last executing test programs:

2m12.520330578s ago: executing program 1 (id=9421):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xed00}, 0x2, 0x0, 0x0, 0xfffffeae}, 0x80)

2m12.455751823s ago: executing program 1 (id=9423):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0)

2m12.217849769s ago: executing program 1 (id=9430):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x20}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6})

2m12.096287428s ago: executing program 1 (id=9432):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@uid}, {@nls={'nls', 0x3d, 'cp737'}}, {}, {@force}, {@barrier}, {@creator={'creator', 0x3d, "b1025c6b"}}, {@nodecompose}]}, 0x47, 0x6ff, &(0x7f0000000240)="$eJzs3U1sHGf5APBn1uu1N5XcbZu0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRhN9Pmp13Zt6PZ57OvN6dbbQB/M9afDsmtyOJxQtvbaXbD3bqzQc79dWiHBFTEVGKKLdXkaxFJJ9FXI32Ev+X7sy7S/Yb542Hn354/v7H9fZWOV+y+qVh7Xa1hoywnS8xGxET+XpM5f36ux5vDvR3b6yuk07cacLOFYmDk9YasD1O8xHuW+BJdy9iYnKP/bWIUxExnb8PiHx2KB1zeIdurFkOAAAAnkwTB1V4/lE8iq2YOZ5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NmQtH8zMMmXUlGejaT4/f9Kvi9VqZxwvMN95YDjH9w8pkAAAAAAAAAA4Eh8kn9xf/ZRPIqtmCn2t5LsO//Xso3T2etz8V5sxFKsx8XYikZsxmasx3zE5ExXh5Wtxubm+vxgy19H2rLVat3LWy5ERG2g5cI+gZYO+cQBAAAAAAAA4Nn0k1iMmZMOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuiURE+1VtpwuyrUolSNiOiIqab3tiD8V5afZn086AAAAADh61Xw9k/ynXWgl2Wf+l7PP/dPxXqzFZizHZjRjKW5kzwLan/pLf9+uNx/s1FfTZbDjb/9rrDiyHiNiIt7fZ+S5rMaZTovF+G58Py7EbFyL9ViOH0YjNmMpZqOankQ0Iolatf30olbEuXe8V3u2rvXHdrZv+9UskmrcjOUstotxvRLtxybZOaRjvto12h8qEX0jvp9mJ/lWbsQc3ej67/Wr/LlMrvX8iH0cjVp25pOdjMyluc+z8cLw3I95nfSPNB+lzjOo07ujpJv9IxU5/8E4OT/VXk2nLz/vzflhG/NRWn8mFqKUX30RL/fm/PYX77/Y2/jL//jLtVultZVbNzcuHOEpPY7ZgypMFoX+TNS7MvHK8Ksvz0QzzcT26JmY7N8xPWrLo1XJs5FNRSPOlt/JSo14resSfDduxFJcjrmYjysxF9+Ihah3rrB0OdOT13J9tTcn2b1WGpzfqkOCP/elrkq/OKDy8Urz8kJXXrtnulp2LN9z9Zcx13X1vTj86hv7r0A6/v/n5XSMn3b+4jwJejKRz81FdC8Nz8RvWunrRnNtZf1W4/aI453P1+lt+0Hv3Pzb0aPu/+t+GNLrJZ1xy9lWlpNqcb2kx17qRNubr0r+jUu7XWng2JnOsVrMxHJ8b987tZK/hxvsqX3sle5j/9ydOSv5+5viWM+7nHg3mtm7kD4HTtUAHLNTr5+qVB9W/1b9qPqz6q3qW9NvTl2Z+kIlJv9a/uPE70u/K30zeT0+ih/HzElHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4KNO3dXGs3m0nqnENP9ex63UNl3rOGFKB1YZ+e50TqMWsTwsZK8UDncc38aC9Xo21P8wtLj9vxJRAypU3ns4JOxr7GxC2keDqXDVqud1GxPa2KM5uWi1d51yrExHSuNpLzHHTe1exdEbaXR/Herp3k1um4Z4Bl3aXP19qWNO3e/urzaeGfpnaW1hSuXr1yuf33+a5duLjeX5tqvJx0lcBQ27tyd2GP3wC/dAgAAAAAAAAAAAE+O/P/+3/zc/5ihfECdyvrG3iOfPe5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5Si2/H5HYkMT93cS7dfrBTb6ZLUd6tWY6IUkQkP4pIPou4Gu0lal3dJfuN88bDTz88f//j+m5f5aJ+aVi70WznS8xGxES+PtjUHt0M9ne9q7/tzxVe0jnDNGHnisTBSftvAAAA//9u//cB")
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)

2m11.828227266s ago: executing program 1 (id=9442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0)

2m10.352286107s ago: executing program 1 (id=9471):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x1000000, 0x1, 0xa, 0x0, 0x700}})

2m10.254992234s ago: executing program 32 (id=9471):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x1000000, 0x1, 0xa, 0x0, 0x700}})

5.653987741s ago: executing program 3 (id=12534):
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x4)

5.540561659s ago: executing program 3 (id=12539):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x6, 0x0, 0x5, 0x0})

4.507007341s ago: executing program 3 (id=12565):
timer_create(0x9, 0x0, &(0x7f0000000000)=<r0=>0x0)
timer_delete(r0)

4.393433588s ago: executing program 3 (id=12571):
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000540)={0x40, 0x5, 0x6, "5603d8b10180"}, 0x0, 0x0, 0x0, 0x0})

1.925116998s ago: executing program 0 (id=12647):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004)

1.830435064s ago: executing program 0 (id=12650):
r0 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x0, 0x5529, &(0x7f0000006080)="$eJzs3L1vW1UUAPDjpOk3JUIMbH1SVSmRalOnH4KtQCs+RKuqwMAEju1abm2/KHadkImBETHwnyCQmBj5GxiY2RADiA0J5HdfSgNUqhQnJsnvJz2fd6+vzzvXqiqd9yIHcGQtZr//WolzcSoi5iPibERxXimPwo0UXoqI8xEx98RRKecfTxyPiNMRcW6SPOWslG99eWl84dov7/z23Q8njp356tsfZ7drYNYuRkR/LZ1v9FPMOyk+KOcb424R+1fHZUxv9B+W4zzFjfZqkWGjsb2uUcQrnbQ+X3s0nMT7vUZzEjvd+8X82iBdcDjubOcpPvCgsV6MW+3VInaHeRE7W6muza30f9vWcJTytMp8nxTpYzTajml9e7Od9rP2sIjNwaicT3nzVntzEsdlLC8XzbzXKupY3cUX/T/3bnfwaDMbt9eH3XyQXavVX6nVr1fr63mrPWpfrTb6retXs6VOb7KsOmo3+jc6ed7ptWvNvL+cLXWazWq9ni3dbK92G4OsXq9dqV2uXlsuzy5lb975IOu1sqVJfL07eDTq9obZ/Xw9S59YzlZqV15dzi7Us/du383u3rt16/bd9z+6+eGd126//Ua56F9lZUsrl1dWqvXL1ZX68hHa/2dl0VPcP+xKZdYFABw8+n9gFi7GwuPz6fb/6/ci9r7/j2fq/9O8/v/pDlT/e/j6/42XI2a6f9gV/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJH108LXbxUni2l8ppx/rpx6oRxXImIuIv78D/NxfEfO+TLPwlPWL/yjhu8rUWSYXONEeZyOiBvl8cfze/0tAAAAwOH1zafnv0jdenpZnHVB7Kd002bu7MdTyleJiIXFn6eUbW7y8uKUkhX/vo/F5pSyFTewTk4pWbrldmxa2Z7J/I5w8olQSWFuX8sBAAD2xc5OYH+7EAAAAPbT57MugNmoxPajzO1nwcVf3v/9QPDUjhEAAABwAFVmXQAAAACw54r+3+//AQAAwOGWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C927id3aSCOA+i35VfBf5EY917FHRzDI7h0aTiAl+AALvAKXoB4BNx5BAOGzoggXZh02kbzXlKGacuHGUIXM5MMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABD+tbs1p8/vP7YN+d46qdMbwAAAIAuh2a3bt8sU/1pPv88n3qZ61VE1BHRNXafxaObzFnOaX7f/+n6/uaPNnyJaBPO3zHPx5OIeJOPHy+G/hUAAADg/7XfbFdptJ5ellM3iDGlSZv62dtCeVVENMvvhdLqc96rQmHt//sh3hdKayewFoXC0pTbQ6m0v9I+7pdZu8VVUaWi7vzYpZHF+g4AAIxodlOMOwoBAABgTO+mbgDTqOLXUuZlKXCeiry89/imBgAAAPyDqqkbAAAAAAyuHf+PtP/fyf5/AAAAMI20/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDOjS79X6zXfXNOZ7ufM2X7q906N8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAn+zPOwqEQBiEwd71ncnc/7DSoLGhSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXM/rXVUUQDAz8z7E9sqxihZRETBhW5s+lpbuxMXSnDhRxBC+lpjX/3TBrGliNm4k6y7EV2KCErc9Tt03UI3dddFFhVcK3feTN40CfhUnHkmvx/cuedNhrnnzpCQM3cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLLz1iTupM38OM7LfXcf3VxL/b09fXJ76/5SainOqp15Q4nPvhfqH7LFiDjRXjIAAAAcDZ2qvo+IB73tldTn80X936uOSaX7t0+N47Ke/6wqWffW/1Xtn9ovPz98bneg+fE46aQX10fDU/tT6f5Xc5x1T//lEd3iyhePUDrFDcnf3Xx2p1dcz+zrO3fe7hfhXBPZAgD/xMmqL4Pq96HUD9pMDIAjo1srvKv6vzPfbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATdjZjBNVnEXEUncSJ/ce3Vw7qL+9dX+paudu3dqKLyfnTKfoRcTF9dHwVKOzmW3Xrt+4vDoaDa82H7wYEW2N/mY5/cvvT3FwRCvX55AEWfl928igc+me7v1SXt7sWbga/5+gtR9JAAAcUr2ypfrgQW97Je3LFiL++O7x+v+VWhxT1v8PPzh3tz5Wvf4fNDbD2be8ceWT5WvXb7y2fmX10vDS8KPXTw/eGJw5f/bs+eXiWcmyJyYAAAD8O/2y1ev/fGH/+v/xWhxT1v+ffjP4oj5WR/1/oMmiX9uZAAAAHG3PvPT7b9kB+7N+Pz5f3di4Ohhvdz+fHm9bSPVvmytbvf7vLLSdFQAAANCEnc3ssfX/C7U4plz/f/L753+sn7MTEcfK9f+Tax+PLjQ3nZnWxJ8Ttz1HAAAA2nWsbPX1/17x/n+++8pDHhGvvjyOy38DOFX933nnqx/qY9Xf/z/T3BRnUr44vh5FvxjRXWw7IwAAAA6zJ8qWiv1fe9srH/50/L2+9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmvZnAAAA//9gHC7O")
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xbffffbf9)

1.344356938s ago: executing program 3 (id=12661):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}})

1.211402626s ago: executing program 4 (id=12663):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x109000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000002140)={{0x3, 0x2, 0x1, 0x3, 0xfffffff7}, 0x2000000000000e52, 0xffffffffffffffff})

1.129005362s ago: executing program 4 (id=12666):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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")
symlinkat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.082159516s ago: executing program 3 (id=12667):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.004489661s ago: executing program 5 (id=12669):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000080)=[0x1388, 0x4009, 0xf909, 0x899d, 0xd82, 0xfffffffb, 0x47, 0x10, 0xfffffe01, 0x5, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x1, 0x4000007})

892.829629ms ago: executing program 5 (id=12671):
setuid(0xee00)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)

792.394476ms ago: executing program 5 (id=12672):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000))

769.392987ms ago: executing program 2 (id=12673):
r0 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)

730.793079ms ago: executing program 5 (id=12674):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002500), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000002540)={0xa, @capture={0x0, 0x1, {0x80000000, 0x3}, 0x1, 0x6}})

664.189234ms ago: executing program 5 (id=12675):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=")
open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc)

658.146074ms ago: executing program 2 (id=12676):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c40)=@nat={'nat\x00', 0x19, 0x5, 0x136, [0x200000000640, 0x0, 0x0, 0x2000000007c6, 0x200000000a12], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x8, 0x88e5, 'virt_wifi0\x00', 'wg1\x00', 'macvlan1\x00', 'veth1_macvtap\x00', @multicast, [0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, [0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}, {0x0, '\x00', 0x1, 0x2}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x1ae)

567.885911ms ago: executing program 2 (id=12677):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x6, 0x6, 0x38, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={0x0, 0x4, 0x9, 0x2000000})

459.496168ms ago: executing program 0 (id=12678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c0001800600060065580000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0xc000)

455.072159ms ago: executing program 4 (id=12679):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0)

408.785992ms ago: executing program 2 (id=12680):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000000c0)=0x16d2, 0x4)

331.073417ms ago: executing program 4 (id=12681):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000140)=0x400030, 0x4)

287.96867ms ago: executing program 0 (id=12682):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
syslog(0x4, 0x0, 0x0)

210.684816ms ago: executing program 4 (id=12683):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10040, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={[{@subsystem='devices'}]})

180.374917ms ago: executing program 2 (id=12684):
r0 = syz_open_dev$vbi(&(0x7f0000000d00), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000d40)={0x0, 0x1, 0x2, 0x8, 0x7, 0x1, 0xe})

101.836253ms ago: executing program 0 (id=12685):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0xfffe}, {@in6=@local, 0x4d3, 0x3c}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x3500, 0x2, 0x0, 0x0, 0x4b}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x20004000)

97.876373ms ago: executing program 4 (id=12686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB="c543da2e", @ANYRES32=r0], 0x48)

74.903215ms ago: executing program 2 (id=12687):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000005200)={'sit0\x00', 0x0})

259.91µs ago: executing program 0 (id=12688):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7)

0s ago: executing program 5 (id=12689):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000027c0)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f3800006d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x2, 0x6e2, &(0x7f0000000c80)="$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")
setxattr(&(0x7f000001f640)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73782e260373cf285246f619e46fc5a25a6c6e12338fc9"], 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

SHFS error: Unable to read metadata cache entry [2d5]
[  843.881903][   T26] audit: type=1800 audit(2000526007.182:41): pid=26869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10232" name="file1" dev="loop2" ino=5 res=0 errno=0
[  844.318764][T26908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  844.522650][T20053] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  844.540895][T26927] openvswitch: netlink: Missing key (keys=40, expected=100)
[  844.556524][T26929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10255'.
[  844.761335][T26943] loop4: detected capacity change from 0 to 256
[  844.775938][T26937] loop5: detected capacity change from 0 to 4096
[  844.837881][T26937] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  844.900622][T26937] ntfs3: loop5: Failed to load $Extend.
[  844.914348][T20053] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  844.943520][T20053] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  844.954511][T26943] FAT-fs (loop4): Directory bread(block 64) failed
[  844.974598][T26943] FAT-fs (loop4): Directory bread(block 65) failed
[  844.993574][T26943] FAT-fs (loop4): Directory bread(block 66) failed
[  845.000270][T20053] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  845.042369][T26953] netlink: 'syz.2.10262': attribute type 28 has an invalid length.
[  845.057300][T26943] FAT-fs (loop4): Directory bread(block 67) failed
[  845.063943][T26943] FAT-fs (loop4): Directory bread(block 68) failed
[  845.102970][T26943] FAT-fs (loop4): Directory bread(block 69) failed
[  845.119634][T26943] FAT-fs (loop4): Directory bread(block 70) failed
[  845.151753][T26943] FAT-fs (loop4): Directory bread(block 71) failed
[  845.181422][T26943] FAT-fs (loop4): Directory bread(block 72) failed
[  845.202310][T26962] loop2: detected capacity change from 0 to 64
[  845.213514][T26943] FAT-fs (loop4): Directory bread(block 73) failed
[  845.260555][T20053] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  845.278129][T20053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.316400][T20053] usb 4-1: Product: syz
[  845.339117][T20053] usb 4-1: Manufacturer: syz
[  845.373968][T20053] usb 4-1: SerialNumber: syz
[  845.399922][T20053] usb 4-1: config 0 descriptor??
[  845.454869][T20053] usb 4-1: Found UVC 34.00 device syz (8086:0b5b)
[  845.484543][T20053] usb 4-1: No valid video chain found.
[  845.505834][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10269'.
[  845.572356][T26978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10271'.
[  845.682551][ T4882] usb 4-1: USB disconnect, device number 69
[  846.279250][T27024] IPv6: Can't replace route, no match found
[  846.684053][T27058] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10300'.
[  846.832099][ T4882] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  847.009720][T27069] loop3: detected capacity change from 0 to 4096
[  847.080361][T27069] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  847.165937][T27069] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  847.272464][ T4882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 135, changing to 4
[  847.309134][ T4882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33863, setting to 1023
[  847.346262][T27096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10316'.
[  847.559753][ T4882] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  847.568982][ T4882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.622034][ T4882] usb 5-1: Product: syz
[  847.639391][ T4882] usb 5-1: Manufacturer: syz
[  847.644082][ T4882] usb 5-1: SerialNumber: syz
[  847.680430][ T4882] usb 5-1: config 0 descriptor??
[  847.741351][ T4882] hub 5-1:0.0: bad descriptor, ignoring hub
[  847.747312][ T4882] hub: probe of 5-1:0.0 failed with error -5
[  847.777595][ T4882] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58
[  848.032541][T27135] netlink: 'syz.5.10331': attribute type 10 has an invalid length.
[  848.156545][T27135] team0: Device wg1 is of different type
[  848.334633][T27152] 9p: Unknown access argument Ø
[  848.524541][T27166] xt_limit: Overflow, try lower: 65536/2147483648
[  848.686061][T27182] trusted_key: encrypted_key: master key parameter is missing
[  849.147219][T27206] netlink: 'syz.0.10364': attribute type 4 has an invalid length.
[  849.198722][   T23] usb 5-1: USB disconnect, device number 66
[  849.208200][T27206] netlink: 'syz.0.10364': attribute type 3 has an invalid length.
[  849.234851][T27206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10364'.
[  849.567031][T27238] netlink: 'syz.0.10378': attribute type 5 has an invalid length.
[  849.631718][T27241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10381'.
[  849.702169][T27241] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10381'.
[  849.848377][T27253] netlink: 'syz.0.10387': attribute type 2 has an invalid length.
[  849.950059][T27261] ceph: No source
[  850.233703][T27278] netlink: 'syz.2.10399': attribute type 10 has an invalid length.
[  850.271096][T27276] loop5: detected capacity change from 0 to 4096
[  850.283674][T27278] team0: Device xfrm0 is of different type
[  850.349066][T20053] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  850.355620][T27281] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  850.459745][T27251] loop3: detected capacity change from 0 to 32768
[  850.648463][T20053] usb 5-1: Using ep0 maxpacket: 32
[  850.655867][T27251] JBD2: Ignoring recovery information on journal
[  850.798274][T20053] usb 5-1: config 2 has an invalid interface number: 105 but max is 0
[  850.825224][T27251] JBD2: Unrecognised features on journal
[  850.829165][T20053] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  850.833808][T27251] (syz.3.10386,27251,0):ocfs2_journal_load:1105 ERROR: Failed to load journal!
[  850.850440][T27251] (syz.3.10386,27251,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -22
[  850.883395][T27251] (syz.3.10386,27251,0):ocfs2_check_volume:2493 ERROR: status = -22
[  850.895246][T20053] usb 5-1: config 2 has no interface number 0
[  850.915639][T27251] (syz.3.10386,27251,0):ocfs2_mount_volume:1824 ERROR: status = -22
[  850.930925][T20053] usb 5-1: too many endpoints for config 2 interface 105 altsetting 118: 101, using maximum allowed: 30
[  850.963333][T27251] (syz.3.10386,27251,0):ocfs2_fill_super:1177 ERROR: status = -22
[  850.980153][T20053] usb 5-1: config 2 interface 105 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 101
[  851.021336][T20053] usb 5-1: config 2 interface 105 has no altsetting 0
[  851.220309][T20053] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[  851.249367][T20053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.283184][T20053] usb 5-1: Product: syz
[  851.287403][T20053] usb 5-1: Manufacturer: syz
[  851.305200][T20053] usb 5-1: SerialNumber: syz
[  851.339754][T27329] loop5: detected capacity change from 0 to 4096
[  851.436824][T27329] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array.
[  851.459500][T27329] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array.
[  851.492211][T27329] ntfs: (device loop5): ntfs_read_locked_inode(): Mapping pairs decompression failed.
[  851.512008][T27251] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  851.532821][T27329] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  851.552247][T27329] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  851.565753][T27329] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  851.585260][T20053] usb 5-1: USB disconnect, device number 67
[  851.588589][T27329] ntfs: volume version 3.1.
[  851.596647][T27329] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  851.610932][T27339] comedi comedi4: bad chanlist[0]=0x80100000 chan=0 range length=2
[  851.628367][T27329] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  851.691569][T27329] ntfs: (device loop5): ntfs_check_logfile(): Error mapping $LogFile page (index 0).
[  851.701597][T27329] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  851.810788][T27347] netlink: 'syz.0.10432': attribute type 21 has an invalid length.
[  851.822004][T27347] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10432'.
[  851.842178][T27347] netlink: 'syz.0.10432': attribute type 4 has an invalid length.
[  851.872616][T27347] netlink: 'syz.0.10432': attribute type 5 has an invalid length.
[  851.891600][T27347] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10432'.
[  851.895601][T27327] loop2: detected capacity change from 0 to 32768
[  851.950643][T27327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.10422 (27327)
[  852.009621][T27327] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  852.033103][T27327] BTRFS info (device loop2): using free space tree
[  852.043589][T27327] BTRFS info (device loop2): has skinny extents
[  852.079192][T27361] netlink: 'syz.5.10437': attribute type 1 has an invalid length.
[  852.088829][T27363] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10436'.
[  852.089475][T27361] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.10437'.
[  852.282976][T27381] loop5: detected capacity change from 0 to 1024
[  852.358607][T27327] BTRFS info (device loop2): enabling ssd optimizations
[  852.390034][T27381] hfsplus: invalid file type 0177777 for inode 2
[  852.417648][T27381] hfsplus: failed to load root directory
[  852.594078][ T4882] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  852.688052][ T6211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (6211)
[  852.914745][ T4882] usb 5-1: Using ep0 maxpacket: 16
[  852.968180][T19776] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  853.075382][ T4882] usb 5-1: config 252 has an invalid interface number: 15 but max is 0
[  853.083881][ T4882] usb 5-1: config 252 has no interface number 0
[  853.232429][T27427] netlink: 'syz.3.10461': attribute type 1 has an invalid length.
[  853.267931][T19776] usb 6-1: Using ep0 maxpacket: 16
[  853.275700][ T4882] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  853.299921][ T4882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.343446][ T4882] usb 5-1: Product: syz
[  853.348066][ T4882] usb 5-1: Manufacturer: syz
[  853.362641][ T4882] usb 5-1: SerialNumber: syz
[  853.429924][T19776] usb 6-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config
[  853.446969][T19776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024
[  853.467834][ T4882] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  853.493489][T19776] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  853.545595][T19776] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  853.654034][ T4882] usb 5-1: USB disconnect, device number 68
[  853.663397][ T1406] usb 5-1: Failed to submit usb control message: -71
[  853.671483][ T1406] usb 5-1: unable to send the bmi data to the device: -71
[  853.708435][ T1406] usb 5-1: unable to get target info from device
[  853.714929][ T1406] usb 5-1: could not get target info (-71)
[  853.715666][T27442] loop3: detected capacity change from 0 to 64
[  853.746530][ T1406] usb 5-1: could not probe fw (-71)
[  853.748843][T19776] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  853.768106][T19776] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  853.778564][T19776] usb 6-1: Manufacturer: syz
[  853.812276][T19776] usb 6-1: config 0 descriptor??
[  853.855866][T27381] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  853.975935][T27456] xt_TPROXY: Can be used only with -p tcp or -p udp
[  854.106437][T13673] usb 6-1: USB disconnect, device number 4
[  854.162304][T27467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10479'.
[  854.286126][T27477] overlayfs: missing 'lowerdir'
[  854.371114][T27483] loop3: detected capacity change from 0 to 64
[  854.485995][T27489] loop4: detected capacity change from 0 to 256
[  854.508543][T27491] netlink: 'syz.0.10493': attribute type 10 has an invalid length.
[  854.548462][T27491] team0: Device xfrm0 is of different type
[  854.626742][T27489] FAT-fs (loop4): Directory bread(block 64) failed
[  854.639591][T27489] FAT-fs (loop4): Directory bread(block 65) failed
[  854.650350][T27493] netlink: 'syz.2.10494': attribute type 1 has an invalid length.
[  854.703453][T27489] FAT-fs (loop4): Directory bread(block 66) failed
[  854.710184][T27489] FAT-fs (loop4): Directory bread(block 67) failed
[  854.746722][T27489] FAT-fs (loop4): Directory bread(block 68) failed
[  854.753326][T27489] FAT-fs (loop4): Directory bread(block 69) failed
[  854.834074][T27489] FAT-fs (loop4): Directory bread(block 70) failed
[  854.850652][T27489] FAT-fs (loop4): Directory bread(block 71) failed
[  854.889059][T27489] FAT-fs (loop4): Directory bread(block 72) failed
[  854.921385][T27489] FAT-fs (loop4): Directory bread(block 73) failed
[  855.016579][T27516] loop5: detected capacity change from 0 to 512
[  855.017203][T27518] netlink: 'syz.3.10506': attribute type 29 has an invalid length.
[  855.043098][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10506'.
[  855.064384][T27518] netlink: 'syz.3.10506': attribute type 29 has an invalid length.
[  855.090894][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10506'.
[  855.257712][T27532] netlink: 'syz.2.10513': attribute type 4 has an invalid length.
[  855.296030][T27532] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10513'.
[  855.374205][T27532] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  855.961403][T27584] Cannot find add_set index 3 as target
[  855.977860][T27585] loop5: detected capacity change from 0 to 512
[  856.020428][T27591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10540'.
[  856.059663][T27585] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  856.181963][T27595] nftables ruleset with unbound chain
[  856.196379][T27606] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  856.241238][T27585] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback.
[  856.281712][T27612] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[  856.290378][T27585] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  856.313001][T27612] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  856.470401][T27624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10555'.
[  856.891098][T27653] IPv6: NLM_F_CREATE should be specified when creating new route
[  856.922395][T27653] IPv6: Can't replace route, no match found
[  857.157406][T27666] device wg1 entered promiscuous mode
[  857.182410][T27666] team0: Device wg1 is of different type
[  857.328486][T27680] loop4: detected capacity change from 0 to 164
[  857.421085][T27680] iso9660: Corrupted directory entry in block 2 of inode 1920
[  857.496202][T27690] validate_nla: 5 callbacks suppressed
[  857.496222][T27690] netlink: 'syz.0.10586': attribute type 3 has an invalid length.
[  857.532792][T27694] loop2: detected capacity change from 0 to 256
[  857.682029][T27704] netlink: 'syz.5.10592': attribute type 3 has an invalid length.
[  857.891163][ T4883] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  857.987513][T27722] loop4: detected capacity change from 0 to 512
[  858.037352][T27722] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  858.174668][ T4883] usb 4-1: Using ep0 maxpacket: 16
[  858.330092][ T4883] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  858.347296][ T4883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  858.360918][ T4883] usb 4-1: config 1 has no interface number 0
[  858.380023][ T4883] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  858.421267][ T4883] usb 4-1: config 1 interface 105 has no altsetting 0
[  858.477588][T27754] __nla_validate_parse: 3 callbacks suppressed
[  858.477601][T27754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10616'.
[  858.634609][ T4883] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  858.665703][ T4883] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  858.702236][ T4883] usb 4-1: Product: syz
[  858.721491][ T4883] usb 4-1: Manufacturer: syz
[  858.726149][ T4883] usb 4-1: SerialNumber: syz
[  858.733557][T27771] netlink: 'syz.4.10623': attribute type 10 has an invalid length.
[  858.843991][T27771] team0: Device wg1 is of different type
[  858.906356][T27777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10626'.
[  858.925501][T27777] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10626'.
[  859.019614][ T4883] aqc111: probe of 4-1:1.105 failed with error -22
[  859.203958][T27799] netlink: 'syz.0.10637': attribute type 5 has an invalid length.
[  859.250266][ T4883] usb 4-1: USB disconnect, device number 70
[  859.280580][T27799] device  entered promiscuous mode
[  859.417845][T27814] netlink: 'syz.2.10642': attribute type 10 has an invalid length.
[  859.497736][T27814] team0: Device wg1 is of different type
[  859.767495][T20286] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  859.826886][T27839] loop2: detected capacity change from 0 to 1764
[  859.955349][T27839] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  860.088506][T20286] usb 6-1: Using ep0 maxpacket: 16
[  860.244228][T20286] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  860.267652][T20286] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  860.307080][T27832] loop4: detected capacity change from 0 to 32768
[  860.421353][T27832] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  860.495310][T20286] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  860.534850][T20286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.582936][T20286] usb 6-1: Product: syz
[  860.604073][T20286] usb 6-1: Manufacturer: syz
[  860.621483][T20286] usb 6-1: SerialNumber: syz
[  860.726607][T27858] loop3: detected capacity change from 0 to 32768
[  860.748292][T27882] netlink: 'syz.2.10676': attribute type 3 has an invalid length.
[  860.777805][T27858] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  860.791928][T27858] BTRFS info (device loop3): using free space tree
[  860.802848][T27858] BTRFS info (device loop3): has skinny extents
[  860.818244][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10677'.
[  860.873679][ T4938] ocfs2: Unmounting device (7,4) on (node local)
[  860.986534][T20286] usb 6-1: 0:2 : does not exist
[  861.050627][T20286] usb 6-1: USB disconnect, device number 5
[  861.176307][T27915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10686'.
[  861.193945][T27915] tc_dump_action: action bad kind
[  861.296256][T27858] BTRFS info (device loop3): enabling ssd optimizations
[  861.331815][ T5390] udevd[5390]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  861.539011][T27940] netlink: 'syz.0.10691': attribute type 1 has an invalid length.
[  861.768262][    C1] vkms_vblank_simulate: vblank timer overrun
[  861.815754][T27952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10700'.
[  861.842658][T27954] loop5: detected capacity change from 0 to 1024
[  861.964910][T27954] hfsplus: invalid length 32517 has been corrected to 255
[  862.212352][T27969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10709'.
[  862.435846][T27984] xt_connbytes: Forcing CT accounting to be enabled
[  862.561199][T27994] loop5: detected capacity change from 0 to 256
[  862.577096][T27996] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10722'.
[  862.596906][T27998] IPv6: sit3: Disabled Multicast RS
[  862.622289][T27996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10722'.
[  862.632298][T27994] exfat: Deprecated parameter 'utf8'
[  862.670604][T27994] exfat: Deprecated parameter 'namecase'
[  862.707517][T27994] exfat: Deprecated parameter 'namecase'
[  862.714117][T27994] exfat: Deprecated parameter 'utf8'
[  862.778256][T27994] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  862.937126][T28020] netlink: 'syz.4.10734': attribute type 44 has an invalid length.
[  863.188575][T28040] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  863.318064][T28055] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  863.338105][   T23] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  863.470708][T20286] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  863.473489][T28064] cgroup: name respecified
[  863.588822][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  863.588838][   T26] audit: type=1400 audit(2000526025.619:42): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=28073 comm="syz.3.10757"
[  863.770940][T20286] usb 1-1: Using ep0 maxpacket: 16
[  863.771837][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  863.851391][   T23] usb 3-1: not running at top speed; connect to a high speed hub
[  863.910351][T20286] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  863.936940][   T23] usb 3-1: config 3 has an invalid interface number: 49 but max is 0
[  863.945168][   T23] usb 3-1: config 3 has no interface number 0
[  863.981957][   T23] usb 3-1: config 3 interface 49 altsetting 221 endpoint 0xB has an invalid bInterval 0, changing to 10
[  864.020207][   T23] usb 3-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  864.073902][   T23] usb 3-1: config 3 interface 49 altsetting 221 endpoint 0x8C has invalid wMaxPacketSize 0
[  864.110280][   T23] usb 3-1: config 3 interface 49 has no altsetting 0
[  864.156005][T20286] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  864.167780][T20286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.204016][T20286] usb 1-1: Product: syz
[  864.208260][T20286] usb 1-1: Manufacturer: syz
[  864.212874][T20286] usb 1-1: SerialNumber: syz
[  864.245871][T20286] usb 1-1: config 0 descriptor??
[  864.266726][T28120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  864.289597][   T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=33.bd
[  864.321907][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.330036][   T23] usb 3-1: Product: syz
[  864.365182][   T23] usb 3-1: Manufacturer: syz
[  864.380677][T28126] netlink: 'syz.4.10785': attribute type 2 has an invalid length.
[  864.382226][   T23] usb 3-1: SerialNumber: syz
[  864.432667][T28031] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  864.520105][T28136] netlink: 'syz.4.10790': attribute type 32 has an invalid length.
[  864.566868][T20286] usb 1-1: USB disconnect, device number 52
[  864.679726][T28146] netlink: 'syz.4.10794': attribute type 1 has an invalid length.
[  864.695956][T13673] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  864.761001][   T23] usb 3-1: USB disconnect, device number 54
[  865.080961][T13673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  865.113570][T13673] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  865.122671][T13673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.164020][T13673] usb 6-1: config 0 descriptor??
[  865.210649][T13673] option 6-1:0.0: GSM modem (1-port) converter detected
[  865.438514][T13673] usb 6-1: USB disconnect, device number 6
[  865.477080][T13673] option 6-1:0.0: device disconnected
[  865.504379][T28188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10815'.
[  865.709810][T28199] 9pnet: Could not find request transport: 0xffffffffffffffff
[  865.721808][T28201] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  865.775421][T28203] loop4: detected capacity change from 0 to 256
[  865.895734][T28209] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.10824'.
[  865.912270][T28203] FAT-fs (loop4): Directory bread(block 64) failed
[  865.926287][T28203] FAT-fs (loop4): Directory bread(block 65) failed
[  865.944216][T28203] FAT-fs (loop4): Directory bread(block 66) failed
[  865.958593][T28203] FAT-fs (loop4): Directory bread(block 67) failed
[  865.965351][T28203] FAT-fs (loop4): Directory bread(block 68) failed
[  865.976702][T28211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10825'.
[  865.987641][T28211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10825'.
[  865.998861][T28203] FAT-fs (loop4): Directory bread(block 69) failed
[  866.007710][T28203] FAT-fs (loop4): Directory bread(block 70) failed
[  866.038087][T28203] FAT-fs (loop4): Directory bread(block 71) failed
[  866.053605][T28203] FAT-fs (loop4): Directory bread(block 72) failed
[  866.085599][T20058] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  866.093558][T28203] FAT-fs (loop4): Directory bread(block 73) failed
[  866.192055][   T26] audit: type=1800 audit(2000526028.051:43): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10821" name="file1" dev="loop4" ino=1048673 res=0 errno=0
[  866.357825][T28232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10835'.
[  866.475889][T20058] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  866.499269][T20058] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  866.534220][T20058] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  866.582067][T20058] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  866.603958][T20058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.651568][T28254] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  866.703550][T28256] binder: 28255:28256 ioctl c0306201 2000000001c0 returned -14
[  866.712698][T20058] snd-usb-audio: probe of 3-1:27.0 failed with error -2
[  866.789323][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  866.968798][T20286] usb 3-1: USB disconnect, device number 55
[  867.100586][T28281] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10859'.
[  867.183574][T28287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10862'.
[  867.383205][T28303] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10870'.
[  867.658345][T20058] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  867.689498][T20286] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  867.820496][T28333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10885'.
[  867.889592][T28333] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  867.907517][T28333] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  867.934325][T28333] device bridge3 entered promiscuous mode
[  867.983031][T20286] usb 5-1: Using ep0 maxpacket: 8
[  868.052895][T20058] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  868.085008][T20058] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  868.111638][T20286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  868.116779][T20058] usb 4-1: config 2 interface 0 has no altsetting 0
[  868.147238][T20286] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEF, skipping
[  868.169474][T20286] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  868.320270][T20058] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  868.340467][T20058] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.352450][T20286] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  868.362148][T20058] usb 4-1: Product: syz
[  868.366509][T20058] usb 4-1: Manufacturer: syz
[  868.370288][T20286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  868.380080][T20058] usb 4-1: SerialNumber: syz
[  868.395293][T20286] usb 5-1: SerialNumber: syz
[  868.413876][T20286] usb 5-1: config 0 descriptor??
[  868.434999][T28335] loop2: detected capacity change from 0 to 32768
[  868.481440][T20286] hso 5-1:0.0: Can't find BULK IN endpoint
[  868.486037][T28335] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.10886 (28335)
[  868.521326][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10892'.
[  868.534571][T28335] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  868.571124][T28335] BTRFS info (device loop2): force zlib compression, level 3
[  868.592411][T28335] BTRFS info (device loop2): turning on flush-on-commit
[  868.602916][T28335] BTRFS info (device loop2): max_inline at 4096
[  868.620148][T28335] BTRFS info (device loop2): using free space tree
[  868.629024][T28335] BTRFS info (device loop2): has skinny extents
[  868.712831][ T4883] usb 5-1: USB disconnect, device number 69
[  868.730139][T28335] BTRFS info (device loop2): enabling ssd optimizations
[  868.742467][T20058] usb 4-1: USB disconnect, device number 71
[  869.424395][T28388] netlink: 'syz.3.10904': attribute type 3 has an invalid length.
[  869.521692][T28392] netlink: 'syz.3.10906': attribute type 10 has an invalid length.
[  869.552103][T28392] device bond0 entered promiscuous mode
[  869.557802][T28392] device bond_slave_0 entered promiscuous mode
[  869.576580][T28392] device bond_slave_1 entered promiscuous mode
[  869.590658][T28392] device wlan1 entered promiscuous mode
[  869.603269][T28392] bridge0: port 3(bond0) entered blocking state
[  869.620133][T28392] bridge0: port 3(bond0) entered disabled state
[  869.642373][T28392] bridge0: port 3(bond0) entered blocking state
[  869.648822][T28392] bridge0: port 3(bond0) entered forwarding state
[  869.721445][T28400] xt_cgroup: xt_cgroup: no path or classid specified
[  869.867936][T28408] loop5: detected capacity change from 0 to 1764
[  869.886132][T28412] unsupported nlmsg_type 40
[  870.060475][T28408] iso9660: Corrupted directory entry in block 2 of inode 1920
[  870.083542][T28426] openvswitch: netlink: Actions may not be safe on all matching packets
[  870.159389][T28429] ip6t_REJECT: ECHOREPLY is not supported
[  870.679116][T28454] loop3: detected capacity change from 0 to 164
[  870.765823][T28454] iso9660: Corrupted directory entry in block 2 of inode 1920
[  870.991501][T28432] loop2: detected capacity change from 0 to 32768
[  871.042295][T28432] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.10925 (28432)
[  871.101970][T28432] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  871.141983][T28432] BTRFS info (device loop2): enabling disk space caching
[  871.163028][T28432] BTRFS info (device loop2): force zlib compression, level 3
[  871.193616][T28432] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11
[  871.232560][T28432] BTRFS info (device loop2): setting nodatasum
[  871.250043][T28474] __nla_validate_parse: 5 callbacks suppressed
[  871.250064][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10945'.
[  871.266862][T28432] BTRFS info (device loop2): setting nodatacow
[  871.280292][T28432] BTRFS info (device loop2): enabling ssd optimizations
[  871.298162][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10945'.
[  871.307913][T28432] BTRFS info (device loop2): using spread ssd allocation scheme
[  871.325362][T28432] BTRFS error (device loop2): cannot disable free space tree
[  871.355470][T28432] BTRFS error (device loop2): open_ctree failed: -22
[  871.840044][T28507] netlink: 'syz.4.10961': attribute type 21 has an invalid length.
[  871.888741][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10961'.
[  871.953110][T28514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10964'.
[  872.005072][T28517] netlink: 'syz.3.10967': attribute type 1 has an invalid length.
[  872.063505][T28517] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10967'.
[  872.202929][ T4883] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  872.407856][T28546] loop4: detected capacity change from 0 to 64
[  872.421300][T28548] netlink: 'syz.5.10982': attribute type 3 has an invalid length.
[  872.447669][T28550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10983'.
[  872.474592][T28546] Trying to free block not in datazone
[  872.483356][T28546] Trying to free block not in datazone
[  872.499960][ T4883] usb 3-1: Using ep0 maxpacket: 32
[  872.510477][T28546] Trying to free block not in datazone
[  872.533878][T28546] Trying to free block not in datazone
[  872.552930][T28546] Trying to free block not in datazone
[  872.566490][T28546] minix_free_block (loop4:6): bit already cleared
[  872.585620][T28546] Trying to free block not in datazone
[  872.599414][T28546] Trying to free block not in datazone
[  872.650369][ T4883] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[  872.674871][ T4883] usb 3-1: config 0 has no interface number 0
[  872.691623][ T4883] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  872.723278][ T4883] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping
[  872.751010][T28558] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10988'.
[  872.762871][ T4883] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  872.799473][T28558] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10988'.
[  872.997435][ T4883] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  873.007105][T28566] tc_dump_action: action bad kind
[  873.016678][ T4883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.027359][ T4883] usb 3-1: Product: syz
[  873.034177][ T4883] usb 3-1: Manufacturer: syz
[  873.041569][ T4883] usb 3-1: SerialNumber: syz
[  873.078631][ T4883] usb 3-1: config 0 descriptor??
[  873.103964][T28570] 

: renamed from ipvlan0
[  873.124259][ T4883] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input59
[  873.384001][T28574] bridge0: port 1(bridge_slave_0) entered forwarding state
[  873.472372][ T4883] usb 3-1: USB disconnect, device number 56
[  873.574922][T28589] autofs4:pid:28589:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374)
[  873.653976][T28589] autofs4:pid:28589:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  873.717191][T28590] loop5: detected capacity change from 0 to 4096
[  873.765671][T28590] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  873.859371][T28604] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0
[  873.883776][T28604] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0
[  873.893425][T28604] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0
[  873.909960][T28604] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0
[  874.125957][T28616] netlink: 'syz.2.11016': attribute type 1 has an invalid length.
[  874.134201][T28616] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11016'.
[  874.330436][T28633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11022'.
[  874.524402][T28644] loop5: detected capacity change from 0 to 512
[  874.666317][T28644] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  874.753335][T28644] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.11028: bg 0: block 394: padding at end of block bitmap is not set
[  874.798589][T20056] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  874.821735][T28644] Quota error (device loop5): write_blk: dquota write failed
[  874.829965][T28644] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  874.848426][T28644] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  874.860908][T28644] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.11028: Failed to acquire dquot type 1
[  874.948290][ T4883] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  875.065717][T20056] usb 3-1: Using ep0 maxpacket: 32
[  875.076577][T20058] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  875.194106][T20056] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  875.202166][T20056] usb 3-1: config 0 has no interface number 0
[  875.279845][T28667] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  875.386509][T20056] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  875.395592][T20056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.407883][ T4883] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  875.420090][T28669] loop5: detected capacity change from 0 to 4096
[  875.427904][ T4883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  875.431103][T20056] usb 3-1: Product: syz
[  875.438871][ T4883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  875.447536][T20056] usb 3-1: Manufacturer: syz
[  875.456521][T20056] usb 3-1: SerialNumber: syz
[  875.461789][T20058] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.473550][T20058] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  875.487838][T20056] usb 3-1: config 0 descriptor??
[  875.516263][ T4883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.527529][T20056] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  875.537472][ T4883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.551694][T20056] usb 3-1: selecting invalid altsetting 1
[  875.559903][T20056] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  875.564321][T28669] ntfs: (device loop5): parse_options(): NLS character set is not found. Using previous one default.
[  875.578960][T28669] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  875.597075][T20056] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  875.636016][T28669] ntfs: volume version 3.1.
[  875.645371][T20056] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  875.654644][T20058] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  875.669823][T20058] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.678810][T20058] usb 4-1: Product: syz
[  875.683236][T20058] usb 4-1: Manufacturer: syz
[  875.693929][T20056] usb 3-1: media controller created
[  875.700910][T20058] usb 4-1: SerialNumber: syz
[  875.708218][ T4883] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  875.739066][ T4883] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  875.747696][T20056] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  875.761109][T20058] cdc_ncm 4-1:1.0: skipping garbage
[  875.764463][T28678] loop4: detected capacity change from 0 to 512
[  875.766422][T20058] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing
[  875.777128][ T4883] usb 1-1: Product: syz
[  875.785860][ T4883] usb 1-1: Manufacturer: syz
[  875.792699][T20058] cdc_ncm 4-1:1.0: bind() failure
[  875.818769][T20058] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  875.844947][T28678] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  875.848501][T20058] cdc_ncm 4-1:1.1: bind() failure
[  875.853527][ T4883] cdc_wdm 1-1:1.0: skipping garbage
[  875.867430][ T4883] cdc_wdm 1-1:1.0: skipping garbage
[  875.929513][T28678] EXT4-fs (loop4): orphan cleanup on readonly fs
[  875.943632][T28678] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  875.946994][ T4883] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  875.962323][T28678] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.11043: attempt to clear invalid blocks 2 len 1
[  875.962460][ T4883] cdc_wdm 1-1:1.0: Unknown control protocol
[  875.987953][T28678] EXT4-fs (loop4): Remounting filesystem read-only
[  875.994912][T28678] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  876.004341][ T4879] usb 4-1: USB disconnect, device number 72
[  876.042545][T28685] netlink: 'syz.5.11046': attribute type 3 has an invalid length.
[  876.043448][T28678] EXT4-fs (loop4): Remounting filesystem read-only
[  876.102443][T28678] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.11043: invalid indirect mapped block 1819239214 (level 0)
[  876.156389][T20056] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  876.171850][T28678] EXT4-fs (loop4): Remounting filesystem read-only
[  876.187207][T28678] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.11043: invalid indirect mapped block 1819239214 (level 1)
[  876.209850][T28678] EXT4-fs (loop4): Remounting filesystem read-only
[  876.211579][T28654] cdc_wdm 1-1:1.0: Error submitting int urb - -90
[  876.217135][T28678] EXT4-fs (loop4): 1 truncate cleaned up
[  876.232198][T20056] usb 3-1: USB disconnect, device number 57
[  876.238882][T28689] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  876.254222][T28678] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback.
[  876.325210][   T23] usb 1-1: USB disconnect, device number 53
[  876.514373][T28696] 
 (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  876.606834][T28700] loop3: detected capacity change from 0 to 1024
[  876.635262][T28702] mmap: syz.5.11054 (28702): VmData 175874048 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[  876.688529][T28700] EXT4-fs (loop3): Ignoring removed oldalloc option
[  876.726070][T28700] EXT4-fs (loop3): Ignoring removed bh option
[  876.732479][T28700] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  876.810190][T28700] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  877.212270][T28743] __nla_validate_parse: 3 callbacks suppressed
[  877.212288][T28743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11073'.
[  877.254883][T28743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11073'.
[  877.437372][T28763] openvswitch: netlink: Actions may not be safe on all matching packets
[  877.523496][T28768] netlink: 'syz.2.11086': attribute type 1 has an invalid length.
[  877.550170][T28772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11088'.
[  877.613692][T28775] loop5: detected capacity change from 0 to 2048
[  877.696368][T28775] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  877.744087][T28783] openvswitch: netlink: Key type 81 is out of range max 29
[  877.758971][T28782] loop4: detected capacity change from 0 to 1024
[  877.781171][T28784] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  877.816876][T28786] ecryptfs_parse_options: eCryptfs: unrecognized option [&@]
[  877.842784][T28786] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  877.886769][T28786] Error parsing options; rc = [-22]
[  877.974105][T28788] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  878.050620][  T144] hfsplus: b-tree write err: -5, ino 25
[  878.060666][  T144] hfsplus: b-tree write err: -5, ino 4
[  878.081265][  T144] hfsplus: b-tree write err: -5, ino 2
[  878.242615][T28798] loop4: detected capacity change from 0 to 128
[  878.325049][T28798] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  878.581828][T28814] loop5: detected capacity change from 0 to 512
[  878.614326][T28815] libceph: resolve '.
[  878.614326][T28815] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  878.614326][T28815] ' (ret=-3): failed
[  878.786709][T28814] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  878.839442][T28814] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  878.847836][T28814] System zones: 0-1, 15-15, 18-18, 34-34
[  878.883844][T28814] EXT4-fs (loop5): orphan cleanup on readonly fs
[  878.890676][T28814] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  878.903139][T28814] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  878.918444][T28814] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  878.969680][T28814] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.11107: bad orphan inode 16
[  879.020162][T28814] ext4_test_bit(bit=15, block=18) = 1
[  879.043122][T28814] is_bad_inode(inode)=0
[  879.059798][T28814] NEXT_ORPHAN(inode)=0
[  879.085355][T28814] max_ino=32
[  879.092459][T28814] i_nlink=2
[  879.095703][T28814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  879.195042][T28814] fscrypt (loop5, inode 16): Error -61 getting encryption context
[  879.231869][T28850] loop3: detected capacity change from 0 to 2048
[  879.336776][    C1] vkms_vblank_simulate: vblank timer overrun
[  879.438647][T28850] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  879.530136][T28873] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  879.752488][T28850] attempt to access beyond end of device
[  879.752488][T28850] loop3: rw=0, want=262218, limit=2048
[  879.808180][T28850] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1)
[  879.932956][T28893] netlink: 'syz.0.11145': attribute type 2 has an invalid length.
[  879.962045][T28893] netlink: 'syz.0.11145': attribute type 1 has an invalid length.
[  880.180192][T28905] netlink: 'syz.3.11148': attribute type 5 has an invalid length.
[  880.186712][   T23] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  880.206736][T28907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11153'.
[  880.228705][T28907] netlink: 17 bytes leftover after parsing attributes in process `syz.5.11153'.
[  880.421997][ T4879] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  880.510131][T28925] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11161'.
[  880.603667][   T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  880.625652][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  880.672259][T28928] loop5: detected capacity change from 0 to 8192
[  880.714309][T28928] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  880.735168][T28928] REISERFS (device loop5): using ordered data mode
[  880.742907][T28928] reiserfs: using flush barriers
[  880.762207][T28928] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  880.790602][T28928] REISERFS (device loop5): checking transaction log (loop5)
[  880.796202][   T23] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  880.810022][T28928] REISERFS (device loop5): Using r5 hash to sort names
[  880.813743][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.825622][   T23] usb 5-1: Product: syz
[  880.828820][T28928] REISERFS (device loop5): using 3.5.x disk format
[  880.830285][   T23] usb 5-1: Manufacturer: syz
[  880.839843][T28928] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  880.841214][   T23] usb 5-1: SerialNumber: syz
[  880.866291][   T23] usb 5-1: config 0 descriptor??
[  880.916255][   T23] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  880.941675][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  880.979193][   T23] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  880.988569][   T23] usb 5-1: media controller created
[  881.007714][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  881.058132][   T23] DVB: Unable to find symbol tda10046_attach()
[  881.065064][   T23] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  881.074418][   T23] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  881.099918][ T4879] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  881.116547][ T4879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.124691][ T4879] usb 3-1: Product: syz
[  881.137923][ T4879] usb 3-1: Manufacturer: syz
[  881.142607][ T4879] usb 3-1: SerialNumber: syz
[  881.162127][ T4879] usb 3-1: config 0 descriptor??
[  881.205189][ T4879] rndis_wlan 3-1:0.0: More than one union descriptor, skipping ...
[  881.223459][ T4879] usb 3-1: bad CDC descriptors
[  881.230423][ T4879] rndis_host 3-1:0.0: More than one union descriptor, skipping ...
[  881.244866][ T4879] usb 3-1: bad CDC descriptors
[  881.250971][ T4879] cdc_acm 3-1:0.0: More than one union descriptor, skipping ...
[  881.386171][   T23] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71
[  881.412855][   T23] usb 5-1: USB disconnect, device number 70
[  881.462538][ T4879] usb 3-1: USB disconnect, device number 58
[  881.648047][T28940] netlink: 11 bytes leftover after parsing attributes in process `syz.0.11168'.
[  882.306885][T28975] loop5: detected capacity change from 0 to 4096
[  882.482677][T28958] loop3: detected capacity change from 0 to 32768
[  882.847330][T29019] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave
[  882.890867][T29019] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0)
[  882.949467][T29025] xt_NFQUEUE: number of total queues is 0
[  883.291699][T29042] loop5: detected capacity change from 0 to 512
[  883.345602][T29048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11220'.
[  883.417196][T29042] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  883.474159][T29042] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  883.516736][T29042] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  883.581682][T29042] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  883.599834][T29042] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000]
[  883.615464][T29065] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11228'.
[  883.635109][T29050] loop4: detected capacity change from 0 to 4096
[  883.661269][T29042] EXT4-fs (loop5): failed to initialize system zone (-117)
[  883.668661][T29042] EXT4-fs (loop5): mount failed
[  883.720717][T29050] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  883.866141][T29050] ntfs3: loop4: failed to convert "c46c" to cp866
[  884.100255][T29091] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11239'.
[  884.640816][T29123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11256'.
[  884.806118][T29134] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç!Q�öì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 29134 comm: syz.5.11261)
[  884.821042][ T4883] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  884.828711][T20286] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  884.836341][   T26] audit: type=1800 audit(861.543:44): pid=29134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11261" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=106686 res=0 errno=0
[  884.931325][T29145] loop3: detected capacity change from 0 to 64
[  885.053002][T29154] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11270'.
[  885.079941][T29154] device hsr_slave_0 left promiscuous mode
[  885.092038][T29154] device hsr_slave_1 left promiscuous mode
[  885.170413][T20286] usb 1-1: Using ep0 maxpacket: 8
[  885.329086][T20286] usb 1-1: config 0 interface 0 has no altsetting 0
[  885.336011][ T4883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  885.356873][ T4883] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  885.377635][ T4883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.419873][ T4883] usb 3-1: config 0 descriptor??
[  885.448480][T29175] loop3: detected capacity change from 0 to 64
[  885.469353][ T4883] usb 3-1: bad CDC descriptors
[  885.481800][ T4883] usb 3-1: bad CDC descriptors
[  885.532167][T20286] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  885.552177][T20286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.564053][T20286] usb 1-1: Product: syz
[  885.568577][T20286] usb 1-1: Manufacturer: syz
[  885.602455][T29188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11286'.
[  885.605777][T20286] usb 1-1: SerialNumber: syz
[  885.639506][T20286] usb 1-1: config 0 descriptor??
[  885.686590][ T4883] usb 3-1: USB disconnect, device number 59
[  885.716672][T20286] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  885.969985][T20286] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  885.997799][T20286] snd_usb_toneport: probe of 1-1:0.0 failed with error -22
[  886.183537][T29219] xt_l2tp: v2 sid > 0xffff: 262144
[  886.191339][ T4883] usb 1-1: USB disconnect, device number 54
[  886.400762][T29213] loop5: detected capacity change from 0 to 32768
[  886.407344][   T26] audit: type=1400 audit(863.011:45): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=29228 comm="syz.3.11307"
[  886.425689][ T6619] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  886.552098][T29213] XFS (loop5): Mounting V5 Filesystem
[  886.619084][T29250] loop3: detected capacity change from 0 to 128
[  886.675262][T29250] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  886.697408][ T6619] usb 5-1: Using ep0 maxpacket: 8
[  886.709281][T29250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  886.771643][T29254] Cannot find del_set index 3 as target
[  886.868210][ T6619] usb 5-1: unable to get BOS descriptor or descriptor too short
[  886.898418][T29213] XFS (loop5): Ending clean mount
[  886.954013][ T6619] usb 5-1: config 8 has an invalid interface number: 134 but max is 0
[  886.962255][ T6619] usb 5-1: config 8 has no interface number 0
[  886.989706][T24998] XFS (loop5): Unmounting Filesystem
[  887.026962][ T6619] usb 5-1: config 8 interface 134 has no altsetting 0
[  887.123271][T29268] xt_hashlimit: max too large, truncated to 1048576
[  887.242786][ T6619] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=36.c5
[  887.252068][ T6619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.266324][ T6619] usb 5-1: Product: syz
[  887.270540][ T6619] usb 5-1: Manufacturer: syz
[  887.289613][ T6619] usb 5-1: SerialNumber: syz
[  887.355524][T29280] loop2: detected capacity change from 0 to 64
[  887.411996][T29286] device geneve2 entered promiscuous mode
[  887.605957][T20286] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  887.678486][ T6619] as10x_usb: device has been detected
[  887.702390][ T6619] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  887.712777][T29295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11322'.
[  887.719606][T29296] loop3: detected capacity change from 0 to 8
[  887.760264][ T6619] usb 5-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))...
[  887.777625][ T6619] as10x_usb: error during firmware upload part1
[  887.807508][ T6619] Registered device PCTV Systems picoStick (74e)
[  887.817453][ T6619] usb 5-1: USB disconnect, device number 71
[  887.848077][T29296] SQUASHFS error: Unable to read inode 0x9
[  887.874065][ T6619] Unregistered device PCTV Systems picoStick (74e)
[  887.875341][ T6619] as10x_usb: device has been disconnected
[  887.894591][T20286] usb 1-1: Using ep0 maxpacket: 16
[  888.032820][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11342'.
[  888.059342][T20286] usb 1-1: config 0 has no interfaces?
[  888.136135][T29314] netlink: 'syz.5.11344': attribute type 4 has an invalid length.
[  888.269169][T20286] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  888.278274][T20286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.325072][T20286] usb 1-1: Product: syz
[  888.329295][T20286] usb 1-1: Manufacturer: syz
[  888.384690][T20286] usb 1-1: SerialNumber: syz
[  888.394912][T20286] r8152-cfgselector 1-1: config 0 descriptor??
[  888.460281][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11354'.
[  888.667498][T29351] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11361'.
[  888.712616][T29354] netlink: 180 bytes leftover after parsing attributes in process `syz.5.11363'.
[  888.729985][T20286] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  888.776143][ T4883] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  888.930958][T29369] binfmt_misc: register: failed to install interpreter file ./file0
[  888.950588][ T4879] usb 1-1: USB disconnect, device number 55
[  889.056045][T29380] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.11377'.
[  889.424572][ T4883] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  889.447888][ T4883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.460666][ T4883] usb 3-1: Product: syz
[  889.464879][ T4883] usb 3-1: Manufacturer: syz
[  889.476385][ T4883] usb 3-1: SerialNumber: syz
[  889.504568][T29413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11392'.
[  889.546829][ T4883] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  889.551561][T29413] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11392'.
[  889.594325][T29416] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11395'.
[  889.604085][T29416] device hsr_slave_0 left promiscuous mode
[  889.689816][T29416] device hsr_slave_1 left promiscuous mode
[  889.956181][T29437] QAT: Invalid ioctl 1075883590
[  889.962525][T29442] netlink: 'syz.0.11407': attribute type 4 has an invalid length.
[  889.974348][T29442] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.11407'.
[  889.979251][T29437] QAT: Invalid ioctl 1075883590
[  890.017353][T29437] QAT: Invalid ioctl 1075883590
[  890.037518][T29437] QAT: Invalid ioctl 1075883590
[  890.053543][T29437] QAT: Invalid ioctl 1075883590
[  890.069874][T29437] QAT: Invalid ioctl 1075883590
[  890.074905][T29437] QAT: Invalid ioctl 1075883590
[  890.111507][T29437] QAT: Invalid ioctl 1075883590
[  890.125834][T29437] QAT: Invalid ioctl 1075883590
[  890.155812][T29437] QAT: Invalid ioctl 1075883590
[  890.249192][T29460] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11416'.
[  890.273089][ T4879] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  890.283184][T29460] device hsr_slave_0 left promiscuous mode
[  890.309932][T29460] device hsr_slave_1 left promiscuous mode
[  890.361610][T29466] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  890.476344][T29474] sctp: [Deprecated]: syz.4.11423 (pid 29474) Use of int in maxseg socket option.
[  890.476344][T29474] Use struct sctp_assoc_value instead
[  890.524343][T20286] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  890.609277][T29483] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11426'.
[  890.686868][T29488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11430'.
[  890.696343][T29488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11430'.
[  890.764023][T20056] usb 3-1: USB disconnect, device number 60
[  890.823818][T20286] usb 4-1: Using ep0 maxpacket: 16
[  891.005803][T20286] usb 4-1: unable to get BOS descriptor or descriptor too short
[  891.121501][T20286] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  891.142861][T20286] usb 4-1: config 12 has 0 interfaces, different from the descriptor's value: 1
[  891.242114][T29527] loop4: detected capacity change from 0 to 64
[  891.251691][ T6619] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  891.333580][T29527] hfs: filesystem is marked locked, mounting read-only.
[  891.376182][T29527] hfs: filesystem is marked locked, leaving read-only.
[  891.385062][T20286] usb 4-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=d4.d0
[  891.405779][T20286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.423862][T20286] usb 4-1: Product: syz
[  891.439690][ T4879] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  891.454517][T20286] usb 4-1: Manufacturer: syz
[  891.457680][T29538] loop2: detected capacity change from 0 to 256
[  891.459169][T20286] usb 4-1: SerialNumber: syz
[  891.470526][ T4879] ath9k_htc: Failed to initialize the device
[  891.485429][T20056] usb 3-1: ath9k_htc: USB layer deinitialized
[  891.518748][ T6619] usb 1-1: Using ep0 maxpacket: 8
[  891.540467][T29542] netlink: 'syz.4.11456': attribute type 3 has an invalid length.
[  891.614298][T29546] netlink: 'syz.4.11460': attribute type 1 has an invalid length.
[  891.635063][T29546] netlink: 'syz.4.11460': attribute type 3 has an invalid length.
[  891.643979][T29548] device hsr_slave_0 left promiscuous mode
[  891.653469][T29548] device hsr_slave_1 left promiscuous mode
[  891.674283][T29538] FAT-fs (loop2): Directory bread(block 64) failed
[  891.682176][T29538] FAT-fs (loop2): Directory bread(block 65) failed
[  891.689015][T29538] FAT-fs (loop2): Directory bread(block 66) failed
[  891.696947][T29538] FAT-fs (loop2): Directory bread(block 67) failed
[  891.743044][T29538] FAT-fs (loop2): Directory bread(block 68) failed
[  891.767523][T29538] FAT-fs (loop2): Directory bread(block 69) failed
[  891.774648][T29538] FAT-fs (loop2): Directory bread(block 70) failed
[  891.782529][T29538] FAT-fs (loop2): Directory bread(block 71) failed
[  891.794804][T29538] FAT-fs (loop2): Directory bread(block 72) failed
[  891.802620][T29538] FAT-fs (loop2): Directory bread(block 73) failed
[  891.818694][ T6619] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  891.827785][ T6619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.882487][ T6619] usb 1-1: Product: syz
[  891.886696][ T6619] usb 1-1: Manufacturer: syz
[  891.891524][ T6619] usb 1-1: SerialNumber: syz
[  891.936754][ T6619] usb 1-1: config 0 descriptor??
[  892.026414][T20286] apple-mfi-fastcharge 4-1: USB disconnect, device number 73
[  892.071600][T29556] loop5: detected capacity change from 0 to 2048
[  892.078577][T29558] device veth1 entered promiscuous mode
[  892.139609][T29556] UDF-fs: bad mount option "shortan$uid½forget" or missing value
[  892.213584][ T6619] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  892.241423][T29556] cifs: Unknown parameter 'anchor'
[  892.448757][ T6619] usb write operation failed. (-71)
[  892.477446][ T6619] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  892.499597][T29586] device bridge6 entered promiscuous mode
[  892.523821][ T6619] dvbdev: DVB: registering new adapter (Terratec H7)
[  892.530643][ T6619] usb 1-1: media controller created
[  892.587795][ T6619] usb read operation failed. (-71)
[  892.616762][ T6619] usb write operation failed. (-71)
[  892.639607][T29592] openvswitch: netlink: Missing key (keys=40, expected=80)
[  892.643268][ T6619] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5
[  892.672184][T29596] netlink: 'syz.4.11484': attribute type 2 has an invalid length.
[  892.692004][ T6619] usb 1-1: USB disconnect, device number 56
[  892.785785][T29604] xt_limit: Overflow, try lower: 2147483649/3300
[  892.811033][T29606] netlink: zone id is out of range
[  892.856653][T29606] netlink: zone id is out of range
[  892.861853][T29606] netlink: zone id is out of range
[  892.874434][T29606] netlink: zone id is out of range
[  892.885257][T29606] netlink: zone id is out of range
[  892.896752][T29606] netlink: zone id is out of range
[  892.943141][T29606] netlink: zone id is out of range
[  892.994155][T29606] netlink: zone id is out of range
[  893.212106][   T26] audit: type=1400 audit(869.381:46): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=29628 comm="syz.0.11500"
[  893.436439][T29631] loop3: detected capacity change from 0 to 4096
[  893.769386][T20286] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  893.841679][T29667] JFS: discard option not supported on device
[  893.881229][T29667] Mount JFS Failure: -22
[  893.885542][T29667] jfs_mount failed w/return code = -22
[  893.928175][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  894.012339][T29631] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  894.154547][T29631] ntfs3: loop3: ino=5, "/" directory corrupted
[  894.175872][T29631] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  894.191617][T20286] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  894.243619][T20286] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  894.274182][T20286] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  894.469480][T20286] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  894.478688][T20286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  894.507579][T20286] usb 3-1: SerialNumber: syz
[  894.814195][T20286] usbtest 3-1:1.0: couldn't get endpoints, -22
[  894.827798][T20286] usbtest: probe of 3-1:1.0 failed with error -22
[  894.843868][T20286] usb 3-1: USB disconnect, device number 61
[  894.969768][ T4883] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[  895.254358][T29752] netlink: 'syz.4.11561': attribute type 12 has an invalid length.
[  895.279706][T29752] __nla_validate_parse: 10 callbacks suppressed
[  895.279809][T29752] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.11561'.
[  895.396588][ T4883] usb 4-1: config 0 has an invalid interface number: 104 but max is 1
[  895.410774][ T4883] usb 4-1: config 0 has an invalid interface number: 104 but max is 1
[  895.430069][ T4883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  895.462504][ T4883] usb 4-1: config 0 has no interface number 0
[  895.482841][ T4883] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64
[  895.496979][ T4883] usb 4-1: config 0 interface 104 has no altsetting 1
[  895.677440][ T4883] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  895.690745][ T4883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.702224][T20286] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  895.711100][ T4883] usb 4-1: Product: syz
[  895.715455][ T4883] usb 4-1: Manufacturer: syz
[  895.731807][ T4883] usb 4-1: SerialNumber: syz
[  895.738366][ T4883] usb 4-1: config 0 descriptor??
[  895.785837][ T4883] asix: probe of 4-1:0.104 failed with error -22
[  895.924710][T29785] loop2: detected capacity change from 0 to 32768
[  895.965960][T20058] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  896.009538][T20056] usb 4-1: USB disconnect, device number 74
[  896.023367][T29785] JBD2: Ignoring recovery information on journal
[  896.087472][T29785] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  896.145832][ T4935] ocfs2: Unmounting device (7,2) on (node local)
[  896.147848][T20286] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.222387][T20058] usb 5-1: Using ep0 maxpacket: 32
[  896.304667][T29789] loop2: detected capacity change from 0 to 64
[  896.350818][T20058] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  896.359061][T20058] usb 5-1: config 0 has no interface number 0
[  896.374947][T20286] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  896.381019][T20058] usb 5-1: config 0 interface 132 has no altsetting 0
[  896.396734][T20286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.405000][T20286] usb 6-1: Product: syz
[  896.411069][T20286] usb 6-1: Manufacturer: syz
[  896.417322][T20286] usb 6-1: SerialNumber: syz
[  896.434232][T20286] usb 6-1: config 0 descriptor??
[  896.484613][T20286] redrat3 6-1:0.0: Couldn't find all endpoints
[  896.539268][T29793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11580'.
[  896.565661][T20058] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75
[  896.608634][T20058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.616816][T20058] usb 5-1: Product: syz
[  896.623267][T29797] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  896.652780][T20058] usb 5-1: Manufacturer: syz
[  896.657419][T20058] usb 5-1: SerialNumber: syz
[  896.682623][T20058] usb 5-1: config 0 descriptor??
[  896.721797][ T4882] usb 6-1: USB disconnect, device number 7
[  896.725779][T29803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11585'.
[  896.749768][T29803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11585'.
[  896.768212][T29803] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11585'.
[  896.970890][T20058] cdc_subset: probe of 5-1:0.132 failed with error -71
[  896.996211][T29823] x_tables: unsorted entry at hook 1
[  897.004346][T20058] usb 5-1: USB disconnect, device number 72
[  897.050096][T29825] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.076498][T29825] net_ratelimit: 336 callbacks suppressed
[  897.076515][T29825] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  897.191764][T29834] netlink: 'syz.3.11599': attribute type 1 has an invalid length.
[  897.204146][T29834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11599'.
[  897.449615][T29848] netlink: 280 bytes leftover after parsing attributes in process `syz.5.11607'.
[  897.602025][T29856] netlink: 'syz.3.11610': attribute type 1 has an invalid length.
[  897.639987][T29856] netlink: 'syz.3.11610': attribute type 3 has an invalid length.
[  897.659384][T29856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11610'.
[  897.720775][T29835] loop2: detected capacity change from 0 to 32768
[  897.868789][ T4882] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  897.903821][T29835] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11601 (29835)
[  897.962275][T29835] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  897.985974][T29835] BTRFS info (device loop2): using free space tree
[  898.012662][T29835] BTRFS info (device loop2): has skinny extents
[  898.125556][ T4882] usb 6-1: Using ep0 maxpacket: 16
[  898.171030][T29888] netlink: 'syz.3.11622': attribute type 1 has an invalid length.
[  898.323091][T29835] BTRFS info (device loop2): enabling ssd optimizations
[  898.457025][ T4882] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  898.477639][ T4882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.493029][T29904] loop3: detected capacity change from 0 to 1024
[  898.495123][ T4882] usb 6-1: Product: syz
[  898.523456][ T4882] usb 6-1: Manufacturer: syz
[  898.528104][ T4882] usb 6-1: SerialNumber: syz
[  898.559214][ T4882] usb 6-1: config 0 descriptor??
[  898.629469][ T4882] ums-onetouch 6-1:0.0: USB Mass Storage device detected
[  898.897245][T19776] usb 6-1: USB disconnect, device number 8
[  899.066688][T29929] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  899.383821][T29954] netlink: 'syz.4.11650': attribute type 21 has an invalid length.
[  899.408222][T29954] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11650'.
[  899.445528][T13673] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  899.482047][T29958] loop3: detected capacity change from 0 to 64
[  899.488690][T29954] netlink: 'syz.4.11650': attribute type 5 has an invalid length.
[  899.523576][T29954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11650'.
[  899.634120][T29960] loop5: detected capacity change from 0 to 4096
[  899.711538][T13673] usb 3-1: Using ep0 maxpacket: 16
[  899.782832][T29960] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  899.840122][T29960] ntfs3: loop5: ntfs_set_state r=3 failed, -22.
[  899.857408][T13673] usb 3-1: config index 0 descriptor too short (expected 176, got 162)
[  899.873818][T13673] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  899.916116][T13673] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  899.947589][T13673] usb 3-1: config 1 interface 0 has no altsetting 0
[  899.975277][  T144] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22.
[  899.982174][T24998] ntfs3: loop5: ntfs_set_state r=3 failed, -22.
[  899.996188][T24998] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  900.026788][T24998] ntfs3: loop5: ntfs_set_state r=3 failed, -22.
[  900.041327][  T145] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22.
[  900.055988][T24998] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22.
[  900.138779][T13673] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  900.167292][T13673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.175540][T13673] usb 3-1: Product: syz
[  900.211857][T13673] usb 3-1: Manufacturer: syz
[  900.226270][T13673] usb 3-1: SerialNumber: syz
[  900.263304][T29996] netlink: 'syz.4.11670': attribute type 3 has an invalid length.
[  900.314831][T29994] loop5: detected capacity change from 0 to 512
[  900.445330][T29994] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5
[  900.445330][T29994] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  900.445330][T29994] 
[  900.494436][T29994] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  900.583300][T29994] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000]
[  900.606399][T13673] usb 3-1: 0:2 : does not exist
[  900.703208][T29994] EXT4-fs (loop5): 1 truncate cleaned up
[  900.709004][T29994] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  900.767231][ T1406] Quota error (device loop5): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[  900.819558][T13673] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  900.828638][ T1406] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 1
[  900.863378][T13673] usb 3-1: USB disconnect, device number 62
[  901.023927][ T1406] Quota error (device loop5): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[  901.045213][ T1406] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 1
[  901.123937][T30035] overlayfs: bad mount option "redirect_dir=on:/"
[  901.174893][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  901.270726][T30047] No such timeout policy "syz1"
[  901.398491][T30054] __nla_validate_parse: 1 callbacks suppressed
[  901.398514][T30054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11697'.
[  901.482542][T30054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11697'.
[  901.778626][T30077] IPv6: NLM_F_CREATE should be specified when creating new route
[  901.801453][T30077] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11709'.
[  902.006568][T19776] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  902.016830][T30055] loop3: detected capacity change from 0 to 32768
[  902.017147][T30089] loop4: detected capacity change from 0 to 4096
[  902.049976][T30055] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.11698 (30055)
[  902.064724][T30055] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  902.064801][T30055] BTRFS info (device loop3): using free space tree
[  902.064820][T30055] BTRFS info (device loop3): has skinny extents
[  902.174592][T30055] BTRFS info (device loop3): enabling ssd optimizations
[  902.177233][T30089] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  902.177825][T30089] ntfs3: loop4: Failed to load $Extend.
[  902.261635][ T4938] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22.
[  902.262259][ T4938] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22.
[  902.289815][T19776] usb 3-1: Using ep0 maxpacket: 8
[  902.480207][T30122] netlink: 220 bytes leftover after parsing attributes in process `syz.5.11723'.
[  902.610063][T30126] netlink: 'syz.5.11725': attribute type 1 has an invalid length.
[  902.627837][T30126] netlink: 'syz.5.11725': attribute type 1 has an invalid length.
[  902.636036][T30126] netlink: 'syz.5.11725': attribute type 1 has an invalid length.
[  902.675216][T19776] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  902.685078][T19776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.693962][T19776] usb 3-1: Product: syz
[  902.698561][T19776] usb 3-1: Manufacturer: syz
[  902.709894][T19776] usb 3-1: SerialNumber: syz
[  902.974249][T30128] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  902.993339][T30128] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  902.997573][T30130] loop5: detected capacity change from 0 to 256
[  903.008637][T30132] loop4: detected capacity change from 0 to 128
[  903.085839][T20050] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  903.269954][  T264] block nbd5: Attempted send on invalid socket
[  903.276275][  T264] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  903.287896][T19776] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  903.298882][T19776] mxuport: probe of 3-1:254.0 failed with error -5
[  903.308728][T19776] usb 3-1: USB disconnect, device number 63
[  903.320367][T30143] XFS (nbd5): SB validate failed with error -5.
[  903.342359][T20050] usb 1-1: Using ep0 maxpacket: 16
[  903.652695][T20050] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  903.674166][T20050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.682450][T20050] usb 1-1: Product: syz
[  903.688181][T20050] usb 1-1: Manufacturer: syz
[  903.692800][T20050] usb 1-1: SerialNumber: syz
[  903.706762][T20050] usb 1-1: config 0 descriptor??
[  903.750661][T20050] gspca_main: spca508-2.14.0 probing 041e:4018
[  903.889882][T30174] x_tables: ip_tables: osf match: only valid for protocol 6
[  904.059142][T30189] tmpfs: Bad value for 'mpol'
[  904.209422][T20050] gspca_spca508: reg_read err -71
[  904.226736][T30202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11759'.
[  904.236390][T20050] gspca_spca508: reg_read err -71
[  904.272555][T20050] gspca_spca508: reg_read err -71
[  904.295058][T20050] gspca_spca508: reg_read err -71
[  904.315449][T20050] gspca_spca508: reg write: error -71
[  904.320924][T20050] spca508: probe of 1-1:0.0 failed with error -71
[  904.322873][T30212] netlink: 'syz.4.11764': attribute type 7 has an invalid length.
[  904.363073][T20050] usb 1-1: USB disconnect, device number 57
[  904.425366][T30217] netlink: 256 bytes leftover after parsing attributes in process `syz.5.11767'.
[  904.450716][T30217] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  904.642719][T30235] trusted_key: encrypted_key: keylen parameter is missing
[  905.151429][T30277] rtc_cmos 00:00: Alarms can be up to one day in the future
[  905.234578][T20056] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  905.491381][T20056] usb 5-1: Using ep0 maxpacket: 16
[  905.619792][T20056] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  905.688181][T20056] usb 5-1: config 0 has no interface number 0
[  905.698796][T20056] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  905.741551][T20056] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  905.829750][T30319] netlink: 'syz.5.11817': attribute type 1 has an invalid length.
[  905.873557][T30323] netlink: 'syz.2.11820': attribute type 1 has an invalid length.
[  905.887100][T30323] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11820'.
[  905.906777][T30323] NCSI netlink: No device for ifindex 0
[  905.929880][T20056] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  905.939025][T20056] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  905.975658][T20056] usb 5-1: Product: syz
[  905.989346][T20056] usb 5-1: SerialNumber: syz
[  906.013098][T20056] usb 5-1: config 0 descriptor??
[  906.045678][T30334] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  906.055764][T30334] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  906.081319][T20056] cm109 5-1:0.8: invalid payload size 0, expected 4
[  906.111295][T30334] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  906.132618][T20056] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input62
[  906.138131][T30334] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  906.184726][T30334] device geneve2 entered promiscuous mode
[  906.204768][T19776] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  906.367937][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  906.458862][T30356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  906.466244][T30356] IPv6: NLM_F_CREATE should be set when creating new route
[  906.473578][T30356] IPv6: NLM_F_CREATE should be set when creating new route
[  906.598635][T19776] usb 5-1: USB disconnect, device number 73
[  906.635875][T19776] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  906.710115][T20056] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  906.875950][T30385] netlink: 'syz.0.11849': attribute type 5 has an invalid length.
[  906.885693][T30385] netlink: 'syz.0.11849': attribute type 11 has an invalid length.
[  906.977333][T20056] usb 3-1: Using ep0 maxpacket: 16
[  907.276753][T20056] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  907.291444][T20056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.307160][T20056] usb 3-1: Product: syz
[  907.324926][T20056] usb 3-1: Manufacturer: syz
[  907.329622][T20056] usb 3-1: SerialNumber: syz
[  907.361599][T20056] usb 3-1: config 0 descriptor??
[  907.431402][T20056] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  907.502401][T30408] loop4: detected capacity change from 0 to 8
[  907.528199][T30408] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  907.538999][ T5390] udevd[5390]: incorrect cramfs checksum on /dev/loop4
[  907.794570][T30382] ODEBUG: Out of memory. ODEBUG disabled
[  907.839925][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11865'.
[  907.892267][T30417] sctp: [Deprecated]: syz.0.11866 (pid 30417) Use of int in maxseg socket option.
[  907.892267][T30417] Use struct sctp_assoc_value instead
[  907.913545][T20056] usb 3-1: clie_3_5_startup: get interface number failed: -71
[  907.921436][T20056] visor: probe of 3-1:0.0 failed with error -71
[  907.936579][T20056] usb 3-1: USB disconnect, device number 64
[  908.216565][T30382] syz.3.11848 (30382): drop_caches: 2
[  908.226477][T30408] cramfs: Error -3 while decompressing!
[  908.247174][T30408] cramfs: ffffffff96403088(18)->ffff88804f590000(4096)
[  908.266732][ T6211] udevd[6211]: incorrect cramfs checksum on /dev/loop4
[  908.285797][T30408] cramfs: Error -3 while decompressing!
[  908.291726][T30408] cramfs: ffffffff96403088(18)->ffff88804f590000(4096)
[  908.330927][   T26] audit: type=1800 audit(883.524:47): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11861" name="file1" dev="loop4" ino=324 res=0 errno=0
[  908.383173][T30440] device syz_tun left promiscuous mode
[  908.400783][T30440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  908.416577][T30440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  908.425056][T30440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  908.447734][T30440] device wlan0 left promiscuous mode
[  908.486672][T30440] device bond1 left promiscuous mode
[  908.517107][T30440] device bridge2 left promiscuous mode
[  908.547898][T30440] device vti0 left promiscuous mode
[  908.594138][T30440] device geneve2 left promiscuous mode
[  908.736305][T30460] device bridge_slave_1 left promiscuous mode
[  908.763809][T30460] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.801174][T30460] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  909.012314][T30480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11897'.
[  909.067615][T30480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11897'.
[  909.148038][T30480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11897'.
[  909.271907][T30497] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.298240][T30497] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.307433][T30497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.631472][T30519] device geneve3 entered promiscuous mode
[  909.668492][T30521] loop4: detected capacity change from 0 to 64
[  909.739103][T30464] loop2: detected capacity change from 0 to 40427
[  909.805132][T30464] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  909.836714][T30464] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  909.875636][T30464] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6
[  909.905046][T30464] F2FS-fs (loop2): invalid crc value
[  909.936844][T30464] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  910.154876][T30464] F2FS-fs (loop2): Start checkpoint disabled!
[  910.176059][T30464] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  910.186126][ T4882] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  910.194555][T30464] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  910.316916][T30550] loop4: detected capacity change from 0 to 8192
[  910.361590][T30464] attempt to access beyond end of device
[  910.361590][T30464] loop2: rw=2049, want=45104, limit=40427
[  910.437300][ T4978] attempt to access beyond end of device
[  910.437300][ T4978] loop2: rw=2049, want=45112, limit=40427
[  910.465267][T30550] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  910.498747][T30550] REISERFS (device loop4): using ordered data mode
[  910.524589][T30550] reiserfs: using flush barriers
[  910.537827][T30550] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  910.556029][T30550] REISERFS (device loop4): checking transaction log (loop4)
[  910.580947][T30550] REISERFS (device loop4): Using r5 hash to sort names
[  910.589054][T30550] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  910.607258][T30550] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  910.617330][ T4882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  910.655229][ T4882] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  910.793435][T30570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11942'.
[  910.822195][T30570] netlink: 'syz.3.11942': attribute type 1 has an invalid length.
[  910.890179][T19776] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  910.898122][ T4882] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  910.921274][ T4882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.921309][T30573] x_tables: unsorted underflow at hook 3
[  910.941450][ T4882] usb 6-1: Product: syz
[  910.959130][ T4882] usb 6-1: Manufacturer: syz
[  910.975141][ T4882] usb 6-1: SerialNumber: syz
[  911.040912][ T4882] usb 6-1: bad CDC descriptors
[  911.210870][T19776] usb 1-1: Using ep0 maxpacket: 16
[  911.252567][T30596] device bridge_slave_1 left promiscuous mode
[  911.269020][T30596] bridge0: port 2(bridge_slave_1) entered disabled state
[  911.281805][ T4882] usb 6-1: USB disconnect, device number 9
[  911.292076][T30596] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  911.365749][T19776] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  911.384926][T19776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64
[  911.401391][T30602] device syz_tun left promiscuous mode
[  911.402774][T19776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.408970][T30602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  911.425996][T19776] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  911.440270][T30602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  911.456077][T30602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  911.479082][T30602] device veth1 left promiscuous mode
[  911.490581][T30602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  911.501284][T30602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  911.509068][T30602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  911.526307][T30602] device netdevsim0 left promiscuous mode
[  911.542269][T19776] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  911.543623][T30602] device wlan0 left promiscuous mode
[  911.552063][T19776] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  911.564963][T30602] device bridge2 left promiscuous mode
[  911.565621][T30602] device gtp0 left promiscuous mode
[  911.580012][T19776] usb 1-1: Manufacturer: syz
[  911.591659][T19776] usb 1-1: config 0 descriptor??
[  911.599842][T30602] device bridge6 left promiscuous mode
[  911.807930][T30621] netlink: zone id is out of range
[  911.813468][T30621] netlink: zone id is out of range
[  911.954595][T20286] usb 1-1: USB disconnect, device number 58
[  912.001949][T19776] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  912.161661][T30646] netlink: 'syz.5.11978': attribute type 10 has an invalid length.
[  912.200142][T30646] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.11978'.
[  912.211588][T30648] loop3: detected capacity change from 0 to 8
[  912.229848][T30646] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  912.312414][T19776] usb 3-1: Using ep0 maxpacket: 8
[  912.351928][T30648] cramfs: bad data blocksize 3222268820
[  912.373233][T30648] cramfs: Error -3 while decompressing!
[  912.383316][T30648] cramfs: ffffffff964070dc(16)->ffff8880545a9000(4096)
[  912.408451][T30648] cramfs: bad data blocksize 4165569313
[  912.414280][T30648] cramfs: bad data blocksize 3825676623
[  912.457407][T30648] cramfs: bad data blocksize 4294480561
[  912.463766][T19776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  912.480943][T30648] cramfs: bad data blocksize 1011200
[  912.487322][T19776] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  912.504170][T30648] cramfs: bad data blocksize 4293956096
[  912.525804][T19776] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  912.542006][T30648] cramfs: bad data blocksize 3222268820
[  912.560681][   T26] audit: type=1800 audit(887.481:48): pid=30648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11979" name="file2" dev="loop3" ino=348 res=0 errno=0
[  912.631393][T30676] netlink: 'syz.5.11993': attribute type 1 has an invalid length.
[  912.639849][T30676] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.11993'.
[  912.686576][T30678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11995'.
[  912.755478][T19776] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  912.775969][T19776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.793159][T30684] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11997'.
[  912.814993][T30686] netlink: 'syz.4.11998': attribute type 6 has an invalid length.
[  912.825130][T19776] usb 3-1: Product: syz
[  912.831036][T19776] usb 3-1: Manufacturer: syz
[  912.851457][T19776] usb 3-1: SerialNumber: syz
[  912.927836][T30692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12001'.
[  913.099292][T30707] loop4: detected capacity change from 0 to 256
[  913.157443][T19776] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  913.175885][T19776] cdc_ncm 3-1:1.0: bind() failure
[  913.199722][T19776] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  913.229477][T19776] cdc_ncm 3-1:1.1: bind() failure
[  913.247626][T30707] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d)
[  913.261219][T19776] usb 3-1: USB disconnect, device number 65
[  913.580893][T30742] loop5: detected capacity change from 0 to 128
[  913.728999][T30742] loop5: detected capacity change from 0 to 512
[  913.782578][T30742] EXT4-fs (loop5): Ignoring removed nobh option
[  913.835465][T30742] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix.
[  913.851712][T30742] EXT4-fs (loop5): mount failed
[  913.958192][T19776] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  914.064177][T30772] loop3: detected capacity change from 0 to 1024
[  914.103065][T30772] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  914.146906][T30772] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  914.167678][T30772] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  914.178756][T30772] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  914.216172][T30772] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback.
[  914.407455][T30789] __nla_validate_parse: 2 callbacks suppressed
[  914.407474][T30789] netlink: 340 bytes leftover after parsing attributes in process `syz.4.12049'.
[  914.425648][T30789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12049'.
[  914.487974][T30793] netlink: 'syz.5.12051': attribute type 5 has an invalid length.
[  914.610399][T19776] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  914.619635][T19776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.637662][T19776] usb 1-1: Product: syz
[  914.642541][T19776] usb 1-1: Manufacturer: syz
[  914.647186][T19776] usb 1-1: SerialNumber: syz
[  914.650402][T30795] loop4: detected capacity change from 0 to 4096
[  914.672687][T19776] r8152-cfgselector 1-1: config 0 descriptor??
[  914.845521][T30785] syz.2.12048 (30785): drop_caches: 2
[  914.865713][T30795] ntfs3: loop4: ino=3, Correct links count -> 2.
[  914.878238][T30795] ntfs3: loop4: Failed to load $Volume.
[  915.219751][T19776] r8152-cfgselector 1-1: Unknown version 0x0000
[  915.226144][T19776] r8152-cfgselector 1-1: bad CDC descriptors
[  915.294562][T19776] r8152-cfgselector 1-1: Unknown version 0x0000
[  915.308449][T19776] r8152-cfgselector 1-1: USB disconnect, device number 59
[  915.603185][T30849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12078'.
[  915.626324][T30841] loop2: detected capacity change from 0 to 8192
[  915.662584][T30843] syz.5.12075 (30843): drop_caches: 2
[  915.722284][T30841] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  915.731712][T30841] REISERFS (device loop2): using ordered data mode
[  915.740475][T30859] netlink: 'syz.4.12082': attribute type 1 has an invalid length.
[  915.764975][T30841] reiserfs: using flush barriers
[  915.773990][T30859] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12082'.
[  915.785648][T30841] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  915.799233][T30859] block nbd0: not configured, cannot reconfigure
[  915.802355][T30841] REISERFS (device loop2): checking transaction log (loop2)
[  915.855860][T30841] REISERFS (device loop2): Using tea hash to sort names
[  915.908156][T30841] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  915.949543][   T26] audit: type=1800 audit(890.652:49): pid=30851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.12079" name="/newroot/2186/bus" dev="tmpfs" ino=11336 res=0 errno=0
[  916.365206][T30889] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12097'.
[  916.399584][T30889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12097'.
[  916.419931][T30896] netlink: 'syz.2.12093': attribute type 32 has an invalid length.
[  916.428214][T30889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12097'.
[  916.487023][T30889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12097'.
[  916.734148][T30923] netlink: 'syz.4.12112': attribute type 2 has an invalid length.
[  916.781098][T30923] netlink: 'syz.4.12112': attribute type 1 has an invalid length.
[  916.792227][T30929] netlink: 'syz.5.12115': attribute type 2 has an invalid length.
[  916.820441][T30929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12115'.
[  916.935366][T30936] loop4: detected capacity change from 0 to 8
[  917.210787][T19776] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  917.283739][T30961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12128'.
[  917.582461][ T4882] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  917.613229][T30990] loop3: detected capacity change from 0 to 512
[  917.624118][T30988] syz.0.12143 (30988): drop_caches: 2
[  917.659497][T19776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  917.755518][T30990] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  917.846374][T30990] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes
[  917.860319][ T4882] usb 6-1: Using ep0 maxpacket: 32
[  917.881939][T19776] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  917.903287][T19776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.927245][T19776] usb 3-1: Product: syz
[  917.931454][T19776] usb 3-1: Manufacturer: syz
[  917.940584][T19776] usb 3-1: SerialNumber: syz
[  918.004098][ T4882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  918.018497][ T4882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  918.030454][ T4882] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  918.084758][ T4882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.126990][ T4882] usb 6-1: config 0 descriptor??
[  918.192744][ T4882] hub 6-1:0.0: USB hub found
[  918.244431][T31022] loop3: detected capacity change from 0 to 4096
[  918.383614][T31031] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  918.416430][T19776] usb 3-1: MIDIStreaming interface descriptor not found
[  918.423583][ T4882] hub 6-1:0.0: config failed, hub has too many ports! (err -19)
[  918.476252][T19776] usb 3-1: USB disconnect, device number 66
[  918.493220][T31037] netlink: 'syz.0.12165': attribute type 3 has an invalid length.
[  918.533421][T31037] netlink: 'syz.0.12165': attribute type 3 has an invalid length.
[  918.582813][T31040] loop3: detected capacity change from 0 to 128
[  918.639885][T31040] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  918.747691][ T4882] usbhid 6-1:0.0: can't add hid device: -71
[  918.754265][ T4882] usbhid: probe of 6-1:0.0 failed with error -71
[  918.819599][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  918.851499][ T4882] usb 6-1: USB disconnect, device number 10
[  918.893436][T31056] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new'
[  919.093676][T31054] loop3: detected capacity change from 0 to 8192
[  919.154794][T31054] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  919.168211][T31054] REISERFS (device loop3): using ordered data mode
[  919.185863][T31054] reiserfs: using flush barriers
[  919.202197][T31054] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  919.343633][T31054] REISERFS (device loop3): checking transaction log (loop3)
[  919.408288][T31054] REISERFS (device loop3): Using tea hash to sort names
[  919.485717][T31054] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  919.515240][T31095] tc_dump_action: action bad kind
[  920.063500][T31138] device sit0 entered promiscuous mode
[  920.113150][T31138] netlink: 'syz.5.12213': attribute type 1 has an invalid length.
[  920.154405][T31138] __nla_validate_parse: 5 callbacks suppressed
[  920.154420][T31138] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12213'.
[  920.186480][T31143] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  920.273442][T31147] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  920.436894][T31153] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  920.499015][T31153] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  920.675380][T31173] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12231'.
[  920.956347][T31186] netlink: 'syz.5.12238': attribute type 5 has an invalid length.
[  921.127865][T31160] loop4: detected capacity change from 0 to 32768
[  921.137700][T31196] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  921.320521][T31160] XFS (loop4): Mounting V5 Filesystem
[  921.617408][T31160] XFS (loop4): Ending clean mount
[  921.702735][ T4938] XFS (loop4): Unmounting Filesystem
[  921.783688][T20053] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  922.035850][T31256] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12268'.
[  922.148033][T31264] syz.4.12270 (31264): drop_caches: 2
[  922.283989][T31274] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  922.329088][T31274] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  922.360434][T31274] overlayfs: missing 'lowerdir'
[  922.365791][T20053] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  922.391802][T20053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.416441][T31285] netlink: 'syz.3.12283': attribute type 10 has an invalid length.
[  922.424668][T20053] usb 1-1: Product: syz
[  922.444537][T20053] usb 1-1: Manufacturer: syz
[  922.454264][T20053] usb 1-1: SerialNumber: syz
[  922.511771][T20053] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  922.869569][T31313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  922.876859][T31313] IPv6: NLM_F_CREATE should be set when creating new route
[  922.884149][T31313] IPv6: NLM_F_CREATE should be set when creating new route
[  922.953109][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12301'.
[  922.978414][T31320] netlink: 748 bytes leftover after parsing attributes in process `syz.2.12300'.
[  923.088049][T31325] netlink: 'syz.2.12303': attribute type 5 has an invalid length.
[  923.152262][T20053] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  923.241936][T31334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  923.273461][T31334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  923.305136][T31334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  923.348482][T31334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  923.377845][T31334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  923.396569][T31334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  923.456090][T31307] loop3: detected capacity change from 0 to 32768
[  923.613299][T20056] usb 1-1: USB disconnect, device number 60
[  923.671073][T31330] loop2: detected capacity change from 0 to 32768
[  923.681504][T31307] XFS (loop3): Mounting V5 Filesystem
[  923.758861][T31330] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  923.758861][T31330] 
[  923.771626][T31330] ialloc: diAlloc returned -5!
[  923.802131][T31307] XFS (loop3): Ending clean mount
[  923.877185][ T4941] XFS (loop3): Unmounting Filesystem
[  924.086284][T31370] loop4: detected capacity change from 0 to 764
[  924.274536][T20053] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  924.288509][T31370] Symlink component flag not implemented
[  924.295288][T20053] ath9k_htc: Failed to initialize the device
[  924.296538][  T264] block nbd2: Attempted send on invalid socket
[  924.307620][  T264] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  924.308503][T31370] Symlink component flag not implemented (122)
[  924.326093][T31380] vxfs: unable to read disk superblock at 1
[  924.368514][  T264] block nbd2: Attempted send on invalid socket
[  924.375021][  T264] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  924.375491][T20056] usb 1-1: ath9k_htc: USB layer deinitialized
[  924.420586][T31380] vxfs: unable to read disk superblock at 8
[  924.441711][T31380] vxfs: can't find superblock.
[  924.504039][T31390] ieee802154 phy1 wpan1: encryption failed: -22
[  924.654751][T31402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12337'.
[  924.664152][T31402] netlink: 'syz.0.12337': attribute type 1 has an invalid length.
[  924.682984][T31400] netlink: 'syz.5.12338': attribute type 32 has an invalid length.
[  924.932293][T31417] xt_nat: multiple ranges no longer supported
[  925.030891][T31425] Unknown options in mask b7f2
[  925.035782][T31428] cifs: Unknown parameter 'no'‘a�£Nð[G¶zob,erèèµ;%j¸¼
[  925.035782][T31428] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.�W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷'
[  925.061505][T31429] netlink: 'syz.4.12348': attribute type 2 has an invalid length.
[  925.093427][T31429] netlink: 'syz.4.12348': attribute type 1 has an invalid length.
[  925.107207][T31429] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12348'.
[  925.299175][T31446] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  925.354371][T31437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12355'.
[  925.580122][T31452] loop4: detected capacity change from 0 to 4096
[  925.803852][T31480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12376'.
[  925.848780][T31483] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975)
[  926.004800][T31495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12384'.
[  926.037542][T31497] device syz_tun left promiscuous mode
[  926.066424][T31497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  926.130205][T31497] device team0 left promiscuous mode
[  926.159365][T31497] device team_slave_0 left promiscuous mode
[  926.166453][T31497] device team_slave_1 left promiscuous mode
[  926.174903][T31497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  926.187242][T31497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  926.249487][T31497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  926.254569][T31508] syz.5.12390 (31508): drop_caches: 2
[  926.304148][T31497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  926.352087][T31497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  926.380190][T31497] device netdevsim0 left promiscuous mode
[  926.428629][T31497] device bridge3 left promiscuous mode
[  926.479562][T31497] device ip6erspan0 left promiscuous mode
[  926.500054][T31497] device bridge4 left promiscuous mode
[  926.524466][T31497] device geneve2 left promiscuous mode
[  926.539036][T31524] loop4: detected capacity change from 0 to 64
[  926.942386][T31550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12409'.
[  927.013562][T31548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12411'.
[  927.139467][T31554] loop5: detected capacity change from 0 to 4096
[  927.262449][T31554] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  927.299841][T31554] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  927.353018][T31554] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  927.417310][T31554] ntfs: volume version 3.1.
[  927.429875][T31531] loop2: detected capacity change from 0 to 32768
[  927.570773][T31531] JBD2: Ignoring recovery information on journal
[  927.669352][T24998] ntfs: (device loop5): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  927.682167][T31574] nvme_fabrics: missing parameter 'transport=%s'
[  927.696890][T31574] nvme_fabrics: missing parameter 'nqn=%s'
[  927.718804][T31531] (syz.2.12402,31531,1):ocfs2_clear_journal_error:1085 ERROR: File system error 33023 recorded in journal 0.
[  927.781329][T31531] (syz.2.12402,31531,0):ocfs2_clear_journal_error:1087 ERROR: File system on device loop2 needs checking.
[  927.824876][T31531] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  927.840605][ T4997] (kworker/u4:7,4997,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0
[  927.865276][T31602] netlink: 'syz.3.12433': attribute type 21 has an invalid length.
[  927.921110][T31602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12433'.
[  927.925922][T31531] (syz.2.12402,31531,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=0, inode=397313, rec_len=0, name_len=1
[  928.009345][T31531] (syz.2.12402,31531,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  928.035765][T31531] (syz.2.12402,31531,0):ocfs2_mknod:298 ERROR: status = -2
[  928.067402][T31610] loop4: detected capacity change from 0 to 512
[  928.082480][T31531] (syz.2.12402,31531,0):ocfs2_mknod:502 ERROR: status = -2
[  928.082503][T31607] netlink: 'syz.0.12436': attribute type 5 has an invalid length.
[  928.162478][ T4935] ocfs2: Unmounting device (7,2) on (node local)
[  928.202775][T31617] netlink: 'syz.0.12441': attribute type 29 has an invalid length.
[  928.281920][T31610] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  928.305053][T31617] netlink: 'syz.0.12441': attribute type 3 has an invalid length.
[  928.347661][T31617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12441'.
[  928.530630][T31625] loop3: detected capacity change from 0 to 64
[  928.740351][T31641] netlink: 'syz.4.12453': attribute type 4 has an invalid length.
[  928.774569][T31639] loop2: detected capacity change from 0 to 1764
[  928.801551][T31641] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12453'.
[  929.245174][T31673] netlink: 'syz.3.12468': attribute type 2 has an invalid length.
[  929.409686][T31679] autofs4:pid:31679:autofs_fill_super: called with bogus options
[  929.562062][T31686] program syz.3.12475 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  929.951387][ T4882] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  929.994266][T31703] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12482'.
[  930.029574][T31703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12482'.
[  930.039136][T31669] loop4: detected capacity change from 0 to 32768
[  930.058443][T31703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12482'.
[  930.194761][T31669] XFS (loop4): Mounting V5 Filesystem
[  930.316048][T31669] XFS (loop4): Ending clean mount
[  930.443207][ T4882] usb 6-1: unable to get BOS descriptor or descriptor too short
[  930.508738][ T4938] XFS (loop4): Unmounting Filesystem
[  930.508903][ T4882] usb 6-1: not running at top speed; connect to a high speed hub
[  930.656978][ T4882] usb 6-1: config 17 has an invalid interface number: 8 but max is 1
[  930.665596][ T4882] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2
[  930.686468][ T4882] usb 6-1: config 17 has no interface number 0
[  930.699574][ T4882] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 14129, setting to 64
[  930.720318][ T4882] usb 6-1: config 17 interface 8 has no altsetting 0
[  930.988645][ T4882] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  931.020062][ T4882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.047995][T31757] openvswitch: netlink: Actions may not be safe on all matching packets
[  931.059245][ T4882] usb 6-1: Product: syz
[  931.075717][ T4882] usb 6-1: Manufacturer: syz
[  931.091362][ T4882] usb 6-1: SerialNumber: syz
[  931.260720][T31771] __nla_validate_parse: 1 callbacks suppressed
[  931.260737][T31771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12514'.
[  931.319857][T31771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12514'.
[  931.455724][ T4882] usb 6-1: selecting invalid altsetting 0
[  931.506730][ T4882] usb 6-1: USB disconnect, device number 11
[  931.576975][T31791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12523'.
[  931.608358][T20058] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  931.616510][T31794] IPVS: length: 218 != 24
[  931.811826][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  931.875567][T20058] usb 1-1: Using ep0 maxpacket: 32
[  932.004310][T20058] usb 1-1: config 4 has an invalid interface number: 128 but max is 0
[  932.027862][T20058] usb 1-1: config 4 has no interface number 0
[  932.063114][T20058] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  932.108569][T20058] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  932.121893][T31824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12538'.
[  932.151822][T20058] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  932.194978][T20058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.272408][T20058] hub 1-1:4.128: USB hub found
[  932.422472][T31835] loop4: detected capacity change from 0 to 4096
[  932.449288][T31835] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  932.506611][T20058] hub 1-1:4.128: 2 ports detected
[  932.511856][T20058] hub 1-1:4.128: Using single TT (err -22)
[  932.522374][T31835] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  932.664072][   T26] audit: type=1326 audit(906.283:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31845 comm="syz.5.12550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51d4799819 code=0x0
[  932.723445][T31852] loop2: detected capacity change from 0 to 256
[  932.741592][T20058] hub 1-1:4.128: hub_hub_status failed (err = -71)
[  932.754495][T20058] hub 1-1:4.128: config failed, can't get hub status (err -71)
[  932.838042][T20058] usb 1-1: USB disconnect, device number 61
[  932.881981][T31858] xt_recent: hitcount (4294967295) is larger than allowed maximum (255)
[  933.335783][T31890] loop4: detected capacity change from 0 to 1764
[  933.466171][T31890] iso9660: Corrupted directory entry in block 14 of inode 1920
[  933.559476][T20286] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  933.711179][T31918] loop5: detected capacity change from 0 to 1024
[  933.717964][T31916] Scaler: =================  START STATUS  =================
[  933.745721][T31916] Scaler: ==================  END STATUS  ==================
[  933.966940][T31918] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  933.971981][T31942] loop4: detected capacity change from 0 to 1024
[  934.006969][T31918] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 39: comm syz.5.12588: bad entry in directory: rec_len is smaller than minimal - offset=7296, inode=0, rec_len=0, size=1024 fake=0
[  934.033879][T20286] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  934.105179][T20286] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  934.137243][T20286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.148920][T31918] EXT4-fs (loop5): Remounting filesystem read-only
[  934.223073][ T4997] hfsplus: b-tree write err: -5, ino 25
[  934.246293][ T4997] hfsplus: b-tree write err: -5, ino 4
[  934.254184][T20286] gspca_main: stv0680-2.14.0 probing 041e:4007
[  934.270046][ T4997] hfsplus: b-tree write err: -5, ino 2
[  934.286818][ T4997] hfsplus: b-tree write err: -5, ino 22
[  934.374857][T31957] netlink: 'syz.0.12605': attribute type 11 has an invalid length.
[  934.379647][T31955] loop5: detected capacity change from 0 to 256
[  934.722534][T31980] netlink: 'syz.5.12616': attribute type 3 has an invalid length.
[  934.751327][T20056] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  934.886899][T31995] device bond1 entered promiscuous mode
[  934.893386][T31995] 8021q: adding VLAN 0 to HW filter on device bond1
[  935.007950][T20056] usb 3-1: Using ep0 maxpacket: 8
[  935.039733][T32006] loop5: detected capacity change from 0 to 4096
[  935.135507][T32006] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  935.144992][T20056] usb 3-1: config 6 has an invalid interface number: 2 but max is 0
[  935.163898][T20056] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  935.179238][T20056] usb 3-1: config 6 has no interface number 0
[  935.207930][T20056] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  935.249096][T32006] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  935.397311][T32028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12639'.
[  935.406840][T20056] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  935.416286][T20056] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  935.424397][T20056] usb 3-1: Product: syz
[  935.435842][T32028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12639'.
[  935.440838][T20286] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  935.459815][T20056] usb 3-1: Manufacturer: syz
[  935.464578][T20056] usb 3-1: SerialNumber: syz
[  935.532668][T20056] hso 3-1:6.2: Failed to find INT IN ep
[  935.671082][T20286] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  935.688936][T20286] stv0680 4-1:4.0: last error: 86,  command = 0x3
[  935.701113][T20286] usb 4-1: USB disconnect, device number 75
[  935.780628][T20056] usb 3-1: USB disconnect, device number 67
[  936.068786][T32068] SET target dimension over the limit!
[  936.151666][T32071] netlink: 'syz.4.12658': attribute type 1 has an invalid length.
[  936.224133][T32076] device wlan0 entered promiscuous mode
[  936.259266][T32076] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  936.295918][T32079] loop3: detected capacity change from 0 to 128
[  936.371714][T32079] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  936.489714][T32086] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  936.571175][    C1] vkms_vblank_simulate: vblank timer overrun
[  936.980427][ T4879] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[  937.016071][T32090] loop4: detected capacity change from 0 to 32768
[  937.091426][T32110] loop5: detected capacity change from 0 to 2048
[  937.099714][T32090] ERROR: (device loop4): dbAllocAG: unable to allocate blocks
[  937.099714][T32090] 
[  937.182239][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12678'.
[  937.192227][T32116] openvswitch: netlink: Actions may not be safe on all matching packets
[  937.246704][T32118] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  937.344466][   T26] audit: type=1800 audit(910.660:51): pid=32110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12675" name="file2" dev="loop5" ino=16 res=0 errno=0
[  937.447565][T32110] NILFS (loop5): error -2 truncating bmap (ino=16)
[  937.468204][ T4879] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  937.486463][ T4879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.543642][ T4879] usb 4-1: config 0 descriptor??
[  937.565278][T32118] ------------[ cut here ]------------
[  937.571792][T32118] WARNING: CPU: 1 PID: 32118 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0
[  937.581650][T32118] Modules linked in:
[  937.586013][T32118] CPU: 1 PID: 32118 Comm: segctord Not tainted syzkaller #0
[  937.593317][T32118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  937.603727][T32118] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0
[  937.607761][ T4879] cp210x 4-1:0.0: cp210x converter detected
[  937.609796][T32118] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff
[  937.635364][T32118] RSP: 0018:ffffc90003caf390 EFLAGS: 00010293
[  937.641631][T32118] RAX: ffffffff830ec6ac RBX: ffff8880236ee1a0 RCX: ffff888020048000
[  937.652451][T32118] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002
[  937.652473][T32118] RBP: 0000000000000003 R08: ffff888051accbcf R09: 1ffff1100a359979
[  937.652486][T32118] R10: dffffc0000000000 R11: ffffed100a35997a R12: ffff888020049788
[  937.652501][T32118] R13: ffff88807712c9e0 R14: 00000000003f0002 R15: ffff888073ca7130
[  937.652515][T32118] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  937.652531][T32118] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  937.652544][T32118] CR2: 00007ffffc553ff8 CR3: 000000005c71f000 CR4: 00000000003506e0
[  937.652562][T32118] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  937.652573][T32118] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  937.652585][T32118] Call Trace:
[  937.729978][T32118]  <TASK>
[  937.733010][T32118]  nilfs_dat_commit_update+0x24/0x40
[  937.738380][T32118]  nilfs_btree_commit_update_v+0x93/0x410
[  937.744263][T32118]  nilfs_btree_propagate+0x95a/0xcf0
[  937.749906][T32118]  nilfs_bmap_propagate+0x70/0x120
[  937.755074][T32118]  nilfs_segctor_apply_buffers+0x15d/0x320
[  937.760959][T32118]  ? nilfs_collect_file_data+0xc0/0xc0
[  937.765056][T32136] sp0: Synchronizing with TNC
[  937.766578][T32118]  nilfs_segctor_scan_file+0x7af/0x9d0
[  937.766616][T32118]  ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0
[  937.766658][T32118]  ? nilfs_segbuf_extend_segsum+0x25d/0x360
[  937.766680][T32118]  ? rcu_is_watching+0x11/0xa0
[  937.766704][T32118]  nilfs_segctor_do_construct+0x1c26/0x6ca0
[  937.766764][T32118]  ? verify_lock_unused+0x140/0x140
[  937.766793][T32118]  ? nilfs_transaction_unlock+0x220/0x220
[  937.812405][T32118]  ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70
[  937.812455][T32118]  ? clear_nonspinnable+0x60/0x60
[  937.812478][T32118]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  937.812504][T32118]  ? __lock_acquire+0x7d10/0x7d10
[  937.812525][T32118]  ? __rwlock_init+0x140/0x140
[  937.812547][T32118]  ? do_raw_spin_unlock+0x11d/0x230
[  937.812566][T32118]  ? _raw_spin_unlock+0x24/0x40
[  937.812584][T32118]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  937.812605][T32118]  nilfs_segctor_construct+0x17b/0x690
[  937.812631][T32118]  nilfs_segctor_thread+0x523/0x1180
[  937.812673][T32118]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  937.812691][T32118]  ? nilfs_iput_work_func+0x70/0x70
[  937.812711][T32118]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  937.812728][T32118]  ? _raw_spin_unlock+0x40/0x40
[  937.812743][T32118]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  937.812761][T32118]  ? init_wait_entry+0xd0/0xd0
[  937.812783][T32118]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  937.812802][T32118]  ? __kthread_parkme+0x157/0x1b0
[  937.812825][T32118]  kthread+0x436/0x520
[  937.812844][T32118]  ? nilfs_iput_work_func+0x70/0x70
[  937.812862][T32118]  ? kthread_blkcg+0xd0/0xd0
[  937.812879][T32118]  ret_from_fork+0x1f/0x30
[  937.812917][T32118]  </TASK>
[  937.812936][T32118] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  937.812947][T32118] CPU: 1 PID: 32118 Comm: segctord Not tainted syzkaller #0
[  937.812964][T32118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  937.812975][T32118] Call Trace:
[  937.812981][T32118]  <TASK>
[  937.812987][T32118]  dump_stack_lvl+0x188/0x250
[  937.813007][T32118]  ? show_regs_print_info+0x20/0x20
[  937.813028][T32118]  ? load_image+0x400/0x400
[  937.813057][T32118]  panic+0x2e5/0x810
[  937.813084][T32118]  ? bpf_jit_dump+0xd0/0xd0
[  937.813111][T32118]  ? ret_from_fork+0x1f/0x30
[  937.813131][T32118]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  937.813151][T32118]  __warn+0x248/0x2b0
[  937.813170][T32118]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  937.813189][T32118]  report_bug+0x1b7/0x2e0
[  937.813216][T32118]  handle_bug+0x3a/0x70
[  937.813235][T32118]  exc_invalid_op+0x16/0x40
[  937.813253][T32118]  asm_exc_invalid_op+0x16/0x20
[  937.813271][T32118] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0
[  937.813291][T32118] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff
[  937.813307][T32118] RSP: 0018:ffffc90003caf390 EFLAGS: 00010293
[  937.813326][T32118] RAX: ffffffff830ec6ac RBX: ffff8880236ee1a0 RCX: ffff888020048000
[  937.813340][T32118] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002
[  937.813352][T32118] RBP: 0000000000000003 R08: ffff888051accbcf R09: 1ffff1100a359979
[  937.813365][T32118] R10: dffffc0000000000 R11: ffffed100a35997a R12: ffff888020049788
[  937.813378][T32118] R13: ffff88807712c9e0 R14: 00000000003f0002 R15: ffff888073ca7130
[  937.813399][T32118]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  937.813430][T32118]  nilfs_dat_commit_update+0x24/0x40
[  937.813449][T32118]  nilfs_btree_commit_update_v+0x93/0x410
[  937.813473][T32118]  nilfs_btree_propagate+0x95a/0xcf0
[  937.813500][T32118]  nilfs_bmap_propagate+0x70/0x120
[  937.813522][T32118]  nilfs_segctor_apply_buffers+0x15d/0x320
[  937.813544][T32118]  ? nilfs_collect_file_data+0xc0/0xc0
[  937.813565][T32118]  nilfs_segctor_scan_file+0x7af/0x9d0
[  937.813593][T32118]  ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0
[  937.813631][T32118]  ? nilfs_segbuf_extend_segsum+0x25d/0x360
[  937.813653][T32118]  ? rcu_is_watching+0x11/0xa0
[  937.813675][T32118]  nilfs_segctor_do_construct+0x1c26/0x6ca0
[  937.813738][T32118]  ? verify_lock_unused+0x140/0x140
[  937.813771][T32118]  ? nilfs_transaction_unlock+0x220/0x220
[  937.813791][T32118]  ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70
[  937.813828][T32118]  ? clear_nonspinnable+0x60/0x60
[  937.813847][T32118]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  937.813870][T32118]  ? __lock_acquire+0x7d10/0x7d10
[  937.813890][T32118]  ? __rwlock_init+0x140/0x140
[  937.813918][T32118]  ? do_raw_spin_unlock+0x11d/0x230
[  937.813940][T32118]  ? _raw_spin_unlock+0x24/0x40
[  937.813957][T32118]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  937.813979][T32118]  nilfs_segctor_construct+0x17b/0x690
[  937.814007][T32118]  nilfs_segctor_thread+0x523/0x1180
[  937.814053][T32118]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  937.814072][T32118]  ? nilfs_iput_work_func+0x70/0x70
[  937.814093][T32118]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  937.814113][T32118]  ? _raw_spin_unlock+0x40/0x40
[  937.814128][T32118]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  937.814144][T32118]  ? init_wait_entry+0xd0/0xd0
[  937.814164][T32118]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  937.814184][T32118]  ? __kthread_parkme+0x157/0x1b0
[  937.814208][T32118]  kthread+0x436/0x520
[  937.814224][T32118]  ? nilfs_iput_work_func+0x70/0x70
[  937.814243][T32118]  ? kthread_blkcg+0xd0/0xd0
[  937.814263][T32118]  ret_from_fork+0x1f/0x30
[  937.814295][T32118]  </TASK>
[  937.814670][T32118] Kernel Offset: disabled
[  938.301338][T32118] Rebooting in 86400 seconds..