q: adding VLAN 0 to HW filter on device team0
[   81.392384][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.395090][  T275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.414055][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.430100][ T5939] Bluetooth: hci0: command tx timeout
[   81.440549][  T275] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.443430][  T275] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.476399][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[   81.510657][   T56] Bluetooth: hci1: command tx timeout
[   81.513135][ T5939] Bluetooth: hci2: command tx timeout
[   81.517648][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.520668][  T275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.547605][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.550062][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.796865][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.837879][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.863102][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.945613][ T5931] veth0_vlan: entered promiscuous mode
[   81.948297][ T5930] veth0_vlan: entered promiscuous mode
[   81.969543][ T5930] veth1_vlan: entered promiscuous mode
[   81.974692][ T5938] veth0_vlan: entered promiscuous mode
[   81.977530][ T5931] veth1_vlan: entered promiscuous mode
[   81.998076][ T5938] veth1_vlan: entered promiscuous mode
[   82.047898][ T5931] veth0_macvtap: entered promiscuous mode
[   82.054488][ T5930] veth0_macvtap: entered promiscuous mode
[   82.070939][ T5930] veth1_macvtap: entered promiscuous mode
[   82.076861][ T5931] veth1_macvtap: entered promiscuous mode
[   82.087078][ T5938] veth0_macvtap: entered promiscuous mode
[   82.096753][ T5938] veth1_macvtap: entered promiscuous mode
[   82.108473][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.126498][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.148878][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.160240][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.163387][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.168750][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.176856][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.195796][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.203909][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.208763][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.226768][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.251358][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.268829][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.282963][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.316941][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.334994][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.370818][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.372263][ T3969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.374304][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.380793][ T3969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.449991][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.453108][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.491499][ T3969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.500954][ T3969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.530707][ T3969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.533616][ T3969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.576620][ T3969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.580229][ T3969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.610641][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.626840][ T3969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.631883][ T3969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.859090][ T6005] syz.1.68 uses obsolete (PF_INET,SOCK_PACKET)
[   83.237251][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'.
[   83.278131][ T6026] loop2: detected capacity change from 0 to 1024
[   83.361270][   T27] hfsplus: b-tree write err: -5, ino 4
[   83.450132][   T33] audit: type=1326 audit(1759313859.137:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.83" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f75b8ec29 code=0x7ffc0000
[   83.481359][   T33] audit: type=1326 audit(1759313859.137:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.83" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f75b8ec29 code=0x7ffc0000
[   83.493046][   T33] audit: type=1326 audit(1759313859.157:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.83" exe="/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f0f75b8ec29 code=0x7ffc0000
[   83.503279][   T33] audit: type=1326 audit(1759313859.157:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.83" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f75b8ec29 code=0x7ffc0000
[   83.510147][ T5939] Bluetooth: hci0: command tx timeout
[   83.534860][   T33] audit: type=1326 audit(1759313859.157:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.83" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f75b8ec29 code=0x7ffc0000
[   83.572725][ T6038] process 'syz.2.86' launched './file1' with NULL argv: empty string added
[   83.590083][ T5939] Bluetooth: hci2: command tx timeout
[   83.605546][ T6040] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.076201][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.353542][ T6071] Zero length message leads to an empty skb
[   84.522078][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.525808][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.530171][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.534157][   T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.537065][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.609724][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.783136][ T6093] IPv6: addrconf: prefix option has invalid lifetime
[   84.785962][ T6093] IPv6: addrconf: prefix option has invalid lifetime
[   84.862695][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.973650][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.982255][ T6102] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.110'.
[   85.088741][ T6077] chnl_net:caif_netlink_parms(): no params data found
[   85.330338][   T13] bridge_slave_1: left allmulticast mode
[   85.333072][   T13] bridge_slave_1: left promiscuous mode
[   85.336402][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.362221][   T13] bridge_slave_0: left allmulticast mode
[   85.364759][   T13] bridge_slave_0: left promiscuous mode
[   85.372705][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.430078][ T5996] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   85.585801][ T5996] usb 3-1: config index 0 descriptor too short (expected 69, got 36)
[   85.590818][ T5996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.590996][ T5939] Bluetooth: hci0: command tx timeout
[   85.598267][ T5996] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[   85.604613][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.608023][ T5996] usb 3-1: Product: syz
[   85.610309][ T5996] usb 3-1: Manufacturer: syz
[   85.612180][ T5996] usb 3-1: SerialNumber: syz
[   85.620942][ T5996] usb 3-1: config 0 descriptor??
[   85.638037][ T5996] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[   85.669824][ T5939] Bluetooth: hci2: command tx timeout
[   85.736610][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.746684][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.754286][   T13] bond0 (unregistering): Released all slaves
[   85.767946][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.771517][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.780660][ T6077] bridge_slave_0: entered allmulticast mode
[   85.785097][ T6125] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[   85.805809][ T6077] bridge_slave_0: entered promiscuous mode
[   85.818943][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.833264][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.835852][ T6077] bridge_slave_1: entered allmulticast mode
[   85.846694][ T6077] bridge_slave_1: entered promiscuous mode
[   85.970914][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.989894][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.031676][ T5996] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[   86.049730][ T5996] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71
[   86.090666][ T5996] usb 3-1: USB disconnect, device number 2
[   86.178901][ T6077] team0: Port device team_slave_0 added
[   86.183497][ T6077] team0: Port device team_slave_1 added
[   86.232416][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.235248][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.246297][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.262484][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.265164][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.289370][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.338566][   T13] hsr_slave_0: left promiscuous mode
[   86.350107][   T13] hsr_slave_1: left promiscuous mode
[   86.353263][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.356441][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.372411][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.375464][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.394120][   T13] veth1_macvtap: left promiscuous mode
[   86.396692][   T13] veth0_macvtap: left promiscuous mode
[   86.399549][   T13] veth1_vlan: left promiscuous mode
[   86.404036][   T13] veth0_vlan: left promiscuous mode
[   86.549773][ T5939] Bluetooth: hci1: command tx timeout
[   86.582808][ T6146] loop2: detected capacity change from 0 to 256
[   86.586134][ T6146] =======================================================
[   86.586134][ T6146] WARNING: The mand mount option has been deprecated and
[   86.586134][ T6146]          and is ignored by this kernel. Remove the mand
[   86.586134][ T6146]          option from the mount to silence this warning.
[   86.586134][ T6146] =======================================================
[   86.665450][ T6146] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   86.861020][  T979] cfg80211: failed to load regulatory.db
[   87.397711][   T13] team0 (unregistering): Port device team_slave_1 removed
[   87.433921][   T13] team0 (unregistering): Port device team_slave_0 removed
[   87.480460][ T5976] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   87.668040][ T5976] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[   87.671746][ T5939] Bluetooth: hci0: command tx timeout
[   87.676514][ T5976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.681149][ T5976] usb 3-1: config 0 has no interface number 0
[   87.690817][ T5976] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00
[   87.694374][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.697799][ T5976] usb 3-1: Product: syz
[   87.699995][ T5976] usb 3-1: Manufacturer: syz
[   87.701978][ T5976] usb 3-1: SerialNumber: syz
[   87.714660][ T5976] usb 3-1: config 0 descriptor??
[   87.750132][ T5939] Bluetooth: hci2: command tx timeout
[   87.877371][ T6077] hsr_slave_0: entered promiscuous mode
[   87.901144][ T6077] hsr_slave_1: entered promiscuous mode
[   87.908378][ T6077] debugfs: 'hsr0' already exists in 'hsr'
[   87.916902][ T6077] Cannot create hsr debugfs directory
[   87.969627][ T5976] uvcvideo 3-1:0.64: Found Unit with invalid ID 0
[   87.975686][ T5976] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (056d:0000)
[   87.978775][ T5976] uvcvideo 3-1:0.64: No valid video chain found.
[   87.995263][ T5976] usb 3-1: USB disconnect, device number 3
[   88.202531][ T6170] loop1: detected capacity change from 0 to 64
[   88.212371][ T6170] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[   88.218305][ T6170] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1
[   88.375201][ T6077] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.385102][ T6077] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.396258][ T6077] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.413722][ T6077] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.639361][ T5939] Bluetooth: hci1: command tx timeout
[   89.063941][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.105362][ T6077] 8021q: adding VLAN 0 to HW filter on device team0
[   89.125254][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.128154][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.156324][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.159562][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.448743][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   89.452961][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.141'.
[   89.555987][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.699759][ T6077] veth0_vlan: entered promiscuous mode
[   89.732046][ T6077] veth1_vlan: entered promiscuous mode
[   89.779757][ T6223] loop2: detected capacity change from 0 to 1024
[   89.809685][ T6077] veth0_macvtap: entered promiscuous mode
[   89.831718][ T6077] veth1_macvtap: entered promiscuous mode
[   89.880643][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.012279][ T6229] loop1: detected capacity change from 0 to 164
[   90.037343][ T6229] rock: directory entry would overflow storage
[   90.040148][ T6229] rock: sig=0x66, size=4, remaining=3
[   90.058084][ T6229] rock: directory entry would overflow storage
[   90.062862][ T6229] rock: sig=0x66, size=4, remaining=3
[   90.139376][   T33] audit: type=1800 audit(1759313865.797:7): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name="file1" dev="loop2" ino=20 res=0 errno=0
[   90.155037][ T6230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[   90.543069][ T6243] loop1: detected capacity change from 0 to 16
[   90.584257][ T6243] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 25144)
[   90.663935][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.710820][ T5939] Bluetooth: hci1: command tx timeout
[   90.751757][ T5713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.757965][ T5713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.764787][ T5713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.781108][ T5713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.871843][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.874738][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.928041][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.932734][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.206665][ T6269] loop2: detected capacity change from 0 to 4096
[   91.227093][ T6269] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   91.275475][ T6269] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   91.390361][ T6280] netlink: 'syz.2.165': attribute type 1 has an invalid length.
[   92.790477][ T5939] Bluetooth: hci1: command tx timeout
[   93.006545][ T6307] loop3: detected capacity change from 0 to 1024
[   93.080126][ T6307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   93.104144][ T6307] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   93.147247][ T6307] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   93.180714][ T6307] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[   93.199579][ T6307] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   93.203684][ T6307] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: comm syz.3.174: inode #1: comm syz.3.174: iget: illegal inode #
[   93.212053][ T6307] EXT4-fs (loop3): Remounting filesystem read-only
[   93.214729][ T6307] EXT4-fs (loop3): no journal found
[   93.360661][ T6311] Illegal XDP return value 4294967294 on prog  (id 11) dev N/A, expect packet loss!
[   94.159697][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   94.223012][ T6333] loop1: detected capacity change from 0 to 256
[   94.227453][ T6333] exfat: Deprecated parameter 'utf8'
[   94.254381][ T6333] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[   94.329411][   T51] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   94.344759][    T9] usb 3-1: Using ep0 maxpacket: 16
[   94.355085][    T9] usb 3-1: config index 0 descriptor too short (expected 12592, got 72)
[   94.358050][    T9] usb 3-1: config 55 has too many interfaces: 55, using maximum allowed: 32
[   94.365846][    T9] usb 3-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config
[   94.371562][    T9] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 55
[   94.377644][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   94.391934][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.396491][    T9] usb 3-1: Product: syz
[   94.398102][    T9] usb 3-1: Manufacturer: syz
[   94.400384][    T9] usb 3-1: SerialNumber: syz
[   94.482170][   T51] usb 4-1: unable to get BOS descriptor or descriptor too short
[   94.485982][   T51] usb 4-1: not running at top speed; connect to a high speed hub
[   94.491218][   T51] usb 4-1: config 6 has an invalid interface number: 30 but max is 0
[   94.494758][   T51] usb 4-1: config 6 has no interface number 0
[   94.497649][   T51] usb 4-1: config 6 interface 30 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   94.505535][   T51] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11
[   94.509538][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.513368][   T51] usb 4-1: Product: syz
[   94.515207][   T51] usb 4-1: Manufacturer: syz
[   94.517062][   T51] usb 4-1: SerialNumber: syz
[   94.656240][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.660859][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.719588][  T979] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.744019][   T51] usbtest 4-1:6.30: usb test device
[   94.747996][   T51] usbtest 4-1:6.30: full-speed {control in/out iso-out} tests (+alt)
[   94.760518][   T51] usb 4-1: USB disconnect, device number 2
[   94.881754][  T979] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[   94.888027][  T979] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   94.895780][  T979] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   94.900567][  T979] usb 2-1: config 220 has no interface number 2
[   94.902967][  T979] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   94.907418][  T979] usb 2-1: config 220 interface 0 has no altsetting 0
[   94.910209][  T979] usb 2-1: config 220 interface 76 has no altsetting 0
[   94.913109][  T979] usb 2-1: config 220 interface 1 has no altsetting 1
[   94.920266][  T979] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   94.926687][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.931040][  T979] usb 2-1: Product: syz
[   94.933189][  T979] usb 2-1: Manufacturer: syz
[   94.936167][  T979] usb 2-1: SerialNumber: syz
[   95.156998][  T979] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[   95.166394][  T979] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   95.173034][  T979] uvcvideo 2-1:220.0: No valid video chain found.
[   95.206061][  T979] usb 2-1: USB disconnect, device number 2
[   95.885983][ T6344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.356925][ T6354] netlink: 248 bytes leftover after parsing attributes in process `syz.1.192'.
[   96.652496][    T9] usb 3-1: USB disconnect, device number 4
[   96.950977][  T795] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   97.102513][  T795] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   97.106947][  T795] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   97.131998][  T795] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1280, setting to 64
[   97.136255][  T795] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[   97.160612][  T795] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40
[   97.164202][  T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   97.181908][  T795] usb 2-1: SerialNumber: syz
[   97.194411][ T6358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   97.198581][ T6358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   97.214227][  T795] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[   97.443403][  T795] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[   97.450294][  T795] usb 2-1: USB disconnect, device number 3
[   98.086567][ T6400] loop3: detected capacity change from 0 to 4096
[   98.096679][ T6400] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   98.113753][ T6400] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   98.117508][ T6400] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[   98.125512][ T6400] ntfs3(loop3): Failed to load $LogFile (-22).
[   98.128264][ T6400] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[   98.273852][ T6408] loop1: detected capacity change from 0 to 4096
[   98.279004][ T6408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   98.296293][ T6408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.363694][ T5930] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.447873][ T6416] netlink: 124 bytes leftover after parsing attributes in process `syz.2.219'.
[   98.459889][  T795] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   98.464690][ T6414] loop1: detected capacity change from 0 to 256
[   98.476297][ T6414] exfat: Invalid uid '0x00000000ffffffff'
[   98.484057][   T33] audit: type=1326 audit(1759313874.177:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.1.217" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f75b8ec29 code=0x0
[   98.612915][ T6423] loop2: detected capacity change from 0 to 2048
[   98.633707][  T795] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[   98.638670][  T795] usb 4-1: config 0 has no interface number 0
[   98.641610][  T795] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   98.642621][ T6423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.646735][  T795] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   98.654815][  T795] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[   98.658666][  T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.665929][  T795] usb 4-1: config 0 descriptor??
[   98.680046][  T795] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input5
[   98.715077][   T33] audit: type=1800 audit(1759313874.407:9): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="file2" dev="loop2" ino=1347 res=0 errno=0
[   98.831300][ T6425] netlink: 'syz.2.223': attribute type 4 has an invalid length.
[   98.850179][ T6425] netlink: 'syz.2.223': attribute type 4 has an invalid length.
[   98.903230][    T9] usb 4-1: USB disconnect, device number 3
[   98.927855][ T6427] loop2: detected capacity change from 0 to 512
[   98.958872][ T6427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.965043][ T6427] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.117476][ T5938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.234127][ T6505] loop1: detected capacity change from 0 to 128
[  102.250296][ T6497] loop2: detected capacity change from 0 to 32768
[  102.275535][ T6497] (syz.2.245,6497,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=108, inode=18446744073709486150, rec_len=65535, name_len=9
[  102.283908][ T6497] (syz.2.245,6497,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  102.287365][ T6497] (syz.2.245,6497,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  102.287382][ T6497] (syz.2.245,6497,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  102.295304][ T6497] (syz.2.245,6497,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  102.298008][ T6497] (syz.2.245,6497,1):ocfs2_fill_super:1177 ERROR: status = -22
[  102.338407][ T6507] loop2: detected capacity change from 0 to 128
[  102.362383][ T6507] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  102.373489][ T6507] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  102.407044][ T6507] EXT4-fs error (device loop2): make_indexed_dir:2269: inode #2: block 18: comm syz.2.251: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0
[  102.423611][ T6512] __vm_enough_memory: pid: 6512, comm: syz.1.252, bytes: 21200053223424 not enough memory for the allocation
[  102.438562][ T5938] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.519834][ T6514] loop2: detected capacity change from 0 to 1024
[  102.526585][ T6514] ext4: Bad value for 'journal_dev'
[  102.950251][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'.
[  103.050451][ T6528] loop2: detected capacity change from 0 to 8192
[  103.401297][ T6532] loop2: detected capacity change from 0 to 32768
[  103.450972][ T6532] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  103.455319][ T6532] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  103.474861][ T6532] XFS (loop2): Ending clean mount
[  103.482733][ T6532] XFS (loop2): Quotacheck needed: Please wait.
[  103.547741][ T6532] XFS (loop2): Quotacheck: Done.
[  103.839753][ T5938] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.162857][   T33] audit: type=1326 audit(1759313879.857:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.2.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  104.260115][   T33] audit: type=1326 audit(1759313879.857:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.2.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  104.267540][   T33] audit: type=1326 audit(1759313879.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.2.264" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  104.289562][   T33] audit: type=1326 audit(1759313879.877:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.264" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa8293c14e5 code=0x7ffc0000
[  104.316326][   T33] audit: type=1326 audit(1759313879.877:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.2.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  104.348793][   T33] audit: type=1326 audit(1759313879.877:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.2.264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  104.390773][   T33] audit: type=1326 audit(1759313880.047:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.264" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  104.438391][ T6570] loop3: detected capacity change from 0 to 512
[  104.450529][ T6570] EXT4-fs: Ignoring removed oldalloc option
[  104.453121][ T6570] journal_path: Lookup failure for './file1'
[  104.455526][ T6570] EXT4-fs: error: could not find journal device path
[  104.504269][ T6572] loop2: detected capacity change from 0 to 256
[  104.579771][ T6572] FAT-fs (loop2): Directory bread(block 64) failed
[  104.582415][ T6572] FAT-fs (loop2): Directory bread(block 65) failed
[  104.584907][ T6572] FAT-fs (loop2): Directory bread(block 66) failed
[  104.587822][ T6572] FAT-fs (loop2): Directory bread(block 67) failed
[  104.590555][ T6572] FAT-fs (loop2): Directory bread(block 68) failed
[  104.593083][ T6572] FAT-fs (loop2): Directory bread(block 69) failed
[  104.595514][ T6572] FAT-fs (loop2): Directory bread(block 70) failed
[  104.598197][ T6572] FAT-fs (loop2): Directory bread(block 71) failed
[  104.601045][ T6572] FAT-fs (loop2): Directory bread(block 72) failed
[  104.603520][ T6572] FAT-fs (loop2): Directory bread(block 73) failed
[  105.405200][ T6591] loop2: detected capacity change from 0 to 2048
[  105.669101][ T6602] loop2: detected capacity change from 0 to 64
[  105.685069][ T6584] loop1: detected capacity change from 0 to 32768
[  105.709063][ T6584] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  105.732947][ T6584] XFS (loop1): Ending clean mount
[  105.802067][ T5930] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  105.832655][   T56] Bluetooth: hci1: command 0x0405 tx timeout
[  105.851793][ T5996] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  105.999276][ T5996] usb 4-1: Using ep0 maxpacket: 32
[  106.004687][ T5996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  106.008848][ T5996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  106.015720][ T5996] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  106.021319][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.026749][ T5996] usb 4-1: Product: syz
[  106.029319][ T5996] usb 4-1: Manufacturer: syz
[  106.032327][ T5996] usb 4-1: SerialNumber: syz
[  106.039454][ T5996] usb 4-1: config 0 descriptor??
[  106.056491][ T5996] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  106.255378][ T5713] usb 4-1: Failed to submit usb control message: -71
[  106.255613][ T5996] usb 4-1: USB disconnect, device number 4
[  106.258077][ T5713] usb 4-1: unable to send the bmi data to the device: -71
[  106.263012][ T5713] usb 4-1: unable to get target info from device
[  106.265553][ T5713] usb 4-1: could not get target info (-71)
[  106.268389][ T5713] usb 4-1: could not probe fw (-71)
[  106.868659][ T6641] loop2: detected capacity change from 0 to 2048
[  106.913353][ T6641] Dev loop2: RDB in block 1 has bad checksum
[  106.946416][ T5296] Dev loop2: RDB in block 1 has bad checksum
[  107.186424][ T6653] loop3: detected capacity change from 0 to 4096
[  107.579846][ T6653] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  107.596447][ T6653] ntfs3(loop3): ino=1a, mi_enum_attr
[  107.598193][ T6653] ntfs3(loop3): ino=1a, mi_enum_attr
[  107.600297][ T6653] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  107.623105][ T6653] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  107.861569][ T6661] loop2: detected capacity change from 0 to 1024
[  107.993400][ T6667] loop2: detected capacity change from 0 to 256
[  108.005315][ T6667] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.009764][ T6667] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  108.018363][ T6667] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  108.026300][ T6667] exFAT-fs (loop2): failed to load alloc-bitmap
[  108.028897][ T6667] exFAT-fs (loop2): failed to recognize exfat type
[  108.126555][  T795] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  108.390725][ T6675] loop1: detected capacity change from 0 to 40427
[  108.403813][ T6675] F2FS-fs (loop1): invalid crc value
[  108.458898][ T6675] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  108.464750][ T6675] F2FS-fs (loop1): Start checkpoint disabled!
[  108.473658][ T6675] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  108.480186][ T6675] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  108.489291][  T795] usb 4-1: Using ep0 maxpacket: 32
[  108.496215][  T795] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  108.504091][  T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.511669][  T795] usb 4-1: config 0 descriptor??
[  108.516595][  T795] gspca_main: nw80x-2.14.0 probing 055f:d001
[  109.119004][  T795] gspca_nw80x: reg_r err -71
[  109.126144][  T795] nw80x 4-1:0.0: probe with driver nw80x failed with error -71
[  109.131559][  T795] usb 4-1: USB disconnect, device number 5
[  109.238744][   T29] kworker/u9:1: attempt to access beyond end of device
[  109.238744][   T29] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  109.254162][   T29] CPU: 0 UID: 0 PID: 29 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  109.254183][   T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.254192][   T29] Workqueue: writeback wb_workfn (flush-7:1)
[  109.254223][   T29] Call Trace:
[  109.254239][   T29]  <TASK>
[  109.254252][   T29]  dump_stack_lvl+0x189/0x250
[  109.254275][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.254290][   T29]  ? __pfx_queue_work_on+0x10/0x10
[  109.254303][   T29]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.254319][   T29]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.254344][   T29]  f2fs_handle_critical_error+0x37c/0x540
[  109.254366][   T29]  f2fs_write_end_io+0x886/0xb60
[  109.254414][   T29]  __submit_merged_bio+0x27a/0x6a0
[  109.254435][   T29]  __submit_merged_write_cond+0x255/0x530
[  109.254463][   T29]  f2fs_write_data_pages+0x261d/0x3000
[  109.254532][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.254560][   T29]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  109.254608][   T29]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  109.254634][   T29]  ? trace_f2fs_writepages+0x7f/0x200
[  109.254649][   T29]  ? f2fs_write_node_pages+0x478/0x6e0
[  109.254673][   T29]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  109.254697][   T29]  ? __lock_acquire+0xab9/0xd20
[  109.254723][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.254739][   T29]  do_writepages+0x32e/0x550
[  109.254760][   T29]  ? reacquire_held_locks+0x127/0x1d0
[  109.254772][   T29]  ? writeback_sb_inodes+0x384/0x1010
[  109.254815][   T29]  __writeback_single_inode+0x145/0xff0
[  109.254830][   T29]  ? do_raw_spin_unlock+0x4d/0x240
[  109.254850][   T29]  writeback_sb_inodes+0x6c7/0x1010
[  109.254872][   T29]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.254903][   T29]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  109.254957][   T29]  ? rcu_is_watching+0x15/0xb0
[  109.254980][   T29]  wb_writeback+0x43b/0xaf0
[  109.255003][   T29]  ? queue_io+0x351/0x590
[  109.255021][   T29]  ? __pfx_wb_writeback+0x10/0x10
[  109.255043][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.255063][   T29]  wb_workfn+0x409/0xef0
[  109.255098][   T29]  ? __pfx_wb_workfn+0x10/0x10
[  109.255122][   T29]  ? __lock_acquire+0xab9/0xd20
[  109.255150][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  109.255175][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.255190][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  109.255208][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  109.255228][   T29]  process_scheduled_works+0xae1/0x17b0
[  109.255275][   T29]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.255312][   T29]  worker_thread+0x8a0/0xda0
[  109.255357][   T29]  kthread+0x711/0x8a0
[  109.255378][   T29]  ? __pfx_worker_thread+0x10/0x10
[  109.255396][   T29]  ? __pfx_kthread+0x10/0x10
[  109.255413][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.255428][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.255442][   T29]  ? __pfx_kthread+0x10/0x10
[  109.255481][   T29]  ret_from_fork+0x4bc/0x870
[  109.255506][   T29]  ? __pfx_ret_from_fork+0x10/0x10
[  109.255532][   T29]  ? __switch_to_asm+0x39/0x70
[  109.255548][   T29]  ? __switch_to_asm+0x33/0x70
[  109.255561][   T29]  ? __pfx_kthread+0x10/0x10
[  109.255577][   T29]  ret_from_fork_asm+0x1a/0x30
[  109.255611][   T29]  </TASK>
[  109.255618][   T29] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  109.400661][   T29] CPU: 0 UID: 0 PID: 29 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  109.400686][   T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.400696][   T29] Workqueue: writeback wb_workfn (flush-7:1)
[  109.400724][   T29] Call Trace:
[  109.400730][   T29]  <TASK>
[  109.400738][   T29]  dump_stack_lvl+0x189/0x250
[  109.400759][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.400773][   T29]  ? __pfx_queue_work_on+0x10/0x10
[  109.400794][   T29]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.400809][   T29]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.400833][   T29]  f2fs_handle_critical_error+0x37c/0x540
[  109.400855][   T29]  f2fs_write_end_io+0x886/0xb60
[  109.400884][   T29]  __submit_merged_bio+0x27a/0x6a0
[  109.400905][   T29]  __submit_merged_write_cond+0x255/0x530
[  109.400932][   T29]  f2fs_write_data_pages+0x261d/0x3000
[  109.400975][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.401002][   T29]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  109.401047][   T29]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  109.401072][   T29]  ? trace_f2fs_writepages+0x7f/0x200
[  109.401087][   T29]  ? f2fs_write_node_pages+0x478/0x6e0
[  109.401110][   T29]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  109.401154][   T29]  ? __lock_acquire+0xab9/0xd20
[  109.401179][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.401192][   T29]  do_writepages+0x32e/0x550
[  109.401211][   T29]  ? reacquire_held_locks+0x127/0x1d0
[  109.401222][   T29]  ? writeback_sb_inodes+0x384/0x1010
[  109.401245][   T29]  __writeback_single_inode+0x145/0xff0
[  109.401261][   T29]  ? do_raw_spin_unlock+0x4d/0x240
[  109.401279][   T29]  writeback_sb_inodes+0x6c7/0x1010
[  109.401298][   T29]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.401327][   T29]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  109.401377][   T29]  ? rcu_is_watching+0x15/0xb0
[  109.401398][   T29]  wb_writeback+0x43b/0xaf0
[  109.401419][   T29]  ? queue_io+0x351/0x590
[  109.401436][   T29]  ? __pfx_wb_writeback+0x10/0x10
[  109.401482][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.401501][   T29]  wb_workfn+0x409/0xef0
[  109.401534][   T29]  ? __pfx_wb_workfn+0x10/0x10
[  109.401555][   T29]  ? __lock_acquire+0xab9/0xd20
[  109.401582][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  109.401605][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.401619][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  109.401635][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  109.401654][   T29]  process_scheduled_works+0xae1/0x17b0
[  109.401697][   T29]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.401731][   T29]  worker_thread+0x8a0/0xda0
[  109.401773][   T29]  kthread+0x711/0x8a0
[  109.401800][   T29]  ? __pfx_worker_thread+0x10/0x10
[  109.401817][   T29]  ? __pfx_kthread+0x10/0x10
[  109.401831][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.401863][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.401874][   T29]  ? __pfx_kthread+0x10/0x10
[  109.401888][   T29]  ret_from_fork+0x4bc/0x870
[  109.401908][   T29]  ? __pfx_ret_from_fork+0x10/0x10
[  109.401934][   T29]  ? __switch_to_asm+0x39/0x70
[  109.401949][   T29]  ? __switch_to_asm+0x33/0x70
[  109.401962][   T29]  ? __pfx_kthread+0x10/0x10
[  109.401977][   T29]  ret_from_fork_asm+0x1a/0x30
[  109.402007][   T29]  </TASK>
[  109.402014][   T29] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  109.805995][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'.
[  110.085288][ T6733] loop1: detected capacity change from 0 to 2048
[  110.115054][ T6733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.127055][ T6740] loop3: detected capacity change from 0 to 512
[  110.150541][ T6740] EXT4-fs: Ignoring removed nomblk_io_submit option
[  110.168513][ T5930] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.182904][ T6740] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.3.331: corrupted xattr block 95: invalid header
[  110.194446][ T6740] EXT4-fs (loop3): Remounting filesystem read-only
[  110.196537][ T6740] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  110.205430][ T6740] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  110.212284][ T6740] EXT4-fs (loop3): 1 orphan inode deleted
[  110.214900][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.235690][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.258339][ T6738] loop2: detected capacity change from 0 to 2048
[  110.268577][ T6738] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  110.283479][ T6738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.515206][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.517966][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.523380][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.527704][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.531609][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.534849][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.538448][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.542845][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.546536][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  110.710408][  T795] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  110.881105][  T795] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  110.884451][  T795] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.991729][  T795] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  110.995512][  T795] usb 2-1: config 1 has no interface number 1
[  110.998111][  T795] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  111.004150][  T795] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  111.015789][  T795] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.020695][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.024257][  T795] usb 2-1: Product: syz
[  111.026149][  T795] usb 2-1: Manufacturer: syz
[  111.028353][  T795] usb 2-1: SerialNumber: syz
[  112.907809][  T795] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  112.911308][  T795] usb 2-1: MIDIStreaming interface descriptor not found
[  112.959971][  T795] usb 2-1: USB disconnect, device number 4
[  113.053707][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.186671][    T9] kernel read not supported for file /sg0 (pid: 9 comm: kworker/0:0)
[  113.775267][ T6825] loop3: detected capacity change from 0 to 65
[  113.789687][ T6825] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  113.862322][ T6811] loop1: detected capacity change from 0 to 32768
[  113.904405][ T6811] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  113.929948][ T5996] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  113.975311][ T5930] ocfs2: Unmounting device (7,1) on (node local)
[  114.090646][ T5996] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.094504][ T5996] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.098735][ T5996] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  114.102516][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  114.105743][ T5996] usb 3-1: SerialNumber: syz
[  114.179307][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  114.329313][    T9] usb 4-1: Using ep0 maxpacket: 32
[  114.340267][    T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 0
[  114.343590][    T9] usb 4-1: config 0 has no interface number 0
[  114.346084][    T9] usb 4-1: config 0 interface 125 has no altsetting 0
[  114.358485][    T9] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  114.365685][ T5996] usb 3-1: 0:2 : does not exist
[  114.386239][ T5996] usb 3-1: USB disconnect, device number 5
[  114.393710][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.396720][    T9] usb 4-1: Product: syz
[  114.398293][    T9] usb 4-1: Manufacturer: syz
[  114.402516][    T9] usb 4-1: SerialNumber: syz
[  114.415428][    T9] usb 4-1: config 0 descriptor??
[  114.427712][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.062464][    T9] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  115.410166][    T9] usb 4-1: reset high-speed USB device number 6 using dummy_hcd
[  115.419424][    T9] usb 4-1: device reset changed ep0 maxpacket size!
[  115.432071][    T9] ueagle-atm 4-1:0.125: usbatm_usb_probe: bind failed: -19!
[  115.444274][    T9] usb 4-1: USB disconnect, device number 6
[  115.599665][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  115.690493][ T6853] __nla_validate_parse: 45 callbacks suppressed
[  115.690511][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'.
[  115.769302][    T9] usb 4-1: Using ep0 maxpacket: 8
[  115.782790][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  115.791206][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  115.796187][    T9] usb 4-1: can't read configurations, error -71
[  116.339367][ T6879] netlink: 'syz.2.391': attribute type 6 has an invalid length.
[  116.362057][ T6879] netlink: 'syz.2.391': attribute type 6 has an invalid length.
[  116.981800][ T6905] loop3: detected capacity change from 0 to 256
[  117.007195][ T6905] FAT-fs (loop3): Directory bread(block 1285) failed
[  117.056410][ T6905] FAT-fs (loop3): Directory bread(block 1285) failed
[  117.063263][ T6905] FAT-fs (loop3): Directory bread(block 1285) failed
[  117.066512][ T6905] FAT-fs (loop3): Directory bread(block 1285) failed
[  118.150170][ T6928] loop2: detected capacity change from 0 to 512
[  118.192240][ T6928] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002]
[  118.195744][ T6928] System zones: 0-7
[  118.203679][ T6928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.237859][ T6928] EXT4-fs (loop2): shut down requested (1)
[  118.279869][ T5938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.579335][  T795] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  118.676700][ T6944] loop3: detected capacity change from 0 to 32768
[  118.684900][ T6944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.420 (6944)
[  118.719867][ T6944] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.724341][ T6944] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  118.739435][  T795] usb 3-1: Using ep0 maxpacket: 8
[  118.746682][  T795] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  118.759319][  T795] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  118.762556][  T795] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  118.765079][  T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.006192][  T979] usb 3-1: USB disconnect, device number 6
[  119.008203][ T6944] BTRFS info (device loop3): enabling ssd optimizations
[  119.014117][ T6944] BTRFS info (device loop3): enabling free space tree
[  119.101913][ T6967] input: syz0 as /devices/virtual/input/input6
[  119.440883][ T6077] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.795827][ T6983] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2
[  120.526667][ T7004] pimreg: tun_chr_ioctl cmd 1074025677
[  120.529100][ T7004] pimreg: linktype set to 769
[  120.549298][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  120.634473][ T7006] loop1: detected capacity change from 0 to 512
[  120.644266][ T7006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  120.672815][ T7006] EXT4-fs (loop1): 1 truncate cleaned up
[  120.676520][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.705672][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  120.714872][ T5930] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.718586][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.731695][    T9] usb 3-1: Product: syz
[  120.733785][    T9] usb 3-1: Manufacturer: syz
[  120.735970][    T9] usb 3-1: SerialNumber: syz
[  120.768555][   T56] Bluetooth: hci0: hardware error 0xf4
[  120.784890][    T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  120.798287][ T7009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  120.834756][ T5995] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  121.139389][ T7011] loop3: detected capacity change from 0 to 32768
[  121.164766][ T7011] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  121.171932][ T7011] XFS (loop3): Log size 624 blocks too small, minimum size is 816 blocks
[  121.175305][ T7011] XFS (loop3): AAIEEE! Log failed size checks. Abort!
[  121.187805][ T7011] XFS (loop3): log mount failed
[  121.448711][   T51] usb 3-1: USB disconnect, device number 7
[  121.664869][ T7035] loop1: detected capacity change from 0 to 256
[  121.668957][ T7035] exfat: Deprecated parameter 'utf8'
[  121.674072][ T7035] exfat: Deprecated parameter 'utf8'
[  121.676290][ T7035] exfat: Deprecated parameter 'utf8'
[  121.685007][ T7035] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  121.911815][ T5995] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  121.914921][ T5995] ath9k_htc: Failed to initialize the device
[  121.918517][   T51] usb 3-1: ath9k_htc: USB layer deinitialized
[  121.931051][ T7045] loop3: detected capacity change from 0 to 256
[  122.000932][ T7045] FAT-fs (loop3): Directory bread(block 64) failed
[  122.003463][ T7045] FAT-fs (loop3): Directory bread(block 65) failed
[  122.028980][ T7045] FAT-fs (loop3): Directory bread(block 66) failed
[  122.039093][ T7045] FAT-fs (loop3): Directory bread(block 67) failed
[  122.046857][ T7045] FAT-fs (loop3): Directory bread(block 68) failed
[  122.051038][ T7045] FAT-fs (loop3): Directory bread(block 69) failed
[  122.053847][ T7045] FAT-fs (loop3): Directory bread(block 70) failed
[  122.056635][ T7045] FAT-fs (loop3): Directory bread(block 71) failed
[  122.067086][ T7045] FAT-fs (loop3): Directory bread(block 72) failed
[  122.079527][ T7045] FAT-fs (loop3): Directory bread(block 73) failed
[  122.189352][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  122.359355][    T9] usb 2-1: Using ep0 maxpacket: 16
[  122.369855][    T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  122.373556][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.377511][    T9] usb 2-1: config 0 has no interface number 0
[  122.389368][    T9] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  122.394471][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.406602][    T9] usb 2-1: config 0 descriptor??
[  122.421745][    T9] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22
[  122.513913][ T7054] loop2: detected capacity change from 0 to 40427
[  122.529931][ T7054] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  122.532952][ T7054] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  122.540683][ T7054] F2FS-fs (loop2): invalid crc value
[  122.550055][ T5995] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  122.612190][ T7054] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.623116][    T9] usb 2-1: USB disconnect, device number 5
[  122.634459][ T7054] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  122.639502][ T7054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  122.709617][ T5995] usb 4-1: Using ep0 maxpacket: 16
[  122.717027][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.729329][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.733252][ T5995] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  122.747420][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.760182][ T5995] usb 4-1: config 0 descriptor??
[  122.800129][   T56] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  123.224194][ T5995] zydacron 0003:13EC:0006.0001: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0
[  123.436199][ T5995] usb 4-1: USB disconnect, device number 9
[  123.608977][ T7077] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.463'.
[  123.619451][ T7077] openvswitch: netlink: Message has 5 unknown bytes.
[  123.806384][ T7088] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  124.151443][ T7099] netlink: 'syz.3.472': attribute type 21 has an invalid length.
[  124.154253][ T7099] netlink: 'syz.3.472': attribute type 1 has an invalid length.
[  124.157117][ T7099] netlink: 144 bytes leftover after parsing attributes in process `syz.3.472'.
[  124.207048][ T7101] netlink: 21 bytes leftover after parsing attributes in process `syz.3.473'.
[  124.839632][ T5996] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  124.995881][ T5996] usb 4-1: unable to get BOS descriptor or descriptor too short
[  125.001782][ T5996] usb 4-1: no configurations
[  125.004273][ T5996] usb 4-1: can't read configurations, error -22
[  125.049471][   T51] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  125.199356][   T51] usb 2-1: Using ep0 maxpacket: 32
[  125.203066][   T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  125.209067][   T51] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  125.212785][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.215623][   T51] usb 2-1: Product: syz
[  125.217120][   T51] usb 2-1: Manufacturer: syz
[  125.218627][   T51] usb 2-1: SerialNumber: syz
[  125.221708][   T51] usb 2-1: config 0 descriptor??
[  125.224494][ T7121] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  125.230305][   T51] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  125.288985][ T7123] loop2: detected capacity change from 0 to 1024
[  125.292576][ T7123] EXT4-fs: Ignoring removed orlov option
[  125.307207][ T7123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.344033][ T5938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.464194][  T795] usb 2-1: USB disconnect, device number 6
[  126.851820][ T7150] netlink: 'syz.2.493': attribute type 24 has an invalid length.
[  127.000997][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  127.077355][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.496'.
[  127.169713][    T9] usb 2-1: Using ep0 maxpacket: 32
[  127.179935][    T9] usb 2-1: config 0 has an invalid interface number: 230 but max is 0
[  127.185146][    T9] usb 2-1: config 0 has no interface number 0
[  127.188341][    T9] usb 2-1: too many endpoints for config 0 interface 230 altsetting 2: 210, using maximum allowed: 30
[  127.195515][    T9] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.200186][    T9] usb 2-1: config 0 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  127.203448][    T9] usb 2-1: config 0 interface 230 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 210
[  127.207794][    T9] usb 2-1: config 0 interface 230 has no altsetting 0
[  127.215558][    T9] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  127.218949][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.222467][    T9] usb 2-1: Product: syz
[  127.224277][    T9] usb 2-1: Manufacturer: syz
[  127.226450][    T9] usb 2-1: SerialNumber: syz
[  127.244359][    T9] usb 2-1: config 0 descriptor??
[  127.254896][    T9] ums-usbat 2-1:0.230: USB Mass Storage device detected
[  127.276298][    T9] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  127.403489][ T7160] loop3: detected capacity change from 0 to 4096
[  127.409082][ T7160] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  127.459124][ T7160] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  127.465335][ T7160] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  127.480049][ T7160] ntfs3(loop3): ino=1b, mi_enum_attr
[  127.570030][    T9] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5
[  127.600188][    T9] usb 2-1: USB disconnect, device number 7
[  128.509071][ T7190] loop3: detected capacity change from 0 to 128
[  128.527301][ T7172] loop1: detected capacity change from 0 to 32768
[  128.544683][ T7190] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.555548][ T7172] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  128.555982][ T7190] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.578003][ T7172] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  128.612709][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'.
[  128.673400][ T6077] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.676948][ T5930] ocfs2: Unmounting device (7,1) on (node local)
[  129.089082][ T7204] loop3: detected capacity change from 0 to 512
[  129.098455][ T7204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  129.115996][ T7204] EXT4-fs (loop3): 1 truncate cleaned up
[  129.127215][ T7204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.183006][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.240873][ T5996] IPVS: starting estimator thread 0...
[  129.332180][ T7210] loop3: detected capacity change from 0 to 512
[  129.336745][ T7210] EXT4-fs: Ignoring removed nobh option
[  129.339374][ T7208] IPVS: using max 46 ests per chain, 110400 per kthread
[  129.349434][ T7210] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  129.354782][ T7210] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  129.358779][ T7210] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.515: Corrupt directory, running e2fsck is recommended
[  129.366194][ T7210] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  129.371655][ T7210] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.515: corrupted in-inode xattr: invalid ea_ino
[  129.377311][ T7210] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.515: couldn't read orphan inode 15 (err -117)
[  129.384045][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.428859][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.502508][ T7203] loop1: detected capacity change from 0 to 32768
[  129.544121][ T7203] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.607139][ T7203] XFS (loop1): Ending clean mount
[  129.624234][ T7203] XFS (loop1): Quotacheck needed: Please wait.
[  129.639789][ T7220] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 5412, magic 54 != 6b]
[  129.677506][ T7203] XFS (loop1): Quotacheck: Done.
[  129.754699][ T5930] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.119882][ T7252] @0: renamed from bond_slave_1 (while UP)
[  130.758203][ T7262] evm: overlay not supported
[  131.209742][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  131.215152][ T7279] nbd: must specify an index to disconnect
[  131.359383][    T9] usb 2-1: Using ep0 maxpacket: 32
[  131.363618][    T9] usb 2-1: config 0 has an invalid interface number: 151 but max is 0
[  131.366953][    T9] usb 2-1: config 0 has no interface number 0
[  131.374920][    T9] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  131.380281][    T9] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  131.380716][ T7289] loop3: detected capacity change from 0 to 65
[  131.392671][ T7289] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  131.392851][    T9] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  131.419291][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.428494][    T9] usb 2-1: Product: syz
[  131.431052][    T9] usb 2-1: Manufacturer: syz
[  131.432939][    T9] usb 2-1: SerialNumber: syz
[  131.444058][    T9] usb 2-1: config 0 descriptor??
[  131.608407][ T7296] pim6reg0: tun_chr_ioctl cmd 1074812118
[  131.702087][    T9] usb 2-1: USB disconnect, device number 8
[  131.723132][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.893510][ T7308] loop3: detected capacity change from 0 to 4096
[  132.315600][ T7304] loop2: detected capacity change from 0 to 32768
[  132.447593][ T7304] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  132.506580][ T7304] XFS (loop2): Ending clean mount
[  132.520804][ T7304] XFS (loop2): Quotacheck needed: Please wait.
[  132.607990][ T7304] XFS (loop2): Quotacheck: Done.
[  132.803356][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.807855][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.813868][ T5938] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  133.274096][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'.
[  133.568719][ T7330] loop3: detected capacity change from 0 to 32768
[  133.584668][ T7330] XFS (loop3): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  133.592115][ T7334] loop2: detected capacity change from 0 to 256
[  133.604405][ T7334] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  133.625507][ T7330] XFS (loop3): ro->rw transition prohibited on norecovery mount
[  133.636687][   T33] audit: type=1800 audit(1759313909.327:17): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.559" name="file1" dev="loop2" ino=1048647 res=0 errno=0
[  133.670811][ T6077] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.069458][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  134.112821][ T7357] loop3: detected capacity change from 0 to 512
[  134.116549][ T7357] EXT4-fs: Ignoring removed mblk_io_submit option
[  134.134773][ T7357] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  134.138377][ T7357] EXT4-fs (loop3): orphan cleanup on readonly fs
[  134.141728][ T7357] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  134.146362][ T7357] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  134.155314][ T7357] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  134.163363][ T7357] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.567: bg 0: block 40: padding at end of block bitmap is not set
[  134.171548][ T7357] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  134.175907][ T7357] EXT4-fs (loop3): 1 truncate cleaned up
[  134.180252][ T7357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  134.190494][ T7357] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.567: bad symlink.
[  134.210946][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.222317][    T9] usb 3-1: Using ep0 maxpacket: 32
[  134.228003][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  134.235221][    T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  134.255258][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.261359][    T9] usb 3-1: Product: syz
[  134.263138][    T9] usb 3-1: Manufacturer: syz
[  134.264941][    T9] usb 3-1: SerialNumber: syz
[  134.268931][    T9] usb 3-1: config 0 descriptor??
[  134.272339][ T7345] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  134.288987][    T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[  134.538603][    T9] usb 3-1: USB disconnect, device number 8
[  134.541204][    C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  135.634410][ T7378] loop3: detected capacity change from 0 to 1024
[  135.688724][   T52] hfsplus: b-tree write err: -5, ino 4
[  136.350118][ T7401] loop2: detected capacity change from 0 to 256
[  136.366162][ T7401] exfat: Deprecated parameter 'namecase'
[  136.375908][ T7401] exfat: Deprecated parameter 'namecase'
[  136.393662][ T7401] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  136.888276][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  137.049421][    T9] usb 4-1: Using ep0 maxpacket: 16
[  137.058296][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.065593][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.079066][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.084081][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.087893][    T9] usb 4-1: Product: syz
[  137.090181][    T9] usb 4-1: Manufacturer: syz
[  137.093257][    T9] usb 4-1: SerialNumber: syz
[  137.339744][    T9] usb 4-1: 0:2 : does not exist
[  137.358528][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  137.419807][    T9] usb 4-1: USB disconnect, device number 12
[  137.547777][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.566402][ T7414] loop1: detected capacity change from 0 to 256
[  137.595032][ T7414] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  138.057306][ T7423] veth0_to_bridge: entered promiscuous mode
[  138.184152][ T7428] netlink: 'syz.1.595': attribute type 2 has an invalid length.
[  138.187682][ T7428] netlink: 'syz.1.595': attribute type 2 has an invalid length.
[  138.246169][ T7431] loop1: detected capacity change from 0 to 128
[  138.258739][ T7431] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  138.273102][ T7431] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  138.330738][ T1094] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  138.854777][ T7419] veth0_to_bridge: left promiscuous mode
[  139.248886][ T7463] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  139.278558][ T7463] bridge_slave_0: left allmulticast mode
[  139.283704][ T7463] bridge_slave_0: left promiscuous mode
[  139.288086][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.308016][ T7463] bridge_slave_1: left allmulticast mode
[  139.312643][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.325597][ T7463] bond0: (slave bond_slave_0): Releasing backup interface
[  139.337266][ T7463] bond0: (slave bond_slave_1): Releasing backup interface
[  139.356792][ T7463] team0: Port device team_slave_0 removed
[  139.366908][ T7463] team0: Port device team_slave_1 removed
[  139.374119][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.378660][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.385282][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.388875][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.396913][ T7463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  139.528703][ T7465] loop1: detected capacity change from 0 to 256
[  140.009725][ T7479] loop1: detected capacity change from 0 to 256
[  140.776513][ T7496] geneve2: entered promiscuous mode
[  140.782458][ T7496] geneve2: entered allmulticast mode
[  141.335595][ T7514] mkiss: ax0: crc mode is auto.
[  141.432494][ T7516] capability: warning: `syz.3.633' uses deprecated v2 capabilities in a way that may be insecure
[  141.676256][ T7524] tmpfs: Cannot retroactively limit size
[  141.897789][ T7522] loop2: detected capacity change from 0 to 32768
[  141.916502][ T7522] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.961376][ T7522] XFS (loop2): Ending clean mount
[  141.969668][ T7522] XFS (loop2): Quotacheck needed: Please wait.
[  141.969984][  T979] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  142.000937][ T7522] XFS (loop2): Quotacheck: Done.
[  142.029807][ T5938] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.142697][  T979] usb 4-1: not running at top speed; connect to a high speed hub
[  142.205314][  T979] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.223502][  T979] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=2b.5c
[  142.227096][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.239280][  T979] usb 4-1: Product: syz
[  142.241032][  T979] usb 4-1: Manufacturer: syz
[  142.242926][  T979] usb 4-1: SerialNumber: syz
[  142.251913][  T979] usb 4-1: config 0 descriptor??
[  142.408273][ T7542] loop2: detected capacity change from 0 to 4096
[  142.416061][ T7542] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  142.475384][  T979] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  142.485518][ T5281] bcm5974 4-1:0.0: could not read from device
[  142.508199][  T979] usb 4-1: USB disconnect, device number 13
[  142.511037][ T5281] bcm5974 4-1:0.0: could not read from device
[  142.605913][ T7544] loop2: detected capacity change from 0 to 16
[  142.621902][ T7544] erofs (device loop2): mounted with root inode @ nid 36.
[  142.643074][ T7544] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  142.651781][ T7544] erofs (device loop2): failed to decompress -38 in[52, 4044] out[1851]
[  142.656472][ T7544] erofs (device loop2): read error -117 @ 43 of nid 36
[  142.959478][  T976] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  143.121525][  T976] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  143.125862][  T976] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[  143.131448][  T976] usb 3-1: config 220 interface 0 has no altsetting 0
[  143.141089][  T976] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  143.150274][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.153782][  T976] usb 3-1: Product: syz
[  143.155409][  T976] usb 3-1: Manufacturer: syz
[  143.156844][  T976] usb 3-1: SerialNumber: syz
[  143.386120][   T33] audit: type=1326 audit(1759313919.077:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.2.643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  143.392329][  T976] uvcvideo 3-1:220.0: probe with driver uvcvideo failed with error -22
[  143.396887][   T33] audit: type=1326 audit(1759313919.077:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.2.643" exe="/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  143.409766][  T976] usb 3-1: USB disconnect, device number 9
[  143.418829][   T33] audit: type=1326 audit(1759313919.077:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.2.643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  143.438057][   T33] audit: type=1326 audit(1759313919.077:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz.2.643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82938ec29 code=0x7ffc0000
[  143.624603][ T7572] mmap: syz.3.653 (7572) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  143.839309][  T976] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  143.942689][ T7579] input: syz0 as /devices/virtual/input/input9
[  144.012701][  T976] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  144.016460][  T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.022949][  T976] usb 2-1: Product: syz
[  144.024799][  T976] usb 2-1: Manufacturer: syz
[  144.026554][  T976] usb 2-1: SerialNumber: syz
[  144.033240][  T976] usb 2-1: config 0 descriptor??
[  144.041959][  T976] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  144.314173][ T7587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  144.414523][ T7585] loop2: detected capacity change from 0 to 32768
[  144.421121][ T7585] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.660 (7585)
[  144.461342][ T7585] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  144.462351][  T976] usb 2-1: USB disconnect, device number 9
[  144.465350][ T7585] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  144.602706][ T7585] BTRFS info (device loop2): enabling ssd optimizations
[  144.609807][ T7585] BTRFS info (device loop2): turning off barriers
[  144.625460][ T7585] BTRFS info (device loop2): enabling free space tree
[  144.662440][ T5938] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  144.859602][    T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  145.013755][    T9] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice= 5.76
[  145.017507][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.040824][    T9] usb 4-1: config 0 descriptor??
[  145.078798][    T9] usb_8dev 4-1:0.0 can0: sending command message failed
[  145.085338][    T9] usb_8dev 4-1:0.0 can0: can't get firmware version
[  145.170631][    T9] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22
[  145.197312][ T7619] loop2: detected capacity change from 0 to 32768
[  145.231037][ T7619] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist
[  145.231037][ T7619] 
[  145.241724][ T7619] ialloc: diAlloc returned -5!
[  145.266571][  T976] usb 4-1: USB disconnect, device number 14
[  145.805236][ T7628] loop2: detected capacity change from 0 to 1024
[  145.812313][ T7628] EXT4-fs: Ignoring removed nomblk_io_submit option
[  145.862485][ T7628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.999707][ T7628] loop2: detected capacity change from 1024 to 64
[  146.091705][ T7627] syz.2.672: attempt to access beyond end of device
[  146.091705][ T7627] loop2: rw=2057, sector=514, nr_sectors = 510 limit=64
[  146.098091][ T7627] syz.2.672: attempt to access beyond end of device
[  146.098091][ T7627] loop2: rw=2057, sector=514, nr_sectors = 510 limit=64
[  146.151589][ T7627] syz.2.672: attempt to access beyond end of device
[  146.151589][ T7627] loop2: rw=2057, sector=514, nr_sectors = 510 limit=64
[  146.180830][ T7627] syz.2.672: attempt to access beyond end of device
[  146.180830][ T7627] loop2: rw=2057, sector=514, nr_sectors = 510 limit=64
[  146.188998][ T7627] syz.2.672: attempt to access beyond end of device
[  146.188998][ T7627] loop2: rw=2057, sector=514, nr_sectors = 510 limit=64
[  146.197371][ T7627] syz.2.672: attempt to access beyond end of device
[  146.197371][ T7627] loop2: rw=2057, sector=514, nr_sectors = 510 limit=64
[  146.210638][ T7628] syz.2.672: attempt to access beyond end of device
[  146.210638][ T7628] loop2: rw=2057, sector=514, nr_sectors = 510 limit=64
[  146.217009][ T7628] syz.2.672: attempt to access beyond end of device
[  146.217009][ T7628] loop2: rw=2057, sector=514, nr_sectors = 510 limit=64
[  146.224146][ T7628] binder: 7627:7628 ioctl c0306201 200000004a40 returned -14
[  146.309405][ T5938] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /227/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0
[  146.396113][   T52] kworker/u9:2: attempt to access beyond end of device
[  146.396113][   T52] loop2: rw=1, sector=224, nr_sectors = 2 limit=64
[  146.416293][   T52] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 112)
[  146.434977][   T52] Buffer I/O error on device loop2, logical block 112
[  146.465090][ T5938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.506352][ T7629] kmmpd-loop2: attempt to access beyond end of device
[  146.506352][ T7629] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  146.519805][ T7629] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  146.742202][ T5713] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.879853][ T5713] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.927597][ T7646] loop1: detected capacity change from 0 to 64
[  146.952446][ T7646] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  146.960949][ T5713] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.000325][ T7646] minix_free_inode: bit 5 already cleared
[  147.153925][ T5713] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.252596][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.257901][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.263030][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.267889][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.273464][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.424151][ T5713] bridge_slave_1: left allmulticast mode
[  147.426728][ T5713] bridge_slave_1: left promiscuous mode
[  147.429295][ T5713] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.435484][ T5713] bridge_slave_0: left allmulticast mode
[  147.437853][ T5713] bridge_slave_0: left promiscuous mode
[  147.441374][ T5713] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.487163][ T7653] loop1: detected capacity change from 0 to 32768
[  147.520219][ T7653] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  147.602488][ T7653] 
[  147.603601][ T7653] ======================================================
[  147.606331][ T7653] WARNING: possible circular locking dependency detected
[  147.609331][ T7653] syzkaller #0 Not tainted
[  147.611482][ T7653] ------------------------------------------------------
[  147.615584][ T7653] syz.1.685/7653 is trying to acquire lock:
[  147.617925][ T7653] ffff888113e33278 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  147.621585][ T7653] 
[  147.621585][ T7653] but task is already holding lock:
[  147.624425][ T7653] ffff888029f50950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  147.628167][ T7653] 
[  147.628167][ T7653] which lock already depends on the new lock.
[  147.628167][ T7653] 
[  147.632362][ T7653] 
[  147.632362][ T7653] the existing dependency chain (in reverse order) is:
[  147.635958][ T7653] 
[  147.635958][ T7653] -> #6 (jbd2_handle){++++}-{0:0}:
[  147.638827][ T7653]        lock_acquire+0x120/0x360
[  147.640809][ T7653]        start_this_handle+0x1fa7/0x21c0
[  147.643000][ T7653]        jbd2__journal_start+0x2c1/0x5b0
[  147.645149][ T7653]        jbd2_journal_start+0x2a/0x40
[  147.647318][ T7653]        ocfs2_start_trans+0x376/0x6d0
[  147.649498][ T7653]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  147.651954][ T7653]        ocfs2_dismount_volume+0x201/0x8d0
[  147.654269][ T7653]        generic_shutdown_super+0x135/0x2c0
[  147.656698][ T7653]        kill_block_super+0x44/0x90
[  147.658760][ T7653]        deactivate_locked_super+0xbc/0x130
[  147.661224][ T7653]        cleanup_mnt+0x425/0x4c0
[  147.663178][ T7653]        task_work_run+0x1d4/0x260
[  147.665125][ T7653]        exit_to_user_mode_loop+0xe9/0x130
[  147.667479][ T7653]        do_syscall_64+0x2bd/0xfa0
[  147.669395][ T7653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.671748][ T7653] 
[  147.671748][ T7653] -> #5 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  147.675082][ T7653]        lock_acquire+0x120/0x360
[  147.677105][ T7653]        down_read+0x46/0x2e0
[  147.678974][ T7653]        ocfs2_start_trans+0x36a/0x6d0
[  147.681108][ T7653]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  147.683523][ T7653]        ocfs2_dismount_volume+0x201/0x8d0
[  147.685767][ T7653]        generic_shutdown_super+0x135/0x2c0
[  147.688112][ T7653]        kill_block_super+0x44/0x90
[  147.690234][ T7653]        deactivate_locked_super+0xbc/0x130
[  147.692454][ T7653]        cleanup_mnt+0x425/0x4c0
[  147.694401][ T7653]        task_work_run+0x1d4/0x260
[  147.696336][ T7653]        exit_to_user_mode_loop+0xe9/0x130
[  147.698567][ T7653]        do_syscall_64+0x2bd/0xfa0
[  147.700633][ T7653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.703239][ T7653] 
[  147.703239][ T7653] -> #4 (sb_internal#3){.+.+}-{0:0}:
[  147.706210][ T7653]        lock_acquire+0x120/0x360
[  147.708288][ T7653]        ocfs2_start_trans+0x26b/0x6d0
[  147.710429][ T7653]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  147.712932][ T7653]        ocfs2_dismount_volume+0x201/0x8d0
[  147.715285][ T7653]        generic_shutdown_super+0x135/0x2c0
[  147.717666][ T7653]        kill_block_super+0x44/0x90
[  147.719768][ T7653]        deactivate_locked_super+0xbc/0x130
[  147.722133][ T7653]        cleanup_mnt+0x425/0x4c0
[  147.724183][ T7653]        task_work_run+0x1d4/0x260
[  147.726222][ T7653]        exit_to_user_mode_loop+0xe9/0x130
[  147.728434][ T7653]        do_syscall_64+0x2bd/0xfa0
[  147.730556][ T7653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.733144][ T7653] 
[  147.733144][ T7653] -> #3 (&ocfs2_sysfile_lock_key[GLOBAL_BITMAP_SYSTEM_INODE]){+.+.}-{4:4}:
[  147.737448][ T7653]        lock_acquire+0x120/0x360
[  147.739549][ T7653]        down_write+0x96/0x1f0
[  147.741525][ T7653]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  147.744158][ T7653]        ocfs2_reserve_clusters_with_limit+0x2fb/0xba0
[  147.746937][ T7653]        ocfs2_reserve_suballoc_bits+0x6eb/0x4640
[  147.749418][ T7653]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  147.752133][ T7653]        ocfs2_extend_dir+0xc76/0x4870
[  147.754343][ T7653]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  147.756943][ T7653]        ocfs2_mknod+0x819/0x2050
[  147.758971][ T7653]        ocfs2_mkdir+0x191/0x440
[  147.760987][ T7653]        vfs_mkdir+0x306/0x510
[  147.762950][ T7653]        do_mkdirat+0x247/0x590
[  147.764929][ T7653]        __x64_sys_mkdirat+0x87/0xa0
[  147.767098][ T7653]        do_syscall_64+0xfa/0xfa0
[  147.769136][ T7653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.771618][ T7653] 
[  147.771618][ T7653] -> #2 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  147.775787][ T7653]        lock_acquire+0x120/0x360
[  147.777823][ T7653]        down_write+0x96/0x1f0
[  147.779683][ T7653]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  147.782202][ T7653]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  147.784923][ T7653]        ocfs2_extend_dir+0xc76/0x4870
[  147.787063][ T7653]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  147.789613][ T7653]        ocfs2_mknod+0x819/0x2050
[  147.791640][ T7653]        ocfs2_mkdir+0x191/0x440
[  147.793857][ T7653]        vfs_mkdir+0x306/0x510
[  147.796272][ T7653]        do_mkdirat+0x247/0x590
[  147.798663][ T7653]        __x64_sys_mkdirat+0x87/0xa0
[  147.800820][ T7653]        do_syscall_64+0xfa/0xfa0
[  147.802902][ T7653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.805422][ T7653] 
[  147.805422][ T7653] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  147.808746][ T7653]        lock_acquire+0x120/0x360
[  147.810712][ T7653]        down_write+0x96/0x1f0
[  147.812635][ T7653]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  147.815260][ T7653]        ocfs2_xattr_set+0x595/0x11f0
[  147.817380][ T7653]        ocfs2_set_acl+0x701/0x7b0
[  147.819334][ T7653]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  147.821419][ T7653]        vfs_set_acl+0x887/0xb00
[  147.823452][ T7653]        filename_setxattr+0x2e0/0x600
[  147.825620][ T7653]        path_setxattrat+0x364/0x3a0
[  147.827762][ T7653]        __x64_sys_setxattr+0xbc/0xe0
[  147.829829][ T7653]        do_syscall_64+0xfa/0xfa0
[  147.831802][ T7653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.834287][ T7653] 
[  147.834287][ T7653] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  147.837217][ T7653]        validate_chain+0xb9b/0x2140
[  147.839292][ T7653]        __lock_acquire+0xab9/0xd20
[  147.841341][ T7653]        lock_acquire+0x120/0x360
[  147.843295][ T7653]        down_read+0x46/0x2e0
[  147.845250][ T7653]        ocfs2_init_acl+0x2f9/0x720
[  147.847346][ T7653]        ocfs2_mknod+0x1321/0x2050
[  147.849416][ T7653]        ocfs2_mkdir+0x191/0x440
[  147.851431][ T7653]        vfs_mkdir+0x306/0x510
[  147.853367][ T7653]        do_mkdirat+0x247/0x590
[  147.855330][ T7653]        __x64_sys_mkdirat+0x87/0xa0
[  147.857444][ T7653]        do_syscall_64+0xfa/0xfa0
[  147.859429][ T7653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.862005][ T7653] 
[  147.862005][ T7653] other info that might help us debug this:
[  147.862005][ T7653] 
[  147.865869][ T7653] Chain exists of:
[  147.865869][ T7653]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  147.865869][ T7653] 
[  147.871172][ T7653]  Possible unsafe locking scenario:
[  147.871172][ T7653] 
[  147.874157][ T7653]        CPU0                    CPU1
[  147.876228][ T7653]        ----                    ----
[  147.878417][ T7653]   rlock(jbd2_handle);
[  147.880062][ T7653]                                lock(&journal->j_trans_barrier);
[  147.883149][ T7653]                                lock(jbd2_handle);
[  147.885808][ T7653]   rlock(&oi->ip_xattr_sem);
[  147.887737][ T7653] 
[  147.887737][ T7653]  *** DEADLOCK ***
[  147.887737][ T7653] 
[  147.890870][ T7653] 8 locks held by syz.1.685/7653:
[  147.892897][ T7653]  #0: ffff8881096bc420 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  147.896436][ T7653]  #1: ffff888113e33540 (&type->i_mutex_dir_key#16/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
[  147.900615][ T7653]  #2: ffff888113e109c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  147.905862][ T7653]  #3: ffff888113e31840 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  147.911241][ T7653]  #4: ffff888113e143c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  147.916628][ T7653]  #5: ffff8881096bc610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  147.920224][ T7653]  #6: ffff88811d9b40e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  147.924430][ T7653]  #7: ffff888029f50950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  147.928256][ T7653] 
[  147.928256][ T7653] stack backtrace:
[  147.930477][ T7653] CPU: 0 UID: 0 PID: 7653 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT(full) 
[  147.930496][ T7653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.930507][ T7653] Call Trace:
[  147.930515][ T7653]  <TASK>
[  147.930523][ T7653]  dump_stack_lvl+0x189/0x250
[  147.930544][ T7653]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.930574][ T7653]  ? __pfx__printk+0x10/0x10
[  147.930620][ T7653]  ? stack_trace_save+0x9c/0xe0
[  147.930639][ T7653]  print_circular_bug+0x2ee/0x310
[  147.930655][ T7653]  check_noncircular+0x134/0x160
[  147.930670][ T7653]  validate_chain+0xb9b/0x2140
[  147.930682][ T7653]  ? __pfx___mutex_trylock_common+0x10/0x10
[  147.930698][ T7653]  ? rcu_is_watching+0x15/0xb0
[  147.930714][ T7653]  __lock_acquire+0xab9/0xd20
[  147.930735][ T7653]  ? ocfs2_init_acl+0x2f9/0x720
[  147.930752][ T7653]  lock_acquire+0x120/0x360
[  147.930770][ T7653]  ? ocfs2_init_acl+0x2f9/0x720
[  147.930788][ T7653]  ? jbd2_write_access_granted+0x69/0x310
[  147.930807][ T7653]  down_read+0x46/0x2e0
[  147.930825][ T7653]  ? ocfs2_init_acl+0x2f9/0x720
[  147.930841][ T7653]  ocfs2_init_acl+0x2f9/0x720
[  147.930860][ T7653]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  147.930874][ T7653]  ? dquot_alloc_inode+0x216/0xa50
[  147.930892][ T7653]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  147.930920][ T7653]  ? ocfs2_block_signals+0x94/0xe0
[  147.930935][ T7653]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  147.930949][ T7653]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  147.930967][ T7653]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  147.930986][ T7653]  ocfs2_mknod+0x1321/0x2050
[  147.931004][ T7653]  ? __pfx_ocfs2_mknod+0x10/0x10
[  147.931019][ T7653]  ? do_raw_spin_unlock+0x4d/0x240
[  147.931035][ T7653]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  147.931057][ T7653]  ? __lock_acquire+0xab9/0xd20
[  147.931080][ T7653]  ? __lock_acquire+0xab9/0xd20
[  147.931098][ T7653]  ? do_raw_spin_lock+0x121/0x290
[  147.931115][ T7653]  ? do_raw_spin_unlock+0x4d/0x240
[  147.931130][ T7653]  ? put_pid+0xe9/0x130
[  147.931146][ T7653]  ocfs2_mkdir+0x191/0x440
[  147.931161][ T7653]  ? __pfx_from_kgid+0x10/0x10
[  147.931177][ T7653]  ? apparmor_path_mkdir+0x1a7/0x220
[  147.931197][ T7653]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  147.931210][ T7653]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  147.931229][ T7653]  ? inode_permission+0x149/0x470
[  147.931245][ T7653]  ? __pfx_ocfs2_permission+0x10/0x10
[  147.931258][ T7653]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  147.931274][ T7653]  vfs_mkdir+0x306/0x510
[  147.931289][ T7653]  do_mkdirat+0x247/0x590
[  147.931301][ T7653]  ? __pfx_do_mkdirat+0x10/0x10
[  147.931314][ T7653]  ? getname_flags+0x1e5/0x540
[  147.931330][ T7653]  __x64_sys_mkdirat+0x87/0xa0
[  147.931343][ T7653]  do_syscall_64+0xfa/0xfa0
[  147.931359][ T7653]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.931375][ T7653]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.931388][ T7653]  ? exc_page_fault+0xab/0x100
[  147.931401][ T7653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.931415][ T7653] RIP: 0033:0x7f0f75b8d497
[  147.931428][ T7653] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.931441][ T7653] RSP: 002b:00007f0f76b01e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  147.931456][ T7653] RAX: ffffffffffffffda RBX: 00007f0f76b01ef0 RCX: 00007f0f75b8d497
[  147.931465][ T7653] RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c
[  147.931475][ T7653] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000
[  147.931484][ T7653] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680
[  147.931493][ T7653] R13: 00007f0f76b01eb0 R14: 0000000000000000 R15: 0000000000000000
[  147.931506][ T7653]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  148.378999][ T6239] ==================================================================
[  148.382213][ T6239] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  148.385262][ T6239] Read of size 8 at addr ffff8880117980a0 by task khidpd_15c25886/6239
[  148.388552][ T6239] 
[  148.389501][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  148.389518][ T6239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.389552][ T6239] Call Trace:
[  148.389559][ T6239]  <TASK>
[  148.389565][ T6239]  dump_stack_lvl+0x189/0x250
[  148.389584][ T6239]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.389597][ T6239]  ? lock_release+0x4b/0x3e0
[  148.389615][ T6239]  ? __virt_addr_valid+0x4a5/0x5c0
[  148.389630][ T6239]  print_report+0xca/0x240
[  148.389648][ T6239]  ? __mutex_lock+0x801/0x1350
[  148.389664][ T6239]  kasan_report+0x118/0x150
[  148.389679][ T6239]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.389694][ T6239]  ? __mutex_lock+0x801/0x1350
[  148.389709][ T6239]  __mutex_lock+0x801/0x1350
[  148.389722][ T6239]  ? __mutex_lock+0x5bb/0x1350
[  148.389737][ T6239]  ? l2cap_unregister_user+0x6a/0x1b0
[  148.389750][ T6239]  ? __pfx___mutex_lock+0x10/0x10
[  148.389767][ T6239]  ? __pfx___timer_delete_sync+0x10/0x10
[  148.389781][ T6239]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.389796][ T6239]  l2cap_unregister_user+0x6a/0x1b0
[  148.389828][ T6239]  hidp_session_thread+0x3c9/0x410
[  148.389844][ T6239]  ? __pfx_hidp_session_thread+0x10/0x10
[  148.389856][ T6239]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.389875][ T6239]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  148.389890][ T6239]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  148.389903][ T6239]  ? __kthread_parkme+0x7b/0x200
[  148.389915][ T6239]  ? __kthread_parkme+0x1a1/0x200
[  148.389928][ T6239]  kthread+0x711/0x8a0
[  148.389942][ T6239]  ? __pfx_hidp_session_thread+0x10/0x10
[  148.389955][ T6239]  ? __pfx_kthread+0x10/0x10
[  148.389966][ T6239]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.389977][ T6239]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.389990][ T6239]  ? __pfx_kthread+0x10/0x10
[  148.390003][ T6239]  ret_from_fork+0x4bc/0x870
[  148.390021][ T6239]  ? __pfx_ret_from_fork+0x10/0x10
[  148.390038][ T6239]  ? __switch_to_asm+0x39/0x70
[  148.390052][ T6239]  ? __switch_to_asm+0x33/0x70
[  148.390066][ T6239]  ? __pfx_kthread+0x10/0x10
[  148.390078][ T6239]  ret_from_fork_asm+0x1a/0x30
[  148.390094][ T6239]  </TASK>
[  148.390098][ T6239] 
[  148.466436][ T6239] Allocated by task 6077:
[  148.467930][ T6239]  kasan_save_track+0x3e/0x80
[  148.469691][ T6239]  __kasan_kmalloc+0x93/0xb0
[  148.470993][ T6239]  __kmalloc_noprof+0x411/0x7f0
[  148.472349][ T6239]  hci_alloc_dev_priv+0x28/0x2060
[  148.474212][ T6239]  vhci_create_device+0x120/0x650
[  148.475667][ T6239]  vhci_write+0x3ce/0x4a0
[  148.477043][ T6239]  vfs_write+0x5c9/0xb30
[  148.478551][ T6239]  ksys_write+0x145/0x250
[  148.480059][ T6239]  do_syscall_64+0xfa/0xfa0
[  148.481489][ T6239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.483491][ T6239] 
[  148.484433][ T6239] Freed by task 6308:
[  148.485941][ T6239]  kasan_save_track+0x3e/0x80
[  148.487596][ T6239]  __kasan_save_free_info+0x46/0x50
[  148.489101][ T6239]  __kasan_slab_free+0x5c/0x80
[  148.490936][ T6239]  kfree+0x19a/0x6d0
[  148.492451][ T6239]  bt_host_release+0x82/0x90
[  148.494259][ T6239]  device_release+0x9c/0x1c0
[  148.495829][ T6239]  kobject_put+0x22b/0x480
[  148.497187][ T6239]  vhci_release+0x15a/0x1a0
[  148.498612][ T6239]  __fput+0x44c/0xa70
[  148.499876][ T6239]  task_work_run+0x1d4/0x260
[  148.501318][ T6239]  do_exit+0x6b5/0x2300
[  148.502648][ T6239]  do_group_exit+0x21c/0x2d0
[  148.504145][ T6239]  get_signal+0x1285/0x1340
[  148.505592][ T6239]  arch_do_signal_or_restart+0xa0/0x790
[  148.507355][ T6239]  exit_to_user_mode_loop+0x72/0x130
[  148.509127][ T6239]  do_syscall_64+0x2bd/0xfa0
[  148.510576][ T6239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.512421][ T6239] 
[  148.513336][ T6239] Last potentially related work creation:
[  148.515286][ T6239]  kasan_save_stack+0x3e/0x60
[  148.516782][ T6239]  kasan_record_aux_stack+0xbd/0xd0
[  148.518450][ T6239]  insert_work+0x3d/0x330
[  148.519963][ T6239]  __queue_work+0xcd2/0xfb0
[  148.521310][ T6239]  queue_work_on+0x181/0x270
[  148.522716][ T6239]  hci_cmd_sync_submit+0x285/0x2b0
[  148.524652][ T6239]  process_scheduled_works+0xae1/0x17b0
[  148.526492][ T6239]  worker_thread+0x8a0/0xda0
[  148.528157][ T6239]  kthread+0x711/0x8a0
[  148.529464][ T6239]  ret_from_fork+0x4bc/0x870
[  148.531175][ T6239]  ret_from_fork_asm+0x1a/0x30
[  148.532944][ T6239] 
[  148.533842][ T6239] Second to last potentially related work creation:
[  148.536341][ T6239]  kasan_save_stack+0x3e/0x60
[  148.538218][ T6239]  kasan_record_aux_stack+0xbd/0xd0
[  148.540282][ T6239]  insert_work+0x3d/0x330
[  148.542013][ T6239]  __queue_work+0xbaf/0xfb0
[  148.543822][ T6239]  queue_work_on+0x181/0x270
[  148.545648][ T6239]  process_scheduled_works+0xae1/0x17b0
[  148.547788][ T6239]  worker_thread+0x8a0/0xda0
[  148.549623][ T6239]  kthread+0x711/0x8a0
[  148.551120][ T6239]  ret_from_fork+0x4bc/0x870
[  148.553663][ T6239]  ret_from_fork_asm+0x1a/0x30
[  148.555543][ T6239] 
[  148.556537][ T6239] The buggy address belongs to the object at ffff888011798000
[  148.556537][ T6239]  which belongs to the cache kmalloc-8k of size 8192
[  148.562484][ T6239] The buggy address is located 160 bytes inside of
[  148.562484][ T6239]  freed 8192-byte region [ffff888011798000, ffff88801179a000)
[  148.567574][ T6239] 
[  148.568606][ T6239] The buggy address belongs to the physical page:
[  148.571699][ T6239] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11798
[  148.575088][ T6239] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  148.578431][ T6239] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  148.581221][ T6239] page_type: f5(slab)
[  148.582732][ T6239] raw: 00fff00000000040 ffff88801ac42280 ffffea0000c12600 dead000000000002
[  148.585879][ T6239] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  148.588986][ T6239] head: 00fff00000000040 ffff88801ac42280 ffffea0000c12600 dead000000000002
[  148.592277][ T6239] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  148.595427][ T6239] head: 00fff00000000003 ffffea000045e601 00000000ffffffff 00000000ffffffff
[  148.598688][ T6239] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  148.601999][ T6239] page dumped because: kasan: bad access detected
[  148.604364][ T6239] page_owner tracks the page as allocated
[  148.606581][ T6239] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5853, tgid 5853 (syz-executor), ts 74286643866, free_ts 69165614060
[  148.614477][ T6239]  post_alloc_hook+0x240/0x2a0
[  148.616389][ T6239]  get_page_from_freelist+0x2365/0x2440
[  148.618607][ T6239]  __alloc_frozen_pages_noprof+0x181/0x370
[  148.620887][ T6239]  alloc_pages_mpol+0x232/0x4a0
[  148.622808][ T6239]  allocate_slab+0x96/0x3a0
[  148.624582][ T6239]  ___slab_alloc+0xe94/0x1920
[  148.626420][ T6239]  __slab_alloc+0x65/0x100
[  148.628177][ T6239]  __kmalloc_cache_noprof+0x411/0x6f0
[  148.630306][ T6239]  mr_table_alloc+0x65/0x250
[  148.632140][ T6239]  ip6mr_net_init+0x21a/0x390
[  148.633947][ T6239]  ops_init+0x35c/0x5c0
[  148.635555][ T6239]  setup_net+0xfe/0x320
[  148.637132][ T6239]  copy_net_ns+0x34e/0x4e0
[  148.638851][ T6239]  create_new_namespaces+0x3f3/0x720
[  148.640940][ T6239]  unshare_nsproxy_namespaces+0x11c/0x170
[  148.643196][ T6239]  ksys_unshare+0x4c8/0x8c0
[  148.644918][ T6239] page last free pid 5840 tgid 5840 stack trace:
[  148.647340][ T6239]  __free_frozen_pages+0xbc4/0xd30
[  148.649370][ T6239]  __put_partials+0x146/0x170
[  148.651246][ T6239]  put_cpu_partial+0x1f2/0x2e0
[  148.653164][ T6239]  __slab_free+0x2b9/0x390
[  148.654939][ T6239]  qlist_free_all+0x97/0x140
[  148.656769][ T6239]  kasan_quarantine_reduce+0x148/0x160
[  148.658892][ T6239]  __kasan_slab_alloc+0x22/0x80
[  148.660747][ T6239]  kmem_cache_alloc_node_noprof+0x433/0x710
[  148.662940][ T6239]  __alloc_skb+0x112/0x2d0
[  148.664682][ T6239]  tcp_stream_alloc_skb+0x3d/0x340
[  148.666656][ T6239]  tcp_sendmsg_locked+0x1c7f/0x5540
[  148.668688][ T6239]  tcp_sendmsg+0x2f/0x50
[  148.670289][ T6239]  __sock_sendmsg+0x19c/0x270
[  148.672067][ T6239]  sock_write_iter+0x279/0x360
[  148.673999][ T6239]  vfs_write+0x5c9/0xb30
[  148.675664][ T6239]  ksys_write+0x145/0x250
[  148.677380][ T6239] 
[  148.678346][ T6239] Memory state around the buggy address:
[  148.680578][ T6239]  ffff888011797f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  148.683755][ T6239]  ffff888011798000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.687092][ T6239] >ffff888011798080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.690238][ T6239]                                ^
[  148.692272][ T6239]  ffff888011798100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.695457][ T6239]  ffff888011798180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.698636][ T6239] ==================================================================
[  148.702320][ T6239] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  148.705217][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  148.708802][ T6239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.712648][ T6239] Call Trace:
[  148.713912][ T6239]  <TASK>
[  148.715075][ T6239]  dump_stack_lvl+0x99/0x250
[  148.716851][ T6239]  ? __asan_memcpy+0x40/0x70
[  148.718662][ T6239]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.720713][ T6239]  ? __pfx__printk+0x10/0x10
[  148.722573][ T6239]  vpanic+0x237/0x6d0
[  148.724172][ T6239]  ? __pfx_vpanic+0x10/0x10
[  148.725960][ T6239]  panic+0xb9/0xc0
[  148.727617][ T6239]  ? __pfx_panic+0x10/0x10
[  148.729306][ T6239]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  148.731486][ T6239]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.733751][ T6239]  ? __mutex_lock+0x801/0x1350
[  148.735568][ T6239]  check_panic_on_warn+0x89/0xb0
[  148.737474][ T6239]  ? __mutex_lock+0x801/0x1350
[  148.739381][ T6239]  end_report+0x78/0x160
[  148.741074][ T6239]  kasan_report+0x129/0x150
[  148.742882][ T6239]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.745206][ T6239]  ? __mutex_lock+0x801/0x1350
[  148.747106][ T6239]  __mutex_lock+0x801/0x1350
[  148.748940][ T6239]  ? __mutex_lock+0x5bb/0x1350
[  148.750806][ T6239]  ? l2cap_unregister_user+0x6a/0x1b0
[  148.752912][ T6239]  ? __pfx___mutex_lock+0x10/0x10
[  148.754863][ T6239]  ? __pfx___timer_delete_sync+0x10/0x10
[  148.757022][ T6239]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.759344][ T6239]  l2cap_unregister_user+0x6a/0x1b0
[  148.761396][ T6239]  hidp_session_thread+0x3c9/0x410
[  148.763437][ T6239]  ? __pfx_hidp_session_thread+0x10/0x10
[  148.765648][ T6239]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.767953][ T6239]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  148.770398][ T6239]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  148.772843][ T6239]  ? __kthread_parkme+0x7b/0x200
[  148.774740][ T6239]  ? __kthread_parkme+0x1a1/0x200
[  148.776713][ T6239]  kthread+0x711/0x8a0
[  148.778073][ T6239]  ? __pfx_hidp_session_thread+0x10/0x10
[  148.779779][ T6239]  ? __pfx_kthread+0x10/0x10
[  148.781211][ T6239]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.782845][ T6239]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.784441][ T6239]  ? __pfx_kthread+0x10/0x10
[  148.785879][ T6239]  ret_from_fork+0x4bc/0x870
[  148.787465][ T6239]  ? __pfx_ret_from_fork+0x10/0x10
[  148.789062][ T6239]  ? __switch_to_asm+0x39/0x70
[  148.790563][ T6239]  ? __switch_to_asm+0x33/0x70
[  148.792053][ T6239]  ? __pfx_kthread+0x10/0x10
[  148.793458][ T6239]  ret_from_fork_asm+0x1a/0x30
[  148.794927][ T6239]  </TASK>
[  148.796533][ T6239] Kernel Offset: disabled
[  148.798152][ T6239] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:18:43  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff3401e05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000005f9a RDI=0000000000005f9b RBP=ffffc90002a5eef0 RSP=ffffc90002a5ed18
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8556ce00
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556ce77 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0f76b026c0 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0f75dc1060 CR3=0000000032902000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0f75c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81acd4bc RBX=ffffc900001b7558 RCX=1ffff92000036e01 RDX=ffffffff90529ab8
RSI=0000000000000002 RDI=ffffc900001b7558 RBP=1ffff92000036e9a RSP=ffffc900001b7390
R8 =0000000000000007 R9 =0000000000000000 R10=ffffc900001b7518 R11=fffff52000036ea5
R12=ffffc900001b8000 R13=1ffff92000036e9b R14=ffffc900001b74c8 R15=ffffc900001b0000
RIP=ffffffff81745c43 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f723ffc CR3=000000002694c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8169bd5e ffffffff8168ca8b
XMM02=00007f2211fa7498 ffffffff8168ca8b XMM03=00007f2211fa74a8 00007f2211fa74a0
XMM04=00007f2212b0d100 00007f2211fa7460 XMM05=00007f2211fa7478 00007f2211fa74c0
XMM06=00007f2211fa74b8 00007f2211fa74b0 XMM07=00007f2211fa74a8 00007f2211fa74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f2211e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
