last executing test programs:

12.757789363s ago: executing program 4 (id=1284):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x5, "2cdf424c1a"}, 0x0})

9.265386627s ago: executing program 4 (id=1300):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e24, 0x0, @empty}}}, 0x108)

8.817760434s ago: executing program 4 (id=1302):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015f0000000000000000670000000800", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0)

7.987375306s ago: executing program 4 (id=1306):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')

7.673765654s ago: executing program 1 (id=1307):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0), 0x12)
connect$inet6(r0, 0x0, 0x0)

7.502156998s ago: executing program 4 (id=1309):
creat(&(0x7f0000000380)='./file0\x00', 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff000)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
splice(r5, 0x0, r1, 0x0, 0x78dd, 0x0)

7.181696441s ago: executing program 1 (id=1310):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x5, "2cdf424c1a"}, 0x0})

7.021168583s ago: executing program 2 (id=1311):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80070f, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@bsdgroups}, {@oldalloc}, {@oldalloc}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

6.609332758s ago: executing program 2 (id=1312):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x65)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

6.108690375s ago: executing program 3 (id=1313):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

6.061825068s ago: executing program 4 (id=1314):
syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d657461646174615f636865a1f325d5159eefcff928033ea3823855636b73756d3d63726336342c6572726f72733d636f6e74696e75652c6f626a5f757365723d7b5e2c7375626a5f757365723d6f626a"], 0x4, 0x5905, &(0x7f0000010b40)="$eJzs3X+QHFW9KPDTM7PZyW5+bAJIBNksgSiCmg2/Cn+Uxt8WIBWLV0p4UVjIBqNJSCVBIKAEH/igAB9aWor6B1pIPTT6qIKnRErkx0t4ilJcvdQtpK7ei/7hLeSSEsilLK97a3f6TGZ7p7dnZ2dDEj6fSranz/R8z+nTZ3r6e2Z2JwAAAPCqsPv6LXvPOer9v/j88EvXfOgnG64NveWx8mrcoC9dXjH6o/sVaiX7S3dl0dgyOy7ecNX3/jhw8Xt+fnfPd1/etebYtb9932EX3/+pM3fe9s2HXpx779+fKYobx9OJ+9aT55IQqj/d89Uv7HrsyNGyJIRQTvq2h7AgWfjQgiQTYvCvIYQ19XaOv/Oel05ZO7q89qbxY3R+JsjUxjuHmmo6zrbtvfyk8Lt3r7ruV4t/+IOuHc9u37dJUm0YTyHMu7Dx8V0hhNnp/9BwRlwUH5wuV4YQehoed0ZBu45rsf3LctaPTpez0mVvQZx4/5LMeimzXXY96sosewrqm668drS7XZE5mfXsyWi68toZyxekyx+nyxOnGL8c/yehlIRKvfnrk31jJDQctyQkY8eyWl8v1Y9tSPc/s55k1kuZ9XJXZr/G6k0HWjlJxpfH7TLl8XRcScuPbTxXN3FuTvlr02U1faK+HNdD9kZN74Qb9f0aE9u1Z5K27A+lnKuyWF4/8OnB6E3LepOFEx4z0kS8b9eqm5eWVz+8uy+nHcndSRo/aSv+tl8umPOJ79942aK8+BeW0viltuL//qzHnz//xu98Izf+rTF+ua34Jz/Q89xZj1y/JLd/9sT+qbQVf+iZR29ZfPhFO3Lbf3uMX20r/oqdj3fP3fvAg7ntH4z9M7ut+E+//QN/uOvJ+57NjR9i/J624q/euemL3f17T8iN/2Dsn972xs8LO05/qr//TwN58Z+I8ee2Ff/O7be97Y75N52Ze3xXxv7payv+2cfff92cvfcdk3fuTG7v1CsnwKvTYek11g3pert55nQ15AtfH6jUrvnmpP/ndrKijNF65s1gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABenY446f9/8F8/2vdcJV3vTm88XaotY/msEJLZIYQtW4c2b1238ZKBT1162eaNQ+sHhrYODG/cuvnKgVPfNLB5eNP6oStH7x188ym1xy0MSW2ZHDOh7pGRkZFS3/iyWN97j9/xu6Vn/NufQxg84jf9ldz2L7ttwx2HN/mZkawYedeGy875zWnfTverL21XX067wmi7/tfEdv37eX+748t7/nhCCIOvmaxdjz79zp+Na9BYwb44qVJ3qDWoO+lp2o56q9N+iv1VWbtu/fBgcf+Wc/r3v1/17F/XXvGlv9X6t5q7Hy327+wVI+tLX1t19n9+7epawYF63Iv6O+5FbF/sv2ra3/PS/ZqXs1+VnP26/lcPPvnTo258cXsYrLyweGLdRfvVlQ6AruS1LdUba+hJFowrr6bbxyMeH7ds64ZNy7Zcue3N6zYMXTJ8yfDGty4/dfnpg6edftqysT1f1uH9j/W/vsX93z/jaf5ntv84/mxtPBW1q6g/RttV3B+NLcp7/vWc+4WvvPW2R86pFRSN87h1/XySLntGj/Py0DDeJvZVs/0q6ocQwkCzfnj+xTPDkf+07rqi81DjkWn8mZGsGHlsyV++fca3Fr2jVtDSeb5Ju6Z0nm9sUJvn+Xqr97VnrL+q6fE4UPu3O5TT/ept2q7ljz3SdfPuP3+23r5Zs8IVQ1u3bl5e+zknbemc5Oim7cqWxv1aPPazHNJuCfVh2mS8juoKtfZlz59x82yv9qb39SYLm+5XVrxv16qbl5ZXP7w7r6eTu2s1zg5za8vkdTlbrs88sFxvcLP6D9bx0f/Bb9370Xt/dOqE8XFy7WfRfiU5+/XDJ+/8yne/9D9/1Ln9+uA7H+/7yz9/cmmt4GA5r9RbnbYnaTyvnBxC0fNvcWi+H7nPv1Lz/Sl6/mXr2bd983gDmfXeUG7r+XryAz3PnfXI9Utyn697Wn2+Xj1urVzwfD1Qxs8r9/waN1CSFSM/v+Gw7Q9ds/KoWkHRuK5v3Wxcn9JC/pGzXz87/6n+Swf+xz927rzxvTfdc8Fvh1Z8rlZwoBz3atq/1Zz+rbc65p2N/fuWiy9dv6ZWfuBe/6bLgvwnnkq2XLnt00Pr1w9v3tLafrX6ehrryfZyu6+n8ey2sGC/ShP2a+ZutNJfrT7fYvvXtN1f459vvSFp63Vh2y8XzPnE92+8rG/Co9KKLiyl8Uttxf/9WY8/f/6N3/lGbvxbY/xKW/GHnnn0lsWHX7QjN/7tSRq/2lb8FTsf756794EHc+MPxvbPbiv+02//wB/uevK+Z3Pjhxi/t73+f2HH6U/19/8pN/4TSVrP6DVSCPe8dMra2noSutLnW2xH17h2hex6klkvZdbLjeul2lxrvYJykowvj9ul5cc2tKWZj+WUx6uw6qLa8uW4HrI3Ji8/0JQazv3NyouuUwEADnXx/f94DRrf/x9OL5TyZxpgn+nmYYty4sY8bN98zqxx9y9K48fHx3nA/reEwdHltQO1C/2pznPG50N2njPWc8Jx42O0O89ZNP++JLMe21WbL6805KGpiXlNJbQw/z6xnsnn3zO7Xzw/PnDDhGYNjKWT1abHryudMWv2eYdMeyujRzBvfGTnxeLnOfrnhZVj9bU4PrKfo4nHIfs5mljPUZkTZ7ufo5nu+IjNnmR8jDW5+P2NiccvTNK/+45f82jZ4zeF410NYWRWmOH3Zzs5b9j43tb+mzec2ffDzEvmxE+fYAf6vGEsj/tRaXE+8aM55Z2aT4yni9iuPZO0ZX8wnwgcqmL+H18jRvP/0Qvw/8hsV3Qdmr1qjPFyPydUbt6egrxjwtV5b+hp63V89c5NX+zu33tC7nXOg61+7mfTuLWegs/9FPXj0sx6YT/mTNAU5XvZeoryveznMnrD3Lb6/c7tt73tjvk3nZnb7ytrL6TF/f6VcWtzC/p9pj/PefB/zkC+0DT+QfI5hqL5s1csH0k/+DRT+ch/yymfaj7SM+FGfb/GHHT5SNf+bRcAcPCI+X/9/bM0//+XzHZFeeuJmfUYLzdvzbk+yctbP5wur8hs35v+RsVUr5vPPv7+6+bsve+Y3Lzl9lbz0P89bq2vMA+dXt6cm0es7MznxXPziHqeNb08Mbf99Txxenl6bvx6nj69PDq3f+p59PTmAXLj1+cBDvY8d2bn6w7ZPDr99dmZyqPPzSnP5tFxujEvj+6dcKO+X2Pk0QAAr6yY/8fLuJj/P5LZbrrX7bl5QYeu27N/D6Qe/4n9lVfOdN4303nrTOf1Mz0vcUDlxSfF+1rPi2d6Xmhm58le7Xlx0fvL8mIAAA4EMf+fna7n5/9t5SflkOYnuflbPT+RnzeNLz8/JN63fuXnv+T/8v9i8n8AgENbzP/jrz3Gv//3/9L17N+tP3Dz9JH58vT8+PL0gyVPn97nAIrn2cwDmAcoZh4AAODQ0jWWKU38PfuPp8vs79nn/V7++Tnbt6oy9jv2IVy0dfPw8AWXbVoztHX4go2XrhnecsHlm9dt3Tq8sbbddPPG3LwlzRu7QiXtj+bbZfO2+elvws7P+XsI2e1j2KPHbkz8ewjZamcX/B2BfcevtfbmHb/SJNs3Gx95xzsv/sdyto/qx//iT558wdotF6zbuG7ruqH167YNj99uNGvtmcL3ZsZumdL3ZmZ+TFCa+P2d1f3SjtKEdnSl/ZH3/exJph0L0pYsyPv+g5x2/+IfvvyZ40f+dlcIg0eUXzet/ktWjPzf84Y/vHX3bzaNtr80afvrW6btKvq+0uz2cX8q6y/dsvWktZdetjH7jZLtifMZpfr6DM1npE//covzE6tzyqc6P1GecOPA1PL8BAAA48T3/+P1bHz/8EvpBVQsbz1Pn977x7l5+mBreXr2e8mK8vTs9nF/W83Tq9PM07P1F+XpzbZvlqfn5d158Wt/R3t280ZOQevjpMnnPP5eGxCTjZP4+xi54+TC1sZJ9vsMisZJdvupjpNkmuMkW3/ROGm2fbNxEv9+eqvj5CM52+dpfTxM73M5uePh1tbGwxsz60XjIbv9VMdDaZrjIVt/0Xhotn2z8ZB3fPPin5OzfavGj4/RgTE2LoYvuPzSzZ9u2G6mv/9i+u2b2e//aFfr7Z/Zz33NfPtn9nNlM9/+6X2uLLf9T0xvJqz19s/s97u0a7/N16YfNmv++bNr67eK5nFX5ZRPdR531oQbBybzuPDKifl/fLsn5v83pctOvw108H9Pmu8xaxq/Q99jVnQdc2C8nu/7PLnX8/G8ngMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pruyaGy5+/ote8856v2/+PzwS9d86Ccbrn3DVd/748DF7/n53T3ffXnXmmPX/vZ9h118/6fO3HnbNx96ce69f3+mMHBfbXFiuloNIXkuCaH60z1f/cKux44cLUtCCOWkb3sIC5KFDy1IMhEG/xpCWFNv5/g773nplLWjy2tv6h5XPj8TJLtfobcc2zOuneGKwj3iIFRNx9m2vZefFH737lXX/WrxD3/QtePZ7fs2SaoN4ymEeRc2Pr4rhDA7/T8qjrZF8cHpcmUIoafhcWcUtOu4Ftu/LGf96HQ5K132FsSJ9y/JrJcy22XXo67MsqegvunKa0e72xWZk1nPnoymK6+dsXxBuvxxujxxivHL8X8SSkmo1Ju/Ptk3RkLDcUtCMnYsq/X1Uv3YhnT/M+tJZr2UWS93ZfZrrN50oJWTZHx53C5THk/HlbT82MZzdRPn5pS/Nl1W0yfqy3E9ZG/U9E64Ud+vMbFdeyZpy/5QajgHNSuvH/j0YPSmZb3JwgmPGWlitHzp3BB2rbp5aXn1w7v7ctqR3J2k8ZMpxx+17ZcL5nzi+zdetigv/oWlNH6prfi/P+vx58+/8TvfyI1/a4xfbiv+yQ/0PHfWI9cvye2fPbF/Km3FH3rm0VsWH37Rjtz23x7jV9uKv2Ln491z9z7wYG77B2P/zG4r/tNv/8Af7nryvmdz44cYv6et+Kt3bvpid//eE3LjPxj7p7e98fPCjtOf6u//00Be/Cdi/Lltxb9z+21vu2P+TWfmHt+VsX/62op/9vH3Xzdn733H5J07k9s79coJ8Op0WHqNdUO63m6eOV0N+cLXByq1a7456f+5nawoY7SeeTMYHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQ9Ovrz714+e96yOrKkkISc42I03E+8qzVqwYaKPeoWcevWXx4RftaCxb1EYcAAAAoFjMw0v1kmpYFC5PZoejm24f5wiOjmvJ+PLsHMLsfVt2JE6pQ3HKHYpT6VCcrg7FmdWhON0dilMtiFMNrcWZPWmcUsvt6elQnN4OxZnToThzOxRnXofizO9QnL5J47Q+Dhd0KM7CDsU5rENxDu9QnCM6FOc1HYpzZIfiZOeUpzoO56ZbHpUXZ+xGuTBOJSnX72g2nx7rOWaa9fS2WE92zn6q9cxusZ7jMo8rTbGeaov1vH6a9SQt1vPGadZTKqgnjtsrsu2L9cS1Fsf/lR2Ks61Dca7qUJyrOxTnsx2K87kOxbmmzTj/570BYEpi/r8v3+sL3ZV3hJ70jJOdBYj57uKxnxNf7yac2FIx3usy5bOK4mUT9Uy8xWF8xYXty04gZOItyZR3jYtXqecjk8SrNsZbmrmzcH+zEwqZ9p2YKe8uipedWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAGfTrq0/9+Hnv+siqkITRf02NNBHvK89asWKgjXp3rbp5aXn1w7sby7orbQQCAAAACsU8vKteUg3dleWhO5k1brtqOg9QTdfLfbVl/7ywcnSZDJTG1nuSBZM+rpI+btnWDZuWbbly25vXbRi6ZPiS4Y1vXX7q8tMHTzv9tGVr160fHqz9DKG7IF4IYWz6YcuV2z49tH798OYttcJs+xelj1uUrifp4/rfEgZHl9em7V9YUF9pQn0zd6P46AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Be7dhci11nGAfw9M7Mz021jRvo1Dc1myEeJWjSJW0m1dA4IFtokZCnITHUtwSZY3DShTUqsYxuwrQmK0BIIkdxEYrG1eNMPW8R+EIjUaMCNQdqivdALpdVKWnIhKSPZnTNfmclsxtK06e93MWfmfZ/3fc47Fwv/swMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrOna+GSlPFEdjUKI+tTUe0jm0tk4Lg3R9+vPb/1xbuzk8vaxXGaIjQAAAICBkhw+0hzJh1wmHdLhqplPi0PbRGjlfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ONnujY+WSlPVC+OQoj61NR7SObS2TguDdH3jXee/MKrY2P/aB8rDrEPAAAAMFiSw1PNkXwohiVhJLqqoy55NrCga313XbLPwjnWdT876Fe3ZI5118yx7lMD6tY1rjsCAAAAfPQl+T/THCmEXGZe3/w/KNcndYu66tKN6zC/FQAAAAD+P0n+zzVHiiGXKTbz+lzz/uKuumT9oP/bJ+uX9Vk/6P/5axtX/6cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+O6dr4ZKU8UU1HIUR9auo9JHPpbByXhui76oXRf91y6KHF7WO5zBAbAQAAAAMlObwVvfMhlxkNI+Himdw/dtP+p7/69LPjIYTZmJ/Nhh0btm27e9Xsa1K38sihkR8dfut7Z9StnH09bwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADeN9O18clKeaJ6URRC1Kem3kMyl87GcWmIvq9/6St/e/z4c2+2jxWH2AcAAAAYLMnhreyfD8WQDdlwxcyn9qx/Wqprfb9nBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCF457v3PftDVNTG+/2xhtvvGm+Od9/mQAAgPfbohCF+jm6cv35vmsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODDYLo2PlkpT1TzUQhRn5p6D8lcOhvHpSH6xs8fzc07+cJL7WPFIfYBAAAABktyeCv750MxjISRcPnMp17PBGbyf+EDvEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQ2W6Nj5ZKU9U50UhRH1q6j0kc+lsHJeG6PvYzn1fPDj/hze3j+UyQ2wEAAAADJTk8GxzJB9ymU+HXLi68Xmqc0GUblx7PxdordvasWx0zutqHevSc163q+tkmcZpZtflk/0Ks9fmutKZ60pt64qh2b7UsS7s6Vg1b8B9BgAAADiPkvyfa44UQi6Ta8u5P++oL8i5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAf07XxyUp5ohpFIUR9auo9JHPpbByXhuh73+8/eck3frF7e/tYcYh9AAAAgMGSHN7K/vlQDAvDJ8LCmdwfCp31Sd2/K6cOPvqfvy8PYcUVx8Yyfff/7es3vtj9EkKqsygVwvxGv6hPv9/98dF7l9ZPPR7CisvTV59rv84t4/ozlY1rtx0+tvUsXwwAAABcQJL8P9IcKYRc5q6++T9J3ueU/+ffu/NXlzVeG4m8a0Wq0OiX6tPvy0uf/Ouy1f9863T+P1u/z+3bfPCyjoazI12iuF7evH3dsesOpJJTz/ZPd/VPvpevfffN/27a8cip2f75kG+ML2jdSq7V/8zXLhfF9anU3uqa9/bWOvtn+pz/oT+8dPw3C3a/e7r/O4tGm/2vOcv5z95/9NaH91y/79C6zv4hhFKv/m+/e3O48s93Pth9/tGujdu/+fbXLlFcP7L4xIHV+4s3dPaPuvon3/8vjz+252eP/ODZpH/yW5HlS+baP9XV/5Vdl+58+YH1Czr7p/qc/8XbXh3bUvr+n7rPf8fQ53/i2qduf21DfH/3FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIVlujY+WSlPVFNRCFGfmnoPyVw6G8elIfq+ccvRt2/b/dOftI8Vh9gHAAAAGCzJ4a3snw/FkA3ZMDqT+5+pbFy77fCxraEwOxs1rpmpLfds+8ymLdvvuuM83TkAAAAwV0n+zzRHCiGXWRpGGvm/vHn7umPXHUgl+T+V5P9Nd05tXBGada/sunTnyw+sX9B8ThDCzM8C8qfrPt+qu+nGo4UTf/nWsp51q1p1RxafOLB6f/GGpC60160MzecTT1z71O2vbYjvb95fe91nv7llqvF4Itl39NaH91y/79C65jka19HGvkndVGpvdc17e2tJXbpxzTfODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcabo2PlkpT1RDOoSoT029h2QunY3j0hB91yz99YOXnHxuYftYLjPERgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzXX4gVVRwH8HPu3W2ve3d1V4OsaF2tKOwhKYiol4qK0AihJ0PC0nyIgiCisIfW0Eis6CXIepGooNpCKMhNEi3W6J/0EvQHCqyHQKSFcpEeKnb3nOvdcadbsxZUnw8M554zM9/5zZyzs/cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyr9HQtnW4Pbb9/8pZzbvjo0buOP3LTO/duvejhV78f3njdh3t6Xzoxvmn55q+uX7Jx392rx3Y9f/Dn/rd+PdIx+KGZZmXqNkKIx2L4ovHuxDOPjX981tRYDCHU48BICINx8cHBWEhY9UsIYVOrztk73zx++eapduvOnlnjiwohxfsKzXquZ8bA7Hr5b2mkdbZl8sFLwjfXrtv26bI3Xu8ePTpy8pDYaFtPISzc0H5+dwhhQdqm5NW2NJ+c2rUhhN62867sUNf5f7L+S0v656b2jNQ2O+Tk/SsK/VrhuGI/6y60vR2uN19ldVQ9rpO+Qr/4Mpqvsjrz+GBq307tyr+YX89bDLUYulrl3xNPrpHQNm8xxOm5bLT6tdbchnT/hX4s9GuFfr27cF/T100LrR7j7PF8XGE8v4670vjy9nf1HG4tGT87tY30h3oi90Pxw4zmKR9a9zUt1zXxB7X8E2pt76C5xlsTnyajmcaacfEp5/w2h7xvfN0TF9bXv3dooKSOuCem/Fgpf8sng323v7bjgaVl+RtqKb9WKf/bNYd/vG3HC8+V5j+d8+uV8i/b33tszfvbV5Q+n4n8fLoq5d9x5IMnl51552hp/btzfqNS/jVjh3v6J/cfKK1/VX4+Cyrlf331jd+98vneo6X5Ief3VspfP3bfUz1DkxeX5h/Iz6dZbf38NHrFl0NDPwyX5X+W8/sr5b88suuqFxftXF06v2vz8xmolH/zBfu29U3uPa/s3Rl3n67/nAD/T0vSd6zHU7/q78z5avu98Oxw18x3vr609Z/OCxVMXWfh35gPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP//7i45gw==")
mknod$loop(0x0, 0x0, 0x1)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
syz_emit_ethernet(0xbf, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x2002002, &(0x7f00000000c0)=ANY=[], 0xfe, 0x2aa, &(0x7f0000000a40)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0x8)
poll(0x0, 0x0, 0x5)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, &(0x7f0000000140)=""/240, 0xf0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000080), 0x0, 0x4)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000})
close_range(r0, 0xffffffffffffffff, 0x0)

5.704265044s ago: executing program 2 (id=1315):
syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file2\x00', 0x509, &(0x7f0000000580)={[{@metadata_checksum={'metadata_checksum', 0x3d, 'crc32c'}}, {@data_checksum={'data_checksum', 0x3d, 'none'}}, {@btree_node_prefetch}, {@str_hash={'str_hash', 0x3d, 'crc64'}}, {@version_upgrade={'version_upgrade', 0x3d, 'none'}}, {@verbose}], [{@dont_hash}, {@obj_user={'obj_user', 0x3d, '\xa1'}}, {@smackfshat={'smackfshat', 0x3d, 'crc32c'}}]}, 0x1, 0x5b2f, &(0x7f000000b6c0)="$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")

4.914021725s ago: executing program 3 (id=1316):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015f0000000000000000670000000800", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0)

4.817734376s ago: executing program 0 (id=1317):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x8})

4.447891841s ago: executing program 0 (id=1318):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x1, @time, {0x1}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x48, &(0x7f0000000400)="03743d77482eed07fcfd08afe129571b50696abd0bf6acbad2d26409aef1ff7afd8aa0bcd60d22d120c909a932ad3c3c5e3618f0b5199770d52f859c09d929b015c5edfbdbd1b8d3"}}, {0x0, 0x0, 0x4, 0x0, @tick=0x7, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x4}}, {0x0, 0x1, 0x0, 0x0, @time={0x1}, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x38)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc)
write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c)
write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38)
write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9f2fb5905835280aeb65e178"}}], 0x54)
write$binfmt_misc(r1, &(0x7f0000000440), 0x58)

3.939236298s ago: executing program 0 (id=1319):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')

3.481963989s ago: executing program 1 (id=1320):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)=0xff)

3.013999228s ago: executing program 3 (id=1321):
mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b)

2.95821738s ago: executing program 0 (id=1322):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80070f, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@bsdgroups}, {@oldalloc}, {@oldalloc}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.497501821s ago: executing program 0 (id=1323):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0))
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080))
r3 = eventfd2(0x8001, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3})

2.205088821s ago: executing program 1 (id=1324):
creat(&(0x7f0000000380)='./file0\x00', 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff000)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
splice(r5, 0x0, r1, 0x0, 0x78dd, 0x0)

2.180310681s ago: executing program 2 (id=1325):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000102000000a6a77f5e9122415900"}}}]}, 0x48}}, 0x0)

1.589179293s ago: executing program 2 (id=1326):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.210138466s ago: executing program 0 (id=1327):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d104020"], 0x0)
close(0x3)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

1.090973499s ago: executing program 3 (id=1328):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x8})

769.698794ms ago: executing program 1 (id=1329):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x1, @time, {0x1}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x48, &(0x7f0000000400)="03743d77482eed07fcfd08afe129571b50696abd0bf6acbad2d26409aef1ff7afd8aa0bcd60d22d120c909a932ad3c3c5e3618f0b5199770d52f859c09d929b015c5edfbdbd1b8d3"}}, {0x0, 0x0, 0x4, 0x0, @tick=0x7, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x4}}, {0x0, 0x1, 0x0, 0x0, @time={0x1}, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x38)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc)
write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c)
write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38)
write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9f2fb5905835280aeb65e178"}}], 0x54)
write$binfmt_misc(r1, &(0x7f0000000440), 0x58)

636.437232ms ago: executing program 2 (id=1330):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x5, "2cdf424c1a"}, 0x0})

571.484106ms ago: executing program 3 (id=1331):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015f0000000000000000670000000800", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0)

47.500583ms ago: executing program 1 (id=1332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')

0s ago: executing program 3 (id=1333):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80070f, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@bsdgroups}, {@oldalloc}, {@oldalloc}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

243] usb 4-1: Using ep0 maxpacket: 32
[  567.959027][ T5243] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  567.968722][ T5243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.977220][ T5243] usb 4-1: Product: syz
[  567.981738][ T5243] usb 4-1: Manufacturer: syz
[  567.986666][ T5243] usb 4-1: SerialNumber: syz
[  568.052504][ T5243] usb 4-1: config 0 descriptor??
[  568.076592][ T5243] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  568.331303][ T4872] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  568.403735][ T5248] usb 3-1: USB disconnect, device number 27
[  568.447213][ T5248] usblp0: removed
[  568.551619][ T4872] usb 5-1: Using ep0 maxpacket: 32
[  568.601817][ T4872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.613505][ T4872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  568.624028][ T4872] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  568.633668][ T4872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.746550][ T4872] usb 5-1: config 0 descriptor??
[  569.231498][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  569.246559][ T4872] ft260 0003:0403:6030.000D: unknown main item tag 0x0
[  569.413653][ T4872] ft260 0003:0403:6030.000D: failed to retrieve chip version
[  569.415113][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.422990][ T4872] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -5
[  569.433789][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.453008][   T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  569.462625][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.550776][ T5243] gspca_ov534_9: reg_r err -71
[  569.572801][   T10] usb 1-1: config 0 descriptor??
[  569.777516][   T29] audit: type=1326 audit(1727594235.988:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.875" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x0
[  569.798910][    C1] vkms_vblank_simulate: vblank timer overrun
[  569.843123][ T8830] loop0: detected capacity change from 0 to 1024
[  569.891533][ T8830] hfsplus: failed to load root directory
[  570.081220][ T5243] gspca_ov534_9: Unknown sensor 0000
[  570.081558][ T5243] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  570.135227][ T5243] usb 4-1: USB disconnect, device number 28
[  570.145131][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  570.152059][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  570.210161][   T10] usb 1-1: USB disconnect, device number 20
[  571.241609][ T5248] usb 5-1: USB disconnect, device number 16
[  571.818879][ T8855] loop4: detected capacity change from 0 to 2048
[  571.827638][ T8860] fuse: Bad value for 'user_id'
[  571.837787][ T8860] fuse: Bad value for 'user_id'
[  571.947689][ T8855]  loop4: p3 < > p4 < >
[  571.952791][ T8855] loop4: partition table partially beyond EOD, truncated
[  571.961325][ T8855] loop4: p3 start 4284289 is beyond EOD, truncated
[  571.981323][ T4872] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  572.131753][ T5248] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  572.163675][ T4872] usb 2-1: config 1 interface 0 has no altsetting 0
[  572.215918][ T4872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  572.225598][ T4872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.234204][ T4872] usb 2-1: Product: syz
[  572.238604][ T4872] usb 2-1: Manufacturer: syz
[  572.247656][ T4872] usb 2-1: SerialNumber: syz
[  572.471666][ T5248] usb 5-1: Using ep0 maxpacket: 16
[  572.487978][ T5248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  572.667376][ T5248] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  572.677179][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.685812][ T5248] usb 5-1: Product: syz
[  572.690381][ T5248] usb 5-1: Manufacturer: syz
[  572.695603][ T5248] usb 5-1: SerialNumber: syz
[  572.728514][ T5248] usb 5-1: config 0 descriptor??
[  573.092854][ T4872] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  573.101568][   T29] audit: type=1326 audit(1727594239.298:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.0.888" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0
[  573.624754][    C0] usblp0: nonzero write bulk status received: -71
[  573.641801][ T5243] usb 2-1: USB disconnect, device number 28
[  573.737548][ T8858] usblp0: removed
[  573.902349][   T10] usb 5-1: USB disconnect, device number 17
[  574.029836][ T8872] loop3: detected capacity change from 0 to 4096
[  574.661535][ T5248] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  574.933143][ T5248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.945376][ T5248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.956236][ T5248] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  574.965709][ T5248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.062380][ T8888] loop1: detected capacity change from 0 to 512
[  575.085396][ T5248] usb 1-1: config 0 descriptor??
[  575.348734][ T4872] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  575.571630][ T4872] usb 4-1: Using ep0 maxpacket: 32
[  575.634941][ T4872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  575.646476][ T4872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  575.656893][ T4872] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  575.666758][ T4872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.690438][ T8898] loop0: detected capacity change from 0 to 1024
[  575.786261][ T4872] usb 4-1: config 0 descriptor??
[  575.834286][ T8888] loop1: detected capacity change from 0 to 4096
[  575.888092][ T8888] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  576.014590][ T8898] hfsplus: failed to load root directory
[  576.300726][ T4872] ft260 0003:0403:6030.000E: unknown main item tag 0x0
[  576.309676][ T5248] usbhid 1-1:0.0: can't add hid device: -71
[  576.316602][ T5248] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  576.382912][ T5248] usb 1-1: USB disconnect, device number 21
[  576.487229][ T4872] ft260 0003:0403:6030.000E: failed to retrieve chip version
[  576.491775][ T8888] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  576.496717][ T4872] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -5
[  576.831715][ T8904] fuse: Bad value for 'user_id'
[  576.836930][ T8904] fuse: Bad value for 'user_id'
[  577.045488][ T8907] loop2: detected capacity change from 0 to 512
[  577.089177][ T8907] EXT4-fs: Ignoring removed oldalloc option
[  577.095625][ T8907] EXT4-fs: Ignoring removed oldalloc option
[  577.178383][ T8907] EXT4-fs (loop2): orphan cleanup on readonly fs
[  577.221577][ T8907] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.900: Parent and EA inode have the same ino 15
[  577.273042][ T8907] EXT4-fs (loop2): Remounting filesystem read-only
[  577.279978][ T8907] EXT4-fs (loop2): 1 orphan inode deleted
[  577.287970][ T8907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  577.533573][   T29] audit: type=1326 audit(1727594243.738:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.1.901" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x0
[  577.889649][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.051956][ T5248] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  578.212900][   T10] usb 4-1: USB disconnect, device number 29
[  578.543121][ T5248] usb 5-1: config 1 interface 0 has no altsetting 0
[  578.571284][ T5248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  578.580827][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.589358][ T5248] usb 5-1: Product: syz
[  578.597542][ T5248] usb 5-1: Manufacturer: syz
[  578.603872][ T5248] usb 5-1: SerialNumber: syz
[  579.070619][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'.
[  579.326025][ T5248] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  579.560475][ T8933] loop3: detected capacity change from 0 to 2048
[  579.633217][ T8933]  loop3: p3 < > p4 < >
[  579.637664][ T8933] loop3: partition table partially beyond EOD, truncated
[  579.646269][ T8933] loop3: p3 start 4284289 is beyond EOD, truncated
[  579.725492][ T5243] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  579.795273][ T4623]  loop3: p3 < > p4 < >
[  579.799956][ T4623] loop3: partition table partially beyond EOD, truncated
[  579.808371][ T4623] loop3: p3 start 4284289 is beyond EOD, truncated
[  579.883638][    C0] usblp0: nonzero write bulk status received: -71
[  579.895485][   T10] usb 5-1: USB disconnect, device number 18
[  579.911471][ T5243] usb 4-1: Using ep0 maxpacket: 16
[  579.935107][   T10] usblp0: removed
[  579.944296][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  579.999163][ T5243] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  580.008847][ T5243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.017332][ T5243] usb 4-1: Product: syz
[  580.021919][ T5243] usb 4-1: Manufacturer: syz
[  580.030438][ T5243] usb 4-1: SerialNumber: syz
[  580.146439][ T5243] usb 4-1: config 0 descriptor??
[  580.241189][ T4872] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  580.504448][ T4872] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  580.513976][ T4872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.522514][ T4872] usb 3-1: Product: syz
[  580.526913][ T4872] usb 3-1: Manufacturer: syz
[  580.531816][ T4872] usb 3-1: SerialNumber: syz
[  580.600822][ T4872] usb 3-1: config 0 descriptor??
[  580.607794][ T8951] fuse: Bad value for 'user_id'
[  580.613098][ T8951] fuse: Bad value for 'user_id'
[  580.991885][ T8954] loop4: detected capacity change from 0 to 512
[  581.013734][ T8954] EXT4-fs: Ignoring removed oldalloc option
[  581.020027][ T8954] EXT4-fs: Ignoring removed oldalloc option
[  581.136440][ T5248] usb 4-1: USB disconnect, device number 30
[  581.186776][ T8954] EXT4-fs (loop4): orphan cleanup on readonly fs
[  581.209548][ T8954] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.914: Parent and EA inode have the same ino 15
[  581.247679][ T8954] EXT4-fs (loop4): Remounting filesystem read-only
[  581.259948][ T8954] EXT4-fs (loop4): 1 orphan inode deleted
[  581.269890][ T8954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  581.283350][ T4872] usb 3-1: f81604_read: reg: 105 failed: -EPIPE
[  581.289872][ T4872] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPIPE
[  581.300540][ T4872] f81604 3-1:0.0: probe with driver f81604 failed with error -32
[  581.442280][ T8947] loop0: detected capacity change from 0 to 4096
[  581.501495][ T8947] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  581.718695][ T8947] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  581.729943][ T7808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.392235][ T4872] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  582.591646][ T4872] usb 5-1: Using ep0 maxpacket: 32
[  582.619573][ T4872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.631176][ T4872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.641561][ T4872] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  582.650972][ T4872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.763283][ T4872] usb 5-1: config 0 descriptor??
[  583.138449][ T5243] usb 3-1: USB disconnect, device number 28
[  583.324444][ T4872] ft260 0003:0403:6030.000F: unknown main item tag 0x0
[  583.456626][ T4872] ft260 0003:0403:6030.000F: failed to retrieve chip version
[  583.468102][ T4872] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -5
[  583.594763][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'.
[  583.912369][ T8984] fuse: Bad value for 'fd'
[  584.221435][    T8] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  584.288549][ T8993] loop0: detected capacity change from 0 to 512
[  584.305052][ T8993] EXT4-fs: Ignoring removed oldalloc option
[  584.311747][ T8993] EXT4-fs: Ignoring removed oldalloc option
[  584.346200][ T8993] EXT4-fs (loop0): orphan cleanup on readonly fs
[  584.354934][ T8993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.926: Parent and EA inode have the same ino 15
[  584.408853][    T8] usb 2-1: config 1 interface 0 has no altsetting 0
[  584.416875][ T8993] EXT4-fs (loop0): Remounting filesystem read-only
[  584.424200][ T8993] EXT4-fs (loop0): 1 orphan inode deleted
[  584.436330][ T8993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  584.441145][ T8994] loop2: detected capacity change from 0 to 2048
[  584.468683][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  584.478761][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.487477][    T8] usb 2-1: Product: syz
[  584.492032][    T8] usb 2-1: Manufacturer: syz
[  584.496859][    T8] usb 2-1: SerialNumber: syz
[  584.570680][ T8994]  loop2: p3 < > p4 < >
[  584.575573][ T8994] loop2: partition table partially beyond EOD, truncated
[  584.584786][ T8994] loop2: p3 start 4284289 is beyond EOD, truncated
[  584.791421][ T4872] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  584.872252][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.971876][ T4872] usb 3-1: Using ep0 maxpacket: 16
[  585.007576][ T4872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  585.113212][ T4872] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  585.122812][ T4872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.131285][ T4872] usb 3-1: Product: syz
[  585.135679][ T4872] usb 3-1: Manufacturer: syz
[  585.140509][ T4872] usb 3-1: SerialNumber: syz
[  585.189457][    T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  585.306825][ T5243] usb 5-1: USB disconnect, device number 19
[  585.333123][ T8998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.929'.
[  585.346910][ T4872] usb 3-1: config 0 descriptor??
[  585.783870][ T9003] loop3: detected capacity change from 0 to 16
[  585.848103][ T9003] erofs: (device loop3): mounted with root inode @ nid 36.
[  585.929414][ T4872] usb 2-1: USB disconnect, device number 29
[  585.951636][ T8981] usblp0: removed
[  586.393838][    T8] usb 3-1: USB disconnect, device number 29
[  586.692800][ T4872] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  586.726698][ T9000] loop0: detected capacity change from 0 to 4096
[  586.765066][ T9000] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  586.907817][ T4872] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  586.917511][ T4872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.926259][ T4872] usb 5-1: Product: syz
[  586.930668][ T4872] usb 5-1: Manufacturer: syz
[  586.935617][ T4872] usb 5-1: SerialNumber: syz
[  587.011859][ T4872] usb 5-1: config 0 descriptor??
[  587.268988][ T9000] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  587.318496][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'.
[  587.690409][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  587.697413][ T1246] ieee802154 phy1 wpan1: encryption failed: -22
[  587.723720][ T4872] usb 5-1: f81604_read: reg: 105 failed: -EPIPE
[  587.730379][ T4872] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPIPE
[  587.738147][ T4872] f81604 5-1:0.0: probe with driver f81604 failed with error -32
[  587.991551][ T9024] loop1: detected capacity change from 0 to 512
[  588.001544][ T9024] EXT4-fs: Ignoring removed oldalloc option
[  588.007703][ T9024] EXT4-fs: Ignoring removed oldalloc option
[  588.140653][ T9024] EXT4-fs (loop1): orphan cleanup on readonly fs
[  588.152747][ T9024] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.940: Parent and EA inode have the same ino 15
[  588.231661][ T9024] EXT4-fs (loop1): Remounting filesystem read-only
[  588.238495][ T9024] EXT4-fs (loop1): 1 orphan inode deleted
[  588.246330][ T9024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  588.282584][ T5248] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  588.579087][ T5248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.591048][ T5248] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00
[  588.600389][ T5248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.632289][ T5248] usb 4-1: config 0 descriptor??
[  588.648858][ T6957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.814850][    T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  588.825446][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'.
[  588.879614][ T5248] usbhid 4-1:0.0: can't add hid device: -71
[  588.886477][ T5248] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  588.945159][ T5248] usb 4-1: USB disconnect, device number 31
[  589.098779][    T8] usb 1-1: Using ep0 maxpacket: 32
[  589.110413][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.122517][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  589.132704][    T8] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  589.145784][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.195672][    T8] usb 1-1: config 0 descriptor??
[  589.542260][ T5197] Bluetooth: hci0: unexpected event for opcode 0x0809
[  589.575230][ T5248] usb 5-1: USB disconnect, device number 20
[  589.757077][ T5197] Bluetooth: hci2: command 0x0406 tx timeout
[  590.089644][    T8] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  590.111234][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'.
[  590.229040][    T8] ft260 0003:0403:6030.0010: failed to retrieve chip version
[  590.238574][    T8] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -5
[  590.285595][ T9051] loop4: detected capacity change from 0 to 2048
[  590.474747][ T9051]  loop4: p3 < > p4 < >
[  590.479272][ T9051] loop4: partition table partially beyond EOD, truncated
[  590.487764][ T9051] loop4: p3 start 4284289 is beyond EOD, truncated
[  590.526231][ T9048] loop3: detected capacity change from 0 to 4096
[  590.735721][ T9048] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  590.855236][ T5248] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  591.101928][ T5248] usb 5-1: Using ep0 maxpacket: 16
[  591.151361][ T5248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  591.307338][ T5248] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  591.317452][ T5248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.326091][ T5248] usb 5-1: Product: syz
[  591.330490][ T5248] usb 5-1: Manufacturer: syz
[  591.335421][ T5248] usb 5-1: SerialNumber: syz
[  591.349516][ T5248] usb 5-1: config 0 descriptor??
[  591.381328][ T9048] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  592.059861][    T8] usb 1-1: USB disconnect, device number 22
[  592.406882][ T9061] loop0: detected capacity change from 0 to 512
[  592.421086][ T9061] EXT4-fs: Ignoring removed oldalloc option
[  592.427314][ T9061] EXT4-fs: Ignoring removed oldalloc option
[  592.648518][ T9061] EXT4-fs (loop0): orphan cleanup on readonly fs
[  592.691856][ T9061] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.953: Parent and EA inode have the same ino 15
[  592.805480][ T9061] EXT4-fs (loop0): Remounting filesystem read-only
[  592.812625][ T9061] EXT4-fs (loop0): 1 orphan inode deleted
[  592.821055][ T9061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  592.975194][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'.
[  592.985485][ T5243] usb 5-1: USB disconnect, device number 21
[  593.533173][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.597191][ T9070] loop4: detected capacity change from 0 to 2048
[  593.744242][ T9074] loop0: detected capacity change from 0 to 16
[  593.855739][ T9074] erofs: (device loop0): mounted with root inode @ nid 36.
[  593.974089][ T9070] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  594.060970][ T9074] syz.0.958: attempt to access beyond end of device
[  594.060970][ T9074] loop0: rw=0, sector=24, nr_sectors = 8 limit=16
[  594.074716][ T9074] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 43 of nid 36
[  594.086368][ T9074] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  594.096362][ T9074] syz.0.958: attempt to access beyond end of device
[  594.096362][ T9074] loop0: rw=0, sector=296, nr_sectors = 8 limit=16
[  594.109919][ T9074] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  594.118781][ T9074] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  594.570049][ T5248] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  594.694907][ T9075] overlay: ./file1 is not a directory
[  594.817027][ T9070] overlayfs: failed to resolve './file1': -2
[  595.092217][ T5248] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  595.101682][ T5248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.109979][ T5248] usb 3-1: Product: syz
[  595.114563][ T5248] usb 3-1: Manufacturer: syz
[  595.119386][ T5248] usb 3-1: SerialNumber: syz
[  595.336792][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'.
[  595.358775][ T9074] syz.0.958 (9074): drop_caches: 2
[  595.374449][ T5248] usb 3-1: config 0 descriptor??
[  596.326050][ T9084] loop1: detected capacity change from 0 to 4096
[  596.331241][ T5243] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  596.353567][ T5248] usb 3-1: f81604_read: reg: 105 failed: -EPIPE
[  596.360211][ T5248] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPIPE
[  596.368340][ T5248] f81604 3-1:0.0: probe with driver f81604 failed with error -32
[  596.386626][ T9084] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  596.481485][ T4872] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  596.501521][ T5243] usb 1-1: device descriptor read/64, error -71
[  596.567523][ T9084] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  596.641829][ T4872] usb 4-1: Using ep0 maxpacket: 32
[  596.655657][ T4872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.667821][ T4872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  596.678202][ T4872] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  596.687762][ T4872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.726398][ T4872] usb 4-1: config 0 descriptor??
[  596.761554][ T5243] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  596.993121][ T5243] usb 1-1: device descriptor read/64, error -71
[  597.103494][ T5243] usb usb1-port1: attempt power cycle
[  597.241777][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'.
[  597.262536][ T4872] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[  597.457145][ T4872] ft260 0003:0403:6030.0011: failed to retrieve chip version
[  597.466566][ T4872] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -5
[  597.513505][ T5243] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  597.581865][ T5243] usb 1-1: device descriptor read/8, error -71
[  597.619950][ T4872] usb 3-1: USB disconnect, device number 30
[  597.768955][ T9100] loop4: detected capacity change from 0 to 512
[  597.799362][ T9100] EXT4-fs: Ignoring removed oldalloc option
[  597.805813][ T9100] EXT4-fs: Ignoring removed oldalloc option
[  597.813951][ T9098] loop1: detected capacity change from 0 to 2048
[  597.847263][ T5243] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  597.900490][ T9100] EXT4-fs (loop4): orphan cleanup on readonly fs
[  597.921892][ T9098]  loop1: p3 < > p4 < >
[  597.926324][ T9098] loop1: partition table partially beyond EOD, truncated
[  597.935086][ T9098] loop1: p3 start 4284289 is beyond EOD, truncated
[  598.024075][ T9100] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.968: Parent and EA inode have the same ino 15
[  598.037779][ T4872] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  598.074202][ T9100] EXT4-fs (loop4): Remounting filesystem read-only
[  598.081407][ T9100] EXT4-fs (loop4): 1 orphan inode deleted
[  598.089225][ T9100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  598.241172][ T4872] usb 2-1: Using ep0 maxpacket: 16
[  598.279747][ T4872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  598.309351][ T5243] usb 1-1: device descriptor read/8, error -71
[  598.369851][ T4872] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  598.379729][ T4872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.388278][ T4872] usb 2-1: Product: syz
[  598.392826][ T4872] usb 2-1: Manufacturer: syz
[  598.397650][ T4872] usb 2-1: SerialNumber: syz
[  598.422708][ T5243] usb usb1-port1: unable to enumerate USB device
[  598.474138][ T4872] usb 2-1: config 0 descriptor??
[  598.503441][ T7808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.673801][ T9108] loop2: detected capacity change from 0 to 512
[  598.743771][   T10] usb 2-1: USB disconnect, device number 30
[  598.821466][ T9108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  599.299516][ T5243] usb 4-1: USB disconnect, device number 32
[  599.320375][ T9112] loop4: detected capacity change from 0 to 2048
[  599.394683][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.412977][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'.
[  599.534362][ T9112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  599.735415][ T9112] overlayfs: upper fs needs to support d_type.
[  599.801516][ T9112] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  599.808802][ T9112] overlayfs: failed to set xattr on upper
[  599.814910][ T9112] overlayfs: ...falling back to redirect_dir=nofollow.
[  599.822073][ T9112] overlayfs: ...falling back to index=off.
[  599.828158][ T9112] overlayfs: ...falling back to uuid=null.
[  599.837874][ T9112] overlayfs: Failed to create volatile/dirty file.
[  599.866577][ T9121] overlayfs: missing 'lowerdir'
[  600.551668][   T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  600.678144][ T9132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.978'.
[  600.721073][   T10] usb 2-1: Using ep0 maxpacket: 16
[  600.752263][   T10] usb 2-1: config 0 has no interfaces?
[  600.777875][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  600.787526][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.795967][   T10] usb 2-1: Product: syz
[  600.800349][   T10] usb 2-1: Manufacturer: syz
[  600.805393][   T10] usb 2-1: SerialNumber: syz
[  600.826903][   T10] usb 2-1: config 0 descriptor??
[  601.040776][ T9124] loop3: detected capacity change from 0 to 4096
[  601.057116][   T10] usb 2-1: USB disconnect, device number 31
[  601.063922][ T9124] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  601.123119][ T5243] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  601.244475][ T9124] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  601.369187][ T5243] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  601.378876][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.387460][ T5243] usb 1-1: Product: syz
[  601.393805][ T5243] usb 1-1: Manufacturer: syz
[  601.398632][ T5243] usb 1-1: SerialNumber: syz
[  601.450307][ T5243] usb 1-1: config 0 descriptor??
[  601.785999][ T9138] loop2: detected capacity change from 0 to 512
[  601.832650][ T9138] EXT4-fs: Ignoring removed oldalloc option
[  601.843468][ T9138] EXT4-fs: Ignoring removed oldalloc option
[  602.086928][ T9138] EXT4-fs (loop2): orphan cleanup on readonly fs
[  602.174164][ T5243] usb 1-1: f81604_read: reg: 105 failed: -EPIPE
[  602.180812][ T5243] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPIPE
[  602.188658][ T5243] f81604 1-1:0.0: probe with driver f81604 failed with error -32
[  602.202503][ T4872] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  602.209687][ T9138] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.981: Parent and EA inode have the same ino 15
[  602.257397][ T9149] loop1: detected capacity change from 0 to 512
[  602.279632][ T9138] EXT4-fs (loop2): Remounting filesystem read-only
[  602.286659][ T9138] EXT4-fs (loop2): 1 orphan inode deleted
[  602.294578][ T9138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  602.341686][ T9149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  602.377742][ T4872] usb 4-1: Using ep0 maxpacket: 32
[  602.432873][ T4872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  602.444439][ T4872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  602.458559][ T4872] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  602.469296][ T4872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.608843][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.642298][ T4872] usb 4-1: config 0 descriptor??
[  602.823433][ T6957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.080762][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'.
[  603.140339][ T4872] ft260 0003:0403:6030.0012: unknown main item tag 0x0
[  603.343641][ T4872] ft260 0003:0403:6030.0012: failed to retrieve chip version
[  603.353273][ T4872] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -5
[  603.666779][ T9152] loop4: detected capacity change from 0 to 4096
[  603.695192][ T9163] loop1: detected capacity change from 0 to 512
[  603.711144][ T9163] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  603.748548][ T9152] NILFS (loop4): invalid segment: Checksum error in segment payload
[  603.759011][ T9152] NILFS (loop4): trying rollback from an earlier position
[  603.836105][ T9163] EXT4-fs (loop1): 1 truncate cleaned up
[  603.844483][ T9163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.895567][ T9152] NILFS (loop4): recovery complete
[  603.933369][ T9167] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  604.013861][ T9161] loop2: detected capacity change from 0 to 2048
[  604.042079][ T5243] usb 1-1: USB disconnect, device number 27
[  604.171365][   T29] audit: type=1804 audit(1727594270.378:22): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.984" name="/newroot/72/file1/bus" dev="loop4" ino=12 res=1 errno=0
[  604.172064][ T6957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.192772][    C1] vkms_vblank_simulate: vblank timer overrun
[  604.258653][ T9161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  604.352140][ T9161] overlayfs: upper fs needs to support d_type.
[  604.368057][ T9161] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  604.375712][ T9161] overlayfs: failed to set xattr on upper
[  604.382335][ T9161] overlayfs: ...falling back to redirect_dir=nofollow.
[  604.389374][ T9161] overlayfs: ...falling back to index=off.
[  604.403340][ T9161] overlayfs: ...falling back to uuid=null.
[  604.412952][ T9161] overlayfs: Failed to create volatile/dirty file.
[  604.461365][ T9170] overlayfs: missing 'workdir'
[  604.510633][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.990'.
[  604.561928][ T9173] sp0: Synchronizing with TNC
[  604.899809][ T4872] usb 4-1: USB disconnect, device number 33
[  605.592957][ T9175] loop0: detected capacity change from 0 to 4096
[  605.629399][ T9175] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  605.772749][ T5249] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  605.983548][ T5249] usb 2-1: Using ep0 maxpacket: 16
[  606.073262][ T5249] usb 2-1: config 0 has no interfaces?
[  606.163731][ T5249] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  606.173554][ T5249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.182017][ T5249] usb 2-1: Product: syz
[  606.186413][ T5249] usb 2-1: Manufacturer: syz
[  606.191444][ T5249] usb 2-1: SerialNumber: syz
[  606.251965][ T9175] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  606.271444][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'.
[  606.312391][ T5249] usb 2-1: config 0 descriptor??
[  606.407714][ T9187] loop4: detected capacity change from 0 to 512
[  606.494220][ T9187] EXT4-fs: Ignoring removed oldalloc option
[  606.500519][ T9187] EXT4-fs: Ignoring removed oldalloc option
[  606.563443][ T5249] usb 2-1: USB disconnect, device number 32
[  606.591654][ T9187] EXT4-fs (loop4): orphan cleanup on readonly fs
[  606.622033][ T9187] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.996: Parent and EA inode have the same ino 15
[  606.654048][ T9187] EXT4-fs (loop4): Remounting filesystem read-only
[  606.661148][ T9187] EXT4-fs (loop4): 1 orphan inode deleted
[  606.668781][ T9187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  607.224720][ T7808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.459710][ T9193] loop0: detected capacity change from 0 to 512
[  607.771711][ T9193] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  607.829243][ T9193] EXT4-fs (loop0): 1 truncate cleaned up
[  607.836958][ T9193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.901121][ T5249] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  608.036091][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.114685][ T5249] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  608.124467][ T5249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.132811][ T5249] usb 3-1: Product: syz
[  608.137209][ T5249] usb 3-1: Manufacturer: syz
[  608.142226][ T5249] usb 3-1: SerialNumber: syz
[  608.169011][ T5249] usb 3-1: config 0 descriptor??
[  608.842315][ T5249] usb 3-1: f81604_read: reg: 105 failed: -EPIPE
[  608.849028][ T5249] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPIPE
[  608.856925][ T5249] f81604 3-1:0.0: probe with driver f81604 failed with error -32
[  608.898017][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'.
[  608.952571][ T9202] sp0: Synchronizing with TNC
[  609.057626][ T9204] loop0: detected capacity change from 0 to 2048
[  609.142694][ T9204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  609.322366][ T5243] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  609.395502][ T9204] overlayfs: upper fs needs to support d_type.
[  609.430568][ T9206] overlayfs: missing 'workdir'
[  609.538541][ T9204] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  609.546106][ T9204] overlayfs: failed to set xattr on upper
[  609.552296][ T9204] overlayfs: ...falling back to redirect_dir=nofollow.
[  609.559524][ T9204] overlayfs: ...falling back to index=off.
[  609.565854][ T9204] overlayfs: ...falling back to uuid=null.
[  609.575236][ T9204] overlayfs: Failed to create volatile/dirty file.
[  609.631958][ T5243] usb 2-1: Using ep0 maxpacket: 32
[  609.735186][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.746950][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.757236][ T5243] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  609.766767][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.803663][ T5243] usb 2-1: config 0 descriptor??
[  610.431240][ T5243] ft260 0003:0403:6030.0013: unknown main item tag 0x0
[  610.622623][ T5243] ft260 0003:0403:6030.0013: failed to retrieve chip version
[  610.636334][ T5243] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -5
[  610.782254][ T5247] usb 3-1: USB disconnect, device number 31
[  611.118365][ T9214] syz.4.1009 (9214): drop_caches: 2
[  611.202819][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'.
[  611.730249][ T9224] loop2: detected capacity change from 0 to 512
[  611.997199][ T9224] EXT4-fs: Ignoring removed oldalloc option
[  612.003720][ T9224] EXT4-fs: Ignoring removed oldalloc option
[  612.073541][ T5243] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  612.092815][ T5249] usb 2-1: USB disconnect, device number 33
[  612.107100][ T9224] EXT4-fs (loop2): orphan cleanup on readonly fs
[  612.145463][ T9224] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1012: Parent and EA inode have the same ino 15
[  612.230586][ T9224] EXT4-fs (loop2): Remounting filesystem read-only
[  612.237661][ T9224] EXT4-fs (loop2): 1 orphan inode deleted
[  612.245794][ T9224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  612.461325][ T5243] usb 1-1: Using ep0 maxpacket: 16
[  612.775339][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.783062][ T9231] loop1: detected capacity change from 0 to 4096
[  612.822190][ T5243] usb 1-1: config 0 has no interfaces?
[  612.826494][ T9231] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  612.849252][ T5243] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  612.858995][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.867798][ T5243] usb 1-1: Product: syz
[  612.872310][ T5243] usb 1-1: Manufacturer: syz
[  612.877139][ T5243] usb 1-1: SerialNumber: syz
[  612.981940][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'.
[  613.019606][ T5243] usb 1-1: config 0 descriptor??
[  613.285213][ T5247] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  613.344532][ T9240] loop3: detected capacity change from 0 to 2048
[  613.357185][ T5243] usb 1-1: USB disconnect, device number 28
[  613.399619][ T9231] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  613.404578][ T9240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  613.471195][ T5247] usb 5-1: device descriptor read/64, error -71
[  613.505693][ T9240] overlayfs: upper fs needs to support d_type.
[  613.555635][ T9242] overlayfs: missing 'workdir'
[  613.566499][ T9240] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  613.574324][ T9240] overlayfs: failed to set xattr on upper
[  613.580311][ T9240] overlayfs: ...falling back to redirect_dir=nofollow.
[  613.587578][ T9240] overlayfs: ...falling back to index=off.
[  613.593984][ T9240] overlayfs: ...falling back to uuid=null.
[  613.603444][ T9240] overlayfs: Failed to create volatile/dirty file.
[  613.736598][ T5247] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  613.931846][ T5247] usb 5-1: device descriptor read/64, error -71
[  614.043640][ T5247] usb usb5-port1: attempt power cycle
[  614.435050][ T5247] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  614.514667][ T5247] usb 5-1: device descriptor read/8, error -71
[  614.779918][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'.
[  614.802702][ T5247] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  614.811407][ T5248] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  614.854626][ T5247] usb 5-1: device descriptor read/8, error -71
[  614.976676][ T5247] usb usb5-port1: unable to enumerate USB device
[  615.166524][ T5248] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  615.176968][ T5248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.185569][ T5248] usb 1-1: Product: syz
[  615.190030][ T5248] usb 1-1: Manufacturer: syz
[  615.194976][ T5248] usb 1-1: SerialNumber: syz
[  615.235428][ T5248] usb 1-1: config 0 descriptor??
[  615.425742][   T29] audit: type=1800 audit(1727594281.638:23): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1015" name="bus" dev="loop1" ino=33 res=0 errno=0
[  615.476555][ T5247] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  615.550248][ T9258] syz.2.1024 (9258): drop_caches: 2
[  615.568841][ T9258] syz.2.1024 (9258): drop_caches: 2
[  615.592439][ T9231] loop1: detected capacity change from 4096 to 0
[  615.608575][    C0] I/O error, dev loop1, sector 560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  615.619408][ T9241] ntfs3: loop1: failed to read volume at offset 0x46000
[  615.671982][ T5247] usb 4-1: Using ep0 maxpacket: 32
[  615.686029][ T5247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.704730][ T5247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.715232][ T5247] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  615.724667][ T5247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.803311][ T5247] usb 4-1: config 0 descriptor??
[  615.911699][ T5248] usb 1-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  615.918601][ T5248] f81604 1-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  615.926969][ T5248] f81604 1-1:0.0: probe with driver f81604 failed with error -121
[  616.052862][ T6957] syz-executor: attempt to access beyond end of device
[  616.052862][ T6957] loop1: rw=0, sector=552, nr_sectors = 8 limit=0
[  616.066778][ T6957] ntfs3: loop1: failed to read volume at offset 0x45000
[  616.243272][ T5247] ft260 0003:0403:6030.0014: unknown main item tag 0x0
[  616.358819][ T6957] syz-executor: attempt to access beyond end of device
[  616.358819][ T6957] loop1: rw=0, sector=40, nr_sectors = 8 limit=0
[  616.394036][ T6957] syz-executor: attempt to access beyond end of device
[  616.394036][ T6957] loop1: rw=2049, sector=2040, nr_sectors = 8 limit=0
[  616.410609][ T6957] Buffer I/O error on dev loop1, logical block 255, lost sync page write
[  616.449872][ T5247] ft260 0003:0403:6030.0014: failed to retrieve chip version
[  616.459229][ T5247] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -5
[  616.484790][ T6957] syz-executor: attempt to access beyond end of device
[  616.484790][ T6957] loop1: rw=0, sector=40, nr_sectors = 8 limit=0
[  616.943034][   T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.060410][   T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.129268][   T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.738549][   T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.900406][ T5248] usb 1-1: USB disconnect, device number 29
[  618.340255][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'.
[  618.470446][   T61] bridge_slave_1: left allmulticast mode
[  618.477937][   T61] bridge_slave_1: left promiscuous mode
[  618.486173][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.596125][ T9291] loop4: detected capacity change from 0 to 16
[  618.655300][ T5197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  618.690011][ T5197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  618.706619][   T61] bridge_slave_0: left allmulticast mode
[  618.706935][ T5197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  618.712970][   T61] bridge_slave_0: left promiscuous mode
[  618.713870][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.753239][ T9291] erofs: (device loop4): mounted with root inode @ nid 36.
[  618.768760][ T5197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  618.778518][ T5247] usb 4-1: USB disconnect, device number 34
[  618.788879][ T5197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  618.811394][ T5197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  618.845723][ T9291] syz.4.1036: attempt to access beyond end of device
[  618.845723][ T9291] loop4: rw=0, sector=24, nr_sectors = 8 limit=16
[  618.859345][ T9291] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 43 of nid 36
[  618.870314][ T9291] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  618.880261][ T9291] syz.4.1036: attempt to access beyond end of device
[  618.880261][ T9291] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[  618.893865][ T9291] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  618.902822][ T9291] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  619.721333][ T5247] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  619.802433][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  619.829582][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  619.854438][   T61] bond0 (unregistering): Released all slaves
[  619.933650][ T5247] usb 4-1: device descriptor read/64, error -71
[  620.048281][ T9309] loop4: detected capacity change from 0 to 512
[  620.086893][ T9309] EXT4-fs: Ignoring removed oldalloc option
[  620.093382][ T9309] EXT4-fs: Ignoring removed oldalloc option
[  620.205759][ T9309] EXT4-fs (loop4): orphan cleanup on readonly fs
[  620.242473][ T5247] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  620.307527][ T9309] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1041: Parent and EA inode have the same ino 15
[  620.376966][ T9309] EXT4-fs (loop4): Remounting filesystem read-only
[  620.384401][ T9309] EXT4-fs (loop4): 1 orphan inode deleted
[  620.392351][ T9309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  620.401938][ T5247] usb 4-1: device descriptor read/64, error -71
[  620.568286][ T5247] usb usb4-port1: attempt power cycle
[  620.753334][   T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  620.804354][ T7808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.913544][   T61] hsr_slave_0: left promiscuous mode
[  620.932823][   T61] hsr_slave_1: left promiscuous mode
[  620.961272][   T10] usb 1-1: Using ep0 maxpacket: 16
[  620.972266][ T5247] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  620.973442][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  620.992180][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  621.019624][   T10] usb 1-1: config 0 has no interfaces?
[  621.033528][ T5197] Bluetooth: hci3: command tx timeout
[  621.061645][ T5247] usb 4-1: device descriptor read/8, error -71
[  621.074530][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  621.084067][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.093769][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  621.093907][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  621.112050][   T10] usb 1-1: Product: syz
[  621.116483][   T10] usb 1-1: Manufacturer: syz
[  621.121487][   T10] usb 1-1: SerialNumber: syz
[  621.171533][   T61] veth1_macvtap: left promiscuous mode
[  621.177393][   T61] veth0_macvtap: left promiscuous mode
[  621.183545][   T61] veth1_vlan: left promiscuous mode
[  621.194587][   T61] veth0_vlan: left promiscuous mode
[  621.383970][   T10] usb 1-1: config 0 descriptor??
[  621.558489][ T5247] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  621.605997][ T5247] usb 4-1: device descriptor read/8, error -71
[  621.641281][ T5243] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  621.742657][ T5248] usb 1-1: USB disconnect, device number 30
[  621.743410][ T5247] usb usb4-port1: unable to enumerate USB device
[  622.047819][   T61] team0 (unregistering): Port device team_slave_1 removed
[  622.097668][ T5243] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  622.108334][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.120793][ T5243] usb 5-1: Product: syz
[  622.127038][ T5243] usb 5-1: Manufacturer: syz
[  622.132768][ T5243] usb 5-1: SerialNumber: syz
[  622.173135][   T61] team0 (unregistering): Port device team_slave_0 removed
[  622.219635][ T5243] usb 5-1: config 0 descriptor??
[  622.901846][ T5243] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  622.908742][ T5243] f81604 5-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  622.917041][ T5243] f81604 5-1:0.0: probe with driver f81604 failed with error -121
[  623.131758][ T5197] Bluetooth: hci3: command tx timeout
[  623.201098][ T5247] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  623.360803][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'.
[  623.451297][ T5247] usb 4-1: Using ep0 maxpacket: 32
[  623.475849][ T5247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.488441][ T5247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.499089][ T5247] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  623.508563][ T5247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.533807][ T5247] usb 4-1: config 0 descriptor??
[  623.909036][ T9285] chnl_net:caif_netlink_parms(): no params data found
[  624.021069][ T5247] ft260 0003:0403:6030.0015: unknown main item tag 0x0
[  624.119283][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'.
[  624.230558][ T5247] ft260 0003:0403:6030.0015: chip code: 5e81 abf2
[  624.537539][ T5249] usb 5-1: USB disconnect, device number 26
[  624.688779][ T5247] ft260 0003:0403:6030.0015: failed to retrieve system status
[  624.712796][ T5247] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -32
[  624.858628][ T9354] loop2: detected capacity change from 0 to 512
[  624.868152][ T9354] EXT4-fs: Ignoring removed oldalloc option
[  624.878202][ T9354] EXT4-fs: Ignoring removed oldalloc option
[  625.051692][ T9354] EXT4-fs (loop2): orphan cleanup on readonly fs
[  625.112236][ T9354] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1052: Parent and EA inode have the same ino 15
[  625.194044][ T5197] Bluetooth: hci3: command tx timeout
[  625.225850][ T9354] EXT4-fs (loop2): Remounting filesystem read-only
[  625.233000][ T9354] EXT4-fs (loop2): 1 orphan inode deleted
[  625.240599][ T9354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  625.688693][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.769594][ T9285] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.778962][ T9285] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.786968][ T9285] bridge_slave_0: entered allmulticast mode
[  625.800061][ T9285] bridge_slave_0: entered promiscuous mode
[  625.960073][ T9285] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.967900][ T9285] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.975906][ T9285] bridge_slave_1: entered allmulticast mode
[  625.985006][ T9285] bridge_slave_1: entered promiscuous mode
[  626.186057][ T5247] usb 4-1: USB disconnect, device number 39
[  626.493923][ T9285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.574454][ T9285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  626.732500][ T5243] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  626.917187][ T9285] team0: Port device team_slave_0 added
[  626.933367][ T5243] usb 5-1: Using ep0 maxpacket: 16
[  626.948556][ T9285] team0: Port device team_slave_1 added
[  626.948776][ T5243] usb 5-1: config 0 has no interfaces?
[  627.004676][ T5243] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  627.014398][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.022905][ T5243] usb 5-1: Product: syz
[  627.030233][ T5243] usb 5-1: Manufacturer: syz
[  627.036219][ T5243] usb 5-1: SerialNumber: syz
[  627.077736][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'.
[  627.160193][ T5243] usb 5-1: config 0 descriptor??
[  627.209512][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  627.216866][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.246970][ T9285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  627.272919][ T5197] Bluetooth: hci3: command tx timeout
[  627.299485][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'.
[  627.444573][ T5243] usb 5-1: USB disconnect, device number 27
[  627.457319][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  627.464602][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.491132][ T9285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  628.021629][ T9285] hsr_slave_0: entered promiscuous mode
[  628.036518][ T5249] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  628.104422][ T9285] hsr_slave_1: entered promiscuous mode
[  628.161338][ T9285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  628.169140][ T9285] Cannot create hsr debugfs directory
[  628.464005][ T5249] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  628.473626][ T5249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.482092][ T5249] usb 3-1: Product: syz
[  628.486499][ T5249] usb 3-1: Manufacturer: syz
[  628.491437][ T5249] usb 3-1: SerialNumber: syz
[  628.552384][ T5249] usb 3-1: config 0 descriptor??
[  628.686303][ T9406] loop3: detected capacity change from 0 to 512
[  628.754561][ T9406] EXT4-fs: Ignoring removed oldalloc option
[  628.760841][ T9406] EXT4-fs: Ignoring removed oldalloc option
[  629.084662][ T9406] EXT4-fs (loop3): orphan cleanup on readonly fs
[  629.133769][ T9406] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1065: Parent and EA inode have the same ino 15
[  629.213807][ T9406] EXT4-fs (loop3): Remounting filesystem read-only
[  629.220786][ T9406] EXT4-fs (loop3): 1 orphan inode deleted
[  629.348219][ T9406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  629.553370][ T5249] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  629.560280][ T5249] f81604 3-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  629.568646][ T5249] f81604 3-1:0.0: probe with driver f81604 failed with error -121
[  629.895946][ T4872] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  630.007621][ T6994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.066864][ T4872] usb 5-1: Using ep0 maxpacket: 32
[  630.108800][ T4872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  630.120269][ T4872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  630.130704][ T4872] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  630.140271][ T4872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.243299][ T4872] usb 5-1: config 0 descriptor??
[  630.490397][ T9425] loop3: detected capacity change from 0 to 16
[  630.600170][ T9425] erofs: (device loop3): mounted with root inode @ nid 36.
[  630.737799][ T4872] ft260 0003:0403:6030.0016: unknown main item tag 0x0
[  630.826030][ T9425] syz.3.1068: attempt to access beyond end of device
[  630.826030][ T9425] loop3: rw=0, sector=24, nr_sectors = 8 limit=16
[  630.839977][ T9425] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 43 of nid 36
[  630.898889][ T9285] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  630.923231][ T4872] ft260 0003:0403:6030.0016: chip code: 5e81 abf2
[  630.946015][ T9425] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  630.957299][ T9425] syz.3.1068: attempt to access beyond end of device
[  630.957299][ T9425] loop3: rw=0, sector=296, nr_sectors = 8 limit=16
[  630.971433][ T9425] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  630.980214][ T9425] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  631.010742][ T9285] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  631.076020][ T9285] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  631.144439][ T4872] ft260 0003:0403:6030.0016: failed to retrieve system status
[  631.153875][ T4872] ft260 0003:0403:6030.0016: probe with driver ft260 failed with error -32
[  631.169245][ T5243] usb 3-1: USB disconnect, device number 32
[  631.186690][ T9285] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  631.358149][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'.
[  631.856294][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'.
[  632.138406][ T9285] 8021q: adding VLAN 0 to HW filter on device bond0
[  632.197807][ T9285] 8021q: adding VLAN 0 to HW filter on device team0
[  632.361338][ T5248] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  632.381502][ T9285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  632.393205][ T9285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  632.457231][ T3115] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.465017][ T3115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  632.481743][ T3115] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.489467][ T3115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  632.541623][ T5248] usb 1-1: Using ep0 maxpacket: 16
[  632.616756][ T5248] usb 1-1: config 0 has no interfaces?
[  632.747384][ T5247] usb 5-1: USB disconnect, device number 28
[  632.984149][ T5248] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  632.993682][ T5248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.002134][ T5248] usb 1-1: Product: syz
[  633.006525][ T5248] usb 1-1: Manufacturer: syz
[  633.011446][ T5248] usb 1-1: SerialNumber: syz
[  633.150217][ T5248] usb 1-1: config 0 descriptor??
[  633.447899][ T9460] loop2: detected capacity change from 0 to 512
[  633.475228][ T5248] usb 1-1: USB disconnect, device number 31
[  633.574166][ T9460] EXT4-fs: Ignoring removed oldalloc option
[  633.584169][ T9460] EXT4-fs: Ignoring removed oldalloc option
[  633.735076][ T9460] EXT4-fs (loop2): orphan cleanup on readonly fs
[  633.791804][ T9460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1077: Parent and EA inode have the same ino 15
[  634.052215][ T9460] EXT4-fs (loop2): Remounting filesystem read-only
[  634.059032][ T9460] EXT4-fs (loop2): 1 orphan inode deleted
[  634.067351][ T9460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  634.631182][ T9285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.643464][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.655398][ T5249] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  634.962713][ T5249] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  634.972339][ T5249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.980611][ T5249] usb 4-1: Product: syz
[  634.985163][ T5249] usb 4-1: Manufacturer: syz
[  634.989999][ T5249] usb 4-1: SerialNumber: syz
[  635.118870][ T5249] usb 4-1: config 0 descriptor??
[  635.123831][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'.
[  635.216112][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'.
[  635.257031][ T9285] veth0_vlan: entered promiscuous mode
[  635.408749][ T9285] veth1_vlan: entered promiscuous mode
[  635.842383][ T9285] veth0_macvtap: entered promiscuous mode
[  635.876361][ T9285] veth1_macvtap: entered promiscuous mode
[  635.931209][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  635.946697][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.958827][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  635.969876][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.979995][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  635.991024][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.002218][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.015447][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.030536][ T9285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.054421][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.066196][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.077282][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.088033][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.098215][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.109343][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.119505][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.130349][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.150301][ T9285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.251025][ T9285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.260102][ T9285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.269987][ T9285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.279149][ T9285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.291420][ T5247] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  636.301806][ T5249] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  636.308688][ T5249] f81604 4-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  636.319434][ T5249] f81604 4-1:0.0: probe with driver f81604 failed with error -121
[  636.531249][ T5247] usb 5-1: Using ep0 maxpacket: 32
[  636.558410][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  636.570661][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  636.581065][ T5247] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  636.590459][ T5247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.803509][ T5247] usb 5-1: config 0 descriptor??
[  637.113094][   T29] audit: type=1326 audit(1727594303.298:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.0.1087" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0
[  637.449119][ T5247] ft260 0003:0403:6030.0017: unknown main item tag 0x0
[  637.599652][ T5247] ft260 0003:0403:6030.0017: chip code: 5e81 abf2
[  637.796051][ T5248] usb 4-1: USB disconnect, device number 40
[  637.818053][ T5247] ft260 0003:0403:6030.0017: failed to retrieve system status
[  637.827742][ T5247] ft260 0003:0403:6030.0017: probe with driver ft260 failed with error -32
[  638.513840][ T9519] loop0: detected capacity change from 0 to 512
[  638.620797][ T9519] EXT4-fs: Ignoring removed oldalloc option
[  638.627919][ T9519] EXT4-fs: Ignoring removed oldalloc option
[  638.726249][ T9519] EXT4-fs (loop0): orphan cleanup on readonly fs
[  638.806052][ T9519] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1091: Parent and EA inode have the same ino 15
[  638.924640][ T9519] EXT4-fs (loop0): Remounting filesystem read-only
[  638.933064][ T9519] EXT4-fs (loop0): 1 orphan inode deleted
[  638.940636][ T9519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  639.167924][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.459099][   T10] usb 5-1: USB disconnect, device number 29
[  639.748858][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'.
[  640.622594][ T5243] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  640.863393][ T5243] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  640.873384][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.881940][ T5243] usb 5-1: Product: syz
[  640.886332][ T5243] usb 5-1: Manufacturer: syz
[  640.891332][ T5243] usb 5-1: SerialNumber: syz
[  640.946508][ T5243] usb 5-1: config 0 descriptor??
[  641.419315][   T29] audit: type=1326 audit(1727594307.628:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.3.1100" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0
[  641.606516][ T5243] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  641.613628][ T5243] f81604 5-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  641.622265][ T5243] f81604 5-1:0.0: probe with driver f81604 failed with error -121
[  642.129565][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.138091][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.247419][ T3115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.256543][ T3115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.690825][ T9582] loop2: detected capacity change from 0 to 512
[  642.758671][ T9582] EXT4-fs: Ignoring removed oldalloc option
[  642.765228][ T9582] EXT4-fs: Ignoring removed oldalloc option
[  642.834335][ T9582] EXT4-fs (loop2): orphan cleanup on readonly fs
[  642.849075][ T9582] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1103: Parent and EA inode have the same ino 15
[  643.005092][ T9582] EXT4-fs (loop2): Remounting filesystem read-only
[  643.013487][ T9582] EXT4-fs (loop2): 1 orphan inode deleted
[  643.021709][ T9582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  643.744891][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'.
[  643.809508][ T5243] usb 5-1: USB disconnect, device number 30
[  643.845028][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.865355][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1108'.
[  646.570160][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'.
[  646.714234][ T9639] loop4: detected capacity change from 0 to 512
[  646.761886][ T9639] EXT4-fs: Ignoring removed oldalloc option
[  646.768184][ T9639] EXT4-fs: Ignoring removed oldalloc option
[  646.843883][ T9639] EXT4-fs (loop4): orphan cleanup on readonly fs
[  646.874033][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'.
[  646.897547][ T9639] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1120: Parent and EA inode have the same ino 15
[  646.925102][ T9639] EXT4-fs (loop4): Remounting filesystem read-only
[  646.932464][ T9639] EXT4-fs (loop4): 1 orphan inode deleted
[  646.940161][ T9639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  647.482628][ T7808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.503891][ T5248] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  647.591147][ T5243] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  647.671836][ T5248] usb 4-1: device descriptor read/64, error -71
[  647.766397][ T5243] usb 3-1: Using ep0 maxpacket: 32
[  647.785676][ T5243] usb 3-1: no configurations
[  647.790589][ T5243] usb 3-1: can't read configurations, error -22
[  647.926467][ T5248] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  647.951870][ T5243] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  647.990611][ T9655] fuse: Unknown parameter 'user_i00000000000000000000'
[  648.081857][ T5248] usb 4-1: device descriptor read/64, error -71
[  648.141224][ T5243] usb 3-1: Using ep0 maxpacket: 32
[  648.168045][ T5243] usb 3-1: no configurations
[  648.173103][ T5243] usb 3-1: can't read configurations, error -22
[  648.204481][ T5243] usb usb3-port1: attempt power cycle
[  648.208363][ T5248] usb usb4-port1: attempt power cycle
[  648.571243][ T5248] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  648.581533][ T5243] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  648.614426][ T5248] usb 4-1: device descriptor read/8, error -71
[  648.614963][ T5243] usb 3-1: Using ep0 maxpacket: 32
[  648.629622][ T5243] usb 3-1: no configurations
[  648.638507][ T5243] usb 3-1: can't read configurations, error -22
[  648.806749][ T5243] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  648.869992][ T5243] usb 3-1: Using ep0 maxpacket: 32
[  648.879579][ T5243] usb 3-1: no configurations
[  648.884678][ T5243] usb 3-1: can't read configurations, error -22
[  648.892779][ T5248] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  648.903829][ T5243] usb usb3-port1: unable to enumerate USB device
[  648.971651][ T5248] usb 4-1: device descriptor read/8, error -71
[  649.051555][ T4872] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  649.093641][ T5248] usb usb4-port1: unable to enumerate USB device
[  649.125227][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  649.132165][ T1246] ieee802154 phy1 wpan1: encryption failed: -22
[  649.222655][ T4872] usb 5-1: device descriptor read/64, error -71
[  649.463979][ T4872] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  649.571587][ T5248] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  649.601180][ T4872] usb 5-1: device descriptor read/64, error -71
[  649.712042][ T4872] usb usb5-port1: attempt power cycle
[  649.741249][ T5248] usb 1-1: Using ep0 maxpacket: 32
[  649.769606][ T5248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  649.777203][ T9669] loop1: detected capacity change from 0 to 4096
[  649.781026][ T5248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  649.790710][ T9669] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  649.797086][ T5248] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  649.815885][ T5248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.835236][ T5248] usb 1-1: config 0 descriptor??
[  650.102993][ T4872] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  650.135636][ T4872] usb 5-1: device descriptor read/8, error -71
[  650.351514][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'.
[  650.443806][ T4872] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  650.473850][ T5248] ft260 0003:0403:6030.0018: unknown main item tag 0x0
[  650.584507][ T4872] usb 5-1: device descriptor read/8, error -71
[  650.763531][ T4872] usb usb5-port1: unable to enumerate USB device
[  650.807501][ T5248] ft260 0003:0403:6030.0018: chip code: 5e81 abf2
[  650.880021][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1137'.
[  651.025459][ T5248] ft260 0003:0403:6030.0018: failed to retrieve system status
[  651.036321][ T5248] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -32
[  651.200771][ T9676] loop3: detected capacity change from 0 to 512
[  651.232987][ T9676] EXT4-fs: Ignoring removed oldalloc option
[  651.239218][ T9676] EXT4-fs: Ignoring removed oldalloc option
[  651.270035][ T9676] EXT4-fs (loop3): orphan cleanup on readonly fs
[  651.290800][ T9676] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1136: Parent and EA inode have the same ino 15
[  651.381292][ T9676] EXT4-fs (loop3): Remounting filesystem read-only
[  651.388274][ T9676] EXT4-fs (loop3): 1 orphan inode deleted
[  651.400808][ T9676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  651.697643][ T6994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.301337][   T44] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  652.471638][   T10] usb 1-1: USB disconnect, device number 32
[  652.485455][   T44] usb 4-1: Using ep0 maxpacket: 32
[  652.612287][   T44] usb 4-1: config 42 has an invalid interface number: 52 but max is 1
[  652.620771][   T44] usb 4-1: config 42 has an invalid interface number: 181 but max is 1
[  652.634555][   T44] usb 4-1: config 42 has an invalid descriptor of length 36, skipping remainder of the config
[  652.647254][   T44] usb 4-1: config 42 has no interface number 0
[  652.654450][   T44] usb 4-1: config 42 has no interface number 1
[  652.661172][   T44] usb 4-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  652.675010][   T44] usb 4-1: config 42 interface 52 has no altsetting 0
[  652.682155][   T44] usb 4-1: config 42 interface 181 has no altsetting 0
[  652.774620][   T44] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9
[  652.784292][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.792871][   T44] usb 4-1: Product: syz
[  652.797267][   T44] usb 4-1: Manufacturer: syz
[  652.802252][   T44] usb 4-1: SerialNumber: syz
[  653.422719][   T44] usb 4-1: USB disconnect, device number 45
[  653.631340][ T5249] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  653.791261][ T5249] usb 5-1: device descriptor read/64, error -71
[  653.948483][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'.
[  654.042292][ T5249] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  654.257908][ T5249] usb 5-1: device descriptor read/64, error -71
[  654.373200][ T5249] usb usb5-port1: attempt power cycle
[  654.822216][ T5249] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  654.856583][ T5249] usb 5-1: device descriptor read/8, error -71
[  654.891209][   T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  655.071235][   T10] usb 4-1: Using ep0 maxpacket: 32
[  655.101647][ T5249] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  655.103503][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  655.120008][   T10] usb 4-1: config 0 has no interfaces?
[  655.154172][ T5249] usb 5-1: device descriptor read/8, error -71
[  655.180088][   T10] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  655.193530][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.203381][   T10] usb 4-1: Product: syz
[  655.207849][   T10] usb 4-1: Manufacturer: syz
[  655.212874][   T10] usb 4-1: SerialNumber: syz
[  655.265591][   T10] usb 4-1: config 0 descriptor??
[  655.270283][ T5249] usb usb5-port1: unable to enumerate USB device
[  655.435460][ T9719] loop0: detected capacity change from 0 to 512
[  655.464512][ T9719] EXT4-fs: Ignoring removed oldalloc option
[  655.470752][ T9719] EXT4-fs: Ignoring removed oldalloc option
[  655.562749][ T9719] EXT4-fs (loop0): orphan cleanup on readonly fs
[  655.571910][ T9719] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1152: Parent and EA inode have the same ino 15
[  655.636980][ T9719] EXT4-fs (loop0): Remounting filesystem read-only
[  655.645488][ T9719] EXT4-fs (loop0): 1 orphan inode deleted
[  655.655602][ T9719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  655.846343][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.010056][ T5248] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  656.162655][ T5248] usb 2-1: device descriptor read/64, error -71
[  656.401338][ T5248] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  656.591284][ T5248] usb 2-1: device descriptor read/64, error -71
[  656.714981][ T5248] usb usb2-port1: attempt power cycle
[  656.790327][ T9731] fuse: Unknown parameter 'group_id00000000000000000000'
[  657.081432][ T5248] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  657.124610][ T5248] usb 2-1: device descriptor read/8, error -71
[  657.242227][   T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  657.371386][ T5248] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  657.401762][   T10] usb 3-1: Using ep0 maxpacket: 32
[  657.405826][ T5248] usb 2-1: device descriptor read/8, error -71
[  657.418094][   T10] usb 3-1: config 42 has an invalid interface number: 52 but max is 1
[  657.426749][   T10] usb 3-1: config 42 has an invalid interface number: 181 but max is 1
[  657.435489][   T10] usb 3-1: config 42 has an invalid descriptor of length 36, skipping remainder of the config
[  657.449858][   T10] usb 3-1: config 42 has no interface number 0
[  657.457845][   T10] usb 3-1: config 42 has no interface number 1
[  657.464401][   T10] usb 3-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  657.478125][   T10] usb 3-1: config 42 interface 52 has no altsetting 0
[  657.485321][   T10] usb 3-1: config 42 interface 181 has no altsetting 0
[  657.520716][   T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9
[  657.530381][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.530825][ T5248] usb usb2-port1: unable to enumerate USB device
[  657.538803][   T10] usb 3-1: Product: syz
[  657.554547][   T10] usb 3-1: Manufacturer: syz
[  657.559414][   T10] usb 3-1: SerialNumber: syz
[  657.975184][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'.
[  657.976657][ T5243] usb 4-1: USB disconnect, device number 46
[  657.995421][   T10] usb 3-1: USB disconnect, device number 37
[  658.788512][ T9747] loop4: detected capacity change from 0 to 512
[  658.814612][ T9747] EXT4-fs: Ignoring removed oldalloc option
[  658.820847][ T9747] EXT4-fs: Ignoring removed oldalloc option
[  658.919465][ T9747] EXT4-fs (loop4): orphan cleanup on readonly fs
[  658.958454][ T9747] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1165: Parent and EA inode have the same ino 15
[  659.064187][ T9747] EXT4-fs (loop4): Remounting filesystem read-only
[  659.071251][ T9747] EXT4-fs (loop4): 1 orphan inode deleted
[  659.083348][ T9747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  659.204420][ T9754] loop2: detected capacity change from 0 to 47
[  659.535882][ T9760] fuse: Unknown parameter 'group_id00000000000000000000'
[  659.915114][ T7808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.935971][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'.
[  661.101479][ T5249] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  661.179654][ T5248] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  661.311383][ T5249] usb 2-1: Using ep0 maxpacket: 32
[  661.345762][ T5249] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  661.356439][ T5249] usb 2-1: config 0 has no interfaces?
[  661.401273][ T5248] usb 4-1: Using ep0 maxpacket: 32
[  661.420805][ T5248] usb 4-1: config 42 has an invalid interface number: 181 but max is 0
[  661.429951][ T5248] usb 4-1: config 42 has an invalid interface number: 1 but max is 0
[  661.442273][ T5248] usb 4-1: config 42 has 2 interfaces, different from the descriptor's value: 1
[  661.453080][ T5248] usb 4-1: config 42 has no interface number 0
[  661.459518][ T5248] usb 4-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  661.473250][ T5248] usb 4-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  661.486791][ T5248] usb 4-1: config 42 interface 181 has no altsetting 0
[  661.494125][ T5248] usb 4-1: config 42 interface 1 has no altsetting 0
[  661.543018][ T5249] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  661.552750][ T5249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.561190][ T5249] usb 2-1: Product: syz
[  661.565597][ T5249] usb 2-1: Manufacturer: syz
[  661.570442][ T5249] usb 2-1: SerialNumber: syz
[  661.587844][ T5249] usb 2-1: config 0 descriptor??
[  661.650371][ T5248] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9
[  661.659996][ T5248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.664253][ T5243] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  661.668387][ T5248] usb 4-1: Product: syz
[  661.680263][ T5248] usb 4-1: Manufacturer: syz
[  661.685215][ T5248] usb 4-1: SerialNumber: syz
[  661.914297][ T5243] usb 3-1: device descriptor read/64, error -71
[  662.018999][ T5248] usb 4-1: USB disconnect, device number 47
[  662.191745][ T5243] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  662.216670][ T9788] fuse: Unknown parameter 'group_id00000000000000000000'
[  662.351965][ T5243] usb 3-1: device descriptor read/64, error -71
[  662.380314][ T9791] loop0: detected capacity change from 0 to 512
[  662.408987][ T9791] EXT4-fs: Ignoring removed oldalloc option
[  662.415400][ T9791] EXT4-fs: Ignoring removed oldalloc option
[  662.435805][ T9791] EXT4-fs (loop0): orphan cleanup on readonly fs
[  662.452133][ T9791] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1181: Parent and EA inode have the same ino 15
[  662.472505][ T9791] EXT4-fs (loop0): Remounting filesystem read-only
[  662.479339][ T9791] EXT4-fs (loop0): 1 orphan inode deleted
[  662.486667][ T5243] usb usb3-port1: attempt power cycle
[  662.498248][ T9791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  662.815403][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.927909][ T5243] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  663.023322][ T5243] usb 3-1: device descriptor read/8, error -71
[  663.261145][ T5243] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  663.314059][ T5243] usb 3-1: device descriptor read/8, error -71
[  663.438386][ T5243] usb usb3-port1: unable to enumerate USB device
[  663.794808][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'.
[  663.959048][ T5249] usb 2-1: USB disconnect, device number 38
[  665.203586][ T9824] fuse: Bad value for 'user_id'
[  665.208801][ T9824] fuse: Bad value for 'user_id'
[  665.274983][ T5243] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  665.453029][ T5243] usb 3-1: Using ep0 maxpacket: 32
[  665.583143][ T5243] usb 3-1: config 42 has an invalid interface number: 181 but max is 0
[  665.591960][ T5243] usb 3-1: config 42 has an invalid interface number: 1 but max is 0
[  665.600302][ T5243] usb 3-1: config 42 has 2 interfaces, different from the descriptor's value: 1
[  665.610063][ T5243] usb 3-1: config 42 has no interface number 0
[  665.617283][ T5243] usb 3-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  665.635338][ T5243] usb 3-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  665.650218][ T5243] usb 3-1: config 42 interface 181 has no altsetting 0
[  665.657609][ T5243] usb 3-1: config 42 interface 1 has no altsetting 0
[  665.768111][ T9831] loop1: detected capacity change from 0 to 512
[  665.784917][ T9831] EXT4-fs: Ignoring removed oldalloc option
[  665.791297][ T9831] EXT4-fs: Ignoring removed oldalloc option
[  665.813084][ T9831] EXT4-fs (loop1): orphan cleanup on readonly fs
[  665.820438][ T9831] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1194: Parent and EA inode have the same ino 15
[  665.889421][ T5243] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9
[  665.899287][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.907819][ T5243] usb 3-1: Product: syz
[  665.912320][ T5243] usb 3-1: Manufacturer: syz
[  665.917162][ T5243] usb 3-1: SerialNumber: syz
[  665.935915][ T9831] EXT4-fs (loop1): Remounting filesystem read-only
[  665.948657][ T9831] EXT4-fs (loop1): 1 orphan inode deleted
[  665.999558][ T9831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  666.326347][ T5243] usb 3-1: USB disconnect, device number 42
[  666.431279][ T9285] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  666.668437][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'.
[  667.293963][   T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  667.511444][ T5249] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  667.633954][   T10] usb 1-1: Using ep0 maxpacket: 32
[  667.661753][ T5249] usb 5-1: device descriptor read/64, error -71
[  667.754732][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.765410][   T10] usb 1-1: config 0 has no interfaces?
[  667.789616][   T10] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  667.799316][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.808125][   T10] usb 1-1: Product: syz
[  667.812738][   T10] usb 1-1: Manufacturer: syz
[  667.817694][   T10] usb 1-1: SerialNumber: syz
[  667.827468][   T10] usb 1-1: config 0 descriptor??
[  667.928149][ T5249] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  668.111851][ T5249] usb 5-1: device descriptor read/64, error -71
[  668.223472][ T5249] usb usb5-port1: attempt power cycle
[  668.257616][ T9864] loop1: detected capacity change from 0 to 512
[  668.279728][ T9864] EXT4-fs: Ignoring removed oldalloc option
[  668.286404][ T9864] EXT4-fs: Ignoring removed oldalloc option
[  668.348667][ T9864] EXT4-fs (loop1): orphan cleanup on readonly fs
[  668.357881][ T9864] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1210: Parent and EA inode have the same ino 15
[  668.384450][ T9864] EXT4-fs (loop1): Remounting filesystem read-only
[  668.391492][ T9864] EXT4-fs (loop1): 1 orphan inode deleted
[  668.452915][ T9864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  668.551752][ T9868] fuse: Bad value for 'user_id'
[  668.556973][ T9868] fuse: Bad value for 'user_id'
[  668.592316][ T5249] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  668.755861][ T5249] usb 5-1: device descriptor read/8, error -71
[  668.926387][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'.
[  668.993678][ T9285] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.385369][ T5249] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  669.426663][ T5249] usb 5-1: device descriptor read/8, error -71
[  669.542114][ T5249] usb usb5-port1: unable to enumerate USB device
[  669.973957][   T10] usb 1-1: USB disconnect, device number 33
[  670.041348][ T5243] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  670.231326][ T5243] usb 4-1: Using ep0 maxpacket: 32
[  670.279440][ T5243] usb 4-1: config 42 has an invalid interface number: 181 but max is 0
[  670.288470][ T5243] usb 4-1: config 42 has an invalid interface number: 1 but max is 0
[  670.297085][ T5243] usb 4-1: config 42 has 2 interfaces, different from the descriptor's value: 1
[  670.313624][ T5243] usb 4-1: config 42 has no interface number 0
[  670.320135][ T5243] usb 4-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  670.333875][ T5243] usb 4-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  670.351441][ T5243] usb 4-1: config 42 interface 181 has no altsetting 0
[  670.358661][ T5243] usb 4-1: config 42 interface 1 has no altsetting 0
[  670.519194][ T5243] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9
[  670.529645][ T5243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.538127][ T5243] usb 4-1: Product: syz
[  670.542597][ T5243] usb 4-1: Manufacturer: syz
[  670.551647][ T5243] usb 4-1: SerialNumber: syz
[  670.931752][ T5243] usb 4-1: USB disconnect, device number 48
[  671.507158][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'.
[  671.551806][ T9899] fuse: Bad value for 'fd'
[  671.687012][ T5199] Bluetooth: hci1: command 0x0406 tx timeout
[  671.800828][ T9901] loop0: detected capacity change from 0 to 512
[  671.851474][ T9901] EXT4-fs: Ignoring removed oldalloc option
[  671.861908][ T9901] EXT4-fs: Ignoring removed oldalloc option
[  671.921665][ T9901] EXT4-fs (loop0): orphan cleanup on readonly fs
[  671.940747][ T9901] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1223: Parent and EA inode have the same ino 15
[  672.024841][ T9901] EXT4-fs (loop0): Remounting filesystem read-only
[  672.031953][ T9901] EXT4-fs (loop0): 1 orphan inode deleted
[  672.039587][ T9901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  672.360094][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  672.486327][ T9911] loop1: detected capacity change from 0 to 512
[  672.536063][ T5249] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  672.625352][ T9911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  672.683140][ T5248] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  672.741594][ T5249] usb 5-1: Using ep0 maxpacket: 32
[  672.771423][ T5249] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  672.782302][ T5249] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  672.860349][ T5249] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  672.870046][ T5249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.878759][ T5249] usb 5-1: Product: syz
[  672.883299][ T5249] usb 5-1: Manufacturer: syz
[  672.888128][ T5249] usb 5-1: SerialNumber: syz
[  672.897931][ T5248] usb 4-1: device descriptor read/64, error -71
[  672.951645][ T9285] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  672.959073][ T5249] usb 5-1: config 0 descriptor??
[  673.251437][ T5248] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  673.547597][ T5248] usb 4-1: device descriptor read/64, error -71
[  673.662160][ T5248] usb usb4-port1: attempt power cycle
[  673.692608][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'.
[  673.771847][ T9928] loop1: detected capacity change from 0 to 256
[  673.863181][ T9928] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  673.990321][ T9928] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff)
[  673.999470][ T9928] exFAT-fs (loop1): Filesystem has been set read-only
[  674.022115][ T5248] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  674.074939][ T5248] usb 4-1: device descriptor read/8, error -71
[  674.111464][   T44] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  674.149752][ T9935] fuse: Bad value for 'fd'
[  674.293030][   T44] usb 1-1: Using ep0 maxpacket: 32
[  674.329552][   T44] usb 1-1: config 42 has an invalid interface number: 52 but max is 1
[  674.342421][   T44] usb 1-1: config 42 has an invalid interface number: 181 but max is 1
[  674.352615][   T44] usb 1-1: config 42 has 3 interfaces, different from the descriptor's value: 2
[  674.362003][   T44] usb 1-1: config 42 has no interface number 0
[  674.368406][   T44] usb 1-1: config 42 has no interface number 2
[  674.374932][   T44] usb 1-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  674.388639][   T44] usb 1-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  674.403975][   T44] usb 1-1: config 42 interface 52 has no altsetting 0
[  674.411783][   T44] usb 1-1: config 42 interface 181 has no altsetting 0
[  674.418891][   T44] usb 1-1: config 42 interface 1 has no altsetting 0
[  674.426779][ T5248] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  674.501680][ T5248] usb 4-1: device descriptor read/8, error -71
[  674.556763][   T44] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9
[  674.566685][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.575146][   T44] usb 1-1: Product: syz
[  674.579545][   T44] usb 1-1: Manufacturer: syz
[  674.584477][   T44] usb 1-1: SerialNumber: syz
[  674.616403][ T5248] usb usb4-port1: unable to enumerate USB device
[  674.624636][ T9928] syz.1.1234 (9928) used greatest stack depth: 4992 bytes left
[  675.036175][   T44] usb 1-1: USB disconnect, device number 34
[  675.107674][ T9942] loop2: detected capacity change from 0 to 16
[  675.159928][ T9942] erofs: (device loop2): mounted with root inode @ nid 36.
[  675.217394][ T5248] usb 5-1: USB disconnect, device number 43
[  675.291619][ T9941] loop1: detected capacity change from 0 to 512
[  675.313494][ T9941] EXT4-fs: Ignoring removed oldalloc option
[  675.319761][ T9941] EXT4-fs: Ignoring removed oldalloc option
[  675.321904][ T9942] syz.2.1238: attempt to access beyond end of device
[  675.321904][ T9942] loop2: rw=0, sector=24, nr_sectors = 8 limit=16
[  675.340733][ T9942] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 43 of nid 36
[  675.425887][ T9944] syz.2.1238 (9944): drop_caches: 2
[  675.440614][ T9944] syz.2.1238 (9944): drop_caches: 2
[  675.451469][ T9941] EXT4-fs (loop1): orphan cleanup on readonly fs
[  675.494330][ T9941] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1239: Parent and EA inode have the same ino 15
[  675.514544][ T9941] EXT4-fs (loop1): Remounting filesystem read-only
[  675.521612][ T9941] EXT4-fs (loop1): 1 orphan inode deleted
[  675.529135][ T9941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  675.904827][ T9285] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.055386][ T9948] loop0: detected capacity change from 0 to 512
[  676.165149][ T9948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  676.753166][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'.
[  676.916632][ T9963] fuse: Bad value for 'fd'
[  677.081786][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.620001][ T5247] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  677.628689][   T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  677.643894][ T9975] loop2: detected capacity change from 0 to 16
[  677.656962][ T9975] erofs: (device loop2): mounted with root inode @ nid 36.
[  677.805713][ T9975] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  677.820317][ T9975] syz.2.1253: attempt to access beyond end of device
[  677.820317][ T9975] loop2: rw=0, sector=296, nr_sectors = 8 limit=16
[  677.835417][ T9975] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  677.844550][ T9975] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  677.901345][   T44] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  677.947769][ T9975] syz.2.1253 (9975): drop_caches: 2
[  677.961885][ T5247] usb 2-1: Using ep0 maxpacket: 32
[  677.969161][   T10] usb 4-1: device descriptor read/64, error -71
[  677.998286][ T9975] syz.2.1253 (9975): drop_caches: 2
[  678.025723][ T5247] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.036901][ T5247] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  678.077308][ T5247] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  678.087104][ T5247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.095640][ T5247] usb 2-1: Product: syz
[  678.100042][ T5247] usb 2-1: Manufacturer: syz
[  678.105009][ T5247] usb 2-1: SerialNumber: syz
[  678.105457][   T44] usb 1-1: Using ep0 maxpacket: 32
[  678.135236][ T9977] loop4: detected capacity change from 0 to 512
[  678.139080][ T5247] usb 2-1: config 0 descriptor??
[  678.162864][   T44] usb 1-1: config 42 has an invalid interface number: 52 but max is 1
[  678.171961][   T44] usb 1-1: config 42 has an invalid interface number: 181 but max is 1
[  678.180488][   T44] usb 1-1: config 42 has 3 interfaces, different from the descriptor's value: 2
[  678.189994][   T44] usb 1-1: config 42 has no interface number 0
[  678.196494][   T44] usb 1-1: config 42 has no interface number 2
[  678.203177][   T44] usb 1-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  678.216863][   T44] usb 1-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  678.234236][   T44] usb 1-1: config 42 interface 52 has no altsetting 0
[  678.242621][   T44] usb 1-1: config 42 interface 181 has no altsetting 0
[  678.249746][   T44] usb 1-1: config 42 interface 1 has no altsetting 0
[  678.274064][ T9977] EXT4-fs: Ignoring removed oldalloc option
[  678.280427][ T9977] EXT4-fs: Ignoring removed oldalloc option
[  678.281896][   T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  678.308502][   T44] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9
[  678.318059][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.326510][   T44] usb 1-1: Product: syz
[  678.334785][   T44] usb 1-1: Manufacturer: syz
[  678.339621][   T44] usb 1-1: SerialNumber: syz
[  678.383990][ T9977] EXT4-fs (loop4): orphan cleanup on readonly fs
[  678.410787][ T9977] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1254: Parent and EA inode have the same ino 15
[  678.442388][ T9977] EXT4-fs (loop4): Remounting filesystem read-only
[  678.449761][ T9977] EXT4-fs (loop4): 1 orphan inode deleted
[  678.457519][ T9977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  678.477029][   T10] usb 4-1: device descriptor read/64, error -71
[  678.593835][   T10] usb usb4-port1: attempt power cycle
[  678.672829][ T7808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.987787][   T44] usb 1-1: USB disconnect, device number 35
[  679.019953][   T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  679.087073][   T10] usb 4-1: device descriptor read/8, error -71
[  679.331560][   T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  679.373534][   T10] usb 4-1: device descriptor read/8, error -71
[  679.487354][   T10] usb usb4-port1: unable to enumerate USB device
[  679.657426][ T9994] fuse: Bad value for 'fd'
[  679.940639][ T9999] loop0: detected capacity change from 0 to 512
[  680.011088][ T9999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  680.178498][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'.
[  680.215497][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.337155][   T44] usb 2-1: USB disconnect, device number 39
[  680.771677][T10008] loop1: detected capacity change from 0 to 16
[  680.832714][T10010] loop4: detected capacity change from 0 to 512
[  680.842245][T10010] EXT4-fs: Ignoring removed oldalloc option
[  680.852032][T10010] EXT4-fs: Ignoring removed oldalloc option
[  680.872557][T10008] erofs: (device loop1): mounted with root inode @ nid 36.
[  681.038661][T10008] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  681.049727][T10008] syz.1.1265: attempt to access beyond end of device
[  681.049727][T10008] loop1: rw=0, sector=296, nr_sectors = 8 limit=16
[  681.063947][T10008] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  681.072796][T10008] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  681.153176][T10010] EXT4-fs (loop4): orphan cleanup on readonly fs
[  681.191441][T10010] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1266: Parent and EA inode have the same ino 15
[  681.193747][T10008] syz.1.1265 (10008): drop_caches: 2
[  681.225594][T10008] syz.1.1265 (10008): drop_caches: 2
[  681.266114][T10010] EXT4-fs (loop4): Remounting filesystem read-only
[  681.273096][T10010] EXT4-fs (loop4): 1 orphan inode deleted
[  681.280712][T10010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  681.703475][T10021] fuse: Bad value for 'fd'
[  681.727034][ T7808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  681.761781][   T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  682.030751][   T10] usb 3-1: Using ep0 maxpacket: 32
[  682.135486][   T10] usb 3-1: config 42 has an invalid interface number: 52 but max is 1
[  682.144322][   T10] usb 3-1: config 42 has an invalid interface number: 181 but max is 1
[  682.153162][   T10] usb 3-1: config 42 has 3 interfaces, different from the descriptor's value: 2
[  682.162627][   T10] usb 3-1: config 42 has no interface number 0
[  682.169085][   T10] usb 3-1: config 42 has no interface number 2
[  682.175643][   T10] usb 3-1: config 42 interface 181 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  682.189437][   T10] usb 3-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  682.203799][   T10] usb 3-1: config 42 interface 52 has no altsetting 0
[  682.210831][   T10] usb 3-1: config 42 interface 181 has no altsetting 0
[  682.218196][   T10] usb 3-1: config 42 interface 1 has no altsetting 0
[  682.551283][T10027] loop4: detected capacity change from 0 to 2048
[  682.599532][   T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=a0.c9
[  682.609263][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.617727][   T10] usb 3-1: Product: syz
[  682.622207][   T10] usb 3-1: Manufacturer: syz
[  682.627039][   T10] usb 3-1: SerialNumber: syz
[  683.007468][T10028] loop1: detected capacity change from 0 to 512
[  683.218136][   T10] usb 3-1: USB disconnect, device number 43
[  683.525111][T10028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  683.670648][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1276'.
[  683.751338][   T44] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  683.893702][ T9285] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.941202][   T44] usb 4-1: Using ep0 maxpacket: 32
[  683.982488][   T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.993081][   T44] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  684.013543][   T44] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  684.023124][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.031544][   T44] usb 4-1: Product: syz
[  684.035942][   T44] usb 4-1: Manufacturer: syz
[  684.040763][   T44] usb 4-1: SerialNumber: syz
[  684.091441][   T44] usb 4-1: config 0 descriptor??
[  684.626414][   T44] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  684.821687][   T44] usb 3-1: Using ep0 maxpacket: 16
[  684.848465][   T44] usb 3-1: no configurations
[  684.853933][   T44] usb 3-1: can't read configurations, error -22
[  685.027585][   T44] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  685.233359][   T44] usb 3-1: Using ep0 maxpacket: 16
[  685.301585][   T44] usb 3-1: no configurations
[  685.308587][   T44] usb 3-1: can't read configurations, error -22
[  685.342001][   T44] usb usb3-port1: attempt power cycle
[  685.455593][T10051] loop4: detected capacity change from 0 to 16
[  685.516939][T10052] loop0: detected capacity change from 0 to 512
[  685.518445][T10051] erofs: (device loop4): mounted with root inode @ nid 36.
[  685.537146][T10052] EXT4-fs: Ignoring removed oldalloc option
[  685.543611][T10052] EXT4-fs: Ignoring removed oldalloc option
[  685.588324][T10052] EXT4-fs (loop0): orphan cleanup on readonly fs
[  685.594099][T10051] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  685.609831][T10051] syz.4.1282: attempt to access beyond end of device
[  685.609831][T10051] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[  685.621683][T10052] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1283: Parent and EA inode have the same ino 15
[  685.624940][T10051] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  685.644395][T10051] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  685.668027][T10052] EXT4-fs (loop0): Remounting filesystem read-only
[  685.677085][T10052] EXT4-fs (loop0): 1 orphan inode deleted
[  685.685716][T10052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  685.721298][   T44] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  685.743235][T10051] syz.4.1282 (10051): drop_caches: 2
[  685.743517][   T44] usb 3-1: Using ep0 maxpacket: 16
[  685.777485][   T44] usb 3-1: no configurations
[  685.782670][   T44] usb 3-1: can't read configurations, error -22
[  685.793607][T10051] syz.4.1282 (10051): drop_caches: 2
[  685.921893][   T44] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  685.963758][   T44] usb 3-1: Using ep0 maxpacket: 16
[  685.979167][   T44] usb 3-1: no configurations
[  685.984238][   T44] usb 3-1: can't read configurations, error -22
[  685.997555][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.004394][   T44] usb usb3-port1: unable to enumerate USB device
[  686.546829][ T5243] usb 4-1: USB disconnect, device number 57
[  686.743252][T10063] loop3: detected capacity change from 0 to 512
[  686.782326][T10063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.832234][   T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  686.993141][   T10] usb 5-1: Using ep0 maxpacket: 32
[  687.049247][ T6994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.057174][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.069772][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  687.079987][   T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  687.089561][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.114576][   T10] usb 5-1: config 0 descriptor??
[  687.672556][T10068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1289'.
[  687.906999][   T10] ft260 0003:0403:6030.0019: unknown main item tag 0x0
[  688.009447][   T10] ft260 0003:0403:6030.0019: chip code: 5e81 abf2
[  688.220048][   T10] ft260 0003:0403:6030.0019: failed to retrieve system status
[  688.232648][   T10] ft260 0003:0403:6030.0019: probe with driver ft260 failed with error -32
[  688.666721][T10084] loop2: detected capacity change from 0 to 16
[  688.744306][T10084] erofs: (device loop2): mounted with root inode @ nid 36.
[  688.786309][T10085] loop1: detected capacity change from 0 to 512
[  688.838115][T10085] EXT4-fs: Ignoring removed oldalloc option
[  688.844715][T10085] EXT4-fs: Ignoring removed oldalloc option
[  688.861964][T10084] syz.2.1294: attempt to access beyond end of device
[  688.861964][T10084] loop2: rw=0, sector=24, nr_sectors = 8 limit=16
[  688.882375][T10084] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 43 of nid 36
[  688.950129][T10085] EXT4-fs (loop1): orphan cleanup on readonly fs
[  688.969512][T10085] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1295: Parent and EA inode have the same ino 15
[  689.003805][T10085] EXT4-fs (loop1): Remounting filesystem read-only
[  689.010620][T10085] EXT4-fs (loop1): 1 orphan inode deleted
[  689.015029][T10084] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  689.018275][T10085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  689.026390][T10084] syz.2.1294: attempt to access beyond end of device
[  689.026390][T10084] loop2: rw=0, sector=296, nr_sectors = 8 limit=16
[  689.052035][T10084] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  689.060737][T10084] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  689.129607][T10084] syz.2.1294 (10084): drop_caches: 2
[  689.166300][T10084] syz.2.1294 (10084): drop_caches: 2
[  689.428919][   T44] usb 5-1: USB disconnect, device number 44
[  689.653177][ T9285] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.657606][T10094] loop0: detected capacity change from 0 to 512
[  689.771362][ T5248] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  689.829278][T10094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  689.999999][ T5248] usb 4-1: Using ep0 maxpacket: 32
[  690.068509][ T5248] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  690.112149][ T5248] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  690.121631][ T5248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.129915][ T5248] usb 4-1: Product: syz
[  690.134461][ T5248] usb 4-1: Manufacturer: syz
[  690.139299][ T5248] usb 4-1: SerialNumber: syz
[  690.161534][ T5248] usb 4-1: config 0 descriptor??
[  690.346819][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  690.442332][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1302'.
[  691.001316][ T5248] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  691.191467][ T5248] usb 1-1: Using ep0 maxpacket: 16
[  691.211603][ T5248] usb 1-1: no configurations
[  691.216500][ T5248] usb 1-1: can't read configurations, error -22
[  691.354550][T10118] syz.2.1308 (10118): drop_caches: 2
[  691.374860][T10118] syz.2.1308 (10118): drop_caches: 2
[  691.391325][ T5248] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  691.591242][ T5248] usb 1-1: Using ep0 maxpacket: 16
[  691.614102][ T5248] usb 1-1: no configurations
[  691.619108][ T5248] usb 1-1: can't read configurations, error -22
[  691.654733][ T5248] usb usb1-port1: attempt power cycle
[  691.861925][T10127] loop2: detected capacity change from 0 to 512
[  691.871523][T10127] EXT4-fs: Ignoring removed oldalloc option
[  691.877689][T10127] EXT4-fs: Ignoring removed oldalloc option
[  691.899549][T10127] EXT4-fs (loop2): orphan cleanup on readonly fs
[  691.927414][T10127] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1311: Parent and EA inode have the same ino 15
[  691.955679][   T44] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  691.974129][T10127] EXT4-fs (loop2): Remounting filesystem read-only
[  691.981389][T10127] EXT4-fs (loop2): 1 orphan inode deleted
[  691.991553][T10127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  692.041779][ T5248] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  692.090964][ T5248] usb 1-1: Using ep0 maxpacket: 16
[  692.098504][ T5248] usb 1-1: no configurations
[  692.103602][ T5248] usb 1-1: can't read configurations, error -22
[  692.117297][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.131387][   T44] usb 2-1: Using ep0 maxpacket: 32
[  692.146871][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.162745][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.175215][   T44] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  692.185401][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.262798][   T44] usb 2-1: config 0 descriptor??
[  692.271963][ T5248] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  692.314534][ T5248] usb 1-1: Using ep0 maxpacket: 16
[  692.326578][ T5248] usb 1-1: no configurations
[  692.332198][ T5248] usb 1-1: can't read configurations, error -22
[  692.378677][ T5248] usb usb1-port1: unable to enumerate USB device
[  692.571554][ T5248] usb 4-1: USB disconnect, device number 58
[  692.736414][T10134] loop3: detected capacity change from 0 to 512
[  692.814498][   T44] ft260 0003:0403:6030.001A: unknown main item tag 0x0
[  693.044743][   T44] ft260 0003:0403:6030.001A: chip code: 5e81 abf2
[  693.160093][T10134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  693.262857][   T44] ft260 0003:0403:6030.001A: failed to retrieve system status
[  693.275272][   T44] ft260 0003:0403:6030.001A: probe with driver ft260 failed with error -32
[  693.882391][ T6994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.860371][T10136] loop4: detected capacity change from 0 to 32768
[  695.168697][   T44] usb 2-1: USB disconnect, device number 40
[  695.386263][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1316'.
[  695.434088][T10136] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  695.453191][T10136] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  695.462061][T10136] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix
[  695.462061][T10136]   running recovery passes: check_allocations
[  695.679479][T10136] invalid bkey u64s 11 type alloc_v4 0:127:0 len 0 ver 0: 
[  695.679564][T10136]   gen 0 oldest_gen 0 data_type sb
[  695.679627][T10136]   journal_seq       1
[  695.679684][T10136]   need_discard      1
[  695.679745][T10136]   need_inc_gen      1
[  695.679803][T10136]   dirty_sectors     256
[  695.679865][T10136]   stripe_sectors    0
[  695.679923][T10136]   cached_sectors    0
[  695.679984][T10136]   stripe            17327
[  695.680045][T10136]   stripe_redundancy 0
[  695.680105][T10136]   io_time[READ]     1
[  695.680168][T10136]   io_time[WRITE]    1
[  695.680228][T10136]   fragmentation     0
[  695.680287][T10136]   bp_start          8
[  695.680346][T10136] 
[  695.680401][T10136]   invalid data type (got 1 should be 7): delete?, fixing
[  695.830712][T10161] sp0: Synchronizing with TNC
[  695.927949][T10159] [U] è``
[  696.032158][T10163] loop0: detected capacity change from 0 to 512
[  696.036024][T10163] EXT4-fs: Ignoring removed oldalloc option
[  696.036137][T10163] EXT4-fs: Ignoring removed oldalloc option
[  696.081318][T10163] EXT4-fs (loop0): orphan cleanup on readonly fs
[  696.082162][T10163] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1322: Parent and EA inode have the same ino 15
[  696.088882][T10163] EXT4-fs (loop0): Remounting filesystem read-only
[  696.089035][T10163] EXT4-fs (loop0): 1 orphan inode deleted
[  696.091187][T10163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  696.213484][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.817960][T10136] bcachefs (loop4): accounting_read... done
[  696.824709][T10136] bcachefs (loop4): alloc_read... done
[  696.873848][T10136] bcachefs (loop4): stripes_read... done
[  696.917411][T10136] bcachefs (loop4): snapshots_read... done
[  696.937861][T10136] bcachefs (loop4): check_allocations...
[  697.148138][T10136] bcachefs (loop4): pointer to nonexistent bucket 65536:31
[  697.161905][T10136] bcachefs (loop4): bch2_gc_mark_key(): error EIO
[  697.168591][T10136] bcachefs (loop4): bch2_gc_btree(): error EIO
[  697.179801][T10136] btree node read error for alloc, fixing
[  697.187439][T10136] bcachefs (loop4): running explicit recovery pass check_topology (1), currently at check_allocations (7)
[  697.200208][T10136] bcachefs (loop4): bch2_gc_btrees(): error restart_recovery
[  697.209239][T10136] bcachefs (loop4): bch2_check_allocations(): error restart_recovery
[  697.218307][T10136] bcachefs (loop4): check_topology... done
[  697.224721][T10136] bcachefs (loop4): accounting_read... done
[  697.231499][T10136] bcachefs (loop4): alloc_read... done
[  697.237632][T10136] bcachefs (loop4): stripes_read... done
[  697.257674][T10136] bcachefs (loop4): snapshots_read... done
[  697.264594][T10136] bcachefs (loop4): check_allocations...
[  697.283550][T10136] bcachefs (loop4): pointer to nonexistent bucket 65536:31
[  697.297110][T10136] bcachefs (loop4): bch2_gc_mark_key(): error EIO
[  697.303994][T10136] bcachefs (loop4): bch2_gc_btree(): error EIO
[  697.310617][T10136] btree node read error for alloc, fixing
[  697.320171][T10136] bucket 0:34 data type user ptr gen 0 missing in alloc btree
[  697.320265][T10136] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0  compress incompressible ptr: 0:34:0 gen 0, fixing
[  697.362316][T10136] btree ptr not marked in member info btree allocated bitmap
[  697.362412][T10136]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  697.456171][T10166] syz.3.1321 (10166): drop_caches: 2
[  697.462251][T10136] btree ptr not marked in member info btree allocated bitmap
[  697.462340][T10136]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  697.529077][T10176] loop2: detected capacity change from 0 to 512
[  697.574742][T10136] bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[  697.574838][T10136] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[  697.638804][T10176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  697.655539][T10136] btree ptr not marked in member info btree allocated bitmap
[  697.655629][T10136]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  697.778740][T10136] btree ptr not marked in member info btree allocated bitmap
[  697.778838][T10136]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  698.008088][T10136] btree ptr not marked in member info btree allocated bitmap
[  698.008185][T10136]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  698.074940][ T7040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  698.171189][   T44] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  698.215847][T10136] bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[  698.215943][T10136] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[  698.287633][T10136] bucket 0:42 data type btree ptr gen 0 missing in alloc btree
[  698.287734][T10136] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing
[  698.375345][   T44] usb 1-1: Using ep0 maxpacket: 16
[  698.412007][   T44] usb 1-1: no configurations
[  698.417114][   T44] usb 1-1: can't read configurations, error -22
[  698.440189][T10136] bucket 0:26 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  698.472533][T10136] bucket 0:26 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[  698.498588][T10136] bucket 0:31 gen 0 has wrong data_type: got free, should be btree, fixing
[  698.514974][T10136] bucket 0:31 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[  698.528263][T10136] bucket 0:34 gen 0 has wrong data_type: got free, should be user, fixing
[  698.536155][T10187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1331'.
[  698.546811][T10136] bucket 0:34 gen 0 data type user has wrong dirty_sectors: got 0, should be 16, fixing
[  698.577361][T10136] bucket 0:34 gen 0 data type user has wrong fragmentation_lru: got 0, should be 134217728, fixing
[  698.595682][ T5248] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  698.597531][   T44] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  698.637419][T10136] bucket 0:37 gen 0 has wrong data_type: got free, should be btree, fixing
[  698.648197][T10136] bucket 0:37 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[  698.661262][T10136] bucket 0:42 gen 0 has wrong data_type: got free, should be btree, fixing
[  698.670813][T10136] bucket 0:42 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[  698.699934][T10136] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing
[  698.746421][T10136] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  698.761973][   T44] usb 1-1: Using ep0 maxpacket: 16
[  698.762396][ T5248] usb 3-1: Using ep0 maxpacket: 32
[  698.766174][   T44] usb 1-1: no configurations
[  698.766270][   T44] usb 1-1: can't read configurations, error -22
[  698.769902][   T44] usb usb1-port1: attempt power cycle
[  698.782030][ T5248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.782216][ T5248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.782423][ T5248] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  698.782579][ T5248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.793344][ T5248] usb 3-1: config 0 descriptor??
[  699.098647][T10136]  done
[  699.122142][   T44] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  699.150400][T10136] bcachefs (loop4): going read-write
[  699.170759][T10191] loop3: detected capacity change from 0 to 512
[  699.173924][   T44] usb 1-1: Using ep0 maxpacket: 16
[  699.198104][T10136] bcachefs (loop4): journal_replay...
[  699.207793][   T44] usb 1-1: no configurations
[  699.222309][   T44] usb 1-1: can't read configurations, error -22
[  699.224393][T10191] EXT4-fs: Ignoring removed oldalloc option
[  699.235638][T10191] EXT4-fs: Ignoring removed oldalloc option
[  699.241884][T10136] =====================================================
[  699.249404][T10136] BUG: KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined+0x8d0/0xd50
[  699.258772][T10136]  bch2_bkey_cmp_packed_inlined+0x8d0/0xd50
[  699.265122][T10136]  bch2_sort_keys_keep_unwritten_whiteouts+0xf94/0x19d0
[  699.272533][T10136]  __bch2_btree_node_write+0x3ae8/0x6830
[  699.278522][T10136]  bch2_btree_node_write+0xa5/0x2e0
[  699.284579][T10136]  __btree_node_flush+0x606/0x680
[  699.289927][T10136]  bch2_btree_node_flush0+0x35/0x60
[  699.296322][T10136]  journal_flush_pins+0xce6/0x1780
[  699.301860][T10136]  journal_flush_done+0x156/0x3f0
[  699.307255][T10136]  bch2_journal_flush_pins+0x1a1/0x3b0
[  699.313529][T10136]  bch2_journal_replay+0x4917/0x4d10
[  699.319125][T10136]  bch2_run_recovery_passes+0xaa6/0xf10
[  699.332112][T10136]  bch2_fs_recovery+0x42d2/0x5c60
[  699.337450][T10136]  bch2_fs_start+0x7b2/0xbd0
[  699.342589][T10136]  bch2_fs_get_tree+0x13ea/0x22d0
[  699.348117][T10136]  vfs_get_tree+0xb1/0x5a0
[  699.352969][T10136]  do_new_mount+0x71f/0x15e0
[  699.357864][T10136]  path_mount+0x742/0x1f10
[  699.362872][T10136]  __se_sys_mount+0x722/0x810
[  699.367860][T10136]  __ia32_sys_mount+0xe3/0x150
[  699.373056][T10136]  ia32_sys_call+0x2530/0x40d0
[  699.378147][T10136]  __do_fast_syscall_32+0xb0/0x110
[  699.383777][T10136]  do_fast_syscall_32+0x38/0x80
[  699.388938][T10136]  do_SYSENTER_32+0x1f/0x30
[  699.393897][T10136]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  699.400556][T10136] 
[  699.403391][T10136] Uninit was created at:
[  699.408126][T10136]  ___kmalloc_large_node+0x22c/0x370
[  699.413863][T10136]  __kmalloc_large_node_noprof+0x3f/0x1e0
[  699.420255][T10136]  __kmalloc_node_noprof+0x9d6/0xf50
[  699.431312][T10136]  __kvmalloc_node_noprof+0xc0/0x2d0
[  699.436785][T10136]  bch2_btree_node_read_done+0x52a9/0x7810
[  699.444428][T10136]  btree_node_read_work+0x973/0x1960
[  699.449907][T10136]  bch2_btree_node_read+0x2e6b/0x36e0
[  699.455649][T10136]  bch2_btree_root_read+0xb3b/0xe20
[  699.461220][T10136]  read_btree_roots+0x51c/0x1250
[  699.466366][T10136]  bch2_fs_recovery+0x422c/0x5c60
[  699.471745][T10136]  bch2_fs_start+0x7b2/0xbd0
[  699.476558][T10136]  bch2_fs_get_tree+0x13ea/0x22d0
[  699.481973][T10136]  vfs_get_tree+0xb1/0x5a0
[  699.486594][T10136]  do_new_mount+0x71f/0x15e0
[  699.491472][T10136]  path_mount+0x742/0x1f10
[  699.496079][T10136]  __se_sys_mount+0x722/0x810
[  699.501147][T10136]  __ia32_sys_mount+0xe3/0x150
[  699.506105][T10136]  ia32_sys_call+0x2530/0x40d0
[  699.511195][T10136]  __do_fast_syscall_32+0xb0/0x110
[  699.516507][T10136]  do_fast_syscall_32+0x38/0x80
[  699.521857][T10136]  do_SYSENTER_32+0x1f/0x30
[  699.532627][T10136]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  699.539170][T10136] 
[  699.543286][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.4.1314 Tainted: G        W          6.11.0-syzkaller-11993-g3efc57369a0c #0
[  699.555530][T10136] Tainted: [W]=WARN
[  699.559447][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  699.569873][T10136] =====================================================
[  699.577130][T10136] Disabling lock debugging due to kernel taint
[  699.583656][T10136] Kernel panic - not syncing: kmsan.panic set ...
[  699.590302][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.4.1314 Tainted: G    B   W          6.11.0-syzkaller-11993-g3efc57369a0c #0
[  699.602430][T10136] Tainted: [B]=BAD_PAGE, [W]=WARN
[  699.607566][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  699.617776][T10136] Call Trace:
[  699.621172][T10136]  <TASK>
[  699.624210][T10136]  dump_stack_lvl+0x216/0x2d0
[  699.629099][T10136]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  699.635100][T10136]  dump_stack+0x1e/0x30
[  699.639451][T10136]  panic+0x4e2/0xcf0
[  699.643542][T10136]  ? kmsan_get_metadata+0xf1/0x1c0
[  699.648872][T10136]  kmsan_report+0x2c7/0x2d0
[  699.653606][T10136]  ? filter_irq_stacks+0x60/0x1a0
[  699.658861][T10136]  ? __msan_warning+0x95/0x120
[  699.663843][T10136]  ? bch2_bkey_cmp_packed_inlined+0x8d0/0xd50
[  699.670106][T10136]  ? bch2_sort_keys_keep_unwritten_whiteouts+0xf94/0x19d0
[  699.677428][T10136]  ? __bch2_btree_node_write+0x3ae8/0x6830
[  699.683422][T10136]  ? bch2_btree_node_write+0xa5/0x2e0
[  699.688984][T10136]  ? __btree_node_flush+0x606/0x680
[  699.694391][T10136]  ? bch2_btree_node_flush0+0x35/0x60
[  699.699971][T10136]  ? journal_flush_pins+0xce6/0x1780
[  699.705440][T10136]  ? journal_flush_done+0x156/0x3f0
[  699.710821][T10136]  ? bch2_journal_flush_pins+0x1a1/0x3b0
[  699.716645][T10136]  ? bch2_journal_replay+0x4917/0x4d10
[  699.722300][T10136]  ? bch2_run_recovery_passes+0xaa6/0xf10
[  699.728224][T10136]  ? bch2_fs_recovery+0x42d2/0x5c60
[  699.733602][T10136]  ? bch2_fs_start+0x7b2/0xbd0
[  699.738568][T10136]  ? bch2_fs_get_tree+0x13ea/0x22d0
[  699.743954][T10136]  ? vfs_get_tree+0xb1/0x5a0
[  699.748730][T10136]  ? do_new_mount+0x71f/0x15e0
[  699.753698][T10136]  ? path_mount+0x742/0x1f10
[  699.758461][T10136]  ? __se_sys_mount+0x722/0x810
[  699.763491][T10136]  ? __ia32_sys_mount+0xe3/0x150
[  699.768625][T10136]  ? ia32_sys_call+0x2530/0x40d0
[  699.773767][T10136]  ? __do_fast_syscall_32+0xb0/0x110
[  699.779236][T10136]  ? do_fast_syscall_32+0x38/0x80
[  699.784439][T10136]  ? do_SYSENTER_32+0x1f/0x30
[  699.789297][T10136]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  699.795984][T10136]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  699.801955][T10136]  ? bch2_bkey_cmp_packed_inlined+0x43/0xd50
[  699.808124][T10136]  ? filter_irq_stacks+0x60/0x1a0
[  699.813363][T10136]  ? kmsan_get_metadata+0x13e/0x1c0
[  699.818717][T10136]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  699.825252][T10136]  ? kmsan_get_metadata+0x13e/0x1c0
[  699.830605][T10136]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  699.836583][T10136]  __msan_warning+0x95/0x120
[  699.841376][T10136]  bch2_bkey_cmp_packed_inlined+0x8d0/0xd50
[  699.847473][T10136]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  699.853451][T10136]  bch2_sort_keys_keep_unwritten_whiteouts+0xf94/0x19d0
[  699.860614][T10136]  __bch2_btree_node_write+0x3ae8/0x6830
[  699.866421][T10136]  ? try_to_wake_up+0xaee/0x1bb0
[  699.871551][T10136]  ? kmsan_get_metadata+0x13e/0x1c0
[  699.876914][T10136]  ? kmsan_get_metadata+0x13e/0x1c0
[  699.882266][T10136]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  699.888237][T10136]  ? kmsan_get_metadata+0x13e/0x1c0
[  699.893629][T10136]  bch2_btree_node_write+0xa5/0x2e0
[  699.898993][T10136]  __btree_node_flush+0x606/0x680
[  699.904203][T10136]  ? __btree_node_flush+0xd3/0x680
[  699.909510][T10136]  ? __pfx_bch2_btree_node_flush0+0x10/0x10
[  699.915600][T10136]  bch2_btree_node_flush0+0x35/0x60
[  699.920998][T10136]  journal_flush_pins+0xce6/0x1780
[  699.926405][T10136]  journal_flush_done+0x156/0x3f0
[  699.931594][T10136]  ? closure_wait+0xd5/0x120
[  699.936345][T10136]  bch2_journal_flush_pins+0x1a1/0x3b0
[  699.942087][T10136]  bch2_journal_replay+0x4917/0x4d10
[  699.947551][T10136]  ? irq_work_queue+0x18d/0x260
[  699.952608][T10136]  ? vprintk_emit+0xd00/0xea0
[  699.957477][T10136]  ? vprintk_default+0x3e/0x50
[  699.962440][T10136]  ? kmsan_get_metadata+0x13e/0x1c0
[  699.967798][T10136]  ? __pfx_bch2_journal_replay+0x10/0x10
[  699.973609][T10136]  bch2_run_recovery_passes+0xaa6/0xf10
[  699.979372][T10136]  bch2_fs_recovery+0x42d2/0x5c60
[  699.984577][T10136]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  699.991130][T10136]  ? __closure_wake_up+0x16a/0x180
[  699.996475][T10136]  bch2_fs_start+0x7b2/0xbd0
[  700.001284][T10136]  bch2_fs_get_tree+0x13ea/0x22d0
[  700.006555][T10136]  vfs_get_tree+0xb1/0x5a0
[  700.011165][T10136]  ? mount_capable+0x97/0x120
[  700.016094][T10136]  do_new_mount+0x71f/0x15e0
[  700.020858][T10136]  ? kmsan_get_metadata+0x13e/0x1c0
[  700.026235][T10136]  path_mount+0x742/0x1f10
[  700.030828][T10136]  ? user_path_at+0x32f/0x390
[  700.035687][T10136]  __se_sys_mount+0x722/0x810
[  700.040570][T10136]  __ia32_sys_mount+0xe3/0x150
[  700.045533][T10136]  ia32_sys_call+0x2530/0x40d0
[  700.050513][T10136]  __do_fast_syscall_32+0xb0/0x110
[  700.055821][T10136]  ? irqentry_exit+0x16/0x60
[  700.060576][T10136]  do_fast_syscall_32+0x38/0x80
[  700.065616][T10136]  do_SYSENTER_32+0x1f/0x30
[  700.070301][T10136]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  700.076814][T10136] RIP: 0023:0xf7fd5579
[  700.081008][T10136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  700.100809][T10136] RSP: 002b:00000000f57563c0 EFLAGS: 00000206 ORIG_RAX: 0000000000000015
[  700.109396][T10136] RAX: ffffffffffffffda RBX: 00000000f5756420 RCX: 0000000020005900
[  700.117510][T10136] RDX: 00000000200058c0 RSI: 0000000000000000 RDI: 00000000f5756460
[  700.125625][T10136] RBP: 00000000f5756420 R08: 0000000000000000 R09: 0000000000000000
[  700.133730][T10136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  700.141843][T10136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  700.149974][T10136]  </TASK>
[  700.153348][T10136] Kernel Offset: disabled
[  700.157745][T10136] Rebooting in 86400 seconds..