last executing test programs:

19.305229794s ago: executing program 4 (id=593):
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x13, 0x8, 0x100, 0x0})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2284, &(0x7f0000000040))

19.049838893s ago: executing program 4 (id=596):
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

18.743320463s ago: executing program 4 (id=598):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000e00)={[{@umask={'umask', 0x3d, 0xe}}, {@creator={'creator', 0x3d, "71c54bc5"}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x5}}, {@nobarrier}, {@part={'part', 0x3d, 0x8d4}}, {@nls={'nls', 0x3d, 'cp866'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0)
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0)

18.439987474s ago: executing program 4 (id=602):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd2a}, 0x18}, 0x1, 0x0, 0x0, 0x110}, 0x4000040)

18.236921851s ago: executing program 4 (id=605):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
fstat(r0, &(0x7f00000007c0))

18.023245048s ago: executing program 4 (id=607):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'rti800\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x1, 0xfffffffe, 0x20000004, 0x8, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x4000830, 0x40, 0x10000, 0xa, 0x800, 0xe2d8, 0x2, 0x8, 0xdf, 0xb, 0x4, 0x5, 0x5]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0x8, 0x8, 0x2, 0x0, 0x1, 0xa], 0x0, 0x4})

3.264895397s ago: executing program 1 (id=733):
io_setup(0x9, &(0x7f00000002c0)=<r0=>0x0)
r1 = eventfd2(0x0, 0x800)
io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xf, r1, &(0x7f0000000a80)="9575b49b00826fe4", 0x8, 0x4, 0x0, 0x0, r1}])

2.91078703s ago: executing program 32 (id=607):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'rti800\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x1, 0xfffffffe, 0x20000004, 0x8, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x4000830, 0x40, 0x10000, 0xa, 0x800, 0xe2d8, 0x2, 0x8, 0xdf, 0xb, 0x4, 0x5, 0x5]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0x8, 0x8, 0x2, 0x0, 0x1, 0xa], 0x0, 0x4})

2.89639836s ago: executing program 1 (id=737):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000500)={[{@dax_never}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x0, 0x634, &(0x7f0000001940)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020)

2.874771001s ago: executing program 2 (id=738):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff)

2.531749623s ago: executing program 2 (id=740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="78010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000024010880f0000080"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)

2.375330688s ago: executing program 0 (id=742):
io_setup(0xed5, &(0x7f0000000100)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

2.175632105s ago: executing program 2 (id=743):
r0 = open(&(0x7f00000005c0)='./file0\x00', 0x49841, 0x98)
fcntl$setlease(r0, 0x400, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00')

2.103503298s ago: executing program 2 (id=744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0)

2.04232239s ago: executing program 1 (id=745):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

1.893369415s ago: executing program 0 (id=747):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_DIRENT(r0, &(0x7f0000002180)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB='\a'], 0x58)

1.715362561s ago: executing program 0 (id=748):
r0 = socket(0x1, 0x5, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c})

1.565230106s ago: executing program 2 (id=750):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010000, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6206, &(0x7f00000019c0)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTd7rGd6eqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6uIuPzztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeD0iPj4Wce/+7fVm0bl99uM7f/zbb3/41Pf/+vvh6X//6Wb/jWnr3br1q3/9+c7j7y8AAACUqK7rukof80+kz/e9rjsFAMxFfv2vk7xcvXD15oL1R61Wq9WHsG6rJ7vTLiJis71N857B6XgAOGQ245Ouu0CH5F+0QUQ81XUngIVWdd0BDsS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PadJbxa0zm9fzain48O6U/K3PqwyLJ+ffG87+80z5K6x10/vMyLf/Rzq1Pxcn598fzH3N08u9NzL9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LuyLw87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrYw+WTfsutmb5pSri6bH1gcKkm2VWu+4HAAAAAAAAAAAAAJRksHMN76UqYhgRT6+u1nXd/LSN14/qSbc/7ErffyjZStd/5QEAYNvHx8bu5a8iliPiUvquv+Hq6mpdL6+s1qv1ylJ+PztaWq5XWp9r87RZtjTaxxviwahuftlya7u2WZ+XZ7WP/77msUZ1fx8dm48OAweAiNh5NbrnFemIqetnout3ORwOjv+jx/HPfnT9PAUAAAAOXl3XdZW+zvtEOuff67pTAMBc5Nf/8fMCarVarVarj17dVk92p11ExGZ7m+Y9g+H4AeCQ2YxPuu4CHZJ/0QYR8XzXnQAWWtV1BzgQ9+7fXq9SvlX79SCN756vBdmT/2a1vV3eftJ0lvFrTOb1/NqKfjw7pT/PzakPiyTn3xvP//JO+yitd9D5z8u0/Jv9PN5Bf7qW8++P5z/m6OTfm5h/qXL+g0fKvy9/AAAAAABYYPnf/48v1Pnf0ePuzkwPO/+7dmCPCgAAAAAAAAAH69792+v5vtd8/v9zE9Zz/+fRlPOv5F+knH+6/3/3wpuXx9brt+bvvv0g/3/ev73+u5v/+P883W/+S3mmSs+sKj0jqvRI1SBNH3PHptga9kfNIw2rXn+Qrvmph+/G1bgWG3Fmz7q9dDw8aD+7p73p6XC7ve7vtJ/b0z7Ybc/bn9/TPkxXOtUruf1UrMdP4lq8s93etC3N2P/lGe31jPacf9/xX6Sc/6D10+S/mtqrsWnj7ke9/znu29NJj/PW1c//8szB785MW9Hf3be2Zv9e7KA/2/9PnhrFz25sXD9168rNm9fPRprsWXou0uQzlvMfpp+c/8sv7bTnv/vt4/XuR6NHzn9RbMVgav4vteab/X1lzn3rQs5/lH5y/u+k9snH/2HOf/rx/2oH/QEAAAAAAAAAAAAAAICHqet6+xbRtyLiQrr/p6t7MwGA+cqv/3WSl8+r7j/u9n/Yux9d9V+tnnNdLVh/5lp/Wi9Wf9QLWf9nwfqzcHVbPdmb7SIi/tLepnnP8ItJvwwAWGSfRsTfu+4EnZF/wfL3/TXTk113BpirGx98+KMr165tXL/RdU8AAAAAAAAAgMeVx/9ca43/fLKu6ztj6+0Z//XtWHvS8T8HeWZ3gNEpA1X3H32fHmarN+r3WsONvxDTxv8e7s49bPzvwYzHG85oH81oX5rRvjyjfeKNHi05/xda452fjIgTY8OvlzD+6/iY9yXI+b/Yej43+X9pbL12/vVvDnP+vT35n775/k9P3/jgw9euvn/lvY33Nn58/uzZM+cvXLh48eLpd69e2ziz898Oe3ywcv557GvXgZYl558zl39Zcv5fSLX8y5Lz/2Kq5V+WnH9+vyf/suT882cf+Zcl5/9KquVflpz/l1Mt/7Lk/F9NtfzLkvP/SqrlX5ac/2upln9Zcv6nUi3/suT8T6d6n/mvHHS/mI+cfz7D5fgvS84/X9kg/7Lk/M+lWv5lyfmfT7X8y5Lzfz3V8i9Lzv+rqZZ/WXL+F1It/7Lk/L+WavmXJed/MdXyL0vO/+upln9Zcv7fSLX8y5LzfyPV8i9Lzv+bqZZ/WXL+30q1/MuS8/92quVflpz/m6mWf1kefP+/GTNmzOSZrv8yAQAAAAAAAAAAAADj5nE5cdf7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwX3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17i5Hrru8AfmZv3jiQGAipk5qwcUwIySa7thNfaFNMuDbcSkIo9ILtetdmwTe8dgk0qh0FSiSMiiraBlVtAaE2LxVWxQOtAOUBtapUCdoH2gdEhcpDVAUUkKrSCthqzvn//zszOzuz6x2vz57z+UjJLztzZs6ZM/+Z3a+d7w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAq1tfN/uJRpZljUajuGBLlr2gOa+Z2JJf8uqre3wAAADA2v0s//fz16cLDqzgRi3b/OMt3/zywsLCQvae4T8e/czCQrpiIstGN2VZfl106XvvbbRuEzyRjTeGWr4e6rP74T7Xj/S5frTP9WN9rt/U5/rxPtcvOQFLXJM10p3tyP9zS3FKsxuy0fy6HV1u9URj01Dz3KXbZo38NgujR7O57Hg2m023bV9s28i3/+qtzX29OYv7GmrZ17bmCvnRY0fiMTTCOd7Rtq/F+4x+8Nps4sc/euzIX5197qZus+9paLu/4jjv2N48zo+FS4pjbWSb0jmJxznUcpzbujwnw23H2chv1/zvzuN8foXHObx4mOuq8zkfz4by//5Wfp5GGlmX87QtXPaT27Isu7B42J3bLNlXNpRtbrtkaPH5GS9WZPM+mkvpxdnIqtbprStYp805s6N9nXa+JuLzf2u43cgyx9D6NP3g8bGW5/2nC5ezTqPmo17utdK5Bgf9WinLGozr4lv5g36y6xrcER7/Y7cvvwa7rp0uazA97pY1uL3fGhwaG86POT0Jjfw2i2twZ9v2w/meGvl89vbea3Dq7InTU/Mf+ejdcycOH5s9Nnty986d07v37Nm3b9/U0bnjs9PFvy/zbJff5mwovQa2h3MXXwOv7Ni2dakufH5syfvv5b4Ox3u8Drd0bDvo1+FI54NrrM8LcumaLl4b72qe9PGLQ9kyr7H8+blz7a/D9LhbXocjLa/Drt9TurwOR1bwOmxuc/rOlf3MMtLyT7djWP57wdrW4JaWNdj580jnGhz0zyNlWYPjYV18587lvxdsC8f75ORqfx4ZXrIG08MN7z3NS9LP++P78tFtXd7cvOLasezc/OyZex49fPbsmZ1ZGOviJS1rpXO9bm55TNmS9Tq06vV6YO6WJ2/ucvmWcK7G727+a3zZ56q5zb339H6u8u9u3c9n26W7sjAGbL3PZ7fv5s3zOZZln/3G4w997bHPvm7Z89nMmx+bWvvP4imXtrz/ji7z/htz/8+L/aW7emJ4dKR4/Q6nszPa9n7c/lSN5O9djXzfz0+t7P14NPyz3u/HN/R4P97ase2g349HOx9cfD9u9PvTjrXpfD7Hwzo5Pt37/bi5zdZdq12TIz3fj28LsxHO/6tCUki5qGXtLLdu075GRkbD4xqJe2hfp7vbth8N2ay5r6d3Xd46veO24r6G06NbtF7rdKJj20Gv0/RnX8ut00a/P327PJ3P53hYFzfs7r1Om9s8c+/a3zuvif/Z8t451m8Njg6PNY95NC3C/P0+W7gmrsF7siPZqex4NpNfO5avp0a+r8n7VrYGx8I/6/1eubXHGryjY9tBr8H0fWy5tdcYWfrgB6Dz+RwP6+Kp+3qvweY2r9872J9d7wiXpG1afnbt/PO15f7M6+aO03Sl1spIOM5v7O39Z7PNbY7vW23O7H2e7gqXXNvlPHW+fpd7Tc1k63OetobjfG7f8uepeTzNbT6zf4Xr6UCWZec/9ED+573h71f+9ty3v9z29y7d/k7n/Ice+OELj/7Dao4fgI3v58XYXHyva/mbqZX8/T8AAACwIcTcPxRmIv8DAABAZcTcH/+v8ET+BwAAgMqIuX8kzKQm+X/r65+b+/n5LDXzF4J4fToNDxbbxY7rdPh6YmFR8/IHvjj7339/fmX7Hsqy7KcP/l7X7bc+GI+rMBGO89Ib2i9f4st3r2jfhx45n/bb2l//XLj/+HhWugy6VXCnsyz76vWfyvcz8d6L+XzmwUP5fOjCk080t3l+f/F1vP2zLym2//NQ/j1w9HDb7Z8N5+H7YU6/pfv5iLf70sVXbdv77sX9xds1tl+XP+yn3lfcb/w9OZ9+otg+nufljv9rn3z6S83tH31F9+M/P9T9+J8O9/vFMP/3ZcX2rc9B8+t4u4+H44/7i7e75wtf73r8lz5RbH/6jcV2h8KM+78jfL3jjc/NtZ6vRxuH2x5X9qZiu7j/6W//YX59vL94/53HP37wYtv56Fwfz/xrcT9THdvHy+N+or/r2H/zflrXZ9z/039wqO0899v/pYeefVnzfjv3f1fHdqc/dGe+/8X7a/+NTX/x8U913V88ngN/c7rt8Rx4Z3gdh/0/9b6wHsP1/3epuL/O365w6J3t7z9x+89tOd/2eKI3/7jY/6XXHMvnpvFrNl/7ghded+HlzXOXZd/aVNxfv/0f+8tTbcf/+RuL8xGvjx39zv0vJ+7/zIcnT56aPzc3k87qY9fnvzvnrcXxxOO9Pry3dn598NTZ98+emZiemM6yier+Cr3L9oUwf1iMC723XljyDnrnI+H5vPlPv7r59n/5ZLz8395VXH7xLcX3rVeG7T4dLt8Snr/V7X+pp269MX99N54JR7iw9PcFr8W2Hf+1b0Ubhsff+XNBXO+nX/r+/Dw0r8u/b8TX9RqP/7szxf18JZzXhfCbmbffuLi/1u3j70a4+HDxel/z+Qtvc/F5/evwfL/t+8X9x+OKj/e74eeYr29tf7+L6+Mr54c67z//LR4XwvtJdqG4Pm4Vz/fF52/senjx95BkF27Kv/6jdD83rephLmf+I/NTx+dOnnt06uzs/Nmp+Y989OCJU+dOnj2Y/y7Pgx/od/vF96fN+fvTzOyee7P83epUMa6wq338px85MrN3+vaZ2aOHzx09+8jp2TPHjszPH5mdmb/98NGjsx/ud/u5mft37tq/e++uyWNzM/fv279/9/7JuZOnmodRHFQfe6Y/OHnyzMH8JvP337t/53333Ts9eeLUzOz9e6enJ8/1u33+vWmyeevfnTwze/zw2bkTs5Pzcx+dvX/n/j17dvX9bYAnTh+dn5g6c+7k1Ln52TNTxWOZOJtf3Pze1+/2VNP8fxQ/z3ZqFL+IL3vHXXvS72dt+uLjy95VsUnHLxB9Lvwumn960el9K/k65v7RMJOa5H8AAACog5j7x8JM5H8AAACojJj7N4WZyP8AAABQGTH3j4eZ1CT/V67/v/X8ivav/6//33q+9P9r1v9/uGz9/+L9Qv9/MNr79/8+ttrb6/8H+v/6//r/+v/6/wxA2fr/Mfdfk2W1zP8AAABQBzH3bw4zkf8BAACgMmLuvzbMRP4HAACAyoi5/wVhJjXJ//r/+v/6//r/+v/d96//vzGttX+v/x/o/9e2/5/Vq/9/YZDHr/+v/89SZev/x9z/wjCTmuR/AAAAqIOY+68LM5H/AQAAoDJi7r8+zET+BwAAgMqIuX9LmElN8r/+v/6//r/+v/5/9/3r/29M+v+96f/3of/v8//1//X/Gaiy9f9j7n9RmElN8j8AAADUQcz9Lw4zkf8BAACgfEYu72Yx978kzGRJ/r/MHQAAAABXXcz9N2QdRfCa/P2//r/+f/n7/5vSdfr/+v9ZKfv/w5n+f3no//em/9+H/r/+v/6//j8DVbb+f577s/HspWEmNcn/AAAAUAcx998YZiL/AwAAQGXE3P8LYSbyPwAAAFRGzP1bw0xqkv/1//X/y9//9/n/+v9l7//7/P8y0f/vTf+/D/1//X/9f/1/Bqps/f+Y+28KM6lJ/gcAAIA6iLn/5jAT+R8AAAAqI+b+Xwwzkf8BAACgMmLu3xZmUpP8r/9f8v5/bI7q/+v/6//r/+v/r4j+f2/6/33o/+v/6//r/zNQZev/x9z/sjCTmuR/AAAAqIOY+28JM5H/AQAAoDJi7n95mIn8DwAAAJURc/9EmElN8r/+f8n7/0UPfszn/+v/6//r/+v/r4z+f2/6/33o/+v/D6T/v3Be/1//n0LZ+v8x998aZlKT/A8AAAB1EHP/9jAT+R8AAAAqI+b+28JM5H8AAACojJj7d4SZ1CT/6/9viP5/pv+v/6//r/+v/78y+v+96f/3of+v/+/z//X/Gaiy9f9j7n9FmElN8j8AAADUQcz9t4eZyP8AAABQGTH3vzLMRP4HAACAyoi5/44wk5rkf/1//X/9f/1//f/u+9f/35j0/3vT/+9D/1//X/9f/5+BKlv/P+b+V4WZ1CT/AwAAQB3E3H9nmIn8DwAAAJURc/9dYSbyPwAAAFRGzP2TYSY1yf/6//r/+v/6//r/3fev/78x6f/3pv/fh/6//r/+v/4/A1W2/n/M/XeHmdQk/wMAAEAdxNx/T5iJ/A8AAACVEXP/VJiJ/A8AAACVEXP/dJhJTfK//r/+v/6//v+q+v8vX7xf/f+C/n+56P/3pv/fh/6//v9V7/+P6v9TKWXr/8fcvzPMpCb5HwAAAOog5v5dYSbyPwAAAFRGzP27w0zkfwAAAKiMmPvvDTOpSf7X/9f/1//X//f5/933r/+/Men/9zb4/n98iPr/+v/6/z7/X/+fpcrW/4+5/74wk5rkfwAAAKiDmPv3hJnI/wAAAFAZMffvDTOR/wEAAKAyYu7fF2ZSk/yv/6//r/+v/6//333/+v8bk/5/bz7/vw/9f/1//X/9f9bo4d9v/aps/f+Y+/dnHd+la5L/AQAAoA7y3J+NZ68OM5H/AQAAoDJi7v+lMBP5HwAAACoj5v5fDjOpSf7X/2/rnjcfrv6//r/+v/5/Tv9/Y9L/703/vw/9f/1//X/9fwZq2f5/iN7r3f+Puf/+MJOa5H8AAACog5j7fyXMRP4HAACAyoi5/zVhJvI/AAAAVEbM/QfCTGqS//X/ff6//r/+v/5/9/2vd/9/LN6v/v+a6P/3pv/fh/6//r/+v/4/A1W2z/+Puf+1YSY1yf8AAABQBzH3PxBmIv8DAABAZcTc/7owE/kfAAAAKiPm/teHmdQk/+v/6//r/+v/6/9337/P/9+Y9P970//vQ/9f/1//X/+fgSpb/z/m/jeEmdQk/wMAAEAdxNz/xjAT+R8AAAAqI+b+N4WZyP8AAABQGTH3vznMpCb5X/9f/1//X/9f/7/7/hf7/3+Wf63/vzHo//em/9+H/r/+v/6//j8DVbb+f8z9vxpmUpP8DwAAAHUQc/+DYSbyPwAAAFRGzP1vCTOR/wEAAKAyYu5/a5hJTfK//r/+v/6//r/+f/f9+/z/jUn/v7cN1v//2XXhcv3/gv5/uY9/tf3/kY6vr0j//3vL9f8XNnXeXv+fK6Fs/f+Y+98WZlKT/A8AAAB1EHP/28NM5H8AAACojJj73xFmIv8DAABAZcTc/2thJjXJ//r/zeNYbC/r/1e1/z+k/6//r/9fE/r/vW2w/r/P/++g/1/u4/f5//r/LFW2/n/M/e8MM6lJ/gcAAIA6iLn/oTAT+R8AAAAqI+b+h8NM5H8AAACojJj73xVmUpP8r//v8//r0f/3+f+Z/r/+f03o//em/9+H/r/+f9n6//+p/8/GVrb+f8z9j4SZ1CT/AwAAQB3E3P/uMBP5HwAAACoj5v5fDzOR/wEAAKAyYu5/T5hJTfK//v9G6f9PXF7/Pz5hV63//7j+/xXs/99yXbGd/r/+P4v0/3vT/+9D/1//v2z9f5//zwZXtv5/zP3vDTNZef4fX/GWAAAAwFURc/9vhJnU5O//AQAAoA5i7v/NMBP5HwAAACoj5v7fCjOpSf7X/98o/X+f/5/p//v8/47Ho/+v/9/N+vX/4zuP/r/+v/5/pP+v/6//T6ey9f9j7v/tMJOa5H8AAACog5j73xdmIv8DAADAhtDt/8nuFHP/wTAT+R8AAAAqI+b+Q2EmNcn/+v/6//r/Je3//8n2f/7ON99+aKf+v/6//v+qrOvn/zdf/D7/X/9f/z/R/9f/1/+nU9n6/zH3Hw4zqUn+BwAAgDqIuf93wkzkfwAAAKiMmPuPhJnI/wAAAFAZMffPhJnUJP/r/+v/6/+XtP+/gT//P54P/f92A+v/xzdd/f+uiv59WkVXtv//7sWeuP7/avv/Y10v1f/X/9/Ix6//r//PUmXr/8fcPxtmUpP8DwAAAHUQcv/Q0WIuXiH/AwAAQGXE3H8szET+BwAAgMqIuf/9YSbVzv+XQp1O/1//X/9f/9/n/y+z/179/8aIz/8vq9S//0n+QtH/71Ce/n93+v/6/xv5+PX/9f9Zqmz9/5j758JMqp3/AQAAoFZi7v9AmIn8DwAAAJURc/8Hw0zkfwAAAKiMmPuPh5nUJP/r/+v/6//r/+v/d99/aT//X/+/p7X27/X/A/3/evf//0f/X/9f/5/BKFv/P+b+E2EmNcn/AAAAUAf/z96dNFlWl3kcv0kXXVlBL3rXi950RC/7JbDoXne/gF70pjdGGC5wQMWZwnlEUXFWBOcBBxBEVHAewAnFGVSc5wEnRIkyyHyepyozT56bWXUz85z///NZ8EhKcq9ERRa/yvp6cvdfFLfY/wAAANCM3P0Pj1vsfwAAAGhG7v5HxC2d7H/9/7n0/6crZf3/1vc/if7/P/X/u72+/l//3zL9/zj9/xL6f8//1//r/1mpqfX/ufsfGbd0sv8BAACgB7n7HxW32P8AAADQjNz9F8ct9j8AAAA0I3f/o+OWTvb/tv5/bdFn/58Zr+f/t9T/e/7/rq+v/9f/t+xw+//LHvzKp//X/+v/g/5/T/3/8d0+X/9Pi6bW/+fuf0zc0sn+BwAAgB7k7n9s3GL/AwAAQDNy918St9j/AAAA0Izc/Y+LWzrZ/6t7/v+JjY/PtP8v+n/9/8YH9P/6f/3/bHn+/7ie+v+L77zgontv/Neb9vP6+n/9v+f/6/9Zran1/7n7Hx+3dLL/AQAAoAe5+58Qt9j/AAAA0Izc/U+MW+x/AAAAaEbu/ifFLZ3s/9X1/7N+/n/R/+v/Nz6g/9f/6/9nS/8/rqf+/2xeX/+v/9f/6/9Zran1/7n7nxy3dLL/AQAAoAe5+58St9j/AAAA0Izc/ZfGLfY/AAAANCN3/8m4pZP9r/8/+P7/Af2//j+u/l//r/8/ePr/cfr/JfT/+n/9v/6flZpa/5+7/7K4pZP9DwAAAD3I3f/UuMX+BwAAgGbk7n9a3GL/AwAAQDNy9z89bulk/+v/Pf9f/6//1/8Pv77+f570/+P0/0vo/8+1nz9f/6//1/9zpn32//ePfNleSf+fu/8ZcUsn+x8AAAB6kLv/mXGL/Q8AAADNyN3/rLjF/gcAAIBm5O5/dtzSyf7X/+v/9f/6/7Pu/3f+0Nug/x+m/z8c+v9xk+n/144Nflj/P/v+3/P/9f/6f7aY2vP/c/c/J27pZP8DAABAD3L3PzduGdn/+/7FfAAAAOBI5e5/Xtzi+/8AAAAwe1md5e5/ftzSyf7X/+v/9f/6f8//H379sf7/pjPen/5/WvT/4ybT/+9C/6//n/P71//r/9lpav1/7v4XxC2d7H8AAADoQe7+y+MW+x8AAACakbv/hXGL/Q8AAADNyN3/orilk/0/3P+f/u/1/3uj/9/6/vX/wz8+VtX/599R/z/a//+X5//3Sf8/7vD7/+P6/61/f/3/ATrq9994/39i2efr/xkytf4/d/8VcUsn+x8AAAB6kLv/xXGL/Q8AAADNyN3/krjF/gcAAIBm5O5/adzSyf73/H/9v/5/fv2/5/9vOsrn/y8Ovf8/pv/fI/3/OM//X0L/r//X/3v+Pys1tf4/d/+VcUsn+x8AAAB6cOV9i43d/7LFwv4HAACAOTrz9w5s/w2lIXf/y+MW+x8AAACakbv/FXFLJ/tf/6//1//r//X/w68/rf7f8//3Sv8/Tv+/hP7/IPr5Y431/1ft9vlT6P8v1f8zMVv6/1tOf/yo+v/c/a+MWzrZ/wAAANCD3P2vilvsfwAAAGhG7v5Xxy32PwAAADQjd/9r4pZO9v+B9/8ndn9t/b/+X/+v/9f/6/9XTf8/Tv+/hP7f8/89/1//z0qd7v+3fj08qv4/d/9r45ZO9j8AAAD0IHf/6+IW+x8AAACakbv/qrjF/gcAAIBm5O5/fdzSyf73/H/9v/5f/6//H359/f886f/H6f+X0P/r//X/+n9Wasvz/89wVP1/7v6r45ZO9j8AAAD0IHf/NXGL/Q8AAADNyN3/hrjF/gcAAIBm5O5/Y9zSyf7X/x9s/58f1//r/xf6f/2//v9QdNv/rw39TLTTLv3/7Q89+T9bP6L/1//r//X/+n9WYBL9/6nT/3aZu/9NcUsn+x8AAAB6kLv/zXGL/Q8AAADNyN3/lrjF/gcAAIBm5O5/a9yyz/3/zyt9V4dH/+/5//p//b/+f/j19f/z1G3/v0ee/7+E/l//r//X/7NSk+j/z/jz3P1vi1t8/x8AAACakbv/7XGL/Q8AAADNyN3/jrjF/gcAAIBm5O5/Z9zSyf7X/+v/9f/6f/3/8Oufbf+/vhim/z8c+v9x+v8l9P/6f/2//p+Vmlr/n7v/2rilk/0PAAAAPcjd/664xf4HAACAZuTuf3fcYv8DAABAM3L3vyduGdz/Vx47pLd1aPT/+n/9v/5f/z/8+p7/P0/6/3H6/8Vicd3IGxjq/08d1//r//X/+n/O0tT6/9z9741bfP8fAAAAmpG7/7q4xf4HAACAZuTuvz5usf8BAACgGbn73xe3dLL/9f/6f/2//l//P/z6+v950v+P0/8v4fn/+n/9v/6flZpa/5+7/4a4pZP9DwAAAD3I3X9j3GL/AwAAQDNy978/brH/AQAAoBm5+2+KWzrZ//p//b/+X/9/IP3/Sf3/dvr/w3Fw/f9C/6//1/8vof/X/+v/2e6w+v/74+v9sv4/d/8H4pZO9j8AAAD0IHf/zXGL/Q8AAADNyN3/wbjF/gcAAIBm5O7/UNzSyf7X/+v/9f/6f8//H359/f88ef7/OP3/Evp//b/+X//PSh1W/79b77/9z3P3fzhu6WT/AwAAQA9y998St9j/AAAA0Izc/bfGLfY/AAAANCN3/0filk72v/5f/7+1/18s9P/6f/3/pkPo/9cX+v+V0/+P0/8vof9vs/8/b9FQ/39i18/X/zNFU+v/c/d/NG7pZP8DAABAD3L3fyxusf8BAACgGbn7Px632P8AAADQjNz9n4hbWtr/D+yevs2//z++7RP1/4vF4q5LPP9f/z/y+vr/yfT/9U9V/786+v9x+v8l9P9t9v+e/6//58hMrf/P3f/JuKWl/Q8AAACdy93/qbjF/gcAAIBm5O7/dNxi/wMAAEAzcvd/Jm7pZP/Pv//f/on6/8U5Pf9f/7/xAf3/TPv/za/h+v++nWt/f/V6/Jym/9f/6/8H+/m1Xf69Z6H/1//r/xkwtf4/d/9n45ZO9j8AAAD0IHf/bXGL/Q8AAADNyN1/e9xi/wMAAEAzcvd/Lm7pZP/r//X/+v959v/r+n/P/9f/D5rK8/8vvPC/79D/6/9b7P/H6P/1//p/tpta/5+7//NxSyf7HwAAAHqQu/8LcYv9DwAAAM3I3f/FuMX+BwAAgGbk7v9S3NLJ/t/Z/5+/2CxUNw31/9Go6f/PoP/f+v71/8M/Pjz/X/+v/z94U+n/Pf//7N6//l//P+f3v6/+/992fr7+nxZNrf/P3X9H3NLJ/gcAAIAe5O7/ctxi/wMAAEAzcvd/JW6x/wEAAKAZufvvjFs62f+e/6//1//r//X/w6+v/58n/f84/f8S+v9z7+fzq6r+f77P//8H/T+rM7X+P3f/V+OWjeH37/90lv8zAQAAgAnJ3f+1uKWT7/8DAABAD3L3fz1usf8BAACgGbn7vxG3dLL/9f/6f/2//l//P/z6+v950v+P0/8v0U//vz70waPu58/VUb//Zvp/z/9nhabW/+fu/2bc0sn+BwAAgLbdt/HH3P3filvsfwAAAGhG7v5vxy32PwAAADQjd/9dcUsn+1//r/9vv///f/3/ttfX/+v/W6b/z5/Rh+n/l+in/x901P383N+//l//z05T6/9z998dt3Sy/wEAAKAHufu/E7fY/wAAANCM3P3fjVvsfwAAAGhG7v7vxS2d7H/9f1/9/9qix/7f8//1//r/nsyn/7/m2NBHPf9f/6//n+/71//r/9lpav1/7v571o51uf8BAABgrv73Px52917/2ns2/ri++H7cYv8DAABAM3L3/yBusf8BAACgGbn7fxi3dLL/9f999f99Pv9f/6//1//3ZD79/zD9v/5f/z/f96//1/+z09T6/9z9P4pbzhh+g/8HPQAAAMDR+cf9/eW5+38ct3Ty/X8AAADoQe7+n8QtO/b/qT3+rnYAAABganL3/zRu6eT7//r/iff/iwPq/+Ov0/9v0v/r/4deX/8/T/r/cefY/59a0//r/0fo//X/+n+2m1r/n7v/5hsWXe5/AAAAaNSWX1H42cYf1xc/j1vsfwAAAGhG7v5fxA3n2f8AAADQjtz9v4xbOtn/+v+J9/9n9fz/E/WfPP+/8/7/8vXB19f/6/9bpv8f5/n/Sxxc/5/vQ/9/gI76/ev/9f/stI/+f2OQHnT/n7v/V3FLJ/sfAAAAepC7/9dxi/0PAAAAzcjd/5u4xf4HAACAZuTu/23c0sn+1/8fQf9/xfHF4kD7/z08/1//30f/v8vrt9P//8sFJ2/7v4dcf63+n9MOs//PHwv6f/2/5/9v0v/r//X/bDe15//n7v9d3NLJ/gcAAIAe5O6/N26x/wEAAKAZuft/H7c8uP9vPap3BQAAAKxS7v4/xC2dfP9f/9/i8//n2f/nP+sj6P9Pzq//z6a49/7f8//1/zt5/v84/f8S+n/9v/5f/89KTa3/z93/x7ilk/0PAAAAPcjd/6e4Jff/2r5/6R4AAACYmNz9f45bfP8fAAAAmpG7/764pZP9r//X/0+l/0+e/3/68zz/f5P+X/+/H/r/cfr/JfT/+n/9v/6flZpa/5+7/y9xSyf7HwAAAHqQu//+uMX+BwAAgGbk7v9r3GL/AwAAQDNy9/8tbulk/+v/9f/6f/2//n/49fX/86T/H6f/X0L/r//X/+v/Wamp9f+5+/8eAAD//1UYc8I=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10800, 0x1a5)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x5, 0x2})

1.482248049s ago: executing program 0 (id=752):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.352018803s ago: executing program 1 (id=753):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

1.225617678s ago: executing program 3 (id=754):
memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010025bd7000fbdb5f251c208008ff01ff0a001ef83708000100"], 0x24}, 0x1, 0x0, 0x0, 0x4c25}, 0x400c020)

1.205486798s ago: executing program 0 (id=755):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

1.097430852s ago: executing program 1 (id=756):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

1.015052025s ago: executing program 3 (id=757):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8,iocharset=iso8859-6,uid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x152b, &(0x7f0000000a00)="$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")
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

744.354114ms ago: executing program 1 (id=758):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)

610.052539ms ago: executing program 3 (id=759):
r0 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r0)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r0)

546.959671ms ago: executing program 0 (id=760):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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")
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

408.283646ms ago: executing program 3 (id=761):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x646, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000640)=@multiplanar_mmap={0x6, 0x1, 0x4, 0x1, 0xffffff80, {}, {0x1, 0x1, 0x2, 0x6, 0x3, 0x8, "ce5d170d"}, 0x9, 0x1, {0x0}, 0x200})

278.96393ms ago: executing program 3 (id=762):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x51, 0x0, 0x4}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@broadcast, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)

98.138127ms ago: executing program 3 (id=763):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x1, "f472a708"}, @global=@item_4={0x3, 0x1, 0x6, "e8e99487"}]}}, 0x0}, 0x0)

0s ago: executing program 2 (id=764):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x81, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)={0x20, 0x0, 0x28, {0x28, 0x31, "f70ba381038de583bb48fd16a2cb4fdca0560fb30d54f3e5c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

promiscuous mode
[   74.563478][ T4270] device veth1_vlan entered promiscuous mode
[   74.596587][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.614970][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.634641][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.671369][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.679508][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.688517][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.699398][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.709693][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.717267][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.725379][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.769292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.781372][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.828457][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.845650][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.855066][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.875521][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.900629][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.918442][ T4270] device veth0_macvtap entered promiscuous mode
[   74.940670][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.950871][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.966775][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.990917][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.012105][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.029314][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.039338][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.056773][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.069243][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.088548][ T4270] device veth1_macvtap entered promiscuous mode
[   75.106645][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.128066][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.139522][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.149584][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.166774][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.181113][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.192239][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.219261][ T4269] device veth0_vlan entered promiscuous mode
[   75.253818][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.269784][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.289533][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.298587][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[   75.298640][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[   75.306563][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.311903][ T4282] Bluetooth: hci1: command 0x040f tx timeout
[   75.320671][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.325928][ T4276] Bluetooth: hci4: command 0x040f tx timeout
[   75.325998][ T4276] Bluetooth: hci0: command 0x040f tx timeout
[   75.348816][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.364469][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.388328][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.398986][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.415115][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.442479][ T4269] device veth1_vlan entered promiscuous mode
[   75.475241][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.484538][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.503055][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.541899][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.578627][ T4270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.596626][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.609177][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.622597][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.643439][ T4267] device veth0_vlan entered promiscuous mode
[   75.667084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.677296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.686294][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.698807][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.709094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.732712][ T4267] device veth1_vlan entered promiscuous mode
[   75.751206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.762762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.797738][ T4268] device veth0_vlan entered promiscuous mode
[   75.821044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.837738][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.848154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.864543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.902956][ T4269] device veth0_macvtap entered promiscuous mode
[   75.942275][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.955210][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.965525][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.991207][ T4267] device veth0_macvtap entered promiscuous mode
[   76.006731][ T4269] device veth1_macvtap entered promiscuous mode
[   76.020902][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.030412][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.040151][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.049701][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.061746][ T4268] device veth1_vlan entered promiscuous mode
[   76.077646][ T4267] device veth1_macvtap entered promiscuous mode
[   76.110428][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.119737][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   76.128828][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.138100][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.146063][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.164575][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.173085][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.206571][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.215150][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.223939][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.242264][ T4268] device veth0_macvtap entered promiscuous mode
[   76.252839][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.262622][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.275435][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.287799][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.308067][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.319522][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.332433][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.345495][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.358017][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.369166][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.380751][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.392203][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.401365][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.410739][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.420835][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.430152][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.439271][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.448644][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.458283][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.470583][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.481925][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.492063][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.504069][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.516085][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.529333][ T4268] device veth1_macvtap entered promiscuous mode
[   76.543215][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.552664][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.565088][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.576970][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.587671][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.595959][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.605333][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.616859][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.626297][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.626603][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.645617][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.655478][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.665691][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.688556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.736453][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.759200][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.771113][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.781910][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.792746][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.803383][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.827478][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.866247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.878967][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.889012][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.899806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.918301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.933067][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.951125][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.975773][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.995481][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.011582][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.026894][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.037726][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.052235][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.088190][ T4273] device veth0_vlan entered promiscuous mode
[   77.105927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.114984][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.125121][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.135549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.155976][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.170039][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.181653][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.191674][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.281289][ T4273] device veth1_vlan entered promiscuous mode
[   77.373887][ T4282] Bluetooth: hci2: command 0x0419 tx timeout
[   77.379968][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   77.383853][ T4278] Bluetooth: hci0: command 0x0419 tx timeout
[   77.386414][ T4271] Bluetooth: hci4: command 0x0419 tx timeout
[   77.392189][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[   77.467671][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.485101][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.517559][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.526847][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.536329][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.545021][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.558469][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.599263][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.621072][ T4273] device veth0_macvtap entered promiscuous mode
[   77.633918][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.644628][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.652680][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.690278][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.707070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.724466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.749470][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.752254][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.765989][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.768816][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.797389][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.801230][ T4273] device veth1_macvtap entered promiscuous mode
[   77.807223][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[   77.823797][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.837568][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.849814][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.860572][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.912577][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.949314][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.959252][ T4367] block nbd1: not configured, cannot reconfigure
[   77.959902][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.977924][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.988853][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.002719][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.022427][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.038613][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.063880][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.104224][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.121832][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.145924][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.158006][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.169271][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.188300][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.198550][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.213102][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.229375][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.240135][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.292947][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.307677][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.318580][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.328648][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.339210][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.368255][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.396180][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.635612][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.664806][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.712300][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.751602][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.758580][ T4388] loop3: detected capacity change from 0 to 256
[   78.770120][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.797864][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.081335][ T4397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'.
[   79.287126][ T4402] loop4: detected capacity change from 0 to 256
[   79.310147][ T4405] loop0: detected capacity change from 0 to 64
[   79.321327][ T4402] =======================================================
[   79.321327][ T4402] WARNING: The mand mount option has been deprecated and
[   79.321327][ T4402]          and is ignored by this kernel. Remove the mand
[   79.321327][ T4402]          option from the mount to silence this warning.
[   79.321327][ T4402] =======================================================
[   79.483989][ T4402] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[   79.725465][   T27] audit: type=1800 audit(1775084955.224:2): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.22" name="file1" dev="loop4" ino=1048596 res=0 errno=0
[   80.011898][ T4428] netlink: 96 bytes leftover after parsing attributes in process `syz.4.31'.
[   80.059277][ T4428] netlink: 'syz.4.31': attribute type 1 has an invalid length.
[   80.078132][ T4428] netlink: 634 bytes leftover after parsing attributes in process `syz.4.31'.
[   80.135718][ T4431] comedi: No check for data length of config insn id 1003 is implemented
[   80.196015][ T4431] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[   80.243665][ T4431] comedi: Assuming n=15 is correct
[   80.324860][ T4439] sp0: Synchronizing with TNC
[   80.423329][ T4441] loop1: detected capacity change from 0 to 1024
[   80.667042][ T4451] capability: warning: `syz.0.43' uses deprecated v2 capabilities in a way that may be insecure
[   80.929110][ T4319] hfsplus: b-tree write err: -5, ino 25
[   80.955407][ T4319] hfsplus: b-tree write err: -5, ino 4
[   80.961739][ T4319] hfsplus: b-tree write err: -5, ino 2
[   81.019335][ T4319] hfsplus: b-tree write err: -5, ino 26
[   81.062978][ T4319] hfsplus: b-tree write err: -5, ino 17
[   81.323464][ T4476] loop3: detected capacity change from 0 to 512
[   81.350174][ T4476] EXT4-fs: Ignoring removed nomblk_io_submit option
[   81.403777][ T4476] EXT4-fs: Ignoring removed mblk_io_submit option
[   81.529708][ T4476] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   81.618333][ T4476] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   81.636881][ T4476] EXT4-fs (loop3): 1 truncate cleaned up
[   81.643059][ T4476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   81.668370][ T4476] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 4: comm syz.3.55: lblock 0 mapped to illegal pblock 4 (length 1)
[   81.693228][ T4476] EXT4-fs (loop3): Remounting filesystem read-only
[   81.789955][ T4267] EXT4-fs (loop3): unmounting filesystem.
[   81.873823][ T4280] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   82.100921][ T4280] usb 5-1: Using ep0 maxpacket: 32
[   82.112781][ T4280] usb 5-1: unable to get BOS descriptor or descriptor too short
[   82.147544][ T4280] usb 5-1: config 6 has an invalid interface number: 3 but max is 2
[   82.182554][ T4280] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   82.185552][  T125] cfg80211: failed to load regulatory.db
[   82.197609][ T4280] usb 5-1: config 6 has no interface number 1
[   82.213871][ T4280] usb 5-1: too many endpoints for config 6 interface 0 altsetting 128: 255, using maximum allowed: 30
[   82.243626][ T4280] usb 5-1: config 6 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   82.268073][ T4280] usb 5-1: config 6 interface 2 has no altsetting 0
[   82.284121][ T4280] usb 5-1: config 6 interface 0 has no altsetting 0
[   82.327309][ T4280] usb 5-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b
[   82.347254][ T4280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.363939][ T4280] usb 5-1: Product: syz
[   82.389830][ T4280] usb 5-1: Manufacturer: syz
[   82.407806][ T4280] usb 5-1: SerialNumber: syz
[   82.623672][ T4337] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   82.686552][ T4280] usb 5-1: selecting invalid altsetting 0
[   82.704102][ T4280] usb 5-1: Could not set interface, error -22
[   82.733484][ T4280] usb 5-1: selecting invalid altsetting 1
[   82.757785][ T4280] usb 5-1: Could not set interface, error -22
[   82.825180][ T4280] usb 5-1: USB disconnect, device number 2
[   82.844591][ T4337] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   82.867594][ T4337] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.922872][ T4337] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.983332][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.022350][ T4337] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.057186][ T4337] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.102090][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.141590][ T4507] loop0: detected capacity change from 0 to 32768
[   83.174093][ T4337] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.206815][ T4507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.68 (4507)
[   83.209137][ T4337] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.257311][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.272967][ T4337] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.285882][ T4521] loop3: detected capacity change from 0 to 1024
[   83.293944][ T4337] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.339623][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.369482][ T4337] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.431553][ T4507] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   83.433636][ T4337] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.504925][ T4507] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   83.550354][ T4507] BTRFS info (device loop0): using free space tree
[   83.559848][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.590481][ T4337] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.647695][ T4536] loop3: detected capacity change from 0 to 164
[   83.670276][ T4337] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.686231][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.696447][ T4337] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.706091][ T4337] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.717557][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.726730][ T4337] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.736746][ T4337] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.748853][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.810905][ T4337] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   83.835956][ T4536] rock: directory entry would overflow storage
[   83.842368][ T4536] rock: sig=0x4f50, size=4, remaining=3
[   83.883721][ T4337] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   83.892500][ T4337] usb 2-1: Product: syz
[   83.913814][ T4536] isofs: Unable to find the ".." directory for NFS.
[   83.913840][ T4337] usb 2-1: Manufacturer: syz
[   83.913861][ T4337] usb 2-1: SerialNumber: syz
[   83.937521][ T4337] usb 2-1: config 0 descriptor??
[   83.966083][ T4337] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[   84.071343][ T4507] BTRFS info (device loop0): enabling ssd optimizations
[   84.429291][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.453652][   T26] usb 2-1: USB disconnect, device number 2
[   84.507168][   T26] yurex 2-1:0.0: USB YUREX #0 now disconnected
[   84.884496][ T4550] loop4: detected capacity change from 0 to 32768
[   84.979455][ T4550] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   84.979455][ T4550] 
[   85.025006][ T4550] ERROR: (device loop4): remounting filesystem as read-only
[   85.240738][ T4554] loop2: detected capacity change from 0 to 32768
[   85.326434][ T4572] capability: warning: `syz.3.89' uses 32-bit capabilities (legacy support in use)
[   85.572876][ T4577] loop3: detected capacity change from 0 to 64
[   85.795080][ T4581] loop2: detected capacity change from 0 to 1024
[   85.922357][   T51] hfsplus: b-tree write err: -5, ino 25
[   85.939423][   T51] hfsplus: b-tree write err: -5, ino 4
[   85.964423][   T51] hfsplus: b-tree write err: -5, ino 2
[   85.970329][   T51] hfsplus: b-tree write err: -5, ino 26
[   86.309107][ T4593] loop4: detected capacity change from 0 to 512
[   86.338818][ T4593] EXT4-fs: Ignoring removed nobh option
[   86.383117][ T4593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   86.396578][ T4595] loop2: detected capacity change from 0 to 2048
[   86.427448][ T4597] loop3: detected capacity change from 0 to 1024
[   86.445720][ T4593] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.96: iget: bad i_size value: 38620345925642
[   86.479936][ T4595] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[   86.501298][ T4593] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.96: couldn't read orphan inode 15 (err -117)
[   86.524704][ T4595] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.533909][ T4593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   86.559524][ T4597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   86.750999][ T4267] EXT4-fs (loop3): unmounting filesystem.
[   86.873629][ T4268] EXT4-fs (loop4): unmounting filesystem.
[   87.224397][ T4621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'.
[   87.289062][ T4623] loop4: detected capacity change from 0 to 512
[   87.340827][ T4625] binder: BINDER_SET_CONTEXT_MGR already set
[   87.344883][ T4623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   87.389429][ T4625] binder: 4624:4625 ioctl 40046207 0 returned -16
[   87.471996][ T4629] loop1: detected capacity change from 0 to 1024
[   87.490175][ T4629] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.502528][ T4623] EXT4-fs (loop4): orphan cleanup on readonly fs
[   87.582052][ T4629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   87.587093][ T4636] loop2: detected capacity change from 0 to 512
[   87.630122][ T4623] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   87.650480][ T4636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   87.661646][ T4636] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   87.672423][ T4638] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   87.683159][ T4623] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   87.702797][ T4636] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   87.724846][ T4638] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   87.735445][ T4636] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   87.756295][ T4623] EXT4-fs error (device loop4): ext4_ext_check_inode:530: inode #13: comm syz.4.110: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   87.794223][ T4636] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   87.802382][ T4636] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000]
[   87.812893][ T4623] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.110: couldn't read orphan inode 13 (err -117)
[   87.844783][ T4270] EXT4-fs (loop1): unmounting filesystem.
[   87.895080][ T4636] EXT4-fs (loop2): orphan cleanup on readonly fs
[   87.901730][ T4636] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #4: comm syz.2.115: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   87.926810][ T4636] EXT4-fs error (device loop2): ext4_quota_enable:7046: comm syz.2.115: Bad quota inode: 4, type: 1
[   87.987644][ T4623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   88.012381][ T4623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.022119][ T4623] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[   88.043760][ T4636] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   88.068860][ T4623] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   88.116281][ T4636] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   88.116328][ T4636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   88.126142][ T4623] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   88.189792][ T4636] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.115: bg 0: block 34: padding at end of block bitmap is not set
[   88.222020][ T4623] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   88.284515][  T125] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   88.329272][ T4269] EXT4-fs (loop2): unmounting filesystem.
[   88.353317][ T4268] EXT4-fs (loop4): unmounting filesystem.
[   88.361578][ T4652] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.473746][  T125] usb 1-1: Using ep0 maxpacket: 16
[   88.487920][  T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.520900][ T4656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'.
[   88.549955][  T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.553764][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'.
[   88.579079][  T125] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   88.604200][  T125] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   88.620658][  T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.650700][  T125] usb 1-1: config 0 descriptor??
[   89.086887][   T27] audit: type=1326 audit(1775084964.584:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   89.133205][  T125] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5
[   89.229278][  T125] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   89.232341][   T27] audit: type=1326 audit(1775084964.644:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   89.403690][   T27] audit: type=1326 audit(1775084964.644:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   89.454211][  T125] usb 1-1: USB disconnect, device number 2
[   89.473665][   T27] audit: type=1326 audit(1775084964.644:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   89.568544][   T27] audit: type=1326 audit(1775084964.644:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f851c59b687 code=0x7ffc0000
[   89.652006][   T27] audit: type=1326 audit(1775084964.644:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   89.698956][ T4676] fido_id[4676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   89.710189][   T27] audit: type=1326 audit(1775084964.644:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   89.736362][    C0] vkms_vblank_simulate: vblank timer overrun
[   89.808997][   T27] audit: type=1326 audit(1775084964.644:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   89.833721][   T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   89.894324][ T4662] set_capacity_and_notify: 2 callbacks suppressed
[   89.894340][ T4662] loop1: detected capacity change from 0 to 32768
[   89.899206][   T27] audit: type=1326 audit(1775084964.644:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   89.951315][   T27] audit: type=1326 audit(1775084964.644:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851c59c819 code=0x7ffc0000
[   90.033802][   T14] usb 5-1: Using ep0 maxpacket: 16
[   90.042240][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.093663][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.130145][   T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   90.150328][ T4687] ntfs3: loop3: failed to convert "0080" to cp737
[   90.163389][   T14] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   90.199070][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.214662][ T4687] ntfs3: loop3: failed to convert name for inode 1e.
[   90.240917][   T14] usb 5-1: config 0 descriptor??
[   90.569677][ T4700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'.
[   90.678447][   T14] appleir 0003:05AC:8241.0002: unbalanced collection at end of report description
[   90.709368][   T14] appleir 0003:05AC:8241.0002: parse failed
[   90.729389][   T14] appleir: probe of 0003:05AC:8241.0002 failed with error -22
[   90.905680][   T14] usb 5-1: USB disconnect, device number 3
[   90.934941][ T4706] tipc: Started in network mode
[   90.958008][ T4706] tipc: Node identity ac07140f, cluster identity 4711
[   90.974166][ T4706] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   91.150933][ T4717] loop2: detected capacity change from 0 to 512
[   91.229900][ T4717] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   91.312565][ T4717] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #17: comm syz.2.152: inode has both inline data and extents flags
[   91.364427][ T4717] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.152: couldn't read orphan inode 17 (err -117)
[   91.398925][ T4717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   91.601267][ T4269] EXT4-fs (loop2): unmounting filesystem.
[   91.607873][ T4730] loop1: detected capacity change from 0 to 4096
[   91.647077][ T4734] loop4: detected capacity change from 0 to 512
[   91.702117][ T4271] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   91.713164][ T4271] CPU: 0 PID: 4271 Comm: kworker/u5:1 Not tainted syzkaller #0
[   91.720882][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   91.731241][ T4271] Workqueue: hci0 hci_rx_work
[   91.735988][ T4271] Call Trace:
[   91.739464][ T4271]  <TASK>
[   91.742426][ T4271]  dump_stack_lvl+0x188/0x24e
[   91.747160][ T4271]  ? show_regs_print_info+0x12/0x12
[   91.752410][ T4271]  ? load_image+0x400/0x400
[   91.756979][ T4271]  sysfs_create_dir_ns+0x26a/0x290
[   91.762246][ T4271]  ? sysfs_warn_dup+0xa0/0xa0
[   91.767056][ T4271]  ? do_raw_spin_unlock+0x11d/0x230
[   91.772309][ T4271]  kobject_add_internal+0x61c/0xcc0
[   91.777644][ T4271]  kobject_add+0x160/0x230
[   91.782437][ T4271]  ? kobject_init+0x1d0/0x1d0
[   91.787437][ T4271]  ? klist_children_get+0x50/0x50
[   91.792507][ T4271]  ? get_device_parent+0x121/0x3f0
[   91.797626][ T4271]  device_add+0x483/0xfb0
[   91.801973][ T4271]  ? kmem_cache_free+0xf7/0x290
[   91.806915][ T4271]  hci_conn_add_sysfs+0xd1/0x1e0
[   91.812011][ T4271]  le_conn_complete_evt+0x1062/0x1670
[   91.817841][ T4271]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[   91.824413][ T4271]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[   91.830246][ T4271]  ? skb_pull_data+0xf7/0x200
[   91.834929][ T4271]  hci_le_conn_complete_evt+0x183/0x440
[   91.840483][ T4271]  ? hci_remote_host_features_evt+0x270/0x270
[   91.846874][ T4271]  hci_event_packet+0x7b9/0x1280
[   91.852119][ T4271]  ? bis_list+0x280/0x280
[   91.856759][ T4271]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[   91.862886][ T4271]  ? kcov_remote_start+0x4c7/0x7e0
[   91.868018][ T4271]  ? sync_thread_master+0x620/0x10b0
[   91.873312][ T4271]  ? hci_send_to_monitor+0x9c/0x4a0
[   91.878645][ T4271]  hci_rx_work+0x3eb/0xd40
[   91.883071][ T4271]  ? _raw_spin_unlock+0x40/0x40
[   91.888043][ T4271]  ? process_one_work+0x7b0/0x1160
[   91.893161][ T4271]  process_one_work+0x8a2/0x1160
[   91.898434][ T4271]  ? worker_detach_from_pool+0x240/0x240
[   91.904252][ T4271]  ? _raw_spin_lock_irq+0xb7/0xf0
[   91.909369][ T4271]  ? _raw_spin_lock_irqsave+0x100/0x100
[   91.914918][ T4271]  ? kthread_data+0x4b/0xc0
[   91.919445][ T4271]  worker_thread+0xaa2/0x1270
[   91.924153][ T4271]  kthread+0x29d/0x330
[   91.928215][ T4271]  ? worker_clr_flags+0x1a0/0x1a0
[   91.933239][ T4271]  ? kthread_blkcg+0xd0/0xd0
[   91.937911][ T4271]  ret_from_fork+0x1f/0x30
[   91.942358][ T4271]  </TASK>
[   91.945616][    C0] vkms_vblank_simulate: vblank timer overrun
[   91.956571][ T4271] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   91.970657][ T4271] Bluetooth: hci0: failed to register connection device
[   91.988466][ T4730] ntfs: volume version 3.1.
[   92.026943][ T4734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   92.039861][ T4734] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.253655][ T4312] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   92.287294][ T4268] EXT4-fs (loop4): unmounting filesystem.
[   92.433909][ T4312] usb 1-1: Using ep0 maxpacket: 32
[   92.443000][ T4312] usb 1-1: config 0 has an invalid interface number: 167 but max is 0
[   92.458349][ T4312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.470055][ T4312] usb 1-1: config 0 has no interface number 0
[   92.477807][ T4312] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024
[   92.488838][ T4312] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[   92.505040][ T4312] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0
[   92.517200][ T4312] usb 1-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.561807][ T4312] usb 1-1: config 0 interface 167 has no altsetting 0
[   92.582076][ T4312] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63
[   92.608760][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.637467][ T4312] usb 1-1: Product: syz
[   92.642110][ T4312] usb 1-1: Manufacturer: syz
[   92.661647][ T4312] usb 1-1: SerialNumber: syz
[   92.686230][ T4312] usb 1-1: config 0 descriptor??
[   92.692277][ T4739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   92.889286][ T4758] loop1: detected capacity change from 0 to 4096
[   92.924475][ T4312] usbtest 1-1:0.167: couldn't get endpoints, -22
[   92.937989][ T4312] usbtest: probe of 1-1:0.167 failed with error -22
[   92.976081][ T4312] usb 1-1: USB disconnect, device number 3
[   93.511314][ T4760] mmap: syz.2.168 (4760) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   93.640691][ T4776] loop4: detected capacity change from 0 to 2368
[   93.653164][ T4780] syz.3.176 uses obsolete (PF_INET,SOCK_PACKET)
[   93.933658][ T4312] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   93.994267][ T4787] loop1: detected capacity change from 0 to 256
[   94.101879][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'.
[   94.122820][ T4787] FAT-fs (loop1): Directory bread(block 64) failed
[   94.140292][ T4787] FAT-fs (loop1): Directory bread(block 65) failed
[   94.145634][ T4312] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30
[   94.168017][ T4787] FAT-fs (loop1): Directory bread(block 66) failed
[   94.179899][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.182794][ T4787] FAT-fs (loop1): Directory bread(block 67) failed
[   94.202899][ T4787] FAT-fs (loop1): Directory bread(block 68) failed
[   94.209661][ T4787] FAT-fs (loop1): Directory bread(block 69) failed
[   94.223266][ T4787] FAT-fs (loop1): Directory bread(block 70) failed
[   94.230201][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.231290][ T4787] FAT-fs (loop1): Directory bread(block 71) failed
[   94.271164][ T4312] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[   94.279093][ T4787] FAT-fs (loop1): Directory bread(block 72) failed
[   94.318752][ T4787] FAT-fs (loop1): Directory bread(block 73) failed
[   94.323656][ T4312] usb 1-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00
[   94.347930][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.370698][ T4312] usb 1-1: config 0 descriptor??
[   94.479941][ T4803] device ip6_vti0 entered promiscuous mode
[   94.646624][ T4807] loop2: detected capacity change from 0 to 512
[   94.654491][  T125] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   94.798889][ T4312] wacom 0003:056A:0131.0003: Unknown device_type for 'HID 056a:0131'. Ignoring.
[   94.861325][ T4811] loop1: detected capacity change from 0 to 256
[   94.871311][  T125] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[   94.887877][  T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.939944][  T125] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   94.992816][  T125] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   95.015589][ T4811] FAT-fs (loop1): Directory bread(block 64) failed
[   95.027528][   T14] usb 1-1: USB disconnect, device number 4
[   95.048441][ T4811] FAT-fs (loop1): Directory bread(block 65) failed
[   95.055520][  T125] usb 5-1: Manufacturer: syz
[   95.065060][  T125] usb 5-1: config 0 descriptor??
[   95.072025][ T4811] FAT-fs (loop1): Directory bread(block 66) failed
[   95.105937][ T4811] FAT-fs (loop1): Directory bread(block 67) failed
[   95.132620][ T4811] FAT-fs (loop1): Directory bread(block 68) failed
[   95.163687][ T4811] FAT-fs (loop1): Directory bread(block 69) failed
[   95.170809][ T4811] FAT-fs (loop1): Directory bread(block 70) failed
[   95.193805][ T4811] FAT-fs (loop1): Directory bread(block 71) failed
[   95.200926][ T4811] FAT-fs (loop1): Directory bread(block 72) failed
[   95.223633][ T4811] FAT-fs (loop1): Directory bread(block 73) failed
[   95.263822][ T4560] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   95.273770][  T125] rc_core: IR keymap rc-hauppauge not found
[   95.279810][  T125] Registered IR keymap rc-empty
[   95.316394][  T125] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[   95.355232][  T125] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9
[   95.430269][ T4823] loop2: detected capacity change from 0 to 128
[   95.450286][ T4823] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   95.465918][ T4560] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   95.491362][ T4560] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[   95.504875][ T4823] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   95.521335][ T4560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.549614][ T4560] gspca_main: stv0680-2.14.0 probing 041e:4007
[   95.618679][    C1] igorplugusb 5-1:0.0: receive overflow, at least 11 lost
[   95.749796][    T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   95.764692][ T4825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'.
[   95.866172][   T14] usb 5-1: USB disconnect, device number 4
[   96.249956][ T4352] udevd[4352]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   96.313847][ T4411] udevd[4411]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   96.349466][ T4846] loop2: detected capacity change from 0 to 1024
[   96.366221][ T4846] EXT4-fs: Ignoring removed nobh option
[   96.394602][ T4846] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   96.504294][ T4846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   96.636574][ T4856] loop1: detected capacity change from 0 to 4096
[   96.665894][ T4269] EXT4-fs (loop2): unmounting filesystem.
[   96.759036][ T4860] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.830248][ T4856] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 64 already freed
[   96.901611][ T4560] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[   96.924209][ T4560] stv0680 4-1:4.0: last error: 86,  command = 0x78
[   96.945460][ T4856] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[   96.956857][ T4560] usb 4-1: USB disconnect, device number 2
[   97.244973][ T4870] Illegal XDP return value 2362247945 on prog  (id 8) dev N/A, expect packet loss!
[   97.676801][ T4859] loop0: detected capacity change from 0 to 40427
[   97.754087][ T4859] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x3ffff
[   97.773704][ T4859] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[   97.812948][ T4859] F2FS-fs (loop0): invalid crc value
[   97.837896][ T4886] loop4: detected capacity change from 0 to 256
[   97.871545][ T4859] F2FS-fs (loop0): Found nat_bits in checkpoint
[   97.936883][ T4886] FAT-fs (loop4): Directory bread(block 64) failed
[   97.967862][ T4886] FAT-fs (loop4): Directory bread(block 65) failed
[   97.983426][ T4886] FAT-fs (loop4): Directory bread(block 66) failed
[   97.987842][ T4859] F2FS-fs (loop0): Start checkpoint disabled!
[   97.997621][ T4886] FAT-fs (loop4): Directory bread(block 67) failed
[   98.017576][ T4886] FAT-fs (loop4): Directory bread(block 68) failed
[   98.029291][ T4886] FAT-fs (loop4): Directory bread(block 69) failed
[   98.044314][ T4886] FAT-fs (loop4): Directory bread(block 70) failed
[   98.046236][ T4859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   98.053676][ T4886] FAT-fs (loop4): Directory bread(block 71) failed
[   98.075778][ T4886] FAT-fs (loop4): Directory bread(block 72) failed
[   98.082646][ T4886] FAT-fs (loop4): Directory bread(block 73) failed
[   98.627694][ T4900] loop2: detected capacity change from 0 to 256
[   99.065816][ T4913] loop2: detected capacity change from 0 to 512
[   99.135334][ T4916] binder: 4915:4916 ioctl c018620b 200000000240 returned -14
[   99.152958][ T4919] delete_channel: no stack
[   99.153276][ T4913] EXT4-fs (loop2): 1 truncate cleaned up
[   99.163959][ T4913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   99.211773][ T4917] delete_channel: no stack
[   99.283750][ T4312] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   99.340890][ T4922] support for the xor transformation has been removed.
[   99.361485][ T4269] EXT4-fs (loop2): unmounting filesystem.
[   99.475505][ T4312] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[   99.494478][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.542919][ T4312] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   99.573647][ T4312] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   99.597224][ T4312] usb 1-1: Manufacturer: syz
[   99.620369][ T4312] usb 1-1: config 0 descriptor??
[   99.752638][ T4941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.246'.
[   99.833691][ T4312] rc_core: IR keymap rc-hauppauge not found
[   99.839707][ T4312] Registered IR keymap rc-empty
[   99.894333][ T4312] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   99.928642][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   99.954471][ T4312] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10
[  100.336059][ T4960] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  100.360055][ T4960] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  100.368812][ T4960] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  100.381072][ T4960] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  100.425938][   T14] usb 1-1: USB disconnect, device number 5
[  100.437886][ T4960] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  100.487235][ T4960] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  100.513694][ T4960] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  100.520707][ T4960] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  100.543882][ T4960] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  100.557104][ T4960] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  100.583627][ T4960] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  100.694125][ T4969] loop2: detected capacity change from 0 to 128
[  100.732045][ T4969] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  100.790756][ T4948] loop4: detected capacity change from 0 to 40427
[  100.833456][ T4948] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  100.869235][ T4973] loop3: detected capacity change from 0 to 256
[  100.880888][ T4948] F2FS-fs (loop4): invalid crc value
[  100.918637][ T4948] F2FS-fs (loop4): Found nat_bits in checkpoint
[  100.958764][ T4973] FAT-fs (loop3): Directory bread(block 64) failed
[  100.987807][ T4973] FAT-fs (loop3): Directory bread(block 65) failed
[  101.019761][ T4973] FAT-fs (loop3): Directory bread(block 66) failed
[  101.060991][ T4973] FAT-fs (loop3): Directory bread(block 67) failed
[  101.078687][ T4973] FAT-fs (loop3): Directory bread(block 68) failed
[  101.113656][ T4973] FAT-fs (loop3): Directory bread(block 69) failed
[  101.133401][ T4948] F2FS-fs (loop4): Start checkpoint disabled!
[  101.164689][ T4973] FAT-fs (loop3): Directory bread(block 70) failed
[  101.171290][ T4973] FAT-fs (loop3): Directory bread(block 71) failed
[  101.180025][ T4948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  101.199131][ T4973] FAT-fs (loop3): Directory bread(block 72) failed
[  101.219299][ T4973] FAT-fs (loop3): Directory bread(block 73) failed
[  101.234165][ T4979] loop2: detected capacity change from 0 to 1764
[  101.471047][ T4983] loop0: detected capacity change from 0 to 128
[  101.549033][ T4983] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  101.594947][ T4985] loop2: detected capacity change from 0 to 764
[  101.608206][ T4983] hpfs: filesystem error: improperly stopped
[  101.635918][ T4983] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  101.690912][ T4832] kworker/u4:7: attempt to access beyond end of device
[  101.690912][ T4832] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  101.719697][ T4983] hpfs: You really don't want any checks? You are crazy...
[  101.749562][ T4983] hpfs: hpfs_map_sector(): read error
[  101.794343][ T4983] hpfs: code page support is disabled
[  101.845744][ T4983] hpfs: hpfs_map_4sectors(): unaligned read
[  101.852210][ T4983] hpfs: hpfs_map_4sectors(): unaligned read
[  101.913246][ T4990] netlink: 192 bytes leftover after parsing attributes in process `syz.2.269'.
[  101.922495][ T4983] hpfs: filesystem error: unable to find root dir
[  101.943994][ T4990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.269'.
[  101.980087][ T4976] loop1: detected capacity change from 0 to 32768
[  102.051911][ T4976] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.261 (4976)
[  102.200248][ T4976] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.235706][ T4976] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  102.266212][ T4976] BTRFS info (device loop1): using free space tree
[  102.312331][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'.
[  102.642635][ T4976] BTRFS info (device loop1): enabling ssd optimizations
[  102.767271][ T5025] loop4: detected capacity change from 0 to 512
[  102.873908][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  102.923846][ T5025] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.999650][ T5025] EXT4-fs: Cannot change journaled quota options when quota turned on
[  103.151953][ T4270] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.172238][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  103.275250][ T4996] loop0: detected capacity change from 0 to 40427
[  103.366083][ T4996] F2FS-fs (loop0): invalid crc value
[  103.372191][ T4996] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  103.432052][ T5042] loop3: detected capacity change from 0 to 256
[  103.454312][ T4996] F2FS-fs (loop0): Found nat_bits in checkpoint
[  103.569001][ T5042] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  103.615712][ T4996] F2FS-fs (loop0): recover fsync data on readonly fs
[  103.635285][ T4996] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  103.661274][ T4996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  104.103749][ T5060] rock: directory entry would overflow storage
[  104.111191][ T5060] rock: sig=0x3b10, size=4, remaining=3
[  104.229247][ T5064] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  104.276814][ T5064] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.493855][ T5044] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  104.515734][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  104.687288][ T5044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.710168][ T5044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.738762][ T5044] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  104.757472][ T5044] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  104.770763][ T5044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.806416][ T5044] usb 2-1: config 0 descriptor??
[  104.838036][ T5044] hub 2-1:0.0: USB hub found
[  104.911215][ T5070] XFS (loop3): Mounting V5 Filesystem
[  105.032917][ T5070] XFS (loop3): Ending clean mount
[  105.036567][ T5044] hub 2-1:0.0: 11 ports detected
[  105.045923][ T5044] hub 2-1:0.0: insufficient power available to use all downstream ports
[  105.081766][ T5070] XFS (loop3): Quotacheck needed: Please wait.
[  105.195080][ T5070] XFS (loop3): Quotacheck: Done.
[  105.245168][ T5044] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  105.252233][ T5044] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  105.263747][  T125] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  105.340521][ T5044] usb 2-1: USB disconnect, device number 3
[  105.460819][  T125] usb 1-1: Using ep0 maxpacket: 16
[  105.480502][  T125] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.503666][  T125] usb 1-1: config 0 interface 0 has no altsetting 0
[  105.519141][ T4267] XFS (loop3): Unmounting Filesystem
[  105.520877][  T125] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  105.555760][  T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.587289][  T125] usb 1-1: config 0 descriptor??
[  105.811934][ T5081] XFS (loop4): Mounting V5 Filesystem
[  106.013030][ T5107] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  106.019261][ T5081] XFS (loop4): Ending clean mount
[  106.030627][  T125] uclogic 0003:2179:0077.0004: interface is invalid, ignoring
[  106.138285][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  106.138301][   T27] audit: type=1800 audit(1775084981.634:15): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.296" name="file2" dev="loop4" ino=4423 res=0 errno=0
[  106.164958][    C0] vkms_vblank_simulate: vblank timer overrun
[  106.228947][ T5109] set_capacity_and_notify: 5 callbacks suppressed
[  106.228965][ T5109] loop2: detected capacity change from 0 to 2048
[  106.316291][ T5113] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.318340][  T125] usb 1-1: USB disconnect, device number 6
[  106.383426][ T4268] XFS (loop4): Unmounting Filesystem
[  106.724523][ T5120] loop2: detected capacity change from 0 to 512
[  107.137798][ T5130] loop4: detected capacity change from 0 to 1024
[  107.232559][ T5130] hfsplus: small file entry
[  107.657878][ T5124] loop1: detected capacity change from 0 to 32768
[  107.842251][ T5124] JBD2: Ignoring recovery information on journal
[  107.892492][ T5155] loop0: detected capacity change from 0 to 1024
[  107.904105][ T5124] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  108.179686][ T5124] (syz.1.311,5124,1):ocfs2_read_blocks:239 ERROR: status = -12
[  108.193206][ T5162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.326'.
[  108.208304][ T5124] (syz.1.311,5124,1):ocfs2_group_extend:318 ERROR: status = -12
[  108.222481][   T41] hfsplus: b-tree write err: -5, ino 25
[  108.234167][   T41] hfsplus: b-tree write err: -5, ino 4
[  108.250209][   T41] hfsplus: b-tree write err: -5, ino 2
[  108.469107][ T4270] ocfs2: Unmounting device (7,1) on (node local)
[  108.610271][ T5175] loop1: detected capacity change from 0 to 1024
[  108.634262][ T5175] EXT4-fs: inline encryption not supported
[  108.651191][ T5175] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  108.673657][  T125] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  108.682223][ T5177] loop3: detected capacity change from 0 to 1024
[  108.724249][ T5175] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  108.741880][ T5181] netlink: 248 bytes leftover after parsing attributes in process `syz.2.335'.
[  108.772602][ T5177] EXT4-fs: Ignoring removed orlov option
[  108.783219][ T5181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.335'.
[  108.867933][ T5177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  108.877297][  T125] usb 1-1: Using ep0 maxpacket: 32
[  108.895711][ T5175] EXT4-fs (loop1): can't enable nombcache during remount
[  108.900742][  T125] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  108.937156][  T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.966506][  T125] usb 1-1: Product: syz
[  108.986163][  T125] usb 1-1: Manufacturer: syz
[  108.990833][  T125] usb 1-1: SerialNumber: syz
[  109.049929][  T125] usb 1-1: config 0 descriptor??
[  109.087337][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  109.097056][  T125] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  109.129971][  T125] dvb-usb: bulk message failed: -22 (4/0)
[  109.153880][  T125] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  109.182396][  T125] dvb-usb: bulk message failed: -22 (5/0)
[  109.183314][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  109.208368][  T125] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  109.272150][  T125] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  109.290970][ T5166] dvb-usb: bulk message failed: -22 (7/0)
[  109.291860][  T125] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  109.310594][ T5166] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  109.314970][  T125] usb 1-1: media controller created
[  109.362816][  T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.373900][ T5166] ttusb2: i2c transfer failed.
[  109.445054][  T125] usb 1-1: selecting invalid altsetting 3
[  109.451042][  T125] ttusb2: set interface to alts=3 failed
[  109.551979][  T125] DVB: Unable to find symbol tda10086_attach()
[  109.560197][  T125] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  109.580766][  T125] dvb-usb: bulk message failed: -22 (4/0)
[  109.596982][  T125] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  109.631538][  T125] dvb-usb: bulk message failed: -22 (5/0)
[  109.645930][  T125] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  109.660793][  T125] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  109.860509][ T5204] loop3: detected capacity change from 0 to 32768
[  109.891767][  T125] usb 1-1: USB disconnect, device number 7
[  109.923941][ T4365] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  109.969590][  T125] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  110.051643][ T5204] XFS (loop3): Mounting V5 Filesystem
[  110.115812][ T4365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.149115][ T4365] usb 2-1: config 0 has no interfaces?
[  110.166162][ T5204] XFS (loop3): Starting recovery (logdev: internal)
[  110.183686][ T5204] XFS (loop3): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 
[  110.191618][ T4365] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  110.194931][ T5204] XFS (loop3): Unmount and run xfs_repair
[  110.211159][ T5204] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  110.218689][ T5204] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00  XAGI.......... .
[  110.227758][ T5204] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37  ...@...........7
[  110.236927][ T5204] 00000020: 00 00 1d 00 ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.246579][ T5204] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.256281][ T5204] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.265340][ T5204] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.274361][ T5204] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.283328][ T5204] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.293341][ T5204] XFS (loop3): log mount/recovery failed: error -74
[  110.309978][ T4365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.385295][ T4365] usb 2-1: config 0 descriptor??
[  110.405234][ T5204] XFS (loop3): log mount failed
[  110.558239][ T5221] loop2: detected capacity change from 0 to 4096
[  110.583875][ T5221] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  110.652361][ T5221] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  110.672230][   T26] usb 2-1: USB disconnect, device number 4
[  111.426039][ T5241] device sit0 entered promiscuous mode
[  111.495595][ T5241] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[  111.517938][ T5247] loop2: detected capacity change from 0 to 256
[  111.524187][ T5241] netlink: 1 bytes leftover after parsing attributes in process `syz.1.357'.
[  112.081170][ T5263] loop4: detected capacity change from 0 to 256
[  112.114164][ T5263] exfat: Deprecated parameter 'namecase'
[  112.145535][ T5259] loop2: detected capacity change from 0 to 8192
[  112.193450][ T5259] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  112.235950][ T5263] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  112.270792][ T5259] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  112.322141][ T5259] REISERFS (device loop2): using ordered data mode
[  112.334438][ T5259] reiserfs: using flush barriers
[  112.351264][ T5259] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  112.377327][ T5259] REISERFS (device loop2): checking transaction log (loop2)
[  112.392346][ T5238] loop0: detected capacity change from 0 to 40427
[  112.475226][ T5238] F2FS-fs (loop0): Corrupted extension count (33554469 + 1 > 64)
[  112.483138][ T5238] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  112.587051][ T5238] F2FS-fs (loop0): invalid crc value
[  112.615661][ T5238] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  112.716036][ T5259] REISERFS (device loop2): Using tea hash to sort names
[  112.772216][ T5259] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  112.833763][ T5272] loop4: detected capacity change from 0 to 64
[  112.840134][ T5259] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  112.890327][ T5238] F2FS-fs (loop0): recover fsync data on readonly fs
[  112.969286][ T5238] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30
[  112.987236][ T5238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  113.122883][ T5265] loop3: detected capacity change from 0 to 32768
[  113.133007][ T5259] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  113.185619][ T5265] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.368 (5265)
[  113.256975][ T5265] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  113.322799][ T5265] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  113.388409][ T5265] BTRFS info (device loop3): using free space tree
[  113.417418][ T5268] loop1: detected capacity change from 0 to 32768
[  113.681116][ T5294] loop0: detected capacity change from 0 to 512
[  113.746277][ T5265] BTRFS info (device loop3): enabling ssd optimizations
[  113.780630][ T5294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  113.811690][ T5294] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.928808][ T4267] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  114.084625][ T5304] loop1: detected capacity change from 0 to 1024
[  114.126522][ T5304] EXT4-fs: Ignoring removed orlov option
[  114.242830][ T5304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  114.423146][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  114.543149][ T5279] loop4: detected capacity change from 0 to 32768
[  114.597886][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  114.634349][ T5279] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.374 (5279)
[  114.700776][ T5279] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.794756][ T5279] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  114.829111][ T5279] BTRFS info (device loop4): using free space tree
[  114.863363][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'.
[  115.140211][ T5343] QAT: Invalid ioctl 21531
[  115.271685][ T5279] BTRFS info (device loop4): enabling ssd optimizations
[  115.486677][ T4268] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.725050][ T5366] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  115.812270][ T5367] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  116.350813][ T5350] XFS (loop1): Mounting V5 Filesystem
[  116.443639][ T4314] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  116.633666][ T4314] usb 5-1: Using ep0 maxpacket: 32
[  116.639903][ T5350] XFS (loop1): Starting recovery (logdev: internal)
[  116.648507][ T4314] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  116.667881][ T4314] usb 5-1: config 0 has no interface number 0
[  116.713690][ T4314] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  116.753971][ T4314] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.784276][ T4314] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  116.813795][ T4314] usb 5-1: config 0 interface 196 has no altsetting 0
[  116.849692][ T4314] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  116.851341][ T5350] XFS (loop1): Ending recovery (logdev: internal)
[  116.885967][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.937533][ T4314] usb 5-1: Product: syz
[  116.941760][ T4314] usb 5-1: Manufacturer: syz
[  116.953826][ T4314] usb 5-1: SerialNumber: syz
[  116.958534][ T5405] IPVS: Error connecting to the multicast addr
[  116.969452][ T4314] usb 5-1: config 0 descriptor??
[  116.995374][ T5377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  117.016680][ T5407] set_capacity_and_notify: 1 callbacks suppressed
[  117.016698][ T5407] loop2: detected capacity change from 0 to 512
[  117.034477][ T5350] syz.1.384 (5350) used greatest stack depth: 20336 bytes left
[  117.047657][ T4270] XFS (loop1): Unmounting Filesystem
[  117.091248][   T14] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  117.166121][ T5407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  117.183774][ T5407] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.275304][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  117.299012][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.329085][ T5407] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  117.331391][   T14] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  117.354204][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.376671][   T14] usb 4-1: config 0 descriptor??
[  117.413067][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  117.439279][ T4314] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  117.458199][ T4314] ipheth: probe of 5-1:0.196 failed with error -22
[  117.583779][ T4311] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  117.586477][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[  117.652766][ T4314] usb 5-1: USB disconnect, device number 5
[  117.691404][ T5419] loop1: detected capacity change from 0 to 4096
[  117.711699][ T5419] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  117.762509][ T5419] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  117.773631][ T4311] usb 1-1: Using ep0 maxpacket: 16
[  117.793912][ T4311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.815286][   T14] elan 0003:04F3:0755.0005: unknown main item tag 0x2
[  117.822271][   T14] elan 0003:04F3:0755.0005: item fetching failed at offset 3/5
[  117.830291][ T4311] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  117.830324][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.834846][ T4311] usb 1-1: config 0 descriptor??
[  117.882285][   T14] elan 0003:04F3:0755.0005: Hid Parse failed
[  117.899545][   T14] elan: probe of 0003:04F3:0755.0005 failed with error -22
[  118.042706][ T5312] usb 4-1: USB disconnect, device number 3
[  118.063812][ T4311] rc_core: IR keymap rc-xbox-dvd not found
[  118.072263][ T4311] Registered IR keymap rc-empty
[  118.089086][ T4311] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  118.116348][ T4311] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11
[  118.194160][ T4311] usb 1-1: USB disconnect, device number 8
[  118.200348][    C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  118.416374][ T5423] loop2: detected capacity change from 0 to 32768
[  118.912868][ T5442] loop4: detected capacity change from 0 to 2048
[  119.040814][ T5442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  119.280110][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  119.577491][ T5440] loop3: detected capacity change from 0 to 32768
[  119.624745][ T5440] (syz.3.420,5440,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  119.665730][ T5440] (syz.3.420,5440,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  119.770168][ T5440] JBD2: Ignoring recovery information on journal
[  119.987691][ T5440] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  120.296432][ T5454] loop4: detected capacity change from 0 to 32768
[  120.297744][ T5461] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  120.457535][ T5454] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  120.474268][ T4267] ocfs2: Unmounting device (7,3) on (node local)
[  120.774328][ T4268] ocfs2: Unmounting device (7,4) on (node local)
[  121.607763][ T5497] tipc: Enabling of bearer <kb:w> rejected, media not registered
[  121.698569][ T5499] loop1: detected capacity change from 0 to 256
[  121.750152][ T5499] exfat: Deprecated parameter 'namecase'
[  121.778078][ T5472] loop0: detected capacity change from 0 to 32768
[  121.837709][ T5501] loop2: detected capacity change from 0 to 2048
[  121.840269][ T5499] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  121.884664][ T5501] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  121.917469][ T5484] loop3: detected capacity change from 0 to 32768
[  121.970878][ T5472] XFS (loop0): Mounting V5 Filesystem
[  121.992530][ T5501] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  122.021099][ T5484] JBD2: Ignoring recovery information on journal
[  122.075886][ T5472] XFS (loop0): Ending clean mount
[  122.109067][   T27] audit: type=1326 audit(1775084997.594:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849459c819 code=0x7ffc0000
[  122.142758][ T5501] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  122.178632][ T5501] UDF-fs: Scanning with blocksize 512 failed
[  122.225540][   T27] audit: type=1326 audit(1775084997.604:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f849459c819 code=0x7ffc0000
[  122.247766][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.272089][ T5501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.299624][ T4273] XFS (loop0): Unmounting Filesystem
[  122.309834][ T5484] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  122.389282][   T27] audit: type=1326 audit(1775084997.604:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849459c819 code=0x7ffc0000
[  122.421459][   T27] audit: type=1326 audit(1775084997.604:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849459c819 code=0x7ffc0000
[  122.517463][   T27] audit: type=1326 audit(1775084997.604:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f849459c819 code=0x7ffc0000
[  122.633593][   T27] audit: type=1326 audit(1775084997.604:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849459c819 code=0x7ffc0000
[  122.744937][   T27] audit: type=1326 audit(1775084997.604:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849459c819 code=0x7ffc0000
[  122.766343][ T5521] loop1: detected capacity change from 0 to 8192
[  122.774992][ T4267] ocfs2: Unmounting device (7,3) on (node local)
[  122.886192][ T5521] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  122.937277][ T5521] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  122.961482][ T5521] REISERFS (device loop1): using ordered data mode
[  122.968983][ T5521] reiserfs: using flush barriers
[  122.976787][ T5521] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  122.994121][ T5521] REISERFS (device loop1): checking transaction log (loop1)
[  123.012095][ T5521] REISERFS (device loop1): Using r5 hash to sort names
[  123.053433][ T5521] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  123.191688][ T5532] netlink: 260 bytes leftover after parsing attributes in process `syz.0.452'.
[  123.245677][ T5534] loop2: detected capacity change from 0 to 16
[  123.273605][ T5532] netlink: 260 bytes leftover after parsing attributes in process `syz.0.452'.
[  123.307530][ T5534] erofs: (device loop2): mounted with root inode @ nid 36.
[  123.320161][ T4271] Bluetooth: hci4: link tx timeout
[  123.323637][ T5532] netlink: 260 bytes leftover after parsing attributes in process `syz.0.452'.
[  123.326049][ T4271] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.482005][ T5534] syz.2.460: attempt to access beyond end of device
[  123.482005][ T5534] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  123.541583][ T5534] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4 in[62, 4034] out[4096]
[  123.600830][   T27] audit: type=1800 audit(1775084999.094:23): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.460" name="file2" dev="loop2" ino=89 res=0 errno=0
[  123.892762][ T5556] tipc: Started in network mode
[  123.935571][ T5556] tipc: Node identity , cluster identity 4711
[  123.941817][ T5556] tipc: Failed to obtain node identity
[  123.993660][ T5556] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  124.126528][ T5562] device netdevsim0 entered promiscuous mode
[  124.384294][ T5566] loop0: detected capacity change from 0 to 4096
[  124.433653][ T5566] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  124.462505][ T5566] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  124.529590][ T5566] ntfs: volume version 3.1.
[  124.582753][ T5550] loop1: detected capacity change from 0 to 32768
[  124.590221][   T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  124.644256][ T5550] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  124.706519][ T5550] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  124.795377][   T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  124.795429][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.795455][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.795478][   T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  124.795522][   T14] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  124.795546][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.797461][   T14] usb 3-1: config 0 descriptor??
[  124.875462][ T4270] ocfs2: Unmounting device (7,1) on (node local)
[  125.220125][   T14] pantherlord 0003:0810:0001.0006: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.2-1/input0
[  125.247110][   T14] pantherlord 0003:0810:0001.0006: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  125.382872][ T4271] Bluetooth: hci4: command 0x0406 tx timeout
[  125.414352][ T5312] usb 3-1: USB disconnect, device number 2
[  125.576787][ T5597] device ipvlan2 entered promiscuous mode
[  125.599748][ T5593] fido_id[5593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  125.744204][ T5589] loop1: detected capacity change from 0 to 32768
[  125.766594][ T5589] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.482 (5589)
[  125.837829][ T5589] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  125.864698][ T5589] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  125.912242][ T5589] BTRFS info (device loop1): using free space tree
[  126.002235][ T5589] BTRFS info (device loop1): enabling ssd optimizations
[  126.428601][ T4270] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  126.469895][ T5594] loop3: detected capacity change from 0 to 40427
[  126.502121][ T5631] xt_policy: too many policy elements
[  126.540540][ T5633] loop0: detected capacity change from 0 to 512
[  126.553444][ T5594] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[  126.611384][ T5633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  126.626678][ T5633] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.649214][ T5594] F2FS-fs (loop3): invalid crc value
[  126.669601][ T5637] Bluetooth: MGMT ver 1.22
[  126.729696][ T5594] F2FS-fs (loop3): Found nat_bits in checkpoint
[  126.926267][ T5594] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  127.123171][ T4267] syz-executor: attempt to access beyond end of device
[  127.123171][ T4267] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.145947][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  127.517471][ T5659] loop4: detected capacity change from 0 to 16
[  127.586914][ T5659] erofs: (device loop4): mounted with root inode @ nid 36.
[  127.765468][ T5665] loop1: detected capacity change from 0 to 256
[  127.847571][ T5665] FAT-fs (loop1): Directory bread(block 64) failed
[  127.899706][ T5665] FAT-fs (loop1): Directory bread(block 65) failed
[  127.936987][ T5665] FAT-fs (loop1): Directory bread(block 66) failed
[  127.953104][ T5671] loop4: detected capacity change from 0 to 512
[  127.962650][ T5665] FAT-fs (loop1): Directory bread(block 67) failed
[  128.008809][ T5665] FAT-fs (loop1): Directory bread(block 68) failed
[  128.037977][ T5665] FAT-fs (loop1): Directory bread(block 69) failed
[  128.072062][ T5671] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  128.074195][ T5665] FAT-fs (loop1): Directory bread(block 70) failed
[  128.093999][ T5665] FAT-fs (loop1): Directory bread(block 71) failed
[  128.094127][ T5671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  128.101059][ T5665] FAT-fs (loop1): Directory bread(block 72) failed
[  128.109610][ T5671] System zones: 0-1, 15-15, 18-18, 34-34
[  128.123425][ T5671] EXT4-fs (loop4): orphan cleanup on readonly fs
[  128.130264][ T5671] __quota_error: 14 callbacks suppressed
[  128.130280][ T5671] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  128.146798][ T5671] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  128.162862][ T5671] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  128.184725][ T5671] EXT4-fs (loop4): 1 truncate cleaned up
[  128.223752][ T5671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  128.233063][ T5665] FAT-fs (loop1): Directory bread(block 73) failed
[  128.258234][ T5679] loop2: detected capacity change from 0 to 4096
[  128.353240][ T5671] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  128.402979][ T5684] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  128.480708][ T5686] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.615422][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  129.084757][ T5702] device bridge1 entered promiscuous mode
[  129.121044][ T5702] team0: Port device bridge1 added
[  129.168250][ T5705] loop2: detected capacity change from 0 to 64
[  129.671961][ T5693] loop1: detected capacity change from 0 to 32768
[  129.721505][ T5721] loop2: detected capacity change from 0 to 256
[  129.743612][ T5693] (syz.1.517,5693,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  129.811975][ T5693] (syz.1.517,5693,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  129.935587][ T5693] JBD2: Ignoring recovery information on journal
[  130.161624][ T5693] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  130.478802][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.537'.
[  130.508296][ T4270] ocfs2: Unmounting device (7,1) on (node local)
[  130.540592][ T5719] loop3: detected capacity change from 0 to 40427
[  130.599571][ T5719] F2FS-fs (loop3): invalid crc value
[  130.640789][ T5719] F2FS-fs (loop3): Found nat_bits in checkpoint
[  130.845907][ T5719] F2FS-fs (loop3): recover fsync data on readonly fs
[  130.853338][ T5719] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  130.923831][ T5719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  131.213270][ T4278] Bluetooth: hci4: link tx timeout
[  131.219164][ T4278] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.392760][ T5738] loop0: detected capacity change from 0 to 32768
[  131.723567][ T5311] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  131.830218][   T27] audit: type=1326 audit(1775085007.324:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d13f9c819 code=0x7ffc0000
[  131.861094][   T27] audit: type=1326 audit(1775085007.334:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d13f9c819 code=0x7ffc0000
[  131.883375][    C0] vkms_vblank_simulate: vblank timer overrun
[  131.890297][   T27] audit: type=1326 audit(1775085007.354:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d13f5d04e code=0x7ffc0000
[  131.912649][    C0] vkms_vblank_simulate: vblank timer overrun
[  131.915498][ T5311] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  131.920138][   T27] audit: type=1326 audit(1775085007.354:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d13f9c819 code=0x7ffc0000
[  131.949674][    C0] vkms_vblank_simulate: vblank timer overrun
[  131.957988][ T5311] usb 3-1: config 0 has no interface number 0
[  131.967087][ T5311] usb 3-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30
[  131.969142][   T27] audit: type=1326 audit(1775085007.354:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d13f9c819 code=0x7ffc0000
[  131.984133][ T5311] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.001849][    C0] vkms_vblank_simulate: vblank timer overrun
[  132.060995][   T27] audit: type=1326 audit(1775085007.384:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f6d13f9c819 code=0x7ffc0000
[  132.068132][ T5311] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.084351][    C0] vkms_vblank_simulate: vblank timer overrun
[  132.110539][ T5311] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  132.150313][ T5311] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  132.159341][ T5769] loop0: detected capacity change from 0 to 2048
[  132.160197][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.172585][   T27] audit: type=1326 audit(1775085007.444:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d13f9c819 code=0x7ffc0000
[  132.197600][    C0] vkms_vblank_simulate: vblank timer overrun
[  132.220061][ T5311] usb 3-1: config 0 descriptor??
[  132.222847][   T27] audit: type=1326 audit(1775085007.444:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d13f9c819 code=0x7ffc0000
[  132.248112][    C0] vkms_vblank_simulate: vblank timer overrun
[  132.261799][ T5769] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  132.332215][ T5774] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  132.417789][ T5776] tipc: Started in network mode
[  132.423105][ T5776] tipc: Node identity 8abdc4edcb39, cluster identity 4711
[  132.431604][ T5776] tipc: Enabled bearer <eth:hsr0>, priority 10
[  132.563846][ T5044] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  132.685867][ T5311] wacom 0003:056A:0084.0007: unknown main item tag 0x0
[  132.692987][ T5311] wacom 0003:056A:0084.0007: unknown main item tag 0x0
[  132.719240][ T5311] wacom 0003:056A:0084.0007: unknown main item tag 0x0
[  132.738057][ T5311] wacom 0003:056A:0084.0007: unknown main item tag 0x0
[  132.758863][ T5782] netlink: 'syz.0.558': attribute type 1 has an invalid length.
[  132.760665][ T5311] wacom 0003:056A:0084.0007: unknown main item tag 0x0
[  132.769295][ T5044] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  132.798498][ T5311] wacom 0003:056A:0084.0007: unknown main item tag 0x0
[  132.816183][ T5044] usb 5-1: config 0 interface 0 has no altsetting 0
[  132.832410][ T5311] wacom 0003:056A:0084.0007: unknown main item tag 0x0
[  132.838653][ T5044] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  132.872160][ T5044] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  132.872567][ T5311] wacom 0003:056A:0084.0007: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.2-1/input2
[  132.891770][ T5044] usb 5-1: Product: syz
[  132.941097][ T5044] usb 5-1: Manufacturer: syz
[  132.966641][ T5044] usb 5-1: SerialNumber: syz
[  132.968014][ T5311] usb 3-1: USB disconnect, device number 3
[  132.992736][ T5044] usb 5-1: config 0 descriptor??
[  133.067214][ T5044] usb 5-1: selecting invalid altsetting 0
[  133.266728][ T5790] fido_id[5790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  133.292984][ T5796] kernel profiling enabled (shift: 0)
[  133.377868][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  133.384405][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  133.429128][   T14] usb 5-1: USB disconnect, device number 6
[  133.558186][ T5311] tipc: Node number set to 1099220205
[  133.939946][ T5810] loop1: detected capacity change from 0 to 4096
[  134.268798][ T5820] loop0: detected capacity change from 0 to 1024
[  134.365419][ T5823] netlink: 'syz.1.578': attribute type 4 has an invalid length.
[  134.508455][   T62] hfsplus: b-tree write err: -5, ino 25
[  134.524244][   T62] hfsplus: b-tree write err: -5, ino 4
[  134.538795][   T62] hfsplus: b-tree write err: -5, ino 2
[  134.605256][ T5828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'.
[  134.885147][ T5830] loop1: detected capacity change from 0 to 4096
[  134.993578][ T5311] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  135.187546][ T5311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.212370][ T5311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.243123][ T5311] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  135.297268][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.323863][ T5311] usb 1-1: SerialNumber: syz
[  135.561468][ T5311] usb 1-1: 0:2 : does not exist
[  135.642570][ T5311] usb 1-1: USB disconnect, device number 9
[  135.848365][ T5858] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  135.960668][ T5838] loop3: detected capacity change from 0 to 40427
[  135.994638][ T5838] F2FS-fs (loop3): invalid crc value
[  136.065886][ T5838] F2FS-fs (loop3): Found nat_bits in checkpoint
[  136.099698][ T5863] loop4: detected capacity change from 0 to 1024
[  136.279285][ T5838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  136.324295][ T4336] hfsplus: b-tree write err: -5, ino 25
[  136.330053][ T4336] hfsplus: b-tree write err: -5, ino 4
[  136.361919][ T4336] hfsplus: b-tree write err: -5, ino 2
[  136.428579][ T5854] loop2: detected capacity change from 0 to 40427
[  136.477140][ T5854] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  136.523575][ T5854] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.556661][ T5854] F2FS-fs (loop2): invalid crc_offset: 33558524
[  136.619479][ T5854] F2FS-fs (loop2): Found nat_bits in checkpoint
[  136.633646][   T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  136.792616][ T5854] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.813565][ T5854] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.833665][   T14] usb 1-1: Using ep0 maxpacket: 16
[  136.841824][   T14] usb 1-1: unable to get BOS descriptor or descriptor too short
[  136.870156][ T5854] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  136.894586][   T14] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  136.986104][   T14] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  137.047839][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.080040][   T14] usb 1-1: Product: syz
[  137.096874][   T14] usb 1-1: Manufacturer: syz
[  137.111813][   T14] usb 1-1: SerialNumber: syz
[  137.333265][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'.
[  137.359429][ T5893] loop2: detected capacity change from 0 to 128
[  137.365441][   T14] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  137.373780][ T5891] netlink: 'syz.3.611': attribute type 30 has an invalid length.
[  137.390178][   T14] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  137.404261][ T5893] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.417582][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'.
[  137.446662][ T4337] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  137.458921][ T5893] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.597240][ T5895] loop3: detected capacity change from 0 to 512
[  137.644955][ T4337] usb 2-1: Using ep0 maxpacket: 16
[  137.660138][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.687632][ T5895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  137.742005][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.811812][ T5899] loop2: detected capacity change from 0 to 1764
[  137.857638][   T14] usb 1-1: USB disconnect, device number 10
[  137.875590][ T4337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  137.925766][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.951051][ T4337] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  137.963048][ T5895] EXT4-fs error (device loop3): ext4_get_first_dir_block:3583: inode #12: comm syz.3.613: Directory block failed checksum
[  137.987320][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.039477][ T4337] usb 2-1: config 0 descriptor??
[  138.162657][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  138.470962][ T5910] loop2: detected capacity change from 0 to 1024
[  138.476689][ T4337] belkin 0003:1020:0006.0008: unknown main item tag 0x4
[  138.498116][ T5910] EXT4-fs: Ignoring removed bh option
[  138.507579][ T5912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.620'.
[  138.519894][ T5910] EXT4-fs: inline encryption not supported
[  138.520161][ T4337] belkin 0003:1020:0006.0008: hidraw0: USB HID v0.0a Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0
[  138.527034][ T5912] nbd: must specify at least one socket
[  138.565740][ T5910] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  138.644281][ T5910] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.619: lblock 2 mapped to illegal pblock 2 (length 1)
[  138.663259][ T5910] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  138.672598][ T5910] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.619: lblock 0 mapped to illegal pblock 48 (length 1)
[  138.713637][ T5910] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  138.725416][ T5910] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.619: Failed to acquire dquot type 0
[  138.738112][ T5910] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  138.761533][ T4337] usb 2-1: USB disconnect, device number 5
[  138.779311][ T5910] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.619: mark_inode_dirty error
[  138.824714][ T5910] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  138.857733][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.622'.
[  138.873718][ T5910] EXT4-fs (loop2): 1 orphan inode deleted
[  138.884124][ T5910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  138.893874][ T4319] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  138.945613][ T5915] fido_id[5915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  138.974815][ T4319] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  138.983374][ T4319] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0
[  139.069928][ T5910] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  139.089345][ T5910] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  139.139891][ T5910] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  139.151295][ T5910] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.619: lblock 0 mapped to illegal pblock 48 (length 1)
[  139.192888][ T5910] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117
[  139.234048][ T5910] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  139.315020][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  139.388216][ T5929] loop3: detected capacity change from 0 to 256
[  139.470288][ T5933] loop2: detected capacity change from 0 to 512
[  139.522843][ T5929] FAT-fs (loop3): Directory bread(block 64) failed
[  139.575942][ T5929] FAT-fs (loop3): Directory bread(block 65) failed
[  139.593669][ T5929] FAT-fs (loop3): Directory bread(block 66) failed
[  139.600403][ T5929] FAT-fs (loop3): Directory bread(block 67) failed
[  139.643723][ T5929] FAT-fs (loop3): Directory bread(block 68) failed
[  139.650799][ T5929] FAT-fs (loop3): Directory bread(block 69) failed
[  139.693995][ T5929] FAT-fs (loop3): Directory bread(block 70) failed
[  139.699330][ T5937] netlink: 56 bytes leftover after parsing attributes in process `syz.0.631'.
[  139.700605][ T5929] FAT-fs (loop3): Directory bread(block 71) failed
[  139.741586][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'.
[  139.750877][ T5929] FAT-fs (loop3): Directory bread(block 72) failed
[  139.750913][ T5929] FAT-fs (loop3): Directory bread(block 73) failed
[  140.085957][ T5945] loop0: detected capacity change from 0 to 256
[  140.114640][ T5947] netlink: 'syz.2.635': attribute type 1 has an invalid length.
[  140.139629][ T5947] netlink: 120 bytes leftover after parsing attributes in process `syz.2.635'.
[  140.177465][ T5945] FAT-fs (loop0): Directory bread(block 64) failed
[  140.190862][ T5945] FAT-fs (loop0): Directory bread(block 65) failed
[  140.238684][ T5945] FAT-fs (loop0): Directory bread(block 66) failed
[  140.274443][ T5945] FAT-fs (loop0): Directory bread(block 67) failed
[  140.291477][ T5945] FAT-fs (loop0): Directory bread(block 68) failed
[  140.320201][ T5945] FAT-fs (loop0): Directory bread(block 69) failed
[  140.354479][ T5945] FAT-fs (loop0): Directory bread(block 70) failed
[  140.378546][ T5945] FAT-fs (loop0): Directory bread(block 71) failed
[  140.410748][ T5945] FAT-fs (loop0): Directory bread(block 72) failed
[  140.453669][ T5945] FAT-fs (loop0): Directory bread(block 73) failed
[  140.468869][ T5955] netlink: 'syz.2.638': attribute type 11 has an invalid length.
[  140.488797][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'.
[  140.947359][ T5966] loop3: detected capacity change from 0 to 512
[  141.007299][ T5966] EXT4-fs (loop3): 1 truncate cleaned up
[  141.013055][ T5966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  141.172876][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  141.461546][ T5977] loop0: detected capacity change from 0 to 4096
[  141.523165][ T5977] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[  141.545399][ T5977] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  141.583749][ T5977] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  141.659232][ T5977] ntfs: volume version 3.1.
[  141.693120][ T5977] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  141.729364][ T5977] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  141.783615][ T5977] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index.
[  142.140250][ T5999] loop0: detected capacity change from 0 to 512
[  142.193376][ T6000] tipc: Enabled bearer <udp:syz1>, priority 10
[  142.238354][ T5999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  142.284386][ T5999] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.500517][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  142.676676][ T6012] loop0: detected capacity change from 0 to 512
[  142.749199][ T6012] FAT-fs (loop0): error, corrupted file size (i_pos 51, 9216)
[  142.781142][ T6014] loop2: detected capacity change from 0 to 1024
[  142.844265][ T6014] EXT4-fs: Ignoring removed mblk_io_submit option
[  142.902051][ T6014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  142.948375][ T6014] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #11: comm syz.2.665: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  142.974333][ T6014] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.665: couldn't read orphan inode 11 (err -117)
[  143.078264][ T6014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  143.272422][ T6023] loop3: detected capacity change from 0 to 16
[  143.303446][ T6023] erofs: (device loop3): mounted with root inode @ nid 36.
[  143.350789][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  143.647985][ T6018] loop1: detected capacity change from 0 to 32768
[  143.790734][ T6018] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  144.395618][ T4270] ocfs2: Unmounting device (7,1) on (node local)
[  144.796823][ T6049] set_capacity_and_notify: 1 callbacks suppressed
[  144.796841][ T6049] loop3: detected capacity change from 0 to 4096
[  144.847807][ T6051] loop1: detected capacity change from 0 to 512
[  144.887345][ T6049] __ntfs_error: 2 callbacks suppressed
[  144.887365][ T6049] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  144.963605][ T6049] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  144.967288][ T6051] FAT-fs (loop1): error, corrupted file size (i_pos 51, 9216)
[  145.018507][ T6049] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  145.103703][ T6049] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  145.168187][ T6049] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  145.227073][ T6042] loop2: detected capacity change from 0 to 32768
[  145.236425][ T6049] ntfs: volume version 3.1.
[  145.245410][ T6045] loop0: detected capacity change from 0 to 32768
[  145.247681][ T6049] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  145.324306][ T6049] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  145.342966][ T6049] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  145.353695][ T6045] (syz.0.678,6045,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.354712][ T6049] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  145.380643][ T6049] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  145.411462][ T6045] (syz.0.678,6045,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.442284][ T6056] loop1: detected capacity change from 0 to 2048
[  145.470658][ T6056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.533461][ T6042] XFS (loop2): Mounting V5 Filesystem
[  145.560935][ T6045] JBD2: Ignoring recovery information on journal
[  145.765693][ T6042] XFS (loop2): Ending clean mount
[  145.810182][ T6045] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  146.047689][ T4269] XFS (loop2): Unmounting Filesystem
[  146.206870][ T4273] ocfs2: Unmounting device (7,0) on (node local)
[  146.530040][ T6076] nftables ruleset with unbound set
[  147.092854][ T6084] loop1: detected capacity change from 0 to 4096
[  147.271076][ T6092] loop2: detected capacity change from 0 to 512
[  147.272365][ T6090] loop3: detected capacity change from 0 to 2048
[  147.381463][ T6090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.386063][ T6092] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2307)
[  147.473755][ T6092] FAT-fs (loop2): Filesystem has been set read-only
[  147.594072][ T6078] loop0: detected capacity change from 0 to 32768
[  147.651663][ T6078] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.686 (6078)
[  147.748747][ T6094] loop1: detected capacity change from 0 to 4096
[  147.760292][ T6078] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.810020][ T6078] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  147.848703][ T6078] BTRFS info (device loop0): force clearing of disk cache
[  147.858911][ T6094] ntfs: volume version 3.1.
[  147.889271][ T6078] BTRFS info (device loop0): metadata ratio 0
[  147.928845][ T6078] BTRFS info (device loop0): enabling ssd optimizations
[  147.954240][ T6078] BTRFS info (device loop0): using spread ssd allocation scheme
[  147.961999][ T6078] BTRFS info (device loop0): using free space tree
[  148.335718][ T6078] BTRFS info (device loop0): rebuilding free space tree
[  148.453684][ T4365] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  148.524690][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.663857][ T4365] usb 2-1: Using ep0 maxpacket: 8
[  148.704293][ T4365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.721508][ T4365] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  148.793618][ T4365] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  148.802939][ T4365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.881602][ T4365] usb 2-1: config 0 descriptor??
[  149.132383][ T6126] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  149.323151][ T4365] cypress 0003:04B4:DE61.0009: ignoring exceeding usage max
[  149.338286][ T4365] cypress 0003:04B4:DE61.0009: report_id 3177015884 is invalid
[  149.365693][ T4365] cypress 0003:04B4:DE61.0009: item 0 4 1 8 parsing failed
[  149.391120][ T4365] cypress 0003:04B4:DE61.0009: parse failed
[  149.415836][ T4365] cypress: probe of 0003:04B4:DE61.0009 failed with error -22
[  149.564346][ T4315] usb 2-1: USB disconnect, device number 6
[  150.673206][ T6168] netlink: 104 bytes leftover after parsing attributes in process `syz.2.724'.
[  150.746733][ T6142] set_capacity_and_notify: 2 callbacks suppressed
[  150.746753][ T6142] loop3: detected capacity change from 0 to 32768
[  150.861528][ T6142] gfs2: fsid=Աr�ۻ�_�
[  150.861528][ T6142] �b�瀫��]�k;
.Ġ��O����:�.��t��U��M: Trying to join cluster "lock_nolock", "Աr�ۻ�_�
[  150.861528][ T6142] �b�瀫��]�k;
.Ġ��O����:�.��t��U��M"
[  150.946637][ T6142] gfs2: fsid=Աr�ۻ�_�
[  150.946637][ T6142] �b�瀫��]�k;
.Ġ��O����:�.��t��U��M: Now mounting FS (format 1801)...
[  151.223751][ T6142] gfs2: fsid=Աr�ۻ�_�
[  151.223751][ T6142] �b�瀫��]�k;
.Ġ��O����:�.��t��U��M.s: journal 0 mapped with 5 extents in 0ms
[  151.341996][ T6142] gfs2: fsid=Աr�ۻ�_�
[  151.341996][ T6142] �b�瀫��]�k;
.Ġ��O����:�.��t��U��M.s: first mount done, others may mount
[  151.579828][ T6185] loop2: detected capacity change from 0 to 1756
[  151.684457][ T6185] Invalid ELF header len 10
[  151.906688][ T6190] netlink: 'syz.0.735': attribute type 4 has an invalid length.
[  152.023228][ T6192] loop1: detected capacity change from 0 to 1024
[  152.104898][ T6192] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  152.215564][ T6192] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  152.292669][ T6192] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #3: comm syz.1.737: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[  152.364012][ T6192] EXT4-fs (loop1): no journal found
[  152.372653][ T6200] netlink: 236 bytes leftover after parsing attributes in process `syz.2.740'.
[  152.379894][ T6192] EXT4-fs (loop1): can't get journal size
[  152.422751][ T6192] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  152.620223][ T4271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  152.643703][ T4271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  152.656239][ T4271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  152.700551][ T4271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  152.708326][ T4271] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  152.719008][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  152.738485][ T4271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  152.841319][ T6212] device veth0_virt_wifi entered promiscuous mode
[  152.857964][ T6212] device veth0_virt_wifi left promiscuous mode
[  153.367259][ T6206] chnl_net:caif_netlink_parms(): no params data found
[  153.596164][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.631553][ T6236] loop0: detected capacity change from 0 to 128
[  153.799742][ T6236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  153.824103][ T6236] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  153.832122][ T6246] loop3: detected capacity change from 0 to 256
[  153.863500][    C0] vkms_vblank_simulate: vblank timer overrun
[  153.886687][ T6246] exfat: Deprecated parameter 'utf8'
[  153.946381][ T6246] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  153.992991][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.053223][ T6246] process 'syz.3.757' launched '��K������z�~Yԯ�A�U���!�5=T����7�p=B��o�Q�-=Z��c�8����	�m=Q��'��z�����4=]��g�z�~O����9z�����t��^����^�?ҙz�^���ez�^�W�Uz�^���uz�ޠ7�Mz�ޢ��mz�ޡ?�;�'z�ޭ��O�^��ާ?������Rg��A��>��ч�����N���q��>��'�)}Z��g�����I�������ӻQF�cbM��3q&��er��&b"&�ě<&��k��&�I0	��)d. C��)l�&j�����)fJ��gM�)mJ�2��)kʚr��)oʛ������n�0w�;͝�.s��n������ej�ڦ��c꘺���g����i`����id�Ʀ�ib��f��iaZ����ieZ�6��ikښv��I2I��io:����h:�N���l��.���f���a�M��mz�>���g��
f�h�Af�I1)f�b���f�f��f�U�mƘ�f�I5�f��`&��f��d��)&ͤ��f��af�Yf��mf�9f��g�t�n�&�d�Ef��4�f�Yb��ef�YaV�Uf�Yc��:��l0��&��l1��6���0;�N���2{����5��>���7�
�e��As�2��as�1G�Qs�7��	sœ4'�isڜ5�.�/���9m����W���������M�m!�m^��7�����m	[�:[�&ڛ~��lE[��n+�;l��ŵ�=����ֱ�ٚ����u����}��G�MmC��6�����Q��6��ls��>i�٧l�}ڶ���.^`�Uv�]c��]v�=m��C�{��h{؞v�}����A�U�b�.iߴ��[v�c��q���ة6�N����v����8�~`g�;�ε�����sʰ�E�#�iXb��ev�]aW�y�K�z��n�;�'v��j���vǥa��ڽ�3{�~m��/�
{�f
[  154.149020][ T6228] loop2: detected capacity change from 0 to 32768
[  154.257435][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  154.265200][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.272724][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.325015][ T6206] device bridge_slave_0 entered promiscuous mode
[  154.383605][ T4365] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  154.451202][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.502490][ T6228] 
[  154.502490][ T6228]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.502490][ T6228] 
[  154.523109][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.532625][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.557811][ T6206] device bridge_slave_1 entered promiscuous mode
[  154.594531][ T4365] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  154.614386][ T4365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  154.643172][ T4365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  154.682896][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.699972][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0
[  154.731601][ T4365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  154.759725][ T4269] 
[  154.759725][ T4269]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.759725][ T4269] 
[  154.774586][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.779990][ T4365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  154.785096][ T4269] 
[  154.785096][ T4269]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.785096][ T4269] 
[  154.817963][ T4278] Bluetooth: hci5: command 0x0409 tx timeout
[  154.838347][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.850252][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0
[  154.880385][ T4365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  154.939886][ T4365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  154.983645][   T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  155.023691][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.043324][ T4365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.056301][ T6206] team0: Port device team_slave_0 added
[  155.092036][ T4365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.098344][ T6255] loop0: detected capacity change from 0 to 32768
[  155.110857][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.124354][ T6206] team0: Port device team_slave_1 added
[  155.176766][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.180597][ T4365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.203570][ T5311] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  155.223068][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.240999][ T4365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.249011][ T6255] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  155.252513][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.270254][ T4365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.293740][ T4365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.301431][   T22] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  155.324246][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.350209][ T4365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.359779][ T4365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.371052][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.386621][ T4365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.407948][ T4365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.411308][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.430433][ T4365] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.431856][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  155.450458][ T4365] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  155.475456][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  155.483846][ T6265] 
[  155.489080][ T6265] ======================================================
[  155.496168][ T6265] WARNING: possible circular locking dependency detected
[  155.503483][ T6265] syzkaller #0 Not tainted
[  155.507921][ T6265] ------------------------------------------------------
[  155.510240][   T22] usb 4-1: config 0 descriptor??
[  155.515046][ T6265] syz.0.760/6265 is trying to acquire lock:
[  155.515067][ T6265] ffff888023d02990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270
[  155.515148][ T6265] 
[  155.515148][ T6265] but task is already holding lock:
[  155.515154][ T6265] ffff888056708ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  155.515199][ T6265] 
[  155.515199][ T6265] which lock already depends on the new lock.
[  155.515199][ T6265] 
[  155.515206][ T6265] 
[  155.515206][ T6265] the existing dependency chain (in reverse order) is:
[  155.515212][ T6265] 
[  155.515212][ T6265] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  155.515243][ T6265]        down_read+0x42/0x2d0
[  155.515280][ T6265]        ocfs2_start_trans+0x3a4/0x6f0
[  155.515295][ T6265]        ocfs2_shutdown_local_alloc+0x1f8/0xaa0
[  155.515317][ T6265]        ocfs2_dismount_volume+0x1ff/0x940
[  155.515331][ T6265]        generic_shutdown_super+0x130/0x340
[  155.515350][ T6265]        kill_block_super+0x7c/0xe0
[  155.515367][ T6265]        deactivate_locked_super+0x93/0xf0
[  155.515385][ T6265]        cleanup_mnt+0x42c/0x4b0
[  155.515404][ T6265]        task_work_run+0x1d0/0x260
[  155.515427][ T6265]        exit_to_user_mode_loop+0xe6/0x110
[  155.515454][ T6265]        exit_to_user_mode_prepare+0xee/0x180
[  155.515478][ T6265]        syscall_exit_to_user_mode+0x16/0x40
[  155.515498][ T6265]        do_syscall_64+0x58/0xa0
[  155.515522][ T6265]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.515540][ T6265] 
[  155.515540][ T6265] -> #4
[  155.523603][ T5311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  155.526353][ T6265]  (
[  155.567312][ T5311] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  155.573680][ T6265] sb_internal#4){.+.+}-{0:0}:
[  155.573717][ T6265]        ocfs2_start_trans+0x2a5/0x6f0
[  155.573742][ T6265]        ocfs2_acquire_dquot+0x681/0xb20
[  155.573759][ T6265]        dqget+0x778/0xeb0
[  155.573776][ T6265]        dquot_set_dqblk+0x27/0xf90
[  155.573792][ T6265]        quota_setquota+0x4d6/0x590
[  155.573813][ T6265]        __se_sys_quotactl+0x28b/0x6f0
[  155.573834][ T6265]        do_syscall_64+0x4c/0xa0
[  155.573867][ T6265]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.573888][ T6265] 
[  155.573888][ T6265] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  155.749375][ T6265]        down_write+0x36/0x60
[  155.754204][ T6265]        ocfs2_create_local_dquot+0x1a5/0x18e0
[  155.760469][ T6265]        ocfs2_acquire_dquot+0x7c6/0xb20
[  155.766122][ T6265]        dqget+0x778/0xeb0
[  155.770738][ T6265]        dquot_set_dqblk+0x27/0xf90
[  155.776050][ T6265]        quota_setquota+0x4d6/0x590
[  155.781368][ T6265]        __se_sys_quotactl+0x28b/0x6f0
[  155.786825][ T6265]        do_syscall_64+0x4c/0xa0
[  155.791769][ T6265]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.798266][ T6265] 
[  155.798266][ T6265] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  155.806262][ T6265]        __mutex_lock+0x12d/0xaf0
[  155.811291][ T6265]        dquot_commit+0x5a/0x410
[  155.816362][ T6265]        ext4_write_dquot+0x1f0/0x360
[  155.821994][ T6265]        mark_all_dquot_dirty+0xf9/0x400
[  155.827771][ T6265]        __dquot_alloc_space+0x5fc/0xe60
[  155.833662][ T6265]        ext4_mb_new_blocks+0xfc4/0x4610
[  155.839555][ T6265]        ext4_ind_map_blocks+0xeb3/0x2230
[  155.845279][ T6265]        ext4_map_blocks+0x97d/0x1b70
[  155.850837][ T6265]        ext4_getblk+0x1cc/0x6f0
[  155.855790][ T6265]        ext4_bread+0x26/0x170
[  155.860736][ T6265]        ext4_append+0x2be/0x560
[  155.865774][ T6265]        ext4_init_new_dir+0x2b8/0x570
[  155.871242][ T6265]        ext4_mkdir+0x4fb/0xce0
[  155.876092][ T6265]        vfs_mkdir+0x387/0x570
[  155.880864][ T6265]        do_mkdirat+0x1d8/0x440
[  155.885984][ T6265]        __x64_sys_mkdirat+0x85/0x90
[  155.891396][ T6265]        do_syscall_64+0x4c/0xa0
[  155.896614][ T6265]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.903211][ T6265] 
[  155.903211][ T6265] -> #1 (&ei->i_data_sem){++++}-{3:3}:
[  155.910936][ T6265]        down_write+0x36/0x60
[  155.915613][ T6265]        ext4_truncate+0x999/0x1240
[  155.920915][ T6265]        ext4_setattr+0x10cb/0x19f0
[  155.926112][ T6265]        notify_change+0xc74/0xf40
[  155.931231][ T6265]        do_truncate+0x1ac/0x240
[  155.936429][ T6265]        do_sys_ftruncate+0x312/0x3c0
[  155.941897][ T6265]        do_syscall_64+0x4c/0xa0
[  155.946992][ T6265]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.953623][ T6265] 
[  155.953623][ T6265] -> #0 (jbd2_handle){++++}-{0:0}:
[  155.961060][ T6265]        __lock_acquire+0x2d07/0x7d10
[  155.966452][ T6265]        lock_acquire+0x1bb/0x4a0
[  155.971578][ T6265]        wait_transaction_locked+0x1bf/0x270
[  155.977557][ T6265]        start_this_handle+0x7ec/0x2230
[  155.983101][ T6265]        jbd2__journal_start+0x2b7/0x5a0
[  155.988867][ T6265]        jbd2_journal_start+0x26/0x30
[  155.994319][ T6265]        ocfs2_start_trans+0x3b0/0x6f0
[  156.000207][ T6265]        ocfs2_evict_inode+0x1721/0x4630
[  156.005826][ T6265]        evict+0x4c9/0x8d0
[  156.010420][ T6265]        do_unlinkat+0x388/0x580
[  156.015347][ T6265]        __x64_sys_unlinkat+0xd1/0xe0
[  156.020723][ T6265]        do_syscall_64+0x4c/0xa0
[  156.025670][ T6265]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.032169][ T6265] 
[  156.032169][ T6265] other info that might help us debug this:
[  156.032169][ T6265] 
[  156.042393][ T6265] Chain exists of:
[  156.042393][ T6265]   jbd2_handle --> sb_internal#4 --> &journal->j_trans_barrier
[  156.042393][ T6265] 
[  156.055888][ T6265]  Possible unsafe locking scenario:
[  156.055888][ T6265] 
[  156.063447][ T6265]        CPU0                    CPU1
[  156.068828][ T6265]        ----                    ----
[  156.074224][ T6265]   lock(&journal->j_trans_barrier);
[  156.079520][ T6265]                                lock(sb_internal#4);
[  156.086292][ T6265]                                lock(&journal->j_trans_barrier);
[  156.094261][ T6265]   lock(jbd2_handle);
[  156.098320][ T6265] 
[  156.098320][ T6265]  *** DEADLOCK ***
[  156.098320][ T6265] 
[  156.106813][ T6265] 6 locks held by syz.0.760/6265:
[  156.111831][ T6265]  #0: ffff88807a824460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  156.121170][ T6265]  #1: ffff88807a9b4ab0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x103/0x270
[  156.131704][ T6265]  #2: ffff888071bd42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0xe9c/0x4630
[  156.144403][ T6265]  #3: ffff888053f889c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_evict_inode+0x163f/0x4630
[  156.157710][ T6265]  #4: ffff88807a824650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_evict_inode+0x1721/0x4630
[  156.167657][ T6265]  #5: ffff888056708ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  156.178541][ T6265] 
[  156.178541][ T6265] stack backtrace:
[  156.184872][ T6265] CPU: 0 PID: 6265 Comm: syz.0.760 Not tainted syzkaller #0
[  156.192851][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  156.203521][ T6265] Call Trace:
[  156.206964][ T6265]  <TASK>
[  156.209965][ T6265]  dump_stack_lvl+0x188/0x24e
[  156.214862][ T6265]  ? load_image+0x400/0x400
[  156.219561][ T6265]  ? show_regs_print_info+0x12/0x12
[  156.224938][ T6265]  ? print_circular_bug+0x12b/0x1a0
[  156.230144][ T6265]  check_noncircular+0x296/0x330
[  156.235357][ T6265]  ? add_chain_block+0x940/0x940
[  156.240481][ T6265]  ? lockdep_lock+0xf1/0x1f0
[  156.245248][ T6265]  ? _find_first_zero_bit+0xcf/0x100
[  156.250723][ T6265]  __lock_acquire+0x2d07/0x7d10
[  156.255693][ T6265]  ? verify_lock_unused+0x140/0x140
[  156.260984][ T6265]  ? mark_lock+0x94/0x320
[  156.265405][ T6265]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  156.271417][ T6265]  lock_acquire+0x1bb/0x4a0
[  156.275923][ T6265]  ? wait_transaction_locked+0x1a6/0x270
[  156.281641][ T6265]  ? __lock_acquire+0x7d10/0x7d10
[  156.286765][ T6265]  ? read_lock_is_recursive+0x10/0x10
[  156.292348][ T6265]  ? prepare_to_wait_exclusive+0x7e/0x220
[  156.298338][ T6265]  ? wait_transaction_locked+0x1a6/0x270
[  156.304072][ T6265]  wait_transaction_locked+0x1bf/0x270
[  156.309890][ T6265]  ? wait_transaction_locked+0x1a6/0x270
[  156.315694][ T6265]  ? jbd2_journal_begin_ordered_truncate+0x150/0x150
[  156.322453][ T6265]  ? stack_trace_save+0xa6/0xf0
[  156.327301][ T6265]  ? wake_bit_function+0x200/0x200
[  156.333116][ T6265]  ? __lock_acquire+0x13cf/0x7d10
[  156.340451][ T6265]  start_this_handle+0x7ec/0x2230
[  156.346054][ T6265]  ? slab_post_alloc_hook+0x4b/0x480
[  156.351847][ T6265]  ? kmem_cache_alloc+0x123/0x2f0
[  156.357244][ T6265]  ? jbd2__journal_start+0x13c/0x5a0
[  156.363162][ T6265]  ? jbd2__journal_start+0x5a0/0x5a0
[  156.368575][ T6265]  ? __kasan_slab_alloc+0x6b/0x80
[  156.373802][ T6265]  ? slab_post_alloc_hook+0x67/0x480
[  156.379486][ T6265]  ? slab_pre_alloc_hook+0x59/0x310
[  156.384945][ T6265]  ? rcu_is_watching+0x11/0xa0
[  156.389937][ T6265]  ? kmem_cache_alloc+0x151/0x2f0
[  156.395455][ T6265]  ? jbd2__journal_start+0x13c/0x5a0
[  156.401141][ T6265]  jbd2__journal_start+0x2b7/0x5a0
[  156.406353][ T6265]  jbd2_journal_start+0x26/0x30
[  156.411780][ T6265]  ocfs2_start_trans+0x3b0/0x6f0
[  156.417298][ T6265]  ? ocfs2_recovery_exit+0x50/0x50
[  156.423015][ T6265]  ocfs2_evict_inode+0x1721/0x4630
[  156.428401][ T6265]  ? ocfs2_sync_blockdev+0x40/0x40
[  156.433517][ T6265]  ? is_bpf_text_address+0x22/0x2a0
[  156.438811][ T6265]  ? __lock_acquire+0x7d10/0x7d10
[  156.444192][ T6265]  ? unwind_next_frame+0x1880/0x20b0
[  156.449989][ T6265]  ? deref_stack_reg+0x19f/0x230
[  156.455285][ T6265]  ? mark_lock+0x94/0x320
[  156.460369][ T6265]  ? __lock_acquire+0x13cf/0x7d10
[  156.465618][ T6265]  ? is_bpf_text_address+0x28b/0x2a0
[  156.471353][ T6265]  ? mark_lock+0x94/0x320
[  156.475685][ T6265]  ? __lock_acquire+0x13cf/0x7d10
[  156.480731][ T6265]  ? __lock_acquire+0x13cf/0x7d10
[  156.486016][ T6265]  ? verify_lock_unused+0x140/0x140
[  156.491396][ T6265]  ? inode_wait_for_writeback+0x1df/0x220
[  156.497536][ T6265]  ? __lock_acquire+0x7d10/0x7d10
[  156.502854][ T6265]  ? do_raw_spin_lock+0x128/0x2f0
[  156.507985][ T6265]  ? __rwlock_init+0x140/0x140
[  156.512777][ T6265]  ? do_raw_spin_unlock+0x11d/0x230
[  156.518014][ T6265]  ? _raw_spin_unlock+0x24/0x40
[  156.523143][ T6265]  ? inode_wait_for_writeback+0x1df/0x220
[  156.528954][ T6265]  ? sb_clear_inode_writeback+0x3c0/0x3c0
[  156.534688][ T6265]  ? do_raw_spin_lock+0x128/0x2f0
[  156.539758][ T6265]  ? bit_waitqueue+0x30/0x30
[  156.544450][ T6265]  ? do_raw_spin_unlock+0x11d/0x230
[  156.549742][ T6265]  ? ocfs2_sync_blockdev+0x40/0x40
[  156.554950][ T6265]  evict+0x4c9/0x8d0
[  156.558978][ T6265]  ? proc_nr_inodes+0x2f0/0x2f0
[  156.563944][ T6265]  ? do_raw_spin_unlock+0x11d/0x230
[  156.569531][ T6265]  ? _raw_spin_unlock+0x24/0x40
[  156.574446][ T6265]  ? iput+0x768/0x980
[  156.578706][ T6265]  do_unlinkat+0x388/0x580
[  156.583137][ T6265]  ? fsnotify_link_count+0xf0/0xf0
[  156.588423][ T6265]  ? getname_flags+0x206/0x500
[  156.593278][ T6265]  __x64_sys_unlinkat+0xd1/0xe0
[  156.598133][ T6265]  do_syscall_64+0x4c/0xa0
[  156.602915][ T6265]  ? clear_bhb_loop+0x60/0xb0
[  156.608205][ T6265]  ? clear_bhb_loop+0x60/0xb0
[  156.612973][ T6265]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.618892][ T6265] RIP: 0033:0x7f37ae59c819
[  156.623403][ T6265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.643187][ T6265] RSP: 002b:00007f37af36f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  156.651712][ T6265] RAX: ffffffffffffffda RBX: 00007f37ae816090 RCX: 00007f37ae59c819
[  156.660100][ T6265] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  156.668253][ T6265] RBP: 00007f37ae632c91 R08: 0000000000000000 R09: 0000000000000000
[  156.676507][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.684682][ T6265] R13: 00007f37ae816128 R14: 00007f37ae816090 R15: 00007ffd0ec2f778
[  156.693486][ T6265]  </TASK>
[  156.696626][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.734867][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.742547][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.745397][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.770362][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.770437][ T4365] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  156.770460][ T4365] usb 2-1: Product: syz
[  156.770474][ T4365] usb 2-1: Manufacturer: syz
[  156.770487][ T4365] usb 2-1: SerialNumber: syz
[  156.804620][ T4365] usb 2-1: config 0 descriptor??
[  156.816170][ T4365] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  156.826843][ T5311] usb 3-1: config 0 descriptor??
[  156.833404][ T6261] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  156.858095][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.893575][ T4278] Bluetooth: hci5: command 0x041b tx timeout
[  156.895971][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.908517][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.910749][   T22] hkems 0003:2006:0118.000A: item fetching failed at offset 5/7
[  156.934886][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.935437][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.974909][   T22] hkems 0003:2006:0118.000A: parse failed
[  156.990301][   T22] hkems: probe of 0003:2006:0118.000A failed with error -22
[  157.058136][ T6206] device hsr_slave_0 entered promiscuous mode
[  157.078276][ T4365] usb 2-1: USB disconnect, device number 7
[  157.086213][ T4365] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  157.098382][ T6206] device hsr_slave_1 entered promiscuous mode
[  157.112302][ T4273] ocfs2: Unmounting device (7,0) on (node local)
[  157.116660][ T6206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.156880][ T6206] Cannot create hsr debugfs directory
[  157.219285][   T14] usb 4-1: USB disconnect, device number 4
[  157.279465][ T5311] elecom 0003:056E:00FC.000B: unknown main item tag 0x3
[  157.305565][ T5311] elecom 0003:056E:00FC.000B: unknown global tag 0xe
[  157.312946][ T5311] elecom 0003:056E:00FC.000B: item 0 1 1 14 parsing failed
[  157.321503][ T5311] elecom: probe of 0003:056E:00FC.000B failed with error -22
[  157.385953][ T6206] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  157.396805][ T6206] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  157.407734][ T6206] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  157.423342][ T6206] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  157.498388][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.500403][ T5311] usb 3-1: USB disconnect, device number 4
[  157.526124][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.544149][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.569995][ T6206] 8021q: adding VLAN 0 to HW filter on device team0
[  157.584715][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.596032][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.611227][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.619219][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.656131][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.666164][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.679570][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.689729][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.697393][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.706416][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.716389][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.741804][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.770353][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.792957][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.804971][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.825482][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.845525][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.859963][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.889542][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.901339][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.917675][    T9] device hsr_slave_0 left promiscuous mode
[  157.924527][    T9] device hsr_slave_1 left promiscuous mode
[  157.930933][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.941525][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.951120][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.962354][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.971209][    T9] device bridge_slave_1 left promiscuous mode
[  157.979378][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.988216][    T9] device bridge_slave_0 left promiscuous mode
[  157.996319][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.007769][    T9] device veth1_macvtap left promiscuous mode
[  158.016573][    T9] device veth0_macvtap left promiscuous mode
[  158.022787][    T9] device veth1_vlan left promiscuous mode
[  158.029162][    T9] device veth0_vlan left promiscuous mode
[  158.140185][    T9] team0 (unregistering): Port device bridge1 removed
[  158.219742][    T9] team0 (unregistering): Port device team_slave_1 removed
[  158.247707][    T9] team0 (unregistering): Port device team_slave_0 removed
[  158.278248][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.290563][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.391081][    T9] bond0 (unregistering): Released all slaves
[  158.418743][ T6206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.645815][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  158.655881][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  158.668613][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.971750][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  158.980337][ T4271] Bluetooth: hci5: command 0x040f tx timeout
[  158.981421][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.008172][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.017243][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.029243][ T6206] device veth0_vlan entered promiscuous mode
[  159.037097][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.054166][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.076419][ T6206] device veth1_vlan entered promiscuous mode
[  159.106072][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  159.115546][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  159.123627][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  159.132187][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  159.143755][ T6206] device veth0_macvtap entered promiscuous mode
[  159.152735][ T6206] device veth1_macvtap entered promiscuous mode
[  159.169481][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.180167][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.191088][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.202225][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.212391][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.223171][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.233440][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.244454][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.255750][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.265175][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  159.274078][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  159.282823][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  159.292204][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.307093][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.318267][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.330293][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.341393][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.352444][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.363616][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.374044][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.385332][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.397544][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.407200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  159.416965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  159.430334][ T6206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.440015][ T6206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.453814][ T6206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.465187][ T6206] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.511314][ T6206] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  159.547649][ T4832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.548578][ T6206] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  159.560669][ T4832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.581287][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  159.602652][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.611915][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.622766][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  161.053841][ T4278] Bluetooth: hci5: command 0x0419 tx timeout