last executing test programs:

7m4.985807813s ago: executing program 32 (id=859):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@noblock_validity}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)

5m29.06248581s ago: executing program 33 (id=1895):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0)

5m3.189672272s ago: executing program 34 (id=2115):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x8080, 0x800, 0x0, 0x440000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000, 0x0, 0x2}})

3m28.685284766s ago: executing program 1 (id=3266):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0)
close(0x3)

3m28.601875319s ago: executing program 1 (id=3268):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

3m28.529614448s ago: executing program 1 (id=3270):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x6, 0xca, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1)

3m28.450717769s ago: executing program 1 (id=3271):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa8f, &(0x7f0000001400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)

3m28.302622098s ago: executing program 1 (id=3273):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
accept4$alg(r0, 0x0, 0x0, 0x800)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
r5 = socket(0x1e, 0x4, 0x0)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14)

3m27.691461893s ago: executing program 1 (id=3279):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0)

3m27.574298104s ago: executing program 35 (id=3279):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0)

3m13.200102349s ago: executing program 5 (id=3454):
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x67d})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fee000/0x10000)=nil, 0x10000})

3m13.199911941s ago: executing program 5 (id=3455):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000280)={0x1, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})

3m13.125106537s ago: executing program 5 (id=3456):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, 0x0)

3m13.120893101s ago: executing program 5 (id=3457):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r2, r0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3)

3m12.912435153s ago: executing program 5 (id=3458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5201})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000140)="815e9a7d7e5b", 0x6}], 0x2)

3m12.629542844s ago: executing program 5 (id=3460):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0xc, "8f"}], 0x28}, 0x0)

3m12.495857769s ago: executing program 36 (id=3460):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0xc, "8f"}], 0x28}, 0x0)

2m53.975457689s ago: executing program 6 (id=3579):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0285629, &(0x7f0000000000)=0x5)

2m53.905570452s ago: executing program 6 (id=3581):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000180))

2m53.905089494s ago: executing program 6 (id=3583):
r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

2m52.273293502s ago: executing program 6 (id=3591):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2m51.073153283s ago: executing program 6 (id=3606):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e04, 0x404, @ipv4={'\x00', '\xff\xff', @local}, 0x7ff9}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m50.29819781s ago: executing program 6 (id=3618):
r0 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0x5, 0xffffffffffffffff)
keyctl$read(0xb, r0, 0x0, 0x0)

2m50.201526544s ago: executing program 37 (id=3618):
r0 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0x5, 0xffffffffffffffff)
keyctl$read(0xb, r0, 0x0, 0x0)

2m12.371554575s ago: executing program 4 (id=3955):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="20f2", 0x2}], 0x1)

2m12.310975248s ago: executing program 4 (id=3956):
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000200)={0x0, 0xfffffffd, 0x0, 0x7, 0x4, 0x3})

2m12.255881594s ago: executing program 4 (id=3958):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x1, 0x18c)
write$tcp_congestion(r0, &(0x7f0000000100)='nv\x00', 0x3)

2m12.201904891s ago: executing program 4 (id=3960):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
epoll_create1(0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
unshare(0x24060400)
chroot(&(0x7f0000000100)='./file0\x00')
chdir(&(0x7f0000000040)='./file0\x00')
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

2m12.135369824s ago: executing program 4 (id=3961):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

2m11.926039886s ago: executing program 4 (id=3964):
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0)

2m11.786638632s ago: executing program 38 (id=3964):
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0)

1m57.644855043s ago: executing program 8 (id=4077):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0,.:\x00', 0x0)

1m57.558928669s ago: executing program 8 (id=4078):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4)

1m57.55878614s ago: executing program 8 (id=4079):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
writev(r0, &(0x7f0000000800)=[{&(0x7f0000000340)="7b5000c1", 0x4}, {0x0}], 0x2)

1m57.472261261s ago: executing program 8 (id=4080):
socket$tipc(0x1e, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8080, &(0x7f0000000040)={[{@usrquota}, {@journal_dev}]}, 0x1, 0x63c, &(0x7f0000001bc0)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000000700)=""/197, 0xc5)
openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)

1m57.276118437s ago: executing program 8 (id=4082):
unshare(0x22020600)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
openat2(r0, &(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000080)={0x40242, 0x22, 0x10}, 0x18)

1m56.854173968s ago: executing program 8 (id=4085):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x10004, r1, r1, 0x217211, 0x20000000000, 0x4, 0x9a756})

1m56.773026163s ago: executing program 39 (id=4085):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x10004, r1, r1, 0x217211, 0x20000000000, 0x4, 0x9a756})

1m46.394231826s ago: executing program 2 (id=4159):
futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x77359400}})

1m46.394022528s ago: executing program 2 (id=4160):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000000)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000280)={r2, 0x9}, 0x8)

1m46.318737458s ago: executing program 2 (id=4161):
r0 = socket(0x2b, 0x80801, 0x1)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x1e, 0x0, &(0x7f00000001c0))

1m46.318491787s ago: executing program 2 (id=4162):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000002280)='.\x00', &(0x7f00000022c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00')

1m46.240533223s ago: executing program 2 (id=4163):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f00000002c0)=@v2={0x2000000, [{0xdf8, 0x7d2}, {0x45, 0x8}]}, 0x14, 0x1)

1m45.87665156s ago: executing program 2 (id=4164):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x7}}, @func_proto]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x32e}, 0x28)

1m45.818574403s ago: executing program 40 (id=4164):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x7}}, @func_proto]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x32e}, 0x28)

47.184335131s ago: executing program 9 (id=4660):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000540)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=[{0x10, 0x101, 0x1}, {0x10, 0x11, 0x2}], 0x20}}], 0x1, 0x24008000)

47.129941815s ago: executing program 9 (id=4661):
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d010203010902240001000000000904"], 0x0)

45.908418993s ago: executing program 9 (id=4676):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe64, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x50)

45.842571073s ago: executing program 9 (id=4677):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x4)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

45.649016087s ago: executing program 9 (id=4678):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1, 0x0, 0x0, 0x4, 0x1}]}}, 0x0, 0x26}, 0x28)

45.376067087s ago: executing program 9 (id=4681):
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0xdd35, 0x457, 0x1e0, 0x7f})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80802, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

44.858930764s ago: executing program 41 (id=4681):
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0xdd35, 0x457, 0x1e0, 0x7f})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80802, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

6.142781404s ago: executing program 7 (id=5031):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x0, 0x1, 0x1, 0x4, 0x6, 0x2bfb]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc901}, 0xa850)

6.060526999s ago: executing program 7 (id=5033):
syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4010203010902230001046b40090904e40c81ffe7bb0408240307003f001009050702"], 0x0)

3.116729724s ago: executing program 7 (id=5056):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.98729908s ago: executing program 7 (id=5057):
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x1440, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x70, 0x9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x5a, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x54d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x21, 0x2, 0x5}}}}}]}}]}}, &(0x7f00000010c0)={0x0, 0x0, 0x5, &(0x7f0000000ec0)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})

1.173705556s ago: executing program 3 (id=5069):
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="b76e975edd7b", 'ip6gre0\x00'}}, 0x1e)
close(0x3)

1.116627616s ago: executing program 3 (id=5070):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b500000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

1.116239196s ago: executing program 3 (id=5071):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x10000, &(0x7f0000000100)={[{@test_dummy_encryption_v1}, {@four_active_logs}, {@noheap}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@data_flush}]}, 0x1, 0x5500, &(0x7f0000000f40)="$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")

856.936421ms ago: executing program 3 (id=5072):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8)

856.732575ms ago: executing program 3 (id=5073):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0xaeb32dd0c8ed3cd, 0x0, 0x10}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

799.805255ms ago: executing program 3 (id=5074):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040))

495.751534ms ago: executing program 0 (id=5081):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSLCKTRMIOS(r0, 0x80047456, &(0x7f00000010c0))

495.541303ms ago: executing program 0 (id=5082):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt_acct\x00')
read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020)

410.018181ms ago: executing program 0 (id=5083):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26)
syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x2, 0x100, @void}}}}}}}, 0x0)

350.997511ms ago: executing program 0 (id=5084):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e)
r3 = inotify_init1(0x800)
r4 = fcntl$dupfd(r2, 0x406, r3)
setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4)

350.7096ms ago: executing program 0 (id=5085):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)

286.449604ms ago: executing program 0 (id=5086):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x80, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x6, 0x0, 0x34}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x20e, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

328.283µs ago: executing program 7 (id=5087):
r0 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

0s ago: executing program 7 (id=5088):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/54, 0x36)

kernel console output (not intermixed with test programs):


[  443.849911][T16025] loop9: detected capacity change from 0 to 512
[  443.960287][T16025] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.4049: Unimplemented hash flags: 0x0001
[  444.008449][T16025] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4049: Corrupt directory, running e2fsck is recommended
[  444.027781][T16025] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  444.031294][T16025] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.4049: corrupted in-inode xattr: invalid ea_ino
[  444.037406][T16025] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  444.037679][T16025] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.4049: couldn't read orphan inode 15 (err -117)
[  444.044765][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  444.044779][    C0] EXT4-fs (loop9): initial error at time 1782521167: ext4_iget_extra_inode:5128: inode 15
[  444.044794][    C0] EXT4-fs (loop9): last error at time 1782521167: ext4_iget_extra_inode:5128: inode 15
[  444.053479][T16025] loop9: lost filesystem error report for type 5 error -117
[  444.054626][T16025] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.068469][T16025] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.4049: Unimplemented hash flags: 0x0001
[  444.072673][T16025] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4049: Corrupt directory, running e2fsck is recommended
[  444.088576][T15686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.326202][T16030] loop8: detected capacity change from 0 to 32768
[  444.360402][T16030] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  444.376991][T16030] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  444.382587][T16030] XFS (loop8): Tail block (0x29) overwrite detected. Updated to 0x30
[  444.397745][T16030] XFS (loop8): Ending clean mount
[  444.433067][T16030] XFS (loop8): User initiated shutdown received.
[  444.435280][T16030] XFS (loop8): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  444.439175][T16030] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[  444.447951][T16030] XFS (loop8): Error -5 reserving per-AG metadata reserve pool.
[  444.462326][T14717] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  444.538120][ T5902] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  444.700710][ T5902] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  444.704446][ T5902] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  444.709376][ T5902] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  444.712916][ T5902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.203660][   T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  445.253666][ T5902] usb 10-1: usb_control_msg returned -32
[  445.255689][ T5902] usbtmc 10-1:16.0: can't read capabilities
[  445.368484][   T24] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  445.372187][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.379988][   T24] usb 9-1: config 0 descriptor??
[  445.401772][T16057] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90
[  445.604795][   T24] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  445.797458][   T24] [drm:udl_init] *ERROR* Selecting channel failed
[  445.831806][   T24] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 3
[  445.834299][   T24] [drm] Initialized udl on minor 3
[  445.847883][   T24] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  445.880056][   T24] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  445.899073][   T24] usb 9-1: USB disconnect, device number 10
[  445.926822][T16061] loop7: detected capacity change from 0 to 32768
[  445.955487][T16061] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  445.971099][T16061] XFS (loop7): Ending clean mount
[  446.010581][T16061] XFS (loop7): Quotacheck needed: Please wait.
[  446.097199][T16061] XFS (loop7): Quotacheck: Done.
[  446.158331][T14181] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  446.358680][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4062'.
[  446.526483][T16083] loop8: detected capacity change from 0 to 128
[  446.637531][T16089] program syz.8.4070 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  446.693254][T16093] cgroup: noprefix used incorrectly
[  446.745666][T16097] netlink: 'syz.8.4074': attribute type 4 has an invalid length.
[  446.894751][T16103] libceph: resolve '0' (ret=-3): failed
[  447.028256][T16109] loop8: detected capacity change from 0 to 1024
[  447.037939][T16109] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  447.056634][T16109] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  447.066352][T16109] EXT4-fs (loop8): orphan cleanup on readonly fs
[  447.079204][T16109] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.4080: Freeing blocks not in datazone - block = 0, count = 4096
[  447.089960][T16109] loop8: lost filesystem error report for type 5 error -117
[  447.091731][T16109] EXT4-fs (loop8): 1 orphan inode deleted
[  447.098429][T16109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  447.107605][T16109] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 16: comm syz.8.4080: path /191/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  447.170467][ T5954] usb 10-1: USB disconnect, device number 3
[  447.220402][T14717] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /191/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  447.248596][T14717] EXT4-fs error (device loop8): ext4_lookup:1782: inode #2: comm syz-executor: '.	' linked to parent dir
[  447.254206][T14717] EXT4-fs error (device loop8): ext4_lookup:1782: inode #2: comm syz-executor: '.	' linked to parent dir
[  447.584870][T16111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.930561][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  447.951435][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  447.961181][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  447.970955][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  447.974178][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  448.872207][   T12] bridge_slave_1: left allmulticast mode
[  448.874026][   T12] bridge_slave_1: left promiscuous mode
[  448.876035][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.886019][   T12] bridge_slave_0: left allmulticast mode
[  448.887777][   T12] bridge_slave_0: left promiscuous mode
[  448.889677][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.974620][   T12] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  449.195738][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.202680][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.207898][   T12] bond0 (unregistering): Released all slaves
[  449.242285][   T12] bond1 (unregistering): Released all slaves
[  449.998337][ T5853] Bluetooth: hci1: command tx timeout
[  450.223019][T16178] loop7: detected capacity change from 0 to 1024
[  450.234799][T16178] EXT4-fs: Ignoring removed bh option
[  450.262613][T16178] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  450.367118][T16188] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.4099: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  450.382217][T16188] EXT4-fs (loop7): Remounting filesystem read-only
[  450.405575][   T12] hsr_slave_0: left promiscuous mode
[  450.411457][   T12] hsr_slave_1: left promiscuous mode
[  450.425876][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.448516][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.463244][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.589333][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  450.592175][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  450.719966][   T12] team0 (unregistering): Port device team_slave_1 removed
[  450.730631][   T12] team0 (unregistering): Port device team_slave_0 removed
[  450.933668][T16125] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.942221][T16125] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.946400][T16125] bridge_slave_0: entered allmulticast mode
[  450.951620][T16125] bridge_slave_0: entered promiscuous mode
[  450.977243][T16125] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.980518][T16125] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.983004][T16125] bridge_slave_1: entered allmulticast mode
[  451.010708][T16125] bridge_slave_1: entered promiscuous mode
[  451.210186][T16125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.255935][T16125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.503895][T16125] team0: Port device team_slave_0 added
[  451.507659][T16125] team0: Port device team_slave_1 added
[  451.519854][ T5363] 8021q: adding VLAN 0 to HW filter on device eth29
[  451.542801][T16125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.545305][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.557617][T16125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.761144][T16125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.764176][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.798901][T16125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.854967][T16125] hsr_slave_0: entered promiscuous mode
[  451.857456][T16125] hsr_slave_1: entered promiscuous mode
[  451.894951][T14613] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  451.966721][ T5853] Bluetooth: hci1: command tx timeout
[  452.009611][ T5363] 8021q: adding VLAN 0 to HW filter on device eth30
[  452.046126][T14613] usb 10-1: Using ep0 maxpacket: 16
[  452.068638][T14613] usb 10-1: unable to get BOS descriptor or descriptor too short
[  452.073752][T14613] usb 10-1: config 8 has an invalid interface number: 111 but max is 0
[  452.076832][T14613] usb 10-1: config 8 has no interface number 0
[  452.079346][T14613] usb 10-1: config 8 interface 111 has no altsetting 0
[  452.098720][T14613] usb 10-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=c5.04
[  452.108057][T14613] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.116128][T14613] usb 10-1: Product: syz
[  452.122914][T14613] usb 10-1: Manufacturer: syz
[  452.125020][T14613] usb 10-1: SerialNumber: syz
[  452.349708][ T5363] 8021q: adding VLAN 0 to HW filter on device eth31
[  452.442578][T14613] kaweth 10-1:8.111: couldn't find required endpoints
[  452.457527][T14613] usb 10-1: USB disconnect, device number 4
[  452.665170][T16243] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4111'.
[  452.689723][T16241] syzkaller1: entered promiscuous mode
[  452.695531][T16241] syzkaller1: entered allmulticast mode
[  452.810559][ T5363] 8021q: adding VLAN 0 to HW filter on device eth32
[  452.915399][T16249] loop7: detected capacity change from 0 to 16
[  453.015930][T16249] erofs (device loop7): mounted with root inode @ nid 36.
[  453.228662][T16258] xt_hashlimit: size too large, truncated to 1048576
[  453.939360][ T5853] Bluetooth: hci1: command tx timeout
[  453.995991][ T5910] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  454.089511][T16125] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  454.102823][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  454.108603][T16125] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  454.127740][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  454.140690][T16125] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  454.148972][ T5910] usb 10-1: Using ep0 maxpacket: 16
[  454.150394][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  454.157430][ T5910] usb 10-1: unable to get BOS descriptor or descriptor too short
[  454.158170][T16125] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  454.169203][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  454.173927][ T5910] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  454.184238][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.194615][ T5910] usb 10-1: Product: syz
[  454.206999][ T5910] usb 10-1: Manufacturer: syz
[  454.211819][ T5910] usb 10-1: SerialNumber: syz
[  454.272476][ T5910] usb 10-1: 1:1 : incorrect wMaxPacketSize for BADD profile
[  454.418730][T16125] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.465219][ T5910] usb 10-1: incorrect wMaxPacketSize 0x20 for BADD profile
[  454.509999][T16125] 8021q: adding VLAN 0 to HW filter on device team0
[  454.567589][T15989] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.569980][T15989] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.613053][T15989] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.615420][T15989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.679256][ T5910] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  454.691934][ T5910] usb 10-1: USB disconnect, device number 5
[  454.728160][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  455.210629][T16125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.327262][T16125] veth0_vlan: entered promiscuous mode
[  455.346156][T16125] veth1_vlan: entered promiscuous mode
[  455.372894][T16125] veth0_macvtap: entered promiscuous mode
[  455.393838][T16125] veth1_macvtap: entered promiscuous mode
[  455.491020][ T5923] IPVS: starting estimator thread 0...
[  455.505603][T16125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.529150][T16125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  455.562135][ T5882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.578412][T16337] IPVS: using max 54 ests per chain, 129600 per kthread
[  455.588324][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.626083][ T5882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.641596][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.861097][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.880525][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.920251][ T5853] Bluetooth: hci1: command tx timeout
[  455.959835][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.966357][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.982136][T16355] loop9: detected capacity change from 0 to 256
[  456.006745][T16355] FAT-fs (loop9): Directory bread(block 64) failed
[  456.014509][T16355] FAT-fs (loop9): Directory bread(block 65) failed
[  456.018151][T16355] FAT-fs (loop9): Directory bread(block 66) failed
[  456.026756][T16355] FAT-fs (loop9): Directory bread(block 67) failed
[  456.030584][T16355] FAT-fs (loop9): Directory bread(block 68) failed
[  456.034541][T16355] FAT-fs (loop9): Directory bread(block 69) failed
[  456.036706][T16355] FAT-fs (loop9): Directory bread(block 70) failed
[  456.040375][T16355] FAT-fs (loop9): Directory bread(block 71) failed
[  456.046460][T16355] FAT-fs (loop9): Directory bread(block 72) failed
[  456.051819][T16355] FAT-fs (loop9): Directory bread(block 73) failed
[  456.136099][T16355] syz.9.4134: attempt to access beyond end of device
[  456.136099][T16355] loop9: rw=524288, sector=1768, nr_sectors = 4 limit=256
[  456.164964][T16355] syz.9.4134: attempt to access beyond end of device
[  456.164964][T16355] loop9: rw=0, sector=1768, nr_sectors = 4 limit=256
[  456.208085][   T34] audit: type=1800 audit(1782521180.683:275): pid=16355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4134" name="file1" dev="loop9" ino=1048738 res=0 errno=0
[  456.748559][T14613] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  456.903334][T14613] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.907513][T14613] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  456.924355][T14613] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.930146][T14613] usb 10-1: config 0 descriptor??
[  457.154299][T14613] usbhid 10-1:0.0: can't add hid device: -71
[  457.163633][T14613] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  457.176248][T14613] usb 10-1: USB disconnect, device number 6
[  457.654342][T14613] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  457.695665][T16415] loop2: detected capacity change from 0 to 256
[  457.806475][T14613] usb 10-1: Using ep0 maxpacket: 16
[  457.810708][T14613] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.814221][T14613] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  457.822016][T14613] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.832809][T14613] usb 10-1: config 0 descriptor??
[  458.245478][T14613] kye 0003:0458:5016.001B: control desc unexpectedly large
[  458.248601][T14613] kye 0003:0458:5016.001B: control desc unexpectedly large
[  458.254806][T14613] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.001B/input/input37
[  458.445563][T14613] kye 0003:0458:5016.001B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.9-1/input0
[  458.714378][ T5923] usb 10-1: USB disconnect, device number 7
[  458.799884][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.834370][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  458.853333][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  458.865690][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  458.872310][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  458.878243][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  458.983305][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.088534][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.178487][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.259629][T16453] loop9: detected capacity change from 0 to 256
[  459.266988][T16453] vfat: Unknown parameter 'obj_user'
[  459.607470][   T12] bridge_slave_1: left allmulticast mode
[  459.610670][   T12] bridge_slave_1: left promiscuous mode
[  459.613211][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.622224][   T12] bridge_slave_0: left allmulticast mode
[  459.624526][   T12] bridge_slave_0: left promiscuous mode
[  459.627662][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.866448][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.872588][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.877997][   T12] bond0 (unregistering): Released all slaves
[  459.910101][T16442] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.913375][T16442] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.916433][T16442] bridge_slave_0: entered allmulticast mode
[  459.919802][T16442] bridge_slave_0: entered promiscuous mode
[  459.923664][T16442] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.925951][T16442] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.928257][T16442] bridge_slave_1: entered allmulticast mode
[  459.931592][T16442] bridge_slave_1: entered promiscuous mode
[  459.989168][T16442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.007897][T16442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.193779][T16442] team0: Port device team_slave_0 added
[  460.210673][T16442] team0: Port device team_slave_1 added
[  460.219665][T16466] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.4168'.
[  460.254329][T16466] netlink: 6320 bytes leftover after parsing attributes in process `syz.9.4168'.
[  460.263321][T16466] netlink: 6 bytes leftover after parsing attributes in process `syz.9.4168'.
[  460.277180][T16466] tc_dump_action: action bad kind
[  460.562345][T16442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.565348][T16442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.588043][T16442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.600554][ T5363] 8021q: adding VLAN 0 to HW filter on device eth3
[  460.611557][   T12] hsr_slave_0: left promiscuous mode
[  460.621658][   T12] hsr_slave_1: left promiscuous mode
[  460.627753][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.635940][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.640899][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.654678][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.675508][   T12] veth1_macvtap: left promiscuous mode
[  460.683065][   T12] veth0_macvtap: left promiscuous mode
[  460.685094][   T12] veth1_vlan: left promiscuous mode
[  460.686732][   T12] veth0_vlan: left promiscuous mode
[  460.693926][T10953] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  460.825937][T16476] loop7: detected capacity change from 0 to 40427
[  460.835588][T10953] usb 10-1: Using ep0 maxpacket: 32
[  460.839022][T10953] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[  460.841609][T16476] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  460.841667][T10953] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.848486][T10953] usb 10-1: config 0 has no interfaces?
[  460.850947][T16476] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  460.853551][T10953] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  460.856570][T10953] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  460.857049][T16476] F2FS-fs (loop7): invalid crc value
[  460.862334][T10953] usb 10-1: Product: syz
[  460.865350][T10953] usb 10-1: Manufacturer: syz
[  460.868454][T10953] usb 10-1: SerialNumber: syz
[  460.873310][   T55] Bluetooth: hci1: command tx timeout
[  460.880789][T10953] usb 10-1: config 0 descriptor??
[  460.929744][T16476] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  460.951772][T16476] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  460.954131][T16476] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  461.052156][   T12] team0 (unregistering): Port device team_slave_1 removed
[  461.075486][   T12] team0 (unregistering): Port device team_slave_0 removed
[  461.382978][T16442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  461.391052][T16442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.425943][T16442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.562755][T16442] hsr_slave_0: entered promiscuous mode
[  461.567231][T16442] hsr_slave_1: entered promiscuous mode
[  461.646436][ T1661] usb 10-1: USB disconnect, device number 8
[  461.907029][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4174'.
[  461.909811][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4174'.
[  461.914409][T16498] netlink: 'syz.7.4174': attribute type 6 has an invalid length.
[  462.240768][ T5363] 8021q: adding VLAN 0 to HW filter on device eth2
[  462.412749][ T5363] 8021q: adding VLAN 0 to HW filter on device eth1
[  462.768571][ T5363] 8021q: adding VLAN 0 to HW filter on device eth4
[  462.856738][   T55] Bluetooth: hci1: command tx timeout
[  463.056913][T16442] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  463.071589][T16442] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  463.081639][T16442] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  463.095819][T16442] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  463.112274][T16442] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  463.134835][T16442] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  463.145471][T16442] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  463.155841][T16442] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  463.262238][T16442] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.303739][T16552] loop9: detected capacity change from 0 to 1024
[  463.306451][T16442] 8021q: adding VLAN 0 to HW filter on device team0
[  463.330056][T12830] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.332375][T12830] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.353238][T12830] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.355631][T12830] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.361846][T16552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  463.379357][T16537] loop7: detected capacity change from 0 to 32768
[  463.385777][T16552] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.389371][T16537] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4181 (16537)
[  463.428847][T16537] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  463.432268][T16537] BTRFS info (device loop7): using crc32c checksum algorithm
[  463.436465][T16552] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.4184: lblock 3 mapped to illegal pblock 3 (length 1)
[  463.478296][T16552] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  463.490118][T16537] BTRFS info (device loop7): enabling ssd optimizations
[  463.492953][T16537] BTRFS info (device loop7): turning on flush-on-commit
[  463.495669][T16537] BTRFS info (device loop7): enabling free space tree
[  463.498133][T16537] BTRFS info (device loop7): enabling auto defrag
[  463.500533][T16537] BTRFS info (device loop7): use lzo compression, level 1
[  463.503588][T16552] EXT4-fs (loop9): This should not happen!! Data will be lost
[  463.503588][T16552] 
[  463.503967][T16537] BTRFS info (device loop7): max_inline set to 4096
[  463.579659][   T34] audit: type=1800 audit(1782521188.399:276): pid=16537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4181" name="file1" dev="loop7" ino=260 res=0 errno=0
[  463.606513][T15686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  463.838221][T16582] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  464.196457][T16442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.214339][T14181] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  464.309465][T16442] veth0_vlan: entered promiscuous mode
[  464.318846][T16442] veth1_vlan: entered promiscuous mode
[  464.518596][T16442] veth0_macvtap: entered promiscuous mode
[  464.534788][T16442] veth1_macvtap: entered promiscuous mode
[  464.549084][T16442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.562046][T16442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.568749][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.575200][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.674397][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.683245][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.836382][   T55] Bluetooth: hci1: command tx timeout
[  465.034097][T12822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.043459][T12822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.149536][T16626] loop9: detected capacity change from 0 to 512
[  465.155493][T16628] loop7: detected capacity change from 0 to 128
[  465.163578][T16626] EXT4-fs: Ignoring removed nomblk_io_submit option
[  465.171822][T16628] ext4: Unknown parameter 'fsmagic'
[  465.189378][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.196058][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.200318][T16626] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  465.785987][T16626] EXT4-fs (loop9): 1 truncate cleaned up
[  465.815649][T16626] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.865411][   T34] audit: type=1800 audit(1782521190.824:277): pid=16626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4194" name="file1" dev="loop9" ino=15 res=0 errno=0
[  465.955195][   T34] audit: type=1800 audit(1782521190.824:278): pid=16626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4194" name="file1" dev="loop9" ino=15 res=0 errno=0
[  466.344154][T16649] loop7: detected capacity change from 0 to 128
[  466.357255][   T34] audit: type=1800 audit(1782521191.328:279): pid=16626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4194" name="file1" dev="loop9" ino=15 res=0 errno=0
[  466.419003][T16649] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  466.425603][T16649] hpfs: filesystem error: improperly stopped
[  466.428839][T16649] hpfs: You really don't want any checks? You are crazy...
[  466.431972][T16649] hpfs: hpfs_map_sector(): read error
[  466.434067][T16649] hpfs: code page support is disabled
[  466.439701][T16649] hpfs: hpfs_map_4sectors(): unaligned read
[  466.443003][T16649] hpfs: hpfs_map_4sectors(): unaligned read
[  466.455652][T16649] hpfs: filesystem error: unable to find root dir
[  466.462694][T15686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.817242][   T55] Bluetooth: hci1: command tx timeout
[  467.121519][T16666] loop7: detected capacity change from 0 to 1764
[  467.131120][T16666] ISOFS: Bad logical zone size 4096
[  468.516379][T16703] loop7: detected capacity change from 0 to 32768
[  468.524346][T16703] btrfs: Deprecated parameter 'usebackuproot'
[  468.529978][T16703] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  468.536601][T16703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4212 (16703)
[  468.558876][T16703] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  468.562919][T16703] BTRFS info (device loop7): using crc32c checksum algorithm
[  468.635778][T15989] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  468.674883][T16703] BTRFS error (device loop7): failed to load root extent
[  468.679978][T16703] BTRFS warning (device loop7): try to load backup roots slot 1
[  468.687897][T15982] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  468.695644][T16703] BTRFS warning (device loop7): couldn't read tree root
[  468.697953][T16703] BTRFS warning (device loop7): try to load backup roots slot 2
[  468.700628][T15982] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  468.704108][T16703] BTRFS warning (device loop7): couldn't read tree root
[  468.712166][T16703] BTRFS warning (device loop7): try to load backup roots slot 3
[  468.737624][T16703] BTRFS info (device loop7): rebuilding free space tree
[  468.791072][   T55] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  468.940527][T16703] BTRFS info (device loop7): checking UUID tree
[  468.953779][T16703] BTRFS info (device loop7): enabling ssd optimizations
[  468.959867][T16703] BTRFS info (device loop7): turning on async discard
[  468.963730][T16703] BTRFS info (device loop7): enabling free space tree
[  468.966499][T16703] BTRFS info (device loop7): force clearing of disk cache
[  468.969400][T16703] BTRFS info (device loop7): enabling auto defrag
[  468.976668][T16703] BTRFS info (device loop7): trying to use backup root at mount time
[  468.980001][T16703] BTRFS info (device loop7): use zstd compression, level 3
[  469.137641][T14181] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  469.805076][T16778] xt_hashlimit: size too large, truncated to 1048576
[  471.368634][T16791] loop0: detected capacity change from 0 to 32768
[  471.384545][T16791] xfs: Deprecated parameter 'attr2'
[  471.388798][T16791] XFS: attr2 mount option is deprecated.
[  471.401081][T16791] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  471.418514][T16808] netlink: 'syz.7.4237': attribute type 1 has an invalid length.
[  471.421900][T16791] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  471.455434][T16442] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  471.463104][T16808] 8021q: adding VLAN 0 to HW filter on device bond1
[  471.557671][T16814] bond1: (slave dummy0): making interface the new active one
[  471.632737][T16814] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  471.641878][T16808] : renamed from dummy0 (while UP)
[  472.148047][T16834] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4239'.
[  472.549465][   T34] audit: type=1326 audit(1782521197.826:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.565554][   T34] audit: type=1326 audit(1782521197.837:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.588579][   T34] audit: type=1326 audit(1782521197.837:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.610587][   T34] audit: type=1326 audit(1782521197.837:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.621002][   T34] audit: type=1326 audit(1782521197.837:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.636303][   T34] audit: type=1326 audit(1782521197.837:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.643702][   T34] audit: type=1326 audit(1782521197.837:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.644351][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4248'.
[  472.650674][   T34] audit: type=1326 audit(1782521197.837:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.662488][   T34] audit: type=1326 audit(1782521197.837:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.4247" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1dbd79ce59 code=0x7ffc0000
[  472.723591][T16845] xt_CONNSECMARK: invalid mode: 0
[  472.832361][T16849] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4251'.
[  473.054910][T16861] fuse: Bad value for 'rootmode'
[  474.100733][T16881] vlan2: entered allmulticast mode
[  474.102856][T16881] bond0: entered allmulticast mode
[  474.116921][T16881] bond_slave_0: entered allmulticast mode
[  474.122638][T16881] bond_slave_1: entered allmulticast mode
[  474.212279][T16885] netlink: 'syz.9.4267': attribute type 83 has an invalid length.
[  474.292298][T16891] tmpfs: Bad value for 'mpol'
[  474.348297][T16895] loop9: detected capacity change from 0 to 24
[  474.351290][T16895] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  474.357477][T16895] VFS: Can't find a romfs filesystem on dev loop9.
[  474.357477][T16895] 
[  474.586169][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4278'.
[  474.639707][T16911] openvswitch: netlink: Actions may not be safe on all matching packets
[  474.715340][T16915] loop9: detected capacity change from 0 to 128
[  474.776208][   T34] audit: type=1800 audit(1782521200.167:289): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4282" name="file1" dev="loop9" ino=1048748 res=0 errno=0
[  474.792848][T16915] tipc: Started in network mode
[  474.794888][T16915] tipc: Node identity 4, cluster identity 4711
[  474.797298][T16915] tipc: Node number set to 4
[  474.806936][T16915] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4282'.
[  475.338307][T16917] loop9: detected capacity change from 0 to 64
[  475.626171][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4287'.
[  475.806619][T16936] loop9: detected capacity change from 0 to 256
[  476.399148][T16953] loop7: detected capacity change from 0 to 32768
[  476.413769][T16953] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  476.452530][T16953] XFS (loop7): Ending clean mount
[  476.474717][T16953] XFS (loop7): Quotacheck needed: Please wait.
[  476.552434][   T10] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  476.573928][T16953] XFS (loop7): Quotacheck: Done.
[  476.685272][T14181] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  476.746099][   T10] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[  476.748734][   T10] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  476.770151][   T10] usb 10-1: config 0 has no interface number 0
[  476.780492][   T10] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  476.783526][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.786168][   T10] usb 10-1: Product: syz
[  476.787559][   T10] usb 10-1: Manufacturer: syz
[  476.789097][   T10] usb 10-1: SerialNumber: syz
[  476.798905][   T10] usb 10-1: config 0 descriptor??
[  477.058982][T16967] loop7: detected capacity change from 0 to 512
[  477.069567][T16967] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  477.074828][T16967] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  477.078840][T16967] EXT4-fs (loop7): orphan cleanup on readonly fs
[  477.083249][T16967] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  477.089151][T16967] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  477.092490][T16967] EXT4-fs (loop7): 1 orphan inode deleted
[  477.097484][T16967] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  477.126047][T16967] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.4296: iget: bad extended attribute block 2147483667
[  477.170680][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.202333][   T10] uvcvideo 10-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  477.205216][   T10] uvcvideo 10-1:0.64: No valid video chain found.
[  477.402143][   T24] usb 10-1: USB disconnect, device number 9
[  477.611718][T16970] loop7: detected capacity change from 0 to 32768
[  477.671230][T16970] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  477.761282][T14181] ocfs2: Unmounting device (7,7) on (node local)
[  477.821585][T16982] loop0: detected capacity change from 0 to 32768
[  477.846907][T16982] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4303 (16982)
[  477.872507][T16982] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  477.877997][T16982] BTRFS info (device loop0): using crc32c checksum algorithm
[  477.957158][T16982] BTRFS info (device loop0): setting nodatasum
[  477.959474][T16982] BTRFS info (device loop0): enabling ssd optimizations
[  477.961967][T16982] BTRFS info (device loop0): disabling tree log
[  477.966573][T16982] BTRFS info (device loop0): turning on sync discard
[  477.968980][T16982] BTRFS info (device loop0): enabling free space tree
[  477.973387][T16982] BTRFS info (device loop0): max_inline set to 0
[  478.132767][T17010] loop7: detected capacity change from 0 to 256
[  478.181876][T17010] exfat: Deprecated parameter 'utf8'
[  478.185331][T17010] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  478.276073][T16442] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  478.296380][T17010] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x0f1fc7f3, utbl_chksum : 0xe619d30d)
[  478.713743][T17036] loop0: detected capacity change from 0 to 512
[  478.720228][T17036] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  478.728241][T17036] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.4314: bad orphan inode 131083
[  478.732369][T17036] loop0: lost filesystem error report for type 5 error -117
[  478.736695][T17036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.082680][T17050] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4319'.
[  479.088118][T17052] IPv6: sit1: Disabled Multicast RS
[  479.090932][T17052] sit1: entered allmulticast mode
[  479.888160][T16442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.164707][T17070] netlink: 'syz.0.4326': attribute type 9 has an invalid length.
[  480.405345][T17074] loop9: detected capacity change from 0 to 256
[  480.408256][T17074] exfat: Deprecated parameter 'utf8'
[  480.433040][T17074] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  480.768821][T17080] loop9: detected capacity change from 0 to 128
[  480.797676][T17080] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  480.809576][T17080] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  481.058251][    T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  481.211931][    T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  481.217596][    T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  481.230507][    T9] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  481.233540][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  481.238222][    T9] usb 10-1: SerialNumber: syz
[  481.333810][T17096] loop0: detected capacity change from 0 to 32768
[  481.373315][T17096] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  481.428584][T17096] XFS (loop0): Ending clean mount
[  481.464689][    T9] usb 10-1: 0:2 : does not exist
[  481.497656][    T9] usb 10-1: USB disconnect, device number 10
[  481.548927][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  481.771724][T16442] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  482.022027][T15686] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  482.186847][   T55] Bluetooth: Fragment is too long (len 14, expected 2)
[  482.196368][T17130] Invalid ELF header len 7
[  482.198628][T17130] Invalid ELF header len 7
[  482.300984][T17139] loop9: detected capacity change from 0 to 255852544
[  482.331838][T17139] Invalid logical block size (4)
[  482.471391][T17126] loop7: detected capacity change from 0 to 40427
[  482.480276][T17126] F2FS-fs (loop7): invalid crc value
[  482.578672][T17126] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  482.624033][T17126] F2FS-fs (loop7): Start checkpoint disabled!
[  482.650859][T17126] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  482.654853][T17126] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  482.727295][   T52] kworker/u9:2: attempt to access beyond end of device
[  482.727295][   T52] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  482.732722][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  482.732744][   T52] Tainted: [L]=SOFTLOCKUP
[  482.732749][   T52] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  482.732758][   T52] Workqueue: writeback wb_workfn (flush-7:7)
[  482.732783][   T52] Call Trace:
[  482.732789][   T52]  <TASK>
[  482.732795][   T52]  dump_stack_lvl+0xe8/0x150
[  482.732814][   T52]  f2fs_stop_checkpoint+0x3c2/0x580
[  482.732838][   T52]  f2fs_write_end_io+0x124b/0x1710
[  482.732875][   T52]  __submit_merged_bio+0x258/0x6a0
[  482.732899][   T52]  __submit_merged_write_cond+0x3c9/0x4e0
[  482.732925][   T52]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  482.732963][   T52]  f2fs_write_data_pages+0x2a27/0x36f0
[  482.732981][   T52]  ? f2fs_build_free_nids+0xd3/0x1890
[  482.733029][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  482.733060][   T52]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  482.733111][   T52]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  482.733144][   T52]  ? __lock_acquire+0x683/0x2cd0
[  482.733207][   T52]  ? set_shrinker_bit+0x7c/0x350
[  482.733228][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  482.733248][   T52]  do_writepages+0x338/0x560
[  482.733270][   T52]  ? reacquire_held_locks+0x104/0x190
[  482.733287][   T52]  ? writeback_sb_inodes+0x450/0x1b00
[  482.733311][   T52]  __writeback_single_inode+0x12e/0xf90
[  482.733337][   T52]  writeback_sb_inodes+0x9de/0x1b00
[  482.733354][   T52]  ? __lock_acquire+0x683/0x2cd0
[  482.733391][   T52]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  482.733447][   T52]  ? rcu_is_watching+0x15/0xb0
[  482.733465][   T52]  ? queue_io+0x2d3/0x470
[  482.733486][   T52]  wb_writeback+0x41c/0xad0
[  482.733505][   T52]  ? queue_io+0x261/0x470
[  482.733527][   T52]  ? __pfx_wb_writeback+0x10/0x10
[  482.733543][   T52]  ? do_raw_spin_lock+0x12b/0x2f0
[  482.733577][   T52]  wb_workfn+0x3f8/0xf10
[  482.733590][   T52]  ? __lock_acquire+0x683/0x2cd0
[  482.733603][   T52]  ? look_up_lock_class+0x57/0x110
[  482.733640][   T52]  ? __pfx_wb_workfn+0x10/0x10
[  482.733658][   T52]  ? do_raw_spin_lock+0x12b/0x2f0
[  482.733676][   T52]  ? lock_acquire+0x106/0x350
[  482.733699][   T52]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  482.733721][   T52]  ? process_scheduled_works+0xa20/0x14e0
[  482.733737][   T52]  ? process_scheduled_works+0xa20/0x14e0
[  482.733758][   T52]  ? rcu_is_watching+0x15/0xb0
[  482.733777][   T52]  ? process_scheduled_works+0xa20/0x14e0
[  482.733791][   T52]  process_scheduled_works+0xa8e/0x14e0
[  482.733832][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  482.733853][   T52]  ? assign_work+0x3cf/0x5d0
[  482.733873][   T52]  worker_thread+0xa47/0xfb0
[  482.733933][   T52]  kthread+0x389/0x470
[  482.733952][   T52]  ? __pfx_worker_thread+0x10/0x10
[  482.733964][   T52]  ? __pfx_kthread+0x10/0x10
[  482.733984][   T52]  ret_from_fork+0x514/0xb70
[  482.734003][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  482.734019][   T52]  ? __switch_to+0xc89/0x1420
[  482.734043][   T52]  ? __pfx_kthread+0x10/0x10
[  482.734062][   T52]  ret_from_fork_asm+0x1a/0x30
[  482.734095][   T52]  </TASK>
[  482.788841][T17149] loop9: detected capacity change from 0 to 4096
[  482.800203][   T52] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  482.815527][T17149] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  482.931193][T17149] ntfs3(loop9): ino=1a, mi_enum_attr
[  482.933524][T17149] ntfs3(loop9): ino=1a, mi_enum_attr
[  482.935933][T17149] ntfs3(loop9): Failed to initialize $Extend/$Reparse.
[  483.017843][   T34] audit: type=1800 audit(1782521208.817:290): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4349" name="file1" dev="loop9" ino=30 res=0 errno=0
[  483.064264][T17149] ntfs3(loop9): ino=1e, attr_set_size_ex
[  483.256148][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4348'.
[  483.259944][T17154] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4348'.
[  483.305715][T17154] bridge1: entered allmulticast mode
[  484.019759][ T5902] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  484.568204][ T5902] usb 10-1: device descriptor read/64, error -71
[  484.820604][ T5902] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  484.945099][ T5902] usb 10-1: device descriptor read/64, error -71
[  484.972258][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4351'.
[  485.034276][T17162] loop7: detected capacity change from 0 to 128
[  485.058852][ T5902] usb usb10-port1: attempt power cycle
[  485.091083][T17162] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  485.096288][T17162] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  485.159779][T14181] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  485.278352][T17173] loop7: detected capacity change from 0 to 512
[  485.290830][T17173] EXT4-fs (loop7): 1 truncate cleaned up
[  485.293792][T17173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.313599][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.424831][ T5902] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  485.451204][T17180] loop7: detected capacity change from 0 to 512
[  485.463897][ T5902] usb 10-1: device descriptor read/8, error -71
[  485.487132][T17180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002]
[  485.493054][T17180] System zones: 1-12
[  485.496697][T17180] EXT4-fs warning (device loop7): ext4_xattr_inode_get:546: inode #11: comm syz.7.4358: ea_inode file size=0 entry size=6
[  485.502618][T17180] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.4358: iget: bad extra_isize 90 (inode size 256)
[  485.512104][T17180] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  485.516396][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  485.521561][    C1] EXT4-fs (loop7): initial error at time 1782521211: ext4_xattr_inode_iget:441: inode 11
[  485.524848][    C1] EXT4-fs (loop7): last error at time 1782521211: ext4_xattr_inode_iget:441: inode 11
[  485.532196][T17180] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.4358: error while reading EA inode 11 err=-117
[  485.536521][T17180] loop7: lost filesystem error report for type 5 error -117
[  485.536827][T17180] EXT4-fs (loop7): 1 orphan inode deleted
[  485.542094][T17180] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.579465][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.624774][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4363'.
[  485.637285][T17148] ntfs3(loop9): ino=1e, attr_set_size_ex
[  485.787307][T17198] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4362'.
[  485.986381][   T34] audit: type=1326 audit(1782521211.935:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.009789][   T34] audit: type=1326 audit(1782521211.935:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.030714][   T34] audit: type=1326 audit(1782521211.935:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.039471][   T34] audit: type=1326 audit(1782521211.935:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.050914][   T34] audit: type=1326 audit(1782521211.935:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.057760][   T34] audit: type=1326 audit(1782521211.935:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.065085][   T34] audit: type=1326 audit(1782521211.935:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.073881][   T34] audit: type=1326 audit(1782521211.935:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.083231][   T34] audit: type=1326 audit(1782521211.935:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17209 comm="syz.7.4373" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  486.360488][T17218] bpf: Bad value for 'uid'
[  487.556117][T17193] Set syz1 is full, maxelem 65536 reached
[  487.882392][T17255] loop7: detected capacity change from 0 to 256
[  488.108881][T17267] geneve0: entered promiscuous mode
[  488.276740][T17277] loop9: detected capacity change from 0 to 2048
[  488.284677][T17277] UDF-fs: warning (device loop9): udf_fill_super: No fileset found
[  488.411948][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4409'.
[  488.438057][ T5954] kernel write not supported for file /snd/seq (pid: 5954 comm: kworker/1:5)
[  488.989469][T17314] loop0: detected capacity change from 0 to 2048
[  488.996353][T17314] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18881, location=18881
[  489.007887][T17314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.236319][T17307] loop9: detected capacity change from 0 to 32768
[  489.436975][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  489.437069][   T34] audit: type=1800 audit(1782521215.557:301): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4419" name="file1" dev="loop9" ino=12 res=0 errno=0
[  490.189303][T17321] loop9: detected capacity change from 0 to 1024
[  490.239099][T17321] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  490.526944][ T5903] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  490.675765][ T5903] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  490.679861][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  490.683017][ T5903] usb 10-1: Product: syz
[  490.684691][ T5903] usb 10-1: SerialNumber: syz
[  490.691258][ T5903] usb 10-1: config 0 descriptor??
[  490.892966][ T5903] hso 10-1:0.0: Can't find BULK endpoints
[  491.092139][ T5903] usb 10-1: USB disconnect, device number 15
[  491.563779][T17353] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  492.014283][T15686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.095013][T17364] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4443'.
[  492.850414][T17390] netlink: 'syz.9.4451': attribute type 6 has an invalid length.
[  493.738122][T17411] loop7: detected capacity change from 0 to 1024
[  493.746230][T17413] loop0: detected capacity change from 0 to 1024
[  493.751475][T17413] EXT4-fs: Ignoring removed bh option
[  493.773811][T17413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.800817][T17413] EXT4-fs (loop0): shut down requested (1)
[  493.859841][T16442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.051159][T17418] 9pnet: p9_errstr2errno: server reported unknown error 
[  494.779000][T17448] syzkaller0: entered promiscuous mode
[  494.781296][T17448] syzkaller0: entered allmulticast mode
[  495.670366][ T5902] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  495.697613][T17470] netlink: 'syz.7.4481': attribute type 2 has an invalid length.
[  495.701095][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4481'.
[  495.832341][ T5902] usb 10-1: Using ep0 maxpacket: 32
[  495.840004][ T5902] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 199, changing to 7
[  495.856075][ T5902] usb 10-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40
[  495.859676][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.867550][ T5902] usb 10-1: Product: Њ
[  495.869590][ T5902] usb 10-1: Manufacturer: 趂剨顜ᖖ듈䔂䇣즽ᘉ∃雂ጟ⯡司謹擻霢ɩ䁽裆僚圚ᥙ₉鳞夹䌠ӑ뇶閙⋄︼뽅⭜횡ꝝ憐墼ᨷܳ㍠펖࿤壥࣌穮ꖀ뮯迬㣝矊臀꛼
[  495.877314][ T5902] usb 10-1: SerialNumber: ခ
[  496.096597][ T5902] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71
[  496.103776][ T5902] usb 10-1: USB disconnect, device number 16
[  496.762815][T17488] loop9: detected capacity change from 0 to 512
[  496.766441][T17488] EXT4-fs: Ignoring removed nobh option
[  496.771825][T17488] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13
[  496.783459][T17488] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.4490: attempt to clear invalid blocks 1 len 1
[  496.790995][T17488] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  496.791360][T17488] EXT4-fs (loop9): Remounting filesystem read-only
[  496.796700][T17488] EXT4-fs (loop9): 1 truncate cleaned up
[  496.799312][T17488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.824129][T15686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.894570][T17491] loop9: detected capacity change from 0 to 2048
[  496.897985][T17491] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  496.901627][T17491] NILFS (loop9): mounting unchecked fs
[  496.914082][ T6151] udevd[6151]: incorrect nilfs2 checksum on /dev/loop9
[  496.925600][T17491] NILFS (loop9): recovery complete
[  496.930936][ T6151] udevd[6151]: incorrect nilfs2 checksum on /dev/loop9
[  496.933255][T17492] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  497.076562][T17498] loop9: detected capacity change from 0 to 256
[  497.079972][T17498] exfat: Deprecated parameter 'utf8'
[  497.083081][T17498] exfat: Deprecated parameter 'namecase'
[  497.085561][T17498] exfat: Deprecated parameter 'namecase'
[  497.087870][T17498] exfat: Deprecated parameter 'utf8'
[  497.100233][T17498] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  497.105652][T17498] exFAT-fs (loop9): failed to test first cluster bit of root dir(5)
[  497.292356][T17507] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4498'.
[  497.403580][T17512] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4500'.
[  497.652554][T17520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4503'.
[  499.805026][ T5954] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[  499.951373][ T5954] usb 10-1: unable to get BOS descriptor or descriptor too short
[  499.955188][ T5954] usb 10-1: not running at top speed; connect to a high speed hub
[  499.960253][ T5954] usb 10-1: config 1 has an invalid interface number: 122 but max is 0
[  499.963543][ T5954] usb 10-1: config 1 has no interface number 0
[  499.965968][ T5954] usb 10-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  499.971019][ T5954] usb 10-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64
[  499.975349][ T5954] usb 10-1: config 1 interface 122 has no altsetting 0
[  499.981082][ T5954] usb 10-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86
[  499.984663][ T5954] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.987805][ T5954] usb 10-1: Product: syz
[  499.989486][ T5954] usb 10-1: Manufacturer: syz
[  499.992110][ T5954] usb 10-1: SerialNumber: syz
[  499.998840][T17567] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  500.200515][ T5954] ti_usb_3410_5052 10-1:1.122: TI USB 5052 2 port adapter converter detected
[  500.214634][ T5954] usb 10-1: USB disconnect, device number 17
[  500.874800][T17571] loop9: detected capacity change from 0 to 40427
[  500.878172][T17571] F2FS-fs: quotafile must be on filesystem root
[  500.956506][T17573] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  500.962448][T17573] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  502.082044][T17579] loop0: detected capacity change from 0 to 32768
[  502.095565][T17579] ialloc: diAlloc returned -5!
[  502.519522][T10953] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  502.690990][T10953] usb 10-1: Using ep0 maxpacket: 16
[  502.696665][T10953] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.701828][T10953] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  502.705975][T10953] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  502.710205][T10953] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  502.714238][T10953] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11
[  502.721404][T10953] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  502.725173][T10953] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  502.728369][T10953] usb 10-1: Manufacturer: syz
[  502.736445][T10953] usb 10-1: config 0 descriptor??
[  502.986335][T10953] rc_core: IR keymap rc-hauppauge not found
[  502.988837][T10953] Registered IR keymap rc-empty
[  502.991416][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.005438][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.026083][T10953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  503.032008][T10953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input39
[  503.039047][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.062308][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.091370][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.120338][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.147995][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.177033][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.205108][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.235822][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.262241][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.290733][T10953] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  503.322159][T10953] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  503.325589][T10953] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  503.365469][T10953] usb 10-1: USB disconnect, device number 18
[  504.172935][T17614] loop9: detected capacity change from 0 to 32768
[  504.188346][T17614] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4545 (17614)
[  504.203072][T17614] BTRFS info (device loop9): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  504.210815][T17614] BTRFS info (device loop9): using xxhash64 checksum algorithm
[  504.250901][T17614] BTRFS info (device loop9): enabling ssd optimizations
[  504.255983][T17614] BTRFS info (device loop9): turning on async discard
[  504.258740][T17614] BTRFS info (device loop9): enabling free space tree
[  504.288619][T15686] BTRFS info (device loop9): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  505.181817][T17652] Bluetooth: MGMT ver 1.23
[  505.241249][   T24] IPVS: starting estimator thread 0...
[  505.330117][T17657] IPVS: using max 42 ests per chain, 100800 per kthread
[  505.590398][T17672] vti1: entered allmulticast mode
[  505.685119][   T24] Process accounting resumed
[  506.222417][T17697] loop9: detected capacity change from 0 to 2048
[  506.390524][T17703] loop9: detected capacity change from 0 to 256
[  506.397914][T17703] exfat: Deprecated parameter 'namecase'
[  506.401844][T17703] exfat: Deprecated parameter 'namecase'
[  506.409406][T17703] exfat: Deprecated parameter 'namecase'
[  506.419974][T17703] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  506.460489][T17703] exfat: Deprecated parameter 'utf8'
[  506.466640][T17703] exfat: Deprecated parameter 'namecase'
[  506.469101][T17703] exfat: Deprecated parameter 'namecase'
[  506.527887][T17709] loop9: detected capacity change from 0 to 64
[  507.882656][T10953] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  508.026450][T10953] usb 10-1: too many configurations: 70, using maximum allowed: 8
[  508.031090][T10953] usb 10-1: config index 0 descriptor too short (expected 65505, got 72)
[  508.036505][T10953] usb 10-1: config index 1 descriptor too short (expected 65505, got 72)
[  508.041242][T10953] usb 10-1: config index 2 descriptor too short (expected 65505, got 72)
[  508.047017][T10953] usb 10-1: config index 3 descriptor too short (expected 65505, got 72)
[  508.051873][T10953] usb 10-1: config index 4 descriptor too short (expected 65505, got 72)
[  508.057111][T10953] usb 10-1: config index 5 descriptor too short (expected 65505, got 72)
[  508.061684][T10953] usb 10-1: config index 6 descriptor too short (expected 65505, got 72)
[  508.066647][T10953] usb 10-1: config index 7 descriptor too short (expected 65505, got 72)
[  508.072808][T10953] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  508.077674][T10953] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.081031][T10953] usb 10-1: Product: syz
[  508.082850][T10953] usb 10-1: Manufacturer: syz
[  508.084734][T10953] usb 10-1: SerialNumber: syz
[  508.093406][T10953] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  508.149374][ T5902] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  508.353994][    C0] usb 10-1: ath9k_htc: invalid pkt_len (ec09)
[  508.495372][T17718] input: syz0 as /devices/virtual/input/input40
[  508.549823][ T5903] usb 10-1: USB disconnect, device number 19
[  508.628232][   T34] audit: type=1326 audit(1782521235.713:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.639836][   T34] audit: type=1326 audit(1782521235.724:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.648780][   T34] audit: type=1326 audit(1782521235.724:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.662957][   T34] audit: type=1326 audit(1782521235.724:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.674466][   T34] audit: type=1326 audit(1782521235.724:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.683045][   T34] audit: type=1326 audit(1782521235.724:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.692322][   T34] audit: type=1326 audit(1782521235.724:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.699229][   T34] audit: type=1326 audit(1782521235.724:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.707087][   T34] audit: type=1326 audit(1782521235.724:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz.7.4578" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  508.986934][T17735] loop7: detected capacity change from 0 to 2048
[  509.016980][T17735] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  509.032259][T17736] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  509.039442][T17735] syz.7.4584: attempt to access beyond end of device
[  509.039442][T17735] loop7: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  509.109807][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.118864][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  509.121493][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  509.134309][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.155446][T17735] Remounting filesystem read-only
[  509.162967][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.172860][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.177085][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.181360][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.188696][ T5902] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  509.192921][ T5902] ath9k_htc: Failed to initialize the device
[  509.196307][ T5903] usb 10-1: ath9k_htc: USB layer deinitialized
[  509.204270][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.208514][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.212592][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.217557][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.232810][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.237066][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.245728][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.249772][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.253675][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.257625][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.260715][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.264346][T17735] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  509.268074][   T34] audit: type=1800 audit(1782521236.375:311): pid=17735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4584" name="file2" dev="loop7" ino=16 res=0 errno=0
[  509.276096][T17735] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9
[  509.281294][T17735] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16)
[  509.285292][T17735] NILFS (loop7): error -5 truncating bmap (ino=16)
[  509.439049][T17735] syz.7.4584 (17735) used greatest stack depth: 18048 bytes left
[  509.546299][T14181] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[  510.071338][T17763] input input41: cannot allocate more than FF_MAX_EFFECTS effects
[  510.115197][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'.
[  510.140069][ T5954] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  510.205174][T17769] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4599'.
[  510.291504][ T5954] usb 10-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=3b.70
[  510.295125][ T5954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.300919][ T5954] usb 10-1: config 0 descriptor??
[  510.502166][ T5954] usb 10-1: USB disconnect, device number 20
[  511.157514][   T55] Bluetooth: hci0: unexpected subevent 0x18 length: 30 > 19
[  511.160752][   T55] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  511.413459][T17784] fuse: Bad value for 'fd'
[  511.904484][T17777] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  511.910129][T17777] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  511.936549][T17777] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  511.947131][T17777] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  511.949540][T17777] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  511.960302][T17777] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  512.457680][T17788] loop9: detected capacity change from 0 to 32768
[  512.460478][T17788] btrfs: Deprecated parameter 'usebackuproot'
[  512.462873][T17788] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  512.468058][T17788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4606 (17788)
[  512.494393][T17788] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  512.497646][T17788] BTRFS info (device loop9): using crc32c checksum algorithm
[  512.579937][T15980] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  512.606578][T17806] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4607'.
[  512.607867][T17788] BTRFS error (device loop9): failed to load root extent
[  512.612553][T17788] BTRFS warning (device loop9): try to load backup roots slot 1
[  512.615488][T15980] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  512.620199][T17788] BTRFS warning (device loop9): couldn't read tree root
[  512.622643][T17788] BTRFS warning (device loop9): try to load backup roots slot 2
[  512.625673][T15987] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  512.631173][T17788] BTRFS warning (device loop9): couldn't read tree root
[  512.633712][T17788] BTRFS warning (device loop9): try to load backup roots slot 3
[  512.649095][T17788] BTRFS info (device loop9): rebuilding free space tree
[  512.672197][T17788] BTRFS info (device loop9): checking UUID tree
[  512.679952][T17788] BTRFS info (device loop9): enabling ssd optimizations
[  512.682584][T17788] BTRFS info (device loop9): turning on async discard
[  512.685299][T17788] BTRFS info (device loop9): enabling free space tree
[  512.687846][T17788] BTRFS info (device loop9): force clearing of disk cache
[  512.690551][T17788] BTRFS info (device loop9): enabling auto defrag
[  512.693395][T17788] BTRFS info (device loop9): trying to use backup root at mount time
[  512.695939][T17788] BTRFS info (device loop9): use zstd compression, level 3
[  513.171511][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  513.403337][T17822] xt_hashlimit: size too large, truncated to 1048576
[  513.531744][T15686] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  513.913742][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  514.041802][T17845] loop0: detected capacity change from 0 to 1024
[  514.091462][T17845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.110124][   T55] Bluetooth: hci1: unexpected event for opcode 0x1003
[  514.182073][T16442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.321697][T17858] pim6reg1: tun_chr_ioctl cmd 35111
[  514.419434][ T5903] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  514.596584][ T5903] usb 10-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e
[  514.611379][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.625972][ T5903] usb 10-1: Product: syz
[  514.629140][ T5903] usb 10-1: Manufacturer: syz
[  514.635575][ T5903] usb 10-1: SerialNumber: syz
[  514.708221][T17872] loop0: detected capacity change from 0 to 16
[  514.718998][T17872] erofs (device loop0): unidentified algorithms fff0, please upgrade kernel
[  514.903084][ T5903] usb 10-1: USB disconnect, device number 21
[  516.055165][T17893] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  516.115130][T17899] loop7: detected capacity change from 0 to 1024
[  516.226197][T17899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  516.338128][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  516.843374][T17916] loop7: detected capacity change from 0 to 1024
[  516.847132][T17916] EXT4-fs: Ignoring removed mblk_io_submit option
[  516.872828][T17916] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002]
[  516.877262][T17916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  516.882091][T17916] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.906126][T17916] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4646: bg 0: block 112: padding at end of block bitmap is not set
[  516.983032][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  517.547109][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4665'.
[  517.576659][T17957] veth1_to_team: entered promiscuous mode
[  517.579941][T17959] loop0: detected capacity change from 0 to 16
[  517.582167][ T5903] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  517.586921][T17959] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  517.593917][T17957] veth1_to_team: left promiscuous mode
[  517.728909][   T34] audit: type=1326 audit(1782521245.256:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.739678][ T5903] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  517.751545][ T5903] usb 10-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  517.756299][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.770764][ T5903] usb 10-1: Product: syz
[  517.772041][ T5903] usb 10-1: Manufacturer: syz
[  517.780123][ T5903] usb 10-1: SerialNumber: syz
[  517.792386][ T5903] usb 10-1: config 0 descriptor??
[  517.797571][ T5903] kvaser_usb 10-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  517.805694][   T34] audit: type=1326 audit(1782521245.340:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.813082][   T34] audit: type=1326 audit(1782521245.350:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.830884][   T34] audit: type=1326 audit(1782521245.340:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.838661][   T34] audit: type=1326 audit(1782521245.371:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.848201][   T34] audit: type=1326 audit(1782521245.371:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.858060][   T34] audit: type=1326 audit(1782521245.371:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.869704][   T34] audit: type=1326 audit(1782521245.382:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.879204][   T34] audit: type=1326 audit(1782521245.382:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.889211][   T34] audit: type=1326 audit(1782521245.382:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17962 comm="syz.7.4668" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  517.958317][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  517.962698][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  517.979987][ T5853] Bluetooth: hci1: hardware error 0x00
[  518.015518][ T5923] usb 10-1: USB disconnect, device number 22
[  518.104512][T17974] loop0: detected capacity change from 0 to 4096
[  518.107760][T17974] EXT4-fs: inline encryption not supported
[  518.118890][T17974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  518.134075][T17974] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003]
[  518.147094][T17974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.215763][T17963] loop7: detected capacity change from 0 to 32768
[  518.251157][T17963] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  518.276052][T17963] XFS (loop7): Ending clean mount
[  518.359040][T16442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.364336][T14181] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  518.443091][T17985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  518.643605][T17989] loop9: detected capacity change from 0 to 512
[  518.650253][T17989] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  518.661898][T17989] EXT4-fs (loop9): 1 truncate cleaned up
[  518.669736][T17989] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.679998][T17989] EXT4-fs error (device loop9): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.9.4677: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  518.727900][T17989] EXT4-fs (loop9): Remounting filesystem read-only
[  518.733471][T17989] EXT4-fs warning (device loop9): ext4_rename_delete:3739: inode #2: comm syz.9.4677: Deleting old file: nlink 5, error=-117
[  518.742117][T17992] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  518.749797][T17992] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null.
[  518.825302][T17994] loop7: detected capacity change from 0 to 2048
[  518.837226][T17994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  519.007709][T15686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.556962][T17683] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.693079][T17996] loop0: detected capacity change from 0 to 131072
[  519.697216][T17996] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  519.699784][T17996] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  519.703101][T17996] F2FS-fs (loop0): invalid crc value
[  519.741986][T17996] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  519.765785][T17996] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  519.768160][T17996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  519.805835][T18005] sctp: [Deprecated]: syz.7.4683 (pid 18005) Use of struct sctp_assoc_value in delayed_ack socket option.
[  519.805835][T18005] Use struct sctp_sack_info instead
[  519.919685][T17683] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.935632][ T5853] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  519.956540][T14719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  519.982896][T14719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.994115][T14719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.997549][T14719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  520.000577][T14719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  520.401958][T17683] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.605185][T17683] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.642931][T18009] loop7: detected capacity change from 0 to 131072
[  520.648733][T18009] F2FS-fs (loop7): invalid crc value
[  520.716950][T18009] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  520.730189][T18009] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  520.820176][T18007] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.823143][T18007] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.825947][T18007] bridge_slave_0: entered allmulticast mode
[  520.831975][T18007] bridge_slave_0: entered promiscuous mode
[  520.861855][T18007] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.864094][T18007] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.875888][T18007] bridge_slave_1: entered allmulticast mode
[  520.888160][T18007] bridge_slave_1: entered promiscuous mode
[  520.988554][T18007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.004310][T18007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.097208][T18007] team0: Port device team_slave_0 added
[  521.100854][T18007] team0: Port device team_slave_1 added
[  521.145703][T17683] bridge_slave_1: left allmulticast mode
[  521.148022][T17683] bridge_slave_1: left promiscuous mode
[  521.150259][T17683] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.156262][T17683] bridge_slave_0: left allmulticast mode
[  521.158567][T17683] bridge_slave_0: left promiscuous mode
[  521.160457][T17683] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.477802][T18034] loop0: detected capacity change from 0 to 1764
[  521.693424][T17683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  521.697084][T17683] bond_slave_0: left allmulticast mode
[  521.700652][T17683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.704827][T17683] bond_slave_1: left allmulticast mode
[  521.707405][T17683] bond0 (unregistering): Released all slaves
[  521.712870][T18007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.716259][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.726735][T18007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.733395][T18007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.823057][T18036] iso9660: Corrupted directory entry in block 2 of inode 1920
[  521.830625][T18036] Invalid source name
[  521.968030][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.995523][T18007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.044391][T17683] tipc: Left network mode
[  522.100028][T18007] hsr_slave_0: entered promiscuous mode
[  522.102447][T18007] hsr_slave_1: entered promiscuous mode
[  522.105088][T18007] debugfs: 'hsr0' already exists in 'hsr'
[  522.107177][T18007] Cannot create hsr debugfs directory
[  522.159430][T14719] Bluetooth: hci0: command tx timeout
[  522.339190][T17683] hsr_slave_0: left promiscuous mode
[  522.342741][T17683] hsr_slave_1: left promiscuous mode
[  522.345821][T17683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.353658][T17683] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.358082][T17683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.371714][T17683] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.451292][T17683] veth1_macvtap: left promiscuous mode
[  522.460805][T17683] veth0_macvtap: left promiscuous mode
[  522.464337][T17683] veth1_vlan: left promiscuous mode
[  522.467833][T17683] veth0_vlan: left promiscuous mode
[  522.920861][T17683] team0 (unregistering): Port device team_slave_1 removed
[  522.932429][T17683] team0 (unregistering): Port device team_slave_0 removed
[  522.954941][T18060] loop0: detected capacity change from 0 to 4096
[  522.976037][T18060] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  523.000961][T18060] ntfs3(loop0): Failed to load $Extend (-22).
[  523.003494][T18060] ntfs3(loop0): Failed to initialize $Extend.
[  523.220866][ T5363] 8021q: adding VLAN 0 to HW filter on device eth5
[  523.613094][T18066] loop0: detected capacity change from 0 to 32768
[  523.630885][T18066] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  523.635467][T18066] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  523.661856][T18066] XFS (loop0): Ending clean mount
[  523.673657][T18066] XFS (loop0): Quotacheck needed: Please wait.
[  523.888242][ T5363] 8021q: adding VLAN 0 to HW filter on device eth6
[  523.889441][T18066] XFS (loop0): Quotacheck: Done.
[  523.961685][T16442] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  524.123709][T14719] Bluetooth: hci0: command tx timeout
[  524.306905][T18090] loop0: detected capacity change from 0 to 128
[  524.345077][T18090] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  524.349822][T18090] hpfs: filesystem error: improperly stopped
[  524.358249][T18090] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  524.364624][T18090] hpfs: You really don't want any checks? You are crazy...
[  524.378816][T18090] hpfs: hpfs_map_sector(): read error
[  524.384892][T18090] hpfs: code page support is disabled
[  524.395765][T18090] hpfs: hpfs_map_4sectors(): unaligned read
[  524.398078][T18090] hpfs: hpfs_map_4sectors(): unaligned read
[  524.400426][T18090] hpfs: filesystem error: unable to find root dir
[  524.446036][T18090] hpfs: hpfs_map_4sectors(): unaligned read
[  524.455811][T18090] hpfs: hpfs_map_sector(): read error
[  524.480691][ T5363] 8021q: adding VLAN 0 to HW filter on device eth7
[  524.512944][T17683] IPVS: stop unused estimator thread 0...
[  524.781587][T18098] loop0: detected capacity change from 0 to 256
[  525.186118][ T5363] 8021q: adding VLAN 0 to HW filter on device eth8
[  525.248811][T18118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4709'.
[  525.402462][T18007] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  525.490363][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  525.499945][T18007] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  525.528905][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  525.531740][T18007] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  525.568865][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  525.577829][T18007] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  525.593959][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  525.729946][T18007] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.769434][T18007] 8021q: adding VLAN 0 to HW filter on device team0
[  525.789483][T12827] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.792102][T12827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.804725][T12827] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.807025][T12827] bridge0: port 2(bridge_slave_1) entered forwarding state
[  526.008006][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4717'.
[  526.108205][T14719] Bluetooth: hci0: command tx timeout
[  526.309808][T18007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  526.348008][T18007] veth0_vlan: entered promiscuous mode
[  526.363038][T18007] veth1_vlan: entered promiscuous mode
[  526.385033][T18007] veth0_macvtap: entered promiscuous mode
[  526.393613][T18007] veth1_macvtap: entered promiscuous mode
[  526.417134][T18007] batman_adv: batadv0: Interface activated: batadv_slave_0
[  526.434365][T18007] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.448827][T17683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.457295][T17683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.474594][T17683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.481269][T17683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.086321][T14719] Bluetooth: hci0: command tx timeout
[  528.552008][T18147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  528.662300][T12824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.678978][T12824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.725909][T15980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.729499][T15980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.058327][T18249] loop3: detected capacity change from 0 to 4096
[  529.079628][T18249] NILFS (loop3): invalid segment: Checksum error in segment payload
[  529.084550][T18249] NILFS (loop3): trying rollback from an earlier position
[  529.105903][T18249] NILFS (loop3): recovery complete
[  529.109472][T18251] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  529.157807][T18249] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  529.555116][T18269] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4738'.
[  529.769988][T18275] xt_TPROXY: Can be used only with -p tcp or -p udp
[  529.900583][T18274] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  529.908194][T18274] overlayfs: missing 'lowerdir'
[  530.550832][T18291] loop3: detected capacity change from 0 to 1024
[  530.565403][   T34] kauditd_printk_skb: 33 callbacks suppressed
[  530.565415][   T34] audit: type=1800 audit(1782521258.735:355): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4746" name="file1" dev="loop3" ino=20 res=0 errno=0
[  531.011460][ T5954] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  531.156210][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short
[  531.161185][ T5954] usb 4-1: config 242 has an invalid interface number: 40 but max is 0
[  531.165024][ T5954] usb 4-1: config 242 has no interface number 0
[  531.167601][ T5954] usb 4-1: config 242 interface 40 altsetting 4 endpoint 0xD is Bulk; changing to Interrupt
[  531.171639][ T5954] usb 4-1: config 242 interface 40 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 8
[  531.177153][ T5954] usb 4-1: config 242 interface 40 has no altsetting 0
[  531.186549][ T5954] usb 4-1: string descriptor 0 read error: -22
[  531.189153][ T5954] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11
[  531.193979][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.201517][T18301] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  531.218453][ T5954] hdpvr 4-1:242.40: Could not find bulk-in endpoint
[  531.221578][ T5954] hdpvr 4-1:242.40: probe with driver hdpvr failed with error -12
[  531.410995][ T5954] usb 4-1: USB disconnect, device number 27
[  531.938607][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4758'.
[  531.958065][T18317] bond0: (slave bond_slave_0): Releasing backup interface
[  532.299145][T18325] loop3: detected capacity change from 0 to 2048
[  532.331005][T18328] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  532.383473][T18328] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  532.401343][T18328] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  532.419530][T18328] Remounting filesystem read-only
[  532.437690][T18007] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  532.633815][T18327] loop7: detected capacity change from 0 to 32768
[  532.685013][T18327] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  532.692357][T18327] JBD2: Ignoring recovery information on journal
[  532.756712][T18327] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  532.776542][T18350] loop3: detected capacity change from 0 to 256
[  532.779945][T18350] exfat: Bad value for 'uid'
[  532.781923][T18350] exfat: Bad value for 'uid'
[  532.826224][T18355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4773'.
[  532.831761][T18355] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4773'.
[  532.976922][T18327] (syz.7.4761,18327,0):ocfs2_check_dir_entry:314 ERROR: directory entry (#65: offset=512) too close to end or out-of-bounds
[  532.976954][T18327] (syz.7.4761,18327,0):ocfs2_rename:1700 ERROR: status = -2
[  533.081709][T14181] ocfs2: Unmounting device (7,7) on (node local)
[  533.133320][T18367] loop3: detected capacity change from 0 to 128
[  533.149562][T18367] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  533.169133][T18367] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  533.259915][T18367] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  533.298966][T18007] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  533.685078][   T34] audit: type=1326 audit(1782521262.011:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.698868][   T34] audit: type=1326 audit(1782521262.032:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.710767][   T34] audit: type=1326 audit(1782521262.042:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.720453][   T34] audit: type=1326 audit(1782521262.053:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.728631][   T34] audit: type=1326 audit(1782521262.063:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.740320][   T34] audit: type=1326 audit(1782521262.074:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.749699][   T34] audit: type=1326 audit(1782521262.084:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.760692][   T34] audit: type=1326 audit(1782521262.095:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.769801][   T34] audit: type=1326 audit(1782521262.105:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18387 comm="syz.7.4787" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f706b99ce59 code=0x7ffc0000
[  533.870366][T18392] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  534.071039][T18400] loop7: detected capacity change from 0 to 512
[  534.084133][T18400] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  534.087284][T18400] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.4793: corrupted in-inode xattr: e_value size too large
[  534.091816][T18400] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  534.092117][T18400] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4793: couldn't read orphan inode 15 (err -117)
[  534.099474][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  534.099495][    C0] EXT4-fs (loop7): initial error at time 1782521262: ext4_iget_extra_inode:5128: inode 15
[  534.099522][    C0] EXT4-fs (loop7): last error at time 1782521262: ext4_iget_extra_inode:5128: inode 15
[  534.108436][T18400] loop7: lost filesystem error report for type 5 error -117
[  534.109520][T18400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.133684][T18400] EXT4-fs error (device loop7): ext4_check_dx_root:2201: inode #2: comm syz.7.4793: Corrupt dir, invalid name_len for '..', running e2fsck is recommended
[  534.184057][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.751287][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4802'.
[  534.755015][T18422] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4802'.
[  534.758609][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4802'.
[  534.762143][T18422] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4802'.
[  534.766394][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4802'.
[  535.658449][T18444] loop3: detected capacity change from 0 to 1024
[  535.662840][T18444] EXT4-fs: Ignoring removed bh option
[  535.690490][T18444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  535.961204][T18007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.602613][T18459] loop7: detected capacity change from 0 to 32768
[  536.631893][T18459] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  536.656385][T18459] XFS (loop7): Ending clean mount
[  536.995701][T14181] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  537.608835][T18493] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4827'.
[  537.851229][T18503] loop7: detected capacity change from 0 to 4096
[  537.885044][T18503] ntfs3(loop7): Failed to load $MFT (-22).
[  538.972764][T18541] Bluetooth: MGMT ver 1.23
[  539.926695][   T34] kauditd_printk_skb: 18 callbacks suppressed
[  539.926706][   T34] audit: type=1326 audit(1782521268.562:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18557 comm="syz.0.4848" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dbd79ce59 code=0x0
[  539.970503][T18564] syz_tun: entered allmulticast mode
[  540.006977][T18568] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4851'.
[  541.130192][T18592] netlink: 'syz.7.4862': attribute type 21 has an invalid length.
[  541.133288][T18592] IPv6: NLM_F_CREATE should be specified when creating new route
[  541.149803][T18592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  541.157108][T18592] IPv6: NLM_F_CREATE should be set when creating new route
[  541.159621][T18592] IPv6: NLM_F_CREATE should be set when creating new route
[  541.161838][T18592] IPv6: NLM_F_CREATE should be set when creating new route
[  541.179193][T18592] netlink: 'syz.7.4862': attribute type 21 has an invalid length.
[  541.183531][T18592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  541.917730][T18611] loop0: detected capacity change from 0 to 256
[  541.920761][T18611] exfat: Deprecated parameter 'utf8'
[  541.922899][T18611] exfat: Deprecated parameter 'namecase'
[  541.925147][T18611] exfat: Deprecated parameter 'namecase'
[  541.944845][T18611] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  542.032300][T14719] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  542.515245][T18634] loop7: detected capacity change from 0 to 512
[  542.531391][T18634] EXT4-fs: Ignoring removed nomblk_io_submit option
[  542.533600][T18634] EXT4-fs: Ignoring removed nomblk_io_submit option
[  542.538573][T18634] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  542.554354][T18634] EXT4-fs (loop7): 1 truncate cleaned up
[  542.570006][T18634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  542.592652][   T34] audit: type=1326 audit(1782521271.354:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18640 comm="syz.3.4883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a859ce59 code=0x7ffc0000
[  542.615263][   T34] audit: type=1326 audit(1782521271.354:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18640 comm="syz.3.4883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a859ce59 code=0x7ffc0000
[  542.658415][   T34] audit: type=1326 audit(1782521271.375:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18640 comm="syz.3.4883" exe="/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f10a859ce59 code=0x7ffc0000
[  542.705737][   T34] audit: type=1326 audit(1782521271.375:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18640 comm="syz.3.4883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a859ce59 code=0x7ffc0000
[  542.724762][   T34] audit: type=1326 audit(1782521271.375:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18640 comm="syz.3.4883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a859ce59 code=0x7ffc0000
[  542.802706][T18646] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.805714][T18646] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.806814][T18649] loop0: detected capacity change from 0 to 4096
[  542.816980][T18649] EXT4-fs (loop0): Test dummy encryption mode enabled
[  542.829663][T18649] EXT4-fs (loop0): unsupported descriptor size 255
[  542.888597][T18646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.896804][T18646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.081869][ T5955] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.085287][ T5955] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.089035][ T5955] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.092101][ T5955] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.163242][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.009440][T18686] xt_hashlimit: size too large, truncated to 1048576
[  544.252732][T18699] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4906'.
[  544.256297][T18699] netlink: 'syz.0.4906': attribute type 9 has an invalid length.
[  544.258923][T18699] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4906'.
[  544.265069][T18699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4906'.
[  544.785456][T10953] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  544.939362][T10953] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  544.946061][T10953] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  544.952894][T10953] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  544.958322][T10953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  544.961956][T10953] usb 4-1: SerialNumber: syz
[  544.970897][T10953] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  544.974722][T10953] usb-storage 4-1:1.0: USB Mass Storage device detected
[  544.985126][T10953] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  544.996293][T10953] scsi host6: usb-storage 4-1:1.0
[  546.205497][ T5954] usb 4-1: USB disconnect, device number 28
[  546.807257][T18737] loop7: detected capacity change from 0 to 4096
[  546.824342][T18737] ntfs3(loop7): ino=3, mi_enum_attr
[  546.914059][T18747] loop3: detected capacity change from 0 to 128
[  548.556662][T10953] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  548.700183][T10953] usb 4-1: Using ep0 maxpacket: 8
[  548.707244][T10953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  548.717060][T10953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  548.726471][T10953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  548.735578][T10953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  548.751402][T10953] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  548.756871][T10953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249
[  548.766370][T10953] usb 4-1: SerialNumber: syz
[  548.776078][T10953] usb 4-1: config 0 descriptor??
[  548.785799][T18800] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  549.074652][T10953] usb 4-1: USB disconnect, device number 29
[  549.697664][T18866] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4958'.
[  549.747565][T18854] loop0: detected capacity change from 0 to 32768
[  549.802879][T18854] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  549.824999][T18854] JBD2: Ignoring recovery information on journal
[  549.904275][T18854] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  550.523122][T16442] ocfs2: Unmounting device (7,0) on (node local)
[  550.628544][T18889] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4967'.
[  550.788643][T18898] xt_bpf: check failed: parse error
[  550.793780][T18899] loop7: detected capacity change from 0 to 512
[  550.865563][T18903] IPv6: NLM_F_CREATE should be specified when creating new route
[  550.890581][T18899] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.4970: iget: bad i_size value: 38620345925642
[  550.895195][T18899] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  550.895611][T18899] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4970: couldn't read orphan inode 15 (err -117)
[  550.902800][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  550.902819][    C0] EXT4-fs (loop7): initial error at time 1782521280: ext4_orphan_get:1397: inode 15
[  550.902841][    C0] EXT4-fs (loop7): last error at time 1782521280: ext4_orphan_get:1397: inode 15
[  550.934165][T18905] pimreg: entered allmulticast mode
[  550.963311][T18899] loop7: lost filesystem error report for type 5 error -117
[  550.964482][T18899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.981136][T18909] loop3: detected capacity change from 0 to 64
[  551.009563][T18910] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.4974'.
[  551.256320][T18899] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4970: bg 0: block 5: invalid block bitmap
[  551.288874][T18899] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 944 with error 28
[  551.302955][T18899] EXT4-fs (loop7): This should not happen!! Data will be lost
[  551.302955][T18899] 
[  551.308574][T18899] EXT4-fs (loop7): Total free blocks count 0
[  551.313042][T18899] EXT4-fs (loop7): Free/Dirty block details
[  551.315510][T18899] EXT4-fs (loop7): free_blocks=0
[  551.317505][T18899] EXT4-fs (loop7): dirty_blocks=944
[  551.319759][T18899] EXT4-fs (loop7): Block reservation details
[  551.322430][T18899] EXT4-fs (loop7): i_reserved_data_blocks=944
[  551.420805][T18899] EXT4-fs (loop7): shut down requested (0)
[  551.670496][T18915] loop7: detected capacity change from 0 to 1024
[  551.715259][T18915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  551.766403][T18915] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  552.078416][T18922] RDS: rds_bind could not find a transport for 8000:0:20::, load rds_tcp or rds_rdma?
[  552.168846][T18923] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4976: bg 0: block 112: padding at end of block bitmap is not set
[  552.193918][T18923] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[  552.197900][T18923] EXT4-fs (loop7): This should not happen!! Data will be lost
[  552.197900][T18923] 
[  552.200829][T18923] EXT4-fs (loop7): Total free blocks count 0
[  552.202658][T18923] EXT4-fs (loop7): Free/Dirty block details
[  552.204511][T18923] EXT4-fs (loop7): free_blocks=0
[  552.206191][T18923] EXT4-fs (loop7): dirty_blocks=64
[  552.207794][T18923] EXT4-fs (loop7): Block reservation details
[  552.209748][T18923] EXT4-fs (loop7): i_reserved_data_blocks=4
[  552.224336][T18923] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.4976: lblock 0 mapped to illegal pblock 0 (length 1)
[  552.277709][T18923] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.4976: lblock 0 mapped to illegal pblock 0 (length 1)
[  552.694571][T14181] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  552.713435][T14181] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  553.120639][T18938] loop7: detected capacity change from 0 to 32768
[  553.189053][T18938] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  553.213353][T18938] XFS (loop7): Ending clean mount
[  553.217736][T18938] XFS (loop7): Quotacheck needed: Please wait.
[  553.269908][T18955] loop0: detected capacity change from 0 to 128
[  553.369372][T18938] XFS (loop7): Quotacheck: Done.
[  553.472088][T14181] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  553.999174][T18970] loop3: detected capacity change from 0 to 512
[  554.004828][T18970] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  554.008433][T18970] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[  554.011302][T18970] EXT4-fs (loop3): orphan cleanup on readonly fs
[  554.017152][T18970] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4996: bg 0: block 15: invalid block bitmap
[  554.021594][T18970] loop3: lost filesystem error report for type 5 error -117
[  554.024882][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  554.030179][    C1] EXT4-fs (loop3): initial error at time 1782521283: ext4_validate_block_bitmap:432
[  554.033307][    C1] EXT4-fs (loop3): last error at time 1782521283: ext4_validate_block_bitmap:432
[  554.039182][T18970] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  554.042803][T18970] loop3: lost filesystem error report for type 5 error -117
[  554.043120][T18970] EXT4-fs (loop3): 1 truncate cleaned up
[  554.063455][T18970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  554.119201][T18007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.354017][T18986] bond1: entered allmulticast mode
[  554.370759][T18986] macvlan2: entered promiscuous mode
[  554.373046][T18986] macvlan2: entered allmulticast mode
[  554.376193][T18986] bond1: (slave macvlan2): Opening slave failed
[  554.430819][T18982] loop3: detected capacity change from 0 to 40427
[  555.465173][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5011'.
[  556.445398][T19028] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  556.552629][T19030] loop3: detected capacity change from 0 to 4096
[  556.614400][T19030] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  556.618919][T19030] ntfs3(loop3): Failed to load $Extend (-22).
[  556.621532][T19030] ntfs3(loop3): Failed to initialize $Extend.
[  556.718720][T18007] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  557.082047][T19040] input: syz0 as /devices/virtual/input/input42
[  557.901335][T19045] tmpfs: Bad value for 'mpol'
[  558.137439][T19051] syzkaller1: entered promiscuous mode
[  558.139692][T19051] syzkaller1: entered allmulticast mode
[  558.677892][T19064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5036'.
[  558.826303][T19072] loop3: detected capacity change from 0 to 256
[  558.829726][T19072] exfat: Deprecated parameter 'utf8'
[  558.831927][T19072] exfat: Deprecated parameter 'utf8'
[  558.834080][T19072] exfat: Deprecated parameter 'namecase'
[  558.845531][T19072] exfat: Deprecated parameter 'namecase'
[  558.859742][T19072] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  558.899010][T19072] netlink: 'syz.3.5038': attribute type 4 has an invalid length.
[  558.962734][T19076] loop3: detected capacity change from 0 to 2048
[  558.977750][T19077] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  559.066313][   T34] audit: type=1800 audit(1782521288.655:389): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5041" name="file1" dev="loop3" ino=2097152 res=0 errno=0
[  559.076047][T19080] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  560.707547][T19101] loop3: detected capacity change from 0 to 256
[  560.724160][T19101] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  561.073629][T10953] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  561.217380][T10953] usb 4-1: Using ep0 maxpacket: 8
[  561.221633][T10953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  561.226141][T10953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  561.230653][T10953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  561.234577][T10953] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  561.240410][T10953] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  561.243888][T10953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.380728][T19109] loop7: detected capacity change from 0 to 2048
[  561.387343][ T6151] udevd[6151]: incorrect nilfs2 checksum on /dev/loop7
[  561.393208][T19109] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  561.403449][T19110] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  561.412429][ T6151] udevd[6151]: incorrect nilfs2 checksum on /dev/loop7
[  561.457568][T19107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  561.465271][T19107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.472987][T10953] usb 4-1: GET_CAPABILITIES returned 77
[  561.475584][T10953] usbtmc 4-1:16.0: can't read capabilities
[  561.529124][T19110] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  561.533700][T19110] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  561.541558][T19110] Remounting filesystem read-only
[  561.548614][T14181] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  561.670142][    C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  561.680521][ T5954] usb 4-1: USB disconnect, device number 30
[  563.569212][T19144] loop3: detected capacity change from 0 to 40427
[  563.571777][T19144] F2FS-fs: heap/no_heap options were deprecated
[  563.574489][T19144] F2FS-fs (loop3): Encrypt feature is off
[  563.921480][T10953] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  564.074227][T10953] usb 4-1: Using ep0 maxpacket: 8
[  564.081360][T10953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  564.098498][T10953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  564.105461][T10953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  564.113378][T10953] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  564.125540][T10953] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  564.133397][T10953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.340714][T10953] usb 4-1: GET_CAPABILITIES returned 0
[  564.342902][T10953] usbtmc 4-1:16.0: can't read capabilities
[  564.538136][ T5954] usb 4-1: USB disconnect, device number 31
[  564.755306][T19178] loop7: detected capacity change from 0 to 32768
[  564.768785][T19178] (syz.7.5088,19178,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  564.773379][T19178] (syz.7.5088,19178,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  564.793211][T19178] JBD2: Ignoring recovery information on journal
[  564.829577][T19178] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  564.901237][T19178] 
[  564.902291][T19178] ======================================================
[  564.904976][T19178] WARNING: possible circular locking dependency detected
[  564.907613][T19178] syzkaller #0 Tainted: G             L     
[  564.910014][T19178] ------------------------------------------------------
[  564.912728][T19178] syz.7.5088/19178 is trying to acquire lock:
[  564.915128][T19178] ffff8881bfff89a0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850
[  564.920190][T19178] 
[  564.920190][T19178] but task is already holding lock:
[  564.922994][T19178] ffff8881ba3b22e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0
[  564.926523][T19178] 
[  564.926523][T19178] which lock already depends on the new lock.
[  564.926523][T19178] 
[  564.930288][T19178] 
[  564.930288][T19178] the existing dependency chain (in reverse order) is:
[  564.934156][T19178] 
[  564.934156][T19178] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  564.937262][T19178]        down_read+0x47/0x2e0
[  564.939107][T19178]        ocfs2_init_acl+0x2fd/0x7e0
[  564.941085][T19178]        ocfs2_mknod+0x166a/0x2240
[  564.943142][T19178]        ocfs2_mkdir+0x181/0x460
[  564.945135][T19178]        vfs_mkdir+0x406/0x620
[  564.947074][T19178]        filename_mkdirat+0x285/0x510
[  564.949215][T19178]        __se_sys_mkdirat+0x35/0x150
[  564.951336][T19178]        do_syscall_64+0x174/0x580
[  564.953367][T19178]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.955952][T19178] 
[  564.955952][T19178] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  564.959291][T19178]        down_read+0x47/0x2e0
[  564.961170][T19178]        ocfs2_start_trans+0x3ab/0x700
[  564.963363][T19178]        ocfs2_shutdown_local_alloc+0x1ef/0xa50
[  564.965895][T19178]        ocfs2_dismount_volume+0x1ec/0x8d0
[  564.968206][T19178]        generic_shutdown_super+0x13d/0x2d0
[  564.970550][T19178]        kill_block_super+0x44/0x90
[  564.972657][T19178]        deactivate_locked_super+0xbc/0x130
[  564.975016][T19178]        cleanup_mnt+0x3d3/0x460
[  564.976948][T19178]        task_work_run+0x1d9/0x270
[  564.978953][T19178]        exit_to_user_mode_loop+0x193/0x6b0
[  564.981271][T19178]        do_syscall_64+0x353/0x580
[  564.983354][T19178]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.985863][T19178] 
[  564.985863][T19178] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  564.988739][T19178]        ocfs2_start_trans+0x2ac/0x700
[  564.991378][T19178]        ocfs2_mknod+0x116a/0x2240
[  564.993365][T19178]        ocfs2_mkdir+0x181/0x460
[  564.995410][T19178]        vfs_mkdir+0x406/0x620
[  564.997378][T19178]        filename_mkdirat+0x285/0x510
[  564.999545][T19178]        __se_sys_mkdirat+0x35/0x150
[  565.001722][T19178]        do_syscall_64+0x174/0x580
[  565.003843][T19178]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.006427][T19178] 
[  565.006427][T19178] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  565.010686][T19178]        down_write+0x96/0x200
[  565.012580][T19178]        ocfs2_reserve_local_alloc_bits+0x11f/0x2680
[  565.015221][T19178]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  565.017915][T19178]        ocfs2_mknod+0x110d/0x2240
[  565.020544][T19178]        ocfs2_mkdir+0x181/0x460
[  565.023517][T19178]        vfs_mkdir+0x406/0x620
[  565.026097][T19178]        filename_mkdirat+0x285/0x510
[  565.028119][T19178]        __se_sys_mkdirat+0x35/0x150
[  565.030223][T19178]        do_syscall_64+0x174/0x580
[  565.032315][T19178]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.034874][T19178] 
[  565.034874][T19178] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  565.039038][T19178]        __lock_acquire+0x1520/0x2cd0
[  565.041259][T19178]        lock_acquire+0x106/0x350
[  565.043244][T19178]        down_write+0x96/0x200
[  565.045186][T19178]        ocfs2_reserve_suballoc_bits+0x170/0x4850
[  565.047748][T19178]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  565.050455][T19178]        ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  565.052764][T19178]        ocfs2_xattr_set+0xc78/0x13a0
[  565.054905][T19178]        __vfs_setxattr+0x442/0x480
[  565.056935][T19178]        __vfs_setxattr_noperm+0x12a/0x660
[  565.059424][T19178]        vfs_setxattr+0x163/0x360
[  565.061151][T19178]        filename_setxattr+0x296/0x630
[  565.063157][T19178]        path_setxattrat+0x408/0x450
[  565.065065][T19178]        __x64_sys_setxattr+0xbc/0xe0
[  565.067249][T19178]        do_syscall_64+0x174/0x580
[  565.069128][T19178]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.071110][T19178] 
[  565.071110][T19178] other info that might help us debug this:
[  565.071110][T19178] 
[  565.074491][T19178] Chain exists of:
[  565.074491][T19178]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  565.074491][T19178] 
[  565.079966][T19178]  Possible unsafe locking scenario:
[  565.079966][T19178] 
[  565.082224][T19178]        CPU0                    CPU1
[  565.083990][T19178]        ----                    ----
[  565.085723][T19178]   lock(&oi->ip_xattr_sem);
[  565.087153][T19178]                                lock(&journal->j_trans_barrier);
[  565.089629][T19178]                                lock(&oi->ip_xattr_sem);
[  565.092045][T19178]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  565.094268][T19178] 
[  565.094268][T19178]  *** DEADLOCK ***
[  565.094268][T19178] 
[  565.096729][T19178] 3 locks held by syz.7.5088/19178:
[  565.098491][T19178]  #0: ffff8881744c6410 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  565.102021][T19178]  #1: ffff8881ba3b25a0 (&sb->s_type->i_mutex_key#47){+.+.}-{4:4}, at: vfs_setxattr+0x13e/0x360
[  565.106054][T19178]  #2: ffff8881ba3b22e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0
[  565.109709][T19178] 
[  565.109709][T19178] stack backtrace:
[  565.111971][T19178] CPU: 1 UID: 0 PID: 19178 Comm: syz.7.5088 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  565.111998][T19178] Tainted: [L]=SOFTLOCKUP
[  565.112004][T19178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  565.112014][T19178] Call Trace:
[  565.112022][T19178]  <TASK>
[  565.112031][T19178]  dump_stack_lvl+0xe8/0x150
[  565.112052][T19178]  print_circular_bug+0x2e1/0x300
[  565.112073][T19178]  check_noncircular+0x12e/0x150
[  565.112095][T19178]  __lock_acquire+0x1520/0x2cd0
[  565.112111][T19178]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  565.112131][T19178]  ? _raw_spin_unlock+0x28/0x50
[  565.112151][T19178]  ? ocfs2_reserve_suballoc_bits+0x170/0x4850
[  565.112172][T19178]  lock_acquire+0x106/0x350
[  565.112186][T19178]  ? ocfs2_reserve_suballoc_bits+0x170/0x4850
[  565.112211][T19178]  down_write+0x96/0x200
[  565.112225][T19178]  ? ocfs2_reserve_suballoc_bits+0x170/0x4850
[  565.112245][T19178]  ? __pfx_down_write+0x10/0x10
[  565.112259][T19178]  ? add_lock_to_list+0xc7/0x100
[  565.112276][T19178]  ? __lock_acquire+0x13e8/0x2cd0
[  565.112292][T19178]  ocfs2_reserve_suballoc_bits+0x170/0x4850
[  565.112328][T19178]  ? do_raw_spin_lock+0x12b/0x2f0
[  565.112351][T19178]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  565.112373][T19178]  ? lockdep_hardirqs_on+0x7a/0x110
[  565.112394][T19178]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  565.112413][T19178]  ? stack_depot_save_flags+0x3ec/0x800
[  565.112428][T19178]  ? kasan_save_track+0x4f/0x80
[  565.112441][T19178]  ? kasan_save_track+0x3e/0x80
[  565.112456][T19178]  ? __kasan_kmalloc+0x93/0xb0
[  565.112470][T19178]  ? __kmalloc_cache_noprof+0x318/0x660
[  565.112484][T19178]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  565.112502][T19178]  ? ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  565.112514][T19178]  ? ocfs2_xattr_set+0xc78/0x13a0
[  565.112525][T19178]  ? __vfs_setxattr+0x442/0x480
[  565.112542][T19178]  ? __vfs_setxattr_noperm+0x12a/0x660
[  565.112559][T19178]  ? vfs_setxattr+0x163/0x360
[  565.112575][T19178]  ? filename_setxattr+0x296/0x630
[  565.112593][T19178]  ? path_setxattrat+0x408/0x450
[  565.112606][T19178]  ? __x64_sys_setxattr+0xbc/0xe0
[  565.112625][T19178]  ? do_syscall_64+0x174/0x580
[  565.112637][T19178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.112666][T19178]  ? __kasan_kmalloc+0x93/0xb0
[  565.112682][T19178]  ? __kmalloc_cache_noprof+0x318/0x660
[  565.112695][T19178]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  565.112715][T19178]  ? __kmalloc_cache_noprof+0x157/0x660
[  565.112730][T19178]  ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  565.112753][T19178]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  565.112806][T19178]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  565.112828][T19178]  ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  565.112847][T19178]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  565.112864][T19178]  ? ocfs2_xattr_set+0xc3c/0x13a0
[  565.112879][T19178]  ? up_write+0x1a6/0x410
[  565.112898][T19178]  ocfs2_xattr_set+0xc78/0x13a0
[  565.112921][T19178]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  565.112934][T19178]  ? dput+0x37/0x1a0
[  565.112954][T19178]  ? dput+0x37/0x1a0
[  565.112971][T19178]  ? look_up_lock_class+0x57/0x110
[  565.112990][T19178]  ? register_lock_class+0x31/0x2e0
[  565.113007][T19178]  ? __asan_memset+0x22/0x50
[  565.113027][T19178]  ? terminate_walk+0x38a/0x4c0
[  565.113045][T19178]  ? posix_xattr_acl+0x93/0xc0
[  565.113060][T19178]  ? evm_protect_xattr+0x4ef/0xb20
[  565.113079][T19178]  ? __pfx_evm_protect_xattr+0x10/0x10
[  565.113092][T19178]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  565.113105][T19178]  __vfs_setxattr+0x442/0x480
[  565.113126][T19178]  __vfs_setxattr_noperm+0x12a/0x660
[  565.113148][T19178]  vfs_setxattr+0x163/0x360
[  565.113169][T19178]  ? __pfx_vfs_setxattr+0x10/0x10
[  565.113190][T19178]  filename_setxattr+0x296/0x630
[  565.113212][T19178]  ? __pfx_filename_setxattr+0x10/0x10
[  565.113233][T19178]  ? do_getname+0x151/0x250
[  565.113250][T19178]  path_setxattrat+0x408/0x450
[  565.113268][T19178]  ? __pfx_path_setxattrat+0x10/0x10
[  565.113282][T19178]  ? do_futex+0x395/0x420
[  565.113317][T19178]  ? rcu_is_watching+0x15/0xb0
[  565.113337][T19178]  __x64_sys_setxattr+0xbc/0xe0
[  565.113356][T19178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.113372][T19178]  do_syscall_64+0x174/0x580
[  565.113385][T19178]  ? trace_irq_disable+0x3b/0x140
[  565.113406][T19178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.113421][T19178] RIP: 0033:0x7f706b99ce59
[  565.113438][T19178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.113452][T19178] RSP: 002b:00007f706c8b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  565.113468][T19178] RAX: ffffffffffffffda RBX: 00007f706bc15fa0 RCX: 00007f706b99ce59
[  565.113480][T19178] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080
[  565.113490][T19178] RBP: 00007f706ba32e6f R08: 0000000000000000 R09: 0000000000000000
[  565.113499][T19178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  565.113508][T19178] R13: 00007f706bc16038 R14: 00007f706bc15fa0 R15: 00007ffd035bd7f8
[  565.113525][T19178]  </TASK>
[  565.333062][T14181] ocfs2: Unmounting device (7,7) on (node local)
[  567.638717][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  567.641317][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
