last executing test programs:

1m13.732014102s ago: executing program 2 (id=261):
syz_open_dev$cec(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8000})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'sha256\x00'}})

1m13.518931043s ago: executing program 2 (id=264):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x6213, &(0x7f000000cb40)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgCYsmKB8iCLTseAEs2EiirFOqZc8Y1nW732OPu6pnz+0njqq9P1fQp/7v6MlXVJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+OEPfnyuiogrv0o3nIj4XHQjOhErw3otIlbWTuTlexHxQmw3x/MR0V+KqHLjsxGvR8THxyPuP7izPrzp/D778f2//PMPPzn2o3/8qX/mf3+91X1j0nK3b//2v3+7++TbCwAAACWq67qu0sf8k+nzfaftTgEAc5Ff/+sk365euHpzwfqjVqvV6kNYN9Xj3W0WEbHZXGf4nsHheAA4ZDbjk7a7QIvkX7ReRBxruxPAQqva7gAzcf/BnfUq5Vs1Xw/WdtrzuSB78t+sdq/vmDSdZvQck3k9vraiG89N6M/KnPqwSHL+ndH8r+y0D9Jys85/XiblP9i59Kk4Of/uaP4jjk7+nbH5lyrn33us/LvyBwAAAACABZb//n+i5eO/SwfflH151PHftTn1AQAAAAAAAACetoOO/7erMv4fAAAALKrhZ/Wh3x1/eNuk72Ib3n65inhmZHmgMOlimdW2+wEAAAAAAAAAAAAAJentnMN7uYroR8Qzq6t1XQ9/mkbrx3XQ9Q+70rcfStb2kzwAAOz4+PjItfxVxHJEXE7f9ddfXV2t6+WV1Xq1XlnK72cHS8v1SuNzbZ4Ob1sa7OMNcW9QD3/ZcmO9pmmfl6e1j/6+4X0N6u4+OjYfLQYOABGx82p03yvSEVPXz0bb73I4HOz/R4/9n/1o+3EKAAAAzF5d13WVvs77ZDrm32m7UwDAXOTX/9HjAmq1Wq1Wq49e3VSPd7dZRMRmc53hewbD8QPAIbMZn7TdBVok/6L1IuKFtjsBLLSq7Q4wE/cf3FmvUr5V8/Ugje+ezwXZk/9mtb1eXn/cdJrRc0zm9fjaim48N6E/z8+pD4sk598Zzf/KTvsgLTfr/OdlUv7D7TzRQn/alvPvjuY/4ujk3xmbf6ly/r3Hyr8rfwAAAAAAWGD57/8nFur47+BJN2eqRx3/XZvZvQIAAAAAAADAbN1/cGc9X/eaj/9/Ycxyrv88mnL+lfyLlPPvjOT/1ZHluo35e28/zP8/D+6s//HWvz+fp/vNfynPVOmRVaVHRJXuqeql6UG27rO2+t3B9j1tdrq9dM5P3X83rsX12Iize5btpP+Ph+3n9rQPe9rfbq+7O+3n97T3dtvz+hf2tPfTmU71Sm4/Hevx87ge72y3D9uWpmz/8pT2ekp7zr9r/y9Szr/X+Bnmv5raq5Hp0L2POp/Z75vTcffz1rUv/ubs7Ddnqq3o7m5b03D7XmqhP9v/J8cG8cubGzdO375669aNc5Eme249H2nylOX8++ln9/n/5Z32/Lzf3F/vfTR47PwXxVb0Jub/cmN+uL2vzLlvbcj5D9JPzv+d1D5+/z/M+U/e/19toT8AAAAAAAAAAAAAAADwKHVdb18i+lZEXEzX/7R1bSYAMF/59b9O8u3zqrtPuv6f925HW/1Xq+dcVwvWn7nWn9aL1R+1evZ1Ku4+vd/fVI/3ZrOIiL831xm+Z/j1uF8GACyyTyPiX213gtbIv2D5+/6G01NtdwaYq5sffPjTq9evb9y42XZPAAAAAAAAAIAnlcf/XGuM/3yqruu7I8vtGf/17Vg76PifvTyzO8DohIGqu4+/TY+y1Rl0O43hxl+MSeN/93fnHjX+d2/K/fWntA+mtC9NaV+e0j72Qo+GnP+LjfHOT0XEyZHh10sY/3V0zPsS5Pxfajyeh/l/ZWS5Zv717w9z/p09+Z+59f4vztz84MPXrr1/9b2N9zZ+duHcubMXLl68dOnSmXevXd84u/Nviz2erZx/HvvaeaBlyfnnzOVflpz/l1It/7Lk/L+cavmXJeef3+/Jvyw5//zZR/5lyfm/kmr5lyXn/7VUy78sOf9XUy3/suT8v55q+Zcl5/9aquVflpz/6VTLvyw5/zOp3mf+K7PuF/OR889HuOz/Zcn55zMb5F+WnP/5VMu/LDn/C6mWf1ly/q+nWv5lyfl/I9XyL0vO/2Kq5V+WnP83Uy3/suT8L6Va/mXJ+X8r1fIvS87/26mWf1ly/m+kWv5lyfl/J9XyL0vO/7upln9Zcv7fS7X8y5LzfzPV8i/Lw+//N2PGjJk80/YzEwAAAAAAAAAAAAAwah6nE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9u4uR66zvB35m37x2IDEQ8nfyN2HtGGOcTXb9Er/Qupjw2vBWEkKhL7Fd79pZ8Fu8dknSqHYUKJEwKqpoGy7aAora3FRYVS5oFVAuUKtKlUh7QW8QFSoXURVQQKpEK8hWM+d5np2ZnZ3Z9Y6ds+d8PlLyy86cmXPmzDOz+7Xz3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBmm941/flalmW1Wi2/YH2WvaY+146tb1zy9lf3+AAAAICV+2Xj3y/fkC44uIQbNW3zT7d+99m5ubm57BODfzr85bm5dMVYlg2vybLGddHlH36y1rxN8EQ2Whto+nqgx+4He1w/1OP64R7Xj/S4fk2P60d7XL/gBCywNqulO9vS+M/1+SnNbsyGG9dt6XCrJ2prBurnLt02qzVuMzd8LJvJTmTT2WTL9vm2tcb2z22q7+v9WdzXQNO+NtZXyE8fOxqPoRbO8ZaWfc3fZ/Tjd2ZjP/vpY0f/+txLN3eaPU9Dy/3lx7ltc/04PxsuyY+1lq1J5yQe50DTcW7s8JwMthxnrXG7+n+3H+fLSzzOwfnDvKban/PRbKDx3y80ztNQLetwnjaGy35+W5ZlF+cPu32bBfvKBrJ1LZcMzD8/o/mKrN9HfSm9Phta1jrdtIR1Wp9TW1rXaftrIj7/m8LthhY5huan6cePjzQ977+Yu5J1GtUf9WKvlfY12O/XSlHWYFwXLzQe9JMd1+CW8Pgf27r4Guy4djqswfS4m9bg5l5rcGBksHHM6UmoNW4zvwZ3tGw/2NhTrTFf3Np9DU6cO3lmYvaRR++YOXnk+PTx6VO7duyY3LVnz759+yaOzZyYnsz/fYVnu/jWZQPpNbA5nLv4Gnhr27bNS3XuayML3n+v9HU42uV1uL5t236/DofaH1zt2rwgF67p/LXxsfpJH700kC3yGms8P9tX/jpMj7vpdTjU9Drs+D2lw+twaAmvw/o2Z7Yv7WeWoaZ/Oh3D4t8LVrYG1zetwfafR9rXYL9/HinKGhwN6+L72xf/XrAxHO+T48v9eWRwwRpMDze899QvST/vj+5rjE7r8pb6FdeNZOdnp8/e+fCRc+fO7sjCuCbe0LRW2tfruqbHlC1YrwPLXq8HZ2598pYOl68P52r0jvq/Rhd9rurb7L6z+3PV+O7W+Xy2XLozC6PPrvX57PTdvH4+R7LsK995/N5vPfaVdy16Put587MTK/9ZPOXSpvff4UXef2PufyXfX7qrJwaHh/LX72A6O8Mt78etT9VQ472r1tj3yxNLez8eDv9c6/fjG7u8H29o27bf78fD7Q8uvh/Xev1px8q0P5+jYZ2cmOz+flzfZsPO5a7Joa7vx7eFWQvn/20hKaRc1LR2Flu3aV9DQ8PhcQ3FPbSu010t2w+HbFbf1zM7r2ydbrstv6/B9OjmXat1Ota2bb/Xafqzr8XWaa3Xn75dmfbnczSsixt3dV+n9W2e373y98618T+b3jtHeq3B4cGR+jEPp0XYeL/P5tbGNXhndjQ7nZ3IphrXjjTWU62xr/G7lrYGR8I/1/q9ckOXNbitbdt+r8H0fWyxtVcbWvjg+6D9+RwN6+Kpu7qvwfo2797b359dt4VL0jZNP7u2//naYn/mdUvbabpaa2UoHOd39nb/s9n6Nif2LTdndj9Pt4dLrutwntpfv4u9pqaya3OeNoTjfGnf4uepfjz1bb68f4nr6WCWZRceurvx573h71f+7vz3nm35e5dOf6dz4aG7f/LaY/+4nOMHoICW+bPQK/lYl9+s6W+mlvL3/wAAAMCqEHP/QJiJ/A8AAAClEXN//L/CE/kfAAAASiPm/qEwk4rk/w3vfmnmlQtZaubPBfH6dBruybeLHdfJ8PXY3Lz65Xc/Pf3f/3BhafseyLLsF/f8QcftN9wTjys3Fo7z8ntaL1/g2TuWtO/D919I+23ur3813H98PEtdBp1qJ5NZlj13wxcb+xn75KXGfP6ew41578Unn6hv8/L+/Ot4+xffkG//F6H8e/DYkZbbvxjOw4/CnPxA5/MRb/eNS2/buPfj8/uLt6ttvr7xsJ96IL/f+HtyvvREvn08z4sd/7e+8Mw36ts//JbOx39hoPPxPxPu9+kw/+dN+fbNz0H963i7z4Xjj/uLt7vz69/uePyXP59vf+a9+XaHw4z73xa+3vLel2aaz9fDtSMtjyt7X75d3P/k9/64cX28v3j/7cc/euhSy/loXx/P/1t+PxNt28fL436iv2/bf/1+mtdn3P8zf3S45Tz32v/le198U/1+2/d/e9t2Zx7a3tj//P21/samv/zcFzvuLx7Pwb890/J4Dn40vI7D/p96IKzHcP3/Xs7vr/23Kxz+aOv7T9z+q+svtDye6P0/y/d/+R3HG3PN6Np1173mtddffHP93GXZC2vy++u1/+N/dbrl+L92U34+4vWxo9++/8XE/Z/9zPip07PnZ6bSWX3shsbvzvlgfjzxeG8I763tXx86fe7B6bNjk2OTWTZW3l+hd8W+HuZP8nGx+9ZzC95Bt98fns9b/vy5dVv/9Qvx8n//WH75pQ/k37feGrb7Urh8fXj+lrf/hZ7adFPj9V17Phzh3MLfF7wSG7f8174lbRgef/vPBXG9n3njg43zUL+u8X0jvq5XePw/mMrv55vhvM6F38y8+ab5/TVvH383wqX78tf7is9feJuLz+vfhOf7Qz/K7z8eV3y8Pwg/x3x7Q+v7XVwf37ww0H7/jd/icTG8n2QX8+vjVvF8X3r5po6HF38PSXbx5sbXf5Lu5+ZlPczFzD4yO3Fi5tT5hyfOTc+em5h95NFDJ0+fP3XuUON3eR76VK/bz78/rWu8P01N79mdNd6tTufjKnu1j//M/Uen9k5unZo+duT8sXP3n5k+e/zo7OzR6anZrUeOHZv+TK/bz0wd2LFz/669O8ePz0wd2Ld//6794zOnTtcPIz+oHvZMfnr81NlDjZvMHti9f8ddd+2eHD95emr6wN7JyfHzvW7f+N40Xr/174+fnT5x5NzMyenx2ZlHpw/s2L9nz86evw3w5Jljs2MTZ8+fmjg/O312In8sY+caF9e/9/W6PeU0+x/5z7Ptavkv4ss+cvue9PtZ655+fNG7yjdp+wWiL4XfRfPPrzuzbylfx9w/HGZSkfwPAAAAVRBz/0iYifwPAAAApRFz/5owE/kfAAAASiPm/tEwk4rk/9L1/zdcWNL+9f/1/5vPl/5/xfr/9xWt/5+/X+j/98dK+/f6/4H+v/6//r/+v/4/fVC0/n/M/WuzrJL5HwAAAKog5v51YSbyPwAAAJRGzP3XhZnI/wAAAFAaMfe/JsykIvlf/1//X/9f/1//v/P+9f9XJ/3/7vT/e9D/n8iq1f+/2M/j1//X/2ehovX/Y+5/bZhJRfI/AAAAVEHM/deHmcj/AAAAUBox998QZiL/AwAAQGnE3L8+zKQi+V//X/9f/1//X/+/8/71/1cn/f/u9P970P/3+f/6//r/9FXR+v8x978uzKQi+R8AAACqIOb+14eZyP8AAABQPENXdrOY+98QZrIg/1/hDgAAAIBXXcz9N2ZtRfCK/P2//r/+f/H7/2vSdfr/+v9ZIfv/g5n+f3Ho/3en/9+D/r/+v/6//j99VbT+fyP3Z6PZG8NMKpL/AQAAoApi7r8pzET+BwAAgNKIuf//hZnI/wAAAFAaMfdvCDOpSP7X/9f/L37/3+f/6/8Xvf/v8/+LRP+/O/3/HvT/9f/1//X/6aui9f9j7r85zKQi+R8AAACqIOb+W8JM5H8AAAAojZj7/3+YifwPAAAApRFz/8Ywk4rkf/3/gvf/Y3NU/1//X/9f/1//f0n0/7vT/+9B/1//X/9f/5++Klr/P+b+N4WZVCT/AwAAQBXE3H9rmIn8DwAAAKURc/+bw0zkfwAAAFg11vS4Pub+sTCTiuR//f+C9//zHvyIz//X/9f/1//X/18a/f/u9P970P/X/+9L/3/ugv6//j+5ovX/Y+7fFGZSkfwPAAAAVRBz/+YwE/kfAAAASiPm/tvCTOR/AAAAKI2Y+7eEmVQk/+v/r4r+f6b/r/+v/6//r/+/NPr/3en/96D/r//v8//1/+mrovX/Y+5/S5hJRfI/AAAAVEHM/VvDTOR/AAAAKI2Y+98aZiL/AwAAQGnE3L8tzKQi+V//X/9f/7///f/hRdaH/r/+v/7/1af/353+fw/6//r/+v/L6P+Ptnyl/08nRev/x9z/tjCTiuR/AAAAqIKY+7eHmcj/AAAAUBox998eZiL/AwAAQGnE3D8eZlKR/K//r/+v/+/z//X/O+9f/3910v/vTv+/B/1//X/9f5//T18Vrf8fc/8dYSYVyf8AAABQBTH33xlmIv8DAABAacTcPxFmIv8DAABAacTcPxlmUpH8r/+v/6//r/+/rP7/m+fvV/8/p/9fLPr/3en/96D/r///qvf/h/X/KZWi9f9j7t8RZlKR/A8AAABVEHP/zjAT+R8AAABKI+b+XWEm8j8AAACURsz9u8NMKpL/9f/1//X/9f99/n/n/ev/r076/931v/8fH6L+v/6//r/P/9f/Z6Gi9f9j7r8rzKQi+R8AAACqIOb+PWEm8j8AAACURsz9e8NM5H8AAAAojZj794WZVCT/6//r/+v/6//r/3fev/7/6qT/353P/+9B/1//X/9f/58Vuu8Pm78qWv8/5v79YSYVyf8AAABQBTH3vz3MRP4HAACA0oi5/1fCTOR/AAAAKI2Y+381zKQi+V//X/9f/1//X/+/8/71/1cn/f/u9P970P/X/9f/1/+nr4rW/4+5/0CYSUXyPwAAAFRBzP2/FmYi/wMAAEBpxNz/jjAT+R8AAABKI+b+g2EmFcn/+v/6//r/+v/6/533f637/yPxfvX/V0T/vzv9/x70//X/9f/1/+mrovX/Y+5/Z5hJRfI/AAAAVEHM/XeHmcj/AAAAUBox978rzET+BwAAgNKIuf/dYSYVyf/6//r/+v/6//r/nffv8/9Xp/n+/cgV3V7/P9D/1//X/9f/1/+nD4rW/4+5/z1hJhXJ/wAAAFAFMfe/N8xE/gcAAIDSiLn/fWEm8j8AAACURsz97w8zqUj+1//X/9f/1//X/++8f/3/1cnn/3en/9+D/r/+v/6//j99VbT+f8z9vx5mUpH8DwAAAFUQc/89YSbyPwAAAJRGzP0fCDOR/wEAAKA0Yu7/YJhJRfK//r/+v/6//r/+f+f96/+vTvr/3a2y/v8vrw+X6//n9P+LffzL7f8PtX19Vfr/P1ys/z+3pv32+v9cDUXr/8fc/6Ewk4rkfwAAAKiCmPs/HGYi/wMAAEBpxNz/kTAT+R8AAABKI+b+3wgzqUj+1/+vH8d8e1n/v6z9/wH9f/1//f+K0P/vbpX1/33+fxv9/2Ifv8//1/9noaL1/2Pu/2iYSUXyPwAAAFRBzP33hpnI/wAAAFAaMfffF2Yi/wMAAEBpxNz/sTCTiuR//X+f/1+N/r/P/8/0//X/K0L/vzv9/x70/6+4Pz+i/391+v//qf/P6la0/n/M/feHmVQk/wMAAEAVxNz/8TAT+R8AAABKI+b+3wwzkf8BAACgNGLu/0SYSUXyv/7/aun/j63S/v/j+v9Xsf9/6/X5dvr/+v/M0//vTv+/B/1/n/9ftP6/z/9nlSta/z/m/k+GmSw9/48ueUsAAADgVRFz/2+FmVTk7/8BAACgCmLu/+0wE/kfAAAASiPm/t8JM6lI/tf/Xy39f5//n+n/+/z/tsej/6//38m16//Hdx79f/1//f9I/1//X/+fdkXr/8fc/7thJhXJ/wAAAFAFMfc/EGYi/wMAAMCq0On/yW4Xc/+hMBP5HwAAAEoj5v7DYSYVyf/6//r/+v8F7f//2eZ/+f53P3x4h/6//r/+/7Jc08//r7/4ff6//r/+f6L/r/+v/0+7ovX/Y+4/EmZSkfwPAAAAVRBz/++Fmcj/AAAAUBox9x8NM5H/AQAAoDRi7p8KM6lI/tf/1//X/y9o/38Vf/5/PB/6/6361v+Pb7r6/x3l/fu0iq5u///j8z1x/f/l9v9HOl6q/6//v5qPX/9f/5+Fitb/j7l/OsykIvkfAAAAqiDk/oFj+Zy/Qv4HAACA0oi5/3iYifwPAAAApRFz/4NhJhXJ//r/+v8l6P8Px9vq/xej/1+Fz/+vDfn8/6JK/fufN14o+v9titP/70z/X/9/NR+//r/+PwsVrf8fc/9MmElF8j8AAABUQcz9nwozkf8BAACgNGLu/3SYifwPAAAApRFz/4kwk4rkf/1//f8S9P99/r/+f7U+/1//v6uV9u/1/wP9f/1//X/9f/1/+qBo/f+Y+0+GmVQk/wMAAEAVxNx/KsxE/of/Y+9OmiyryzyO36wuurKCXvSuF73piF72S2DRve5+Ab3oTS80wnAhKirOFM4jigrOIjgPOIAgooLzAE4ozqDiPA84IUqUQdbzPFWZefLczKqbmef8/5/PgkdSsu6FqKjiV1lfDgAAQDNy918Yt9j/AAAA0Izc/Y+MWzrZ//p//X+z/f9/6v93en39/9z6/3/U/+/BCvr/I/p//b/+X/+v/9f/sxpT6/9z9z8qbulk/wMAAEAPcvc/Om6x/wEAAKAZufsvilvsfwAAAGhG7v7HxC2d7P8t/f/aos/+PzNe/X9L/b/n/+/4+vr/ufX/nv+/Fwf7/P9LH/yRT/+v/9f/B/3/rvr/Yzt9vv6fFk2t/8/d/9i4pZP9DwAAAD3I3f+4uMX+BwAAgGbk7r84brH/AQAAoBm5+x8ft3Sy/1f3/P/jGx+faf9f9P/6/40P6P/1//r/2TrY/t/z/6fc/1905/mPuPfGf71pL6+v/9f/e/6//p/Vmlr/n7v/CXFLJ/sfAAAAepC7/4lxi/0PAAAAzcjd/6S4xf4HAACAZuTuf3Lc0sn+X13/P+vn/xf9v/5/4wP6f/2//n+29P/jeur/z+b19f/6f/2//p/Vmlr/n7v/KXFLJ/sfAAAAepC7/6lxi/0PAAAAzcjdf0ncYv8DAABAM3L3n4hbOtn/+v/97/8f0P/r/+Pq//X/+v/9p/8fp/9fQv+v/9f/6/9Zqan1/7n7L41bOtn/AAAA0IPc/U+LW+x/AAAAaEbu/qfHLfY/AAAANCN3/zPilk72v/7f8//1//p//f/w6+v/50n/P07/v4T+/1z7+fP0//p//T9n2mP/f//ID9sr6f9z9z8zbulk/wMAAEAPcvc/K26x/wEAAKAZufufHbfY/wAAANCM3P3PiVs62f/6f/2//l//f9b9//bvehv0/8P0/wdD/z9uMv3/2tHBD+v/Z9//e/6//l//zyZTe/5/7v7nxi2d7H8AAADoQe7+58UtI/t/z7+YDwAAAByq3P3Pj1t8/R8AAABmL6uz3P0viFs62f/6f/2//l//7/n/w68/1v/fdMb70/9Pi/5/3GT6/x3o//X/c37/+n/9P9tNrf/P3f/CuKWT/Q8AAAA9yN1/Wdxi/wMAAEAzcve/KG6x/wEAAKAZuftfHLd0sv+H+//T/7/+f3f0/5vfv/5/+PvHqvr//Bb1/6P9/395/n+f9P/jDr7/P6b/3/zt6//30WG//8b7/+PLPl//z5Cp9f+5+y+PWzrZ/wAAANCD3P0viVvsfwAAAGhG7v6Xxi32PwAAADQjd//L4pZO9v+sn/8/1Ibo/zd9nv6/zf7f8/9POczn/y8OvP8/qv/fJf3/OM//X0L/r//X/3v+Pys1tf4/d/8VcUsn+x8AAAB6cMV9i43df+ViYf8DAADAHJ35ewe2/obSkLv/5XGL/Q8AAADNyN3/irilk/0/6/5/8G9I/7/Q/+v/l7y+/n+O/b/n/++W/n+c/n8J/f9+9PNHG+v/r9rp86fQ/1+i/2diNvX/t5z++GH1/7n7Xxm3dLL/AQAAoAe5+18Vt9j/AAAA0Izc/a+OW+x/AAAAaEbu/tfELZ3s/33v/4/v/Nr6f/2//n//+v/zRl5f/6//b5n+f5z+fwn9v+f/e/6//p+V2tT/n+Gw+v/c/a+NWzrZ/wAAANCD3P2vi1vsfwAAAGhG7v6r4hb7HwAAAJqRu//1cUsn+9/z//X/+v82+/+x19f/6/9bpv8f13H/f2RXb0D/r//X/+v/Wamp9f+5+6+OWzrZ/wAAANCD3P3XxC32PwAAADQjd/8b4hb7HwAAAJqRu/+NcUsn+1//v7/9f35c/6//X+j/9f/6/wPRbf+/NvQz0XY79P+3P+zE/2z+SHv9/+7o//X/+n/9Pys1if7/5Ol/u8zd/6a4pZP9DwAAAD3I3f/muMX+BwAAgGbk7n9L3GL/AwAAQDNy9781btnj/v/nlb6rg6P/9/x//b/+X/8//Pr6/3nqtv/fpY6f/787+n/9v/5f/89KTaL/P+PPc/e/LW7x9X8AAABoRu7+t8ct9j8AAAA0I3f/O+IW+x8AAACakbv/nXFLJ/tf/6//1//r//X/w69/tv3/+mKY/v9g6P/H6f+X0P/r/3f7/teObvt8/b/+n+2m1v/n7r82bulk/wMAAEAPcve/K26x/wEAAKAZufvfHbfY/wAAANCM3P3viVs62f/6f/2//l//r/8ffn3P/58n/f84/f9isbhu5A0M9f8nj+n/9f+e/6//5yxNrf/P3f/euKWT/Q8AAAA9yN1/Xdxi/wMAAEAzcvdfH7fY/wAAANCM3P3vi1s62f/6f/2//l//r/8ffn39/zzp/8fp/5fw/P8D6uePrOT9Ht77H7a0/z82/vn6f1o0tf4/d/8NcUsn+x8AAAB6kLv/xrjF/gcAAIBm5O5/f9xi/wMAAEAzcvffFLd0sv/1//p//b/+f1/6/xP6/630/wdj//r/hf5f/6//X8Lz/z3/X//PVgfV/98fP94v6/9z938gbulk/wMAAEAPcvffHLfY/wAAANCM3P0fjFvsfwAAAGhG7v4PxS2d7P8++/91/b/+X//v+f/6/0Z5/v84/f8S+n/9v/5f/89KHVT/v1Pvv/XPc/d/OG7pZP8DAABAD3L33xK32P8AAADQjNz9t8Yt9j8AAAA0I3f/R+KWTvZ/n/2/5//v3P8vFvp//b/+/5QD6P/XF/r/lWu//1/f6ze5if5/Cf1/m/3/kUVD/f/xHT9f/88UTa3/z93/0bilk/0PAAAAPcjd/7G4xf4HAACAZuTu/3jcYv8DAABAM3L3fyJuaWn/P7Bz+jb//v/Ylk/U/y8Wi7su9vx//f/I6+v/J9P/1z9V/f/qtN//nxv9/xL6/zb7f8//1/9zaKbW/+fu/2Tc0tL+BwAAgM7l7v9U3GL/AwAAQDNy9386brH/AQAAoBm5+z8Tt3Sy/+ff/2/9RP3/4pye/6//3/iA/l//r/+frXPt769ej5/T9P/6f/3/YD+/tsO/9yz0//p//T8Dptb/5+7/bNzSyf4HAACAHuTuvy1usf8BAACgGbn7b49b7H8AAABoRu7+z8Utnex//b/+X/8/z/5/Xf+v/9f/D5rK8/8vuOC/79D/6/9b7P/H6P/1//p/tppa/5+7//NxSyf7HwAAAHqQu/8LcYv9DwAAAM3I3f/FuMX+BwAAgGbk7v9S3NLJ/t/e/5+3OFWonjLU/0ejpv8/g/5/8/vX/w9///D8f/2//n//TaX/9/z/s3v/+n/9/5zf/576/3/b/vn6f1o0tf4/d/8dcUsn+x8AAAB6kLv/y3GL/Q8AAADNyN3/lbjF/gcAAIBm5O6/M27pZP97/r/+X/+v/9f/D7++/n+e9P/j9P9L6P/1/57/f+FD/kH/z+pMrf/P3f/VuGVj+P37P53l3yYAAAAwIbn7vxa3dPL1fwAAAOhB7v6vxy32PwAAADQjd/834pZO9r/+X/+v/9f/6/+HX1//P0/6/3H6/yX66f/Xhz542P38uTrs999M/+/5/6zQ1Pr/3P3fjFs62f8AAADQg9z934pb7H8AAABoRu7+b8ct9j8AAAA0I3f/XXFLJ/tf/6//b7///3/9/5bX1//r/1um/8+f0Yfp/5fop/8fdNj9/Nzfv/5f/892U+v/c/ffHbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//X9f/f/aosf+3/P/9f/6/57Mp/+/5ujQRz3/X/+v/5/v+9f/6//Zbmr9f+7+e9aOdrn/AQAAYK7+9z8efvdu/9p7Nv64vvh+3GL/AwAAQDNy9/8gbrH/AQAAoBm5+38Yt3Sy//X/ffX/fT7/X/+v/9f/92Q+/f8w/b/+X/8/3/ev/9f/s93U+v/c/T+KW84YfoP/gR4AAABgNnL3/zhu6eTr/wAAANCD3P0/iVu27f+Tu/xd7QAAAMDU5O7/adzSydf/9f8T7/8X+9T/x1+n/z9F/6//H3p9/f886f/HnWP/f3JN/6//H9FY/39lfFj/r//nHEyt/8/df/MNiy73PwAAADRq068o/Gzjj+uLn8ct9j8AAAA0I3f/L+IW+x8AAACakbv/l3FLJ/tf/z/x/v+snv9/vP6X5/933v9ftj74+vp//X/L9P/jPP9/Cf2//t/z//X/rNQe+v+NQbrf/X/u/l/FLZ3sfwAAAOhB7v5fxy32PwAAADQjd/9v4hb7HwAAAJqRu/+3cUsn+1//fwj9/+XHFot97f938fx//X8f/f8Or99O//8v55+47f8eev21+n9OO8j+P78v6P/1//r/U/T/+n/9P1tN7fn/uft/F7d0sv8BAACgB7n7741b7H8AAABoRu7+38ctD+7/Ww/rXQEAAACrlLv/D3FLJ1//1/+3+Pz/efb/+c/6EPr/E/Pr/7Mp7r3/9/x//f92nv8/Tv+/hP5f/6//1/+zUlPr/3P3/zFu6WT/AwAAQA9y9/8pbsn9v7bnX7oHAAAAJiZ3/5/jFl//BwAAgGbk7r8vbulk/+v/9f9T6f+T5/+f/jzP/z9F/6//3wv9/zj9/xL6f/2//l//z0pNrf/P3f+XuKWT/Q8AAAA9yN1/f9xi/wMAAEAzcvf/NW6x/wEAAKAZufv/Frd0sv/1//p//b/+X/8//Pr6/3nS/4/T/y+h/9f/6//1/6zU1Pr/3P1/DwAA///ynnPx")
mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000d40)={0x0, @aes128, 0x0, @desc1})
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

1m12.545726961s ago: executing program 2 (id=269):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m10.811877878s ago: executing program 2 (id=281):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

1m9.824925158s ago: executing program 2 (id=286):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000100)=0x9)

1m9.070439915s ago: executing program 2 (id=290):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
close(r0)

1m8.554941511s ago: executing program 32 (id=290):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
close(r0)

1m2.150476963s ago: executing program 3 (id=329):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x493, &(0x7f0000001500)="$eJzs3MtrXNUfAPDvnSR9t8mvv1ptbTVaxeIjadKqXbhQUXChIOiiLmOS1tppI00EW4JGkbqUgvviUvAvcOdG1IUIbhVcSqFoEJq6itxXMp1M3o8xmc8HpnPOvefOOd9775mce0/vBNCyutN/kog9EfFrRHTm2bsLdOdvU5Pjg3cmxweTmJ5+488kK3d7cnywLFput7vIHK9EVD5N4vlkbr2jV65eGKhWhy8X+d6xi+/1jl65+tT5iwPnhs8NX+o/ffrUyb5nn+l/emab3auIM43r9uEPR44ceuWt668Nnrn+9g9fp806eDRfXxvHou40CKiB7nSv/TWdqV/36DLavhnsrUkn7U1sCMvSFhHp4erI+n9ntMXsweuMlz9pauOAdZX+bdo+/+qJaWALS6LZLQCao/xDn17/lq8NGnr8J9x6IWJbkZ6aHB+cmom/PSrF8o51rL87Is5M/HMjfcVy70MAAKxANrZ5stH4rxIHs/d8rmNfMYfSFRH/i4j9EfH/iDgQEfdEZGXvjYj78o2nO5dYf3ddfu74p3KzYZvXSDr+e65m7DdVE3/x1tVW5PZm8XckZ89Xh08U++R4dGxP830L1PHtS798Pt+62vFf+krrL8eCRQNuttfdoBsaGBtYq51w6+OIw+2N4k9mZgLSM+BQRBxe3kfvKxPnH//qyHyFFo9/AWswzzT9ZcRj+fGfiLr4S8nC85O9O6I6fKK3PCvm+vHna6/PV/+q4l8D6fHfdff5X1ei8+8kn6/tiGp1+PLo8uu49ttn817TrPT835a8mc1Z//ROvuyDgbGxy30R25JXs3x5TZct75/dtsyX5dP4jx9r3P/3F9uk8d8fEelJfDQiHoiIB4u2PxQRD0fEsQXi//7FR95dIP4kklj+8V/aFPSi0viHGn7/zVTQldTO168g0Xbhu2/ma+7Sjv+pmMi+a3PZ998iltrAVe4+AAAA2BQqEbEnkkpPnu7eE5VKT0/+f+0PxK5KdWR07ImzI+9fGsqfEeiKjkp5p6uz5n5oXzJRfGKe70/X3dg+s/5kcd/4i7adWb5ncKQ61OTYodXtvrv/R9n/U3+0Nbt1wLrzvBa0rvr+X2lSO4CN1x4LPQOYcy0AW1OD8f/OZrQD2Hiu/6F1Ner/H9Xljf9ha5rb/39v8JN1wFZk/A+tS/+H1qX/Q0tazXP9K0+UDwus/HN2LPkJ/1ZJlL94sZ517YzZJVFpesgtlEh7zMZWOvsbKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvZvwEAAP//caDokw==")
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x58)

1m1.901381875s ago: executing program 3 (id=332):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000005780)='./file0\x00', 0x9400002f)
umount2(&(0x7f0000000000)='./file0\x00', 0x2)

1m1.60147203s ago: executing program 3 (id=333):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x4}, 0x1)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

1m1.479736916s ago: executing program 3 (id=335):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
creat(&(0x7f00000002c0)='./file0\x00', 0x1)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

1m0.819322459s ago: executing program 3 (id=339):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

59.987063581s ago: executing program 3 (id=343):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000007fc0)={0x2020}, 0x2020)

59.593161161s ago: executing program 33 (id=343):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000007fc0)={0x2020}, 0x2020)

59.544429713s ago: executing program 0 (id=346):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents(r0, &(0x7f0000000000)=""/182, 0xb6)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

58.350698983s ago: executing program 0 (id=348):
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
io_setup(0xea, &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
r2 = fanotify_init(0x0, 0x2)
fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}])

58.170478342s ago: executing program 0 (id=349):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f00000004c0)={0x0, &(0x7f0000000340)})

55.330653195s ago: executing program 0 (id=351):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

55.134359164s ago: executing program 0 (id=353):
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xf35, 0x0, 0x0, 0x40000330}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0x0, 0xfff)

54.458438808s ago: executing program 0 (id=360):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c)
sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x7d, 0x4)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0)

54.2378337s ago: executing program 34 (id=360):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c)
sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x7d, 0x4)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0)

33.626443663s ago: executing program 4 (id=461):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
shutdown(r0, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x3b)
recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000002, 0x0)

33.511513289s ago: executing program 4 (id=462):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000003c0)={0x40, 0x8, 0x1, 'P'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

31.221529734s ago: executing program 4 (id=481):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c)

31.10635607s ago: executing program 4 (id=482):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126)

31.10612379s ago: executing program 4 (id=483):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000002, 0x1000000000000000, 0x4})

30.638448133s ago: executing program 4 (id=486):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000860000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0)

30.258167922s ago: executing program 35 (id=486):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000860000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0)

24.253989973s ago: executing program 7 (id=520):
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0xe703, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="379521000000000003e77200000008000300", @ANYRES32=r3], 0x1c}}, 0x0)

24.050500543s ago: executing program 7 (id=522):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x3d, 0x0, 0x0, {0x7, 0x21, 0x3, 0x0, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

22.91681969s ago: executing program 7 (id=533):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x5c, 0x0, 0x0, 0x0, 0xfffffd6c}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/26, 0x21}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000900)=""/104, 0x68}, {&(0x7f0000000800)=""/9, 0x9}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f0000000980)=""/189, 0xc4}], 0x7}}], 0x2, 0x41, 0x0)

22.827518375s ago: executing program 7 (id=526):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000001800)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x2000830, &(0x7f0000000000), 0x1, 0x5c5, &(0x7f0000000c40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)

21.950153579s ago: executing program 7 (id=534):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)

20.814281836s ago: executing program 7 (id=542):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1)
sendto$inet6(r0, &(0x7f0000001680)="b9ef8212ba17f6", 0x7, 0x800, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000683000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/229, 0xe5, 0x1, 0x0}, &(0x7f00000001c0)=0x40)

20.54290753s ago: executing program 36 (id=542):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1)
sendto$inet6(r0, &(0x7f0000001680)="b9ef8212ba17f6", 0x7, 0x800, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000683000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/229, 0xe5, 0x1, 0x0}, &(0x7f00000001c0)=0x40)

5.549350352s ago: executing program 1 (id=628):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xc020f509, &(0x7f0000000100)={0x7})

4.17841105s ago: executing program 9 (id=637):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004)

3.931299123s ago: executing program 1 (id=639):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x8}, 0xe)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)

3.809901269s ago: executing program 9 (id=640):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3.654844997s ago: executing program 9 (id=642):
r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8U\x1e\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xcf+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18l\xc1\x81\x8e8L\xcb*S_\xd0:\xa4V\xbd\xf1\xa4\x955\xa9\x9d\xe0\x9b\xd3\x95\xc88n:\x89>?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4)
ftruncate(r0, 0x400000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
finit_module(r0, 0x0, 0x3)

2.974336841s ago: executing program 9 (id=650):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

2.80231873s ago: executing program 9 (id=653):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0xe0000009, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1, 0x41000, 0x0, 0x2, 0x7, 0x10, 0x2b, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0xffff1000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x9, 0x5, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xe6ee9000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0xf000, 0x50000, 0xb, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x809fffb, 0x9ca}, {0xb000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]})

2.78239641s ago: executing program 1 (id=654):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0xffffffffffffff41, 0x0, 0x0, &(0x7f0000000180)=""/27, 0x1b}, 0x9}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.5793103s ago: executing program 1 (id=657):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2.366375751s ago: executing program 1 (id=660):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9/pWgQcaKJ2YGlsFF3ElgoWCrm3DZBpqJpmSmZQmZNEightBxYWgm679UXdu/bFwo/+FC2mpmhYrLiRy50czTWbSSZqZCeTzgZs55/7IOd8595577sxlbgCH1lj6JxNxIiLeSyJGavOTiBiopPojpqvrPVhfy6VTEhsbr/2aVNa5v76Wi4ZtUsdqmf9GxLdvR5zMbC+3tLI6P1Mo5Jdq+YnywpWJ0srqqcsLM3P5ufzimcmpqdNnnzt7Zv9i/f3H1eN33n/56S+m/3zrP7fe/S6J6TheW9YYx34Zi7HaezKQvoWbRva7pN5Lel0B9iQ9NPuqR3mciJHoq6RaGOpmzQCATtkAAA6hxBgAAA6Z+ucA99fXcvWpt59IdNfdlyLiaDX++veb1SX9MR2DlYUDETF8P3nkm5EkIkb3ofyxiPjkqzc+S6eotYPv0oBuuH4jIi6Ojm3v/5NH71nYg2d2WrgxWHkZ2zL7sJ1/oJe+Tsc/zzcb/2Vqx//Ryt+t45/BJsfuXjz++M/c3rrN96/vQ8E16fjvxYZ72x40xF8z2lfL/aMy5htILl0u5NO+7Z8RMR4Dg2l+srJq85Hb+L2/7rUqv3H899sHb36alp++bq6Rud0/+Og2szPlmSeNu+7ujYj/9TeLP3nY/kmL8e/5Nst45YV3Pm61LI0/jbc+bY+/szZuRjzVtP032zLZ8f7EicruMFHfKZr48qePhluV39j+6ZSWX78W6Ia0/Yd3jn80abxfs7T7Mn64OfJNq2WPj7/5/n8kqXYCR2rzrs2Uy0uTEUeSV7fPP725bT1fXz+Nf/z/zY//arHN9//0mvBim/H33/nl873H31lp/LO7av/dJ249mO9rVX577T9VSY3X5rTT/7VbwSd57wAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOB5JJvswnclks9VneP87hjOFYql88lJxeXE2Ks/KHo2BTP2nLkcafg91svZ7+PX86S35ZyPiXxHx4eBQJZ/NFQuzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGqOtXj+f+rnwV7XDgDomKO9rgAA0HXO/wBw+Ozu/D/UsXoAAN3j+h8ADp+2z/8XO1sPAKB7XP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYefPnUunjT/W13JpfvbqyvJ88eqp2XxpPruwnMvmiktXsnPF4lwhn80VF1r+o+vVl0KxeGUqFpevTZTzpfJEaWX1wkJxebF84fLCzFz+Qn6ga5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtKK6vzM4VCfklix8TQwajGgUn0x4GohkTHEo29xFDvOigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+7vAAAA//9oei8M")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff"])
ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x20000000007)

2.288016935s ago: executing program 9 (id=662):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

2.074302816s ago: executing program 37 (id=662):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

1.98533551s ago: executing program 8 (id=667):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
close(r1)

1.734271033s ago: executing program 1 (id=670):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={0x0, @ethernet={0x1, @local}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @generic={0x8, "511ae47038da8c1b070ccc0b3cd0"}, 0x56, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='gretap0\x00', 0x90, 0xfffffffd, 0xfff9})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x400000009)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

1.733836893s ago: executing program 8 (id=671):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x68}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.676598826s ago: executing program 5 (id=673):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x1, 0xa, 0x0, 0x3, 0x6, 0x3, 0x52, 0x43, 0x3, 0x76, 0x9, 0x0, 0xe7f7, 0x6, 0x0, 0x6, 0x1, 0x4, '\x00', 0x9, 0x77})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.474389126s ago: executing program 8 (id=674):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000)

1.320700393s ago: executing program 6 (id=676):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, <r1=>0x0}, 0x2020)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x40102, 0x101)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
write$FUSE_OPEN(r0, &(0x7f0000000380)={0x20, 0x0, r1, {0x0, 0xf}}, 0x20)

1.289612375s ago: executing program 8 (id=677):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mknod(&(0x7f0000000080)='./file1\x00', 0x1000, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x3a624bc, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)='b{', 0x2}], 0x1)

1.098336105s ago: executing program 8 (id=678):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0xffffffffffffffa8, &(0x7f0000000040)={0x1})

1.057313417s ago: executing program 6 (id=679):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x72)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0)

887.745486ms ago: executing program 6 (id=680):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

742.386613ms ago: executing program 6 (id=681):
socket(0x15, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
ioctl(r0, 0x8b1a, &(0x7f0000000040))

728.994593ms ago: executing program 5 (id=682):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0)="01b484feedaf05", &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20)

669.338256ms ago: executing program 5 (id=683):
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6(0xa, 0x80002, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

454.084017ms ago: executing program 6 (id=684):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000000780)={0xa, 0x0, [{0x80000008, 0x0, 0x0, 0xfff, 0xe80, 0x9, 0xffff}, {0x0, 0x3, 0x7, 0x40, 0x6, 0xb6a, 0x6}, {0x40000000, 0x1, 0x1, 0x8, 0x6d, 0x8}, {0xc0000000, 0x60, 0x7, 0x2, 0x9, 0x8, 0x800}, {0x4, 0x4, 0x2, 0x7, 0x0, 0x6, 0x1}, {0x80000007, 0xb, 0x2, 0x9, 0x1, 0x6, 0x7}, {0xa, 0x5, 0x0, 0x3, 0x2, 0x1}, {0x10000000f, 0x0, 0x2, 0xd0, 0x1, 0x6, 0x3}, {0xc0000000, 0x1ff, 0x6, 0x8001, 0x6, 0x9, 0xe7}, {0x6, 0x4, 0x4, 0x1, 0x800, 0x5, 0x34000000}]})

328.170803ms ago: executing program 5 (id=685):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

194.44436ms ago: executing program 8 (id=686):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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")
r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51)
fallocate(r2, 0x0, 0x9, 0x10001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x8000000000000, 0x18, 0x0, 0xfffffffffe000001})

134.426334ms ago: executing program 6 (id=687):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r1=>0x0})
preadv(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x7fe, 0xffffffff)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x2, 0x6, @remote}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

134.233323ms ago: executing program 5 (id=688):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000100)='./file0\x00')
capset(0x0, 0x0)
setuid(0xee01)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

0s ago: executing program 5 (id=689):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

.
[   86.429516][ T4422] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   86.472009][ T4425] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   86.499397][ T4426] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   86.522174][ T4228] Bluetooth: hci0: command 0x1407 tx timeout
[   86.824568][ T4442] input: syz0 as /devices/virtual/input/input5
[   86.990704][ T4449] loop3: detected capacity change from 0 to 512
[   87.055518][ T4449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   87.102156][ T4449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   87.275360][ T4449] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   87.324122][ T4270] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   87.360485][ T4461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   87.412299][ T4449] EXT4-fs (loop3): 1 truncate cleaned up
[   87.418499][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[   87.628131][ T4270] usb 1-1: Using ep0 maxpacket: 32
[   87.762404][ T4270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.782856][ T4270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.813824][ T4270] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   87.862932][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.893275][ T4270] usb 1-1: config 0 descriptor??
[   87.976179][ T4270] hub 1-1:0.0: USB hub found
[   87.997961][ T4479] TCP: TCP_TX_DELAY enabled
[   88.193595][ T4270] hub 1-1:0.0: 1 port detected
[   88.446679][ T4489] loop3: detected capacity change from 0 to 8192
[   88.458714][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   88.484012][ T4489] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   88.531124][ T4489] REISERFS (device loop3): using ordered data mode
[   88.568085][ T4489] reiserfs: using flush barriers
[   88.603958][ T4489] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   88.685875][ T4489] REISERFS (device loop3): checking transaction log (loop3)
[   88.705491][ T4489] REISERFS (device loop3): Using r5 hash to sort names
[   88.724977][ T4489] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   88.809149][ T4489] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2
[   88.832400][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.857550][ T4489] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[   88.863590][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.875429][ T4489] REISERFS (device loop3): Remounting filesystem read-only
[   88.891440][ T4270] hub 1-1:0.0: activate --> -90
[   88.912303][ T4228] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   88.943101][ T4228] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   88.952791][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.973061][ T4228] usb 3-1: config 0 descriptor??
[   89.207638][ T4501] syz.4.89 uses obsolete (PF_INET,SOCK_PACKET)
[   89.319618][ T4173] usb 1-1: USB disconnect, device number 3
[   89.333105][ T4270] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[   89.349241][ T4270] usb 1-1-port1: connect-debounce failed
[   89.449036][ T4510] netlink: 36 bytes leftover after parsing attributes in process `syz.4.90'.
[   89.471934][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'.
[   89.481654][ T4228] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   89.525741][ T4228] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   89.564002][ T1106] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   89.778445][ T4522] device syzkaller1 entered promiscuous mode
[   89.943441][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.967194][ T1106] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   90.001287][ T1106] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   90.022284][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.062804][ T1106] usb 4-1: config 0 descriptor??
[   90.221361][ T4533] loop1: detected capacity change from 0 to 8192
[   90.256679][ T4533] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   90.269681][ T4541] loop0: detected capacity change from 0 to 16
[   90.276724][ T4533] REISERFS (device loop1): using ordered data mode
[   90.298791][ T4533] reiserfs: using flush barriers
[   90.314570][    T7] usb 3-1: USB disconnect, device number 3
[   90.348315][ T4533] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   90.400704][ T4541] erofs: (device loop0): mounted with root inode @ nid 36.
[   90.439566][ T4533] REISERFS (device loop1): checking transaction log (loop1)
[   90.459849][ T4543] netlink: 'syz.4.103': attribute type 10 has an invalid length.
[   90.478690][ T4533] REISERFS (device loop1): Using r5 hash to sort names
[   90.521754][ T4545] loop2: detected capacity change from 0 to 1024
[   90.521897][ T4533] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   90.547710][ T1106] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[   90.581595][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.591457][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.679388][ T4545] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   90.739772][    T7] usb 4-1: USB disconnect, device number 3
[   90.776805][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.784098][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.792959][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.800557][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.873625][ T4545] EXT4-fs warning (device loop2): ext4_rmdir:3243: inode #11: comm syz.2.104: empty directory 'file1' has too many links (111)
[   90.905532][ T4543] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   90.939480][ T4548] fido_id[4548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   91.268676][ T4555] Bluetooth: hci0: service_discovery: too big uuid_count value 39717
[   91.309658][ T4558] loop2: detected capacity change from 0 to 128
[   91.420501][ T4558] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   91.482295][ T4558] hpfs: filesystem error: improperly stopped
[   91.488387][ T4558] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   91.573896][ T4558] hpfs: You really don't want any checks? You are crazy...
[   91.602266][ T4558] hpfs: Code page index out of array
[   91.637212][ T4558] hpfs: code page support is disabled
[   91.654731][ T4558] hpfs: hpfs_map_4sectors(): unaligned read
[   91.674828][ T4558] hpfs: hpfs_map_4sectors(): unaligned read
[   91.680901][ T4558] hpfs: filesystem error: unable to find root dir
[   91.862175][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   92.112224][    T7] usb 5-1: Using ep0 maxpacket: 8
[   92.129197][ T1335] cfg80211: failed to load regulatory.db
[   92.232481][    T7] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   92.246419][    T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.283636][    T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   92.307885][    T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   92.328912][    T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.359907][    T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   92.380890][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.029542][ T4660] loop1: detected capacity change from 0 to 512
[   93.263468][ T4661] usbtmc 5-1:16.0: simple usb_control_msg returned 0
[   93.286713][ T4660] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[   93.465509][ T1335] usb 5-1: USB disconnect, device number 3
[   94.063577][ T4675] loop1: detected capacity change from 0 to 2048
[   94.154842][ T4677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   94.222625][ T4675] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.132: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 21765(21765)
[   94.295301][ T4675] EXT4-fs (loop1): get root inode failed
[   94.301253][ T4675] EXT4-fs (loop1): mount failed
[   94.364764][ T4606] loop3: detected capacity change from 0 to 32768
[   94.559186][ T4606] XFS (loop3): Mounting V5 Filesystem
[   94.673726][ T4606] XFS (loop3): Ending clean mount
[   94.772407][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   94.805205][ T4705] loop0: detected capacity change from 0 to 64
[   94.972510][ T4707] IPVS: Scheduler module ip_vs_ not found
[   94.981600][   T26] audit: type=1800 audit(1774537657.044:2): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.141" name="file1" dev="loop0" ino=21 res=0 errno=0
[   95.030021][ T4186] XFS (loop3): Unmounting Filesystem
[   95.032800][    T7] usb 3-1: Using ep0 maxpacket: 32
[   95.135113][ T4714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   95.160650][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   95.169618][    T7] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[   95.187268][    T7] usb 3-1: config 0 has no interface number 0
[   95.208651][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   95.222504][    T7] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   95.412535][    T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   95.427648][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.446337][    T7] usb 3-1: Product: syz
[   95.456266][    T7] usb 3-1: Manufacturer: syz
[   95.470040][ T4718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'.
[   95.479106][    T7] usb 3-1: SerialNumber: syz
[   95.500368][    T7] usb 3-1: config 0 descriptor??
[   95.532702][ T4687] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   95.757306][ T4687] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   95.920309][ T4732] capability: warning: `syz.4.153' uses deprecated v2 capabilities in a way that may be insecure
[   96.462393][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   96.532285][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.581710][ T4729] loop0: detected capacity change from 0 to 131072
[   96.583756][ T4231] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   96.674823][ T4729] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[   96.677152][    T7] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 106
[   96.682121][ T4729] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   96.692548][ T4729] F2FS-fs (loop0): invalid crc value
[   96.723495][ T4729] F2FS-fs (loop0): Found nat_bits in checkpoint
[   96.780304][ T4729] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   96.788050][ T4729] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   96.820872][   T26] audit: type=1800 audit(1774537658.884:3): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.152" name="file1" dev="loop0" ino=7 res=0 errno=0
[   96.844057][ T4231] usb 5-1: Using ep0 maxpacket: 8
[   96.852606][ T4232] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   96.871064][ T4232] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   96.886477][   T23] usb 3-1: USB disconnect, device number 4
[   96.896426][ T4232] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   96.914928][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.962493][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.973326][ T4231] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   96.982166][ T4740] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   96.989706][ T4231] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   97.010819][ T4228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   97.035317][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   97.053746][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   97.075827][ T4231] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.093797][ T4231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   97.111020][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.122393][ T4228] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   97.141302][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   97.156755][ T4228] usb 2-1: SerialNumber: syz
[   97.251289][   T23] usb 4-1: USB disconnect, device number 4
[   97.432621][ T4231] usb 5-1: usb_control_msg returned -32
[   97.439031][ T4231] usbtmc 5-1:16.0: can't read capabilities
[   97.488972][ T4228] usb 2-1: 0:2 : does not exist
[   97.576937][ T4228] usb 2-1: USB disconnect, device number 2
[   97.689700][ T4753] loop2: detected capacity change from 0 to 4096
[   97.843818][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.915085][ T4192] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[   97.928875][ T4192] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   98.151317][ T4759] loop0: detected capacity change from 0 to 4096
[   98.232415][ T4764] usbtmc 5-1:16.0: usb_clear_halt returned -32
[   98.418573][ T4270] usb 5-1: USB disconnect, device number 4
[   98.628505][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'.
[   98.653416][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'.
[   98.669797][ T4785] netlink: 'syz.1.171': attribute type 7 has an invalid length.
[   98.726382][ T4785] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.736498][ T4785] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.745940][ T4785] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.755292][ T4785] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.770570][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'.
[   98.780868][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'.
[   98.791093][ T4785] netlink: 'syz.1.171': attribute type 7 has an invalid length.
[   98.801672][ T4785] Zero length message leads to an empty skb
[   99.049526][ T4794] loop3: detected capacity change from 0 to 512
[   99.985044][ T4820] Illegal XDP return value 4294967274, expect packet loss!
[  100.019623][ T4825] netlink: 'syz.4.188': attribute type 13 has an invalid length.
[  100.044817][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'.
[  100.070573][ T4825] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.079600][ T4825] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.089846][ T4825] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.099226][ T4825] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.112753][ T4826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[  100.141723][ T4825] netlink: 'syz.4.188': attribute type 13 has an invalid length.
[  100.156572][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'.
[  100.182969][ T4826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[  100.270169][ T4833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  100.322003][ T4835] loop4: detected capacity change from 0 to 256
[  100.383300][ T4835] exfat: Deprecated parameter 'namecase'
[  100.477605][ T4835] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  100.766709][   T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  101.052330][   T23] usb 3-1: Using ep0 maxpacket: 16
[  101.149103][ T4843] loop0: detected capacity change from 0 to 40427
[  101.210054][ T4843] F2FS-fs (loop0): Found nat_bits in checkpoint
[  101.242353][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  101.359190][ T4843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  101.495787][ T4187] attempt to access beyond end of device
[  101.495787][ T4187] loop0: rw=2049, want=45104, limit=40427
[  101.532682][   T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.557825][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.577272][   T23] usb 3-1: Product: syz
[  101.592009][   T23] usb 3-1: Manufacturer: syz
[  101.603080][   T23] usb 3-1: SerialNumber: syz
[  101.725309][ T4879] loop3: detected capacity change from 0 to 8192
[  101.784911][ T4879] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  101.829424][ T4879] REISERFS (device loop3): using ordered data mode
[  101.865486][ T4879] reiserfs: using flush barriers
[  101.885746][ T4879] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  101.914034][ T4879] REISERFS (device loop3): checking transaction log (loop3)
[  101.949012][ T4879] REISERFS (device loop3): Using r5 hash to sort names
[  101.973702][ T4879] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  102.029553][ T4879] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  102.042476][   T23] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  102.078953][   T23] usb 3-1: found format II with max.bitrate = 2, frame size=65483
[  102.111324][   T23] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  102.223587][   T23] usb 3-1: USB disconnect, device number 5
[  102.237859][ T4895] loop4: detected capacity change from 0 to 64
[  102.494465][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  102.902230][ T4228] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  103.422680][ T4228] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  103.436970][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.445406][ T4228] usb 4-1: Product: syz
[  103.449785][ T4228] usb 4-1: Manufacturer: syz
[  103.459210][ T4228] usb 4-1: SerialNumber: syz
[  103.515546][ T4228] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  103.543280][ T4272] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  103.562241][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  103.812541][ T4232] usb 1-1: Using ep0 maxpacket: 32
[  103.932526][ T4232] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  103.941695][ T4232] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  103.954375][ T4232] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  103.966668][ T4232] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  103.981631][ T4232] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.114958][ T4228] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  104.133354][ T4272] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  104.142926][ T4232] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  104.152326][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  104.161680][ T4272] usb 3-1: Product: syz
[  104.162434][ T4232] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  104.167471][ T4272] usb 3-1: Manufacturer: syz
[  104.181623][ T4272] usb 3-1: SerialNumber: syz
[  104.195676][ T4232] usb 1-1: Product: syz
[  104.200147][ T4232] usb 1-1: Manufacturer: syz
[  104.208429][ T4232] usb 1-1: SerialNumber: syz
[  104.226824][ T4232] usb 1-1: config 0 descriptor??
[  104.245324][ T4272] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  104.274104][ T4232] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  104.309266][ T4232] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  104.523304][ T4231] usb 1-1: USB disconnect, device number 4
[  104.533948][ T1106] usb 4-1: USB disconnect, device number 5
[  104.540974][ T4231] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  104.672945][ T4272] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  104.691526][ T4272] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  104.722686][ T4232] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  104.887792][ T4272] usb 3-1: USB disconnect, device number 6
[  104.994367][ T4958] loop1: detected capacity change from 0 to 128
[  105.035884][ T4958] process 'syz.1.247' launched './file1' with NULL argv: empty string added
[  105.092478][ T4232] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[  105.124248][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.151853][ T4232] usb 5-1: config 0 has no interfaces?
[  105.162361][ T4228] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  105.181870][ T4228] ath9k_htc: Failed to initialize the device
[  105.200397][ T4232] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  105.242719][ T1106] usb 4-1: ath9k_htc: USB layer deinitialized
[  105.289848][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.333142][ T4232] usb 5-1: config 0 descriptor??
[  105.391032][ T4964] loop3: detected capacity change from 0 to 8192
[  105.616164][ T4196] usb 5-1: USB disconnect, device number 5
[  106.451463][ T4989] loop2: detected capacity change from 0 to 2048
[  106.502236][ T4234] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  106.513522][ T4989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.782253][ T4234] usb 5-1: Using ep0 maxpacket: 16
[  106.909225][ T4234] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  106.937840][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0
[  107.102427][ T4234] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  107.116430][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.134975][ T4234] usb 5-1: Product: syz
[  107.145273][ T4234] usb 5-1: Manufacturer: syz
[  107.157678][ T4234] usb 5-1: SerialNumber: syz
[  107.195826][ T4234] usb 5-1: config 0 descriptor??
[  107.321873][ T5004] loop2: detected capacity change from 0 to 32768
[  107.395137][ T5004] 
[  107.395137][ T5004]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.395137][ T5004] 
[  107.448968][ T5004] 
[  107.448968][ T5004]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.448968][ T5004] 
[  107.469872][ T4234] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6
[  107.488319][ T5004] 
[  107.488319][ T5004]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.488319][ T5004] 
[  107.517771][ T5004] 
[  107.517771][ T5004]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.517771][ T5004] 
[  107.533158][ T5004] 
[  107.533158][ T5004]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.533158][ T5004] 
[  107.587011][  T276] 
[  107.587011][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.587011][  T276] 
[  107.606945][   T26] audit: type=1800 audit(1774537669.674:4): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.264" name="file2" dev="loop2" ino=7 res=0 errno=0
[  107.665774][ T5009] jfs: add_missing_indices: Invalid stbl[1] = -128 for inode 2, block = 0
[  107.822444][ T4651] 
[  107.822444][ T4651]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.822444][ T4651] 
[  107.874034][ T4651] 
[  107.874034][ T4651]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.874034][ T4651] 
[  107.894024][ T4234] rc_core: IR keymap rc-imon-pad not found
[  107.900399][ T4234] Registered IR keymap rc-empty
[  107.919260][  T276] 
[  107.919260][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.919260][  T276] 
[  107.941634][ T4234] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  107.952270][ T4192] 
[  107.952270][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.952270][ T4192] 
[  107.992333][ T4192] 
[  107.992333][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.992333][ T4192] 
[  108.024972][ T4234] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  108.112900][ T4234] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  108.160922][ T4234] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7
[  108.247797][ T4234] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:6> initialized
[  108.338673][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'.
[  108.492980][ T4234] usb 5-1: USB disconnect, device number 6
[  108.619335][ T5036] loop3: detected capacity change from 0 to 8
[  108.713390][ T5036] attempt to access beyond end of device
[  108.713390][ T5036] loop3: rw=2048, want=36028797018963976, limit=8
[  108.774634][ T5036] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5
[  108.798949][ T5040] loop1: detected capacity change from 0 to 64
[  108.821061][ T5036] unable to read xattr id index table
[  109.057440][ T5036] loop3: detected capacity change from 0 to 1024
[  109.189677][ T5046] overlayfs: workdir and upperdir must reside under the same mount
[  109.454947][ T5036] attempt to access beyond end of device
[  109.454947][ T5036] loop3: rw=2057, want=65536, limit=1024
[  109.533718][ T5036] attempt to access beyond end of device
[  109.533718][ T5036] loop3: rw=1, want=2310, limit=1024
[  109.608529][ T5036] attempt to access beyond end of device
[  109.608529][ T5036] loop3: rw=1, want=4358, limit=1024
[  109.687852][ T5036] attempt to access beyond end of device
[  109.687852][ T5036] loop3: rw=1, want=6406, limit=1024
[  109.731796][ T5036] attempt to access beyond end of device
[  109.731796][ T5036] loop3: rw=1, want=8454, limit=1024
[  109.771588][ T5036] attempt to access beyond end of device
[  109.771588][ T5036] loop3: rw=1, want=10502, limit=1024
[  109.825728][ T5036] attempt to access beyond end of device
[  109.825728][ T5036] loop3: rw=1, want=12550, limit=1024
[  109.889275][ T5036] attempt to access beyond end of device
[  109.889275][ T5036] loop3: rw=1, want=14598, limit=1024
[  109.978068][ T5036] attempt to access beyond end of device
[  109.978068][ T5036] loop3: rw=1, want=16646, limit=1024
[  110.128167][ T5067] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  110.580670][ T5074] [U] 
[  110.583976][ T5074] [U] 
[  110.586975][ T5074] [U] 
[  110.589982][ T5074] [U] 
[  110.593173][ T5074] [U] 
[  110.595919][ T5074] [U] 
[  110.599023][ T5074] [U] 
[  110.601924][ T5074] [U] 
[  110.605083][ T5074] [U] 
[  110.607817][ T5074] [U] 
[  110.610549][ T5074] [U] 
[  110.618196][ T5073] [U] 
[  110.670229][ T5063] loop4: detected capacity change from 0 to 131072
[  110.830471][ T5063] F2FS-fs (loop4): Found nat_bits in checkpoint
[  110.937874][ T5063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  111.111620][ T5056] loop1: detected capacity change from 0 to 32768
[  111.282271][ T1106] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  111.306506][ T5056] XFS (loop1): Mounting V5 Filesystem
[  111.511866][ T5056] XFS (loop1): Ending clean mount
[  111.522307][ T1106] usb 1-1: Using ep0 maxpacket: 8
[  111.642361][ T1106] usb 1-1: config 0 has no interfaces?
[  111.648458][ T1106] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  111.709651][ T1106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.770772][ T1106] usb 1-1: config 0 descriptor??
[  111.991643][ T4184] XFS (loop1): Unmounting Filesystem
[  112.082912][ T5083] loop3: detected capacity change from 0 to 32768
[  112.183491][ T5083] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.287 (5083)
[  112.286038][ T4173] usb 1-1: USB disconnect, device number 5
[  112.382830][ T5083] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  112.416678][ T4646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.421447][ T5083] BTRFS info (device loop3): using free space tree
[  112.492166][ T5083] BTRFS info (device loop3): has skinny extents
[  112.585151][ T4646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.723368][ T4646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.881311][ T4646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.922422][ T5083] BTRFS info (device loop3): enabling ssd optimizations
[  113.493606][ T5166] loop0: detected capacity change from 0 to 512
[  113.615857][ T5166] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.629569][ T5166] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.666992][   T26] audit: type=1800 audit(1774537675.734:5): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.300" name="file1" dev="loop0" ino=15 res=0 errno=0
[  113.773153][ T5120] chnl_net:caif_netlink_parms(): no params data found
[  114.017698][ T5182] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  114.265896][ T5193] loop1: detected capacity change from 0 to 256
[  114.388008][ T5193] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  114.441643][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.476001][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.562261][ T5120] device bridge_slave_0 entered promiscuous mode
[  114.611068][ T4651] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  114.661924][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.689393][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.731519][ T5120] device bridge_slave_1 entered promiscuous mode
[  114.882883][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.938854][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.310652][ T5120] team0: Port device team_slave_0 added
[  115.351216][ T1106] Bluetooth: hci4: command 0x0409 tx timeout
[  115.423509][ T5120] team0: Port device team_slave_1 added
[  115.521412][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.552113][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.683469][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.720918][ T5239] loop1: detected capacity change from 0 to 512
[  115.735190][ T5236] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  115.834649][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.850642][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.924900][ T5239] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement.
[  116.002280][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.313827][ T5120] device hsr_slave_0 entered promiscuous mode
[  116.370852][ T5120] device hsr_slave_1 entered promiscuous mode
[  116.456648][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.479392][ T5263] loop4: detected capacity change from 0 to 1024
[  116.501799][ T5120] Cannot create hsr debugfs directory
[  116.623991][ T5267] loop0: detected capacity change from 0 to 16
[  116.738692][ T5267] erofs: (device loop0): mounted with root inode @ nid 36.
[  117.009528][ T5267] handle_bad_sector: 24 callbacks suppressed
[  117.009550][ T5267] attempt to access beyond end of device
[  117.009550][ T5267] loop0: rw=524288, want=32, limit=16
[  117.358073][ T5267] erofs: (device loop0): z_erofs_readahead: readahead error at page 7 @ nid 89
[  117.402487][ T5227] Bluetooth: hci4: command 0x041b tx timeout
[  117.509340][ T5267] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89
[  117.613866][ T5120] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  117.624327][ T5267] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89
[  117.637435][ T5120] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  117.690882][ T5267] attempt to access beyond end of device
[  117.690882][ T5267] loop0: rw=524288, want=56, limit=16
[  117.716044][ T4646] device hsr_slave_0 left promiscuous mode
[  117.752693][ T4646] device hsr_slave_1 left promiscuous mode
[  117.764993][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.783676][ T4646] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.794886][ T5267] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  117.847738][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.867192][ T4646] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.894883][ T4646] device bridge_slave_1 left promiscuous mode
[  117.904082][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.952575][   T26] audit: type=1800 audit(1774537680.024:6): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.323" name="file2" dev="loop0" ino=89 res=0 errno=0
[  117.992878][ T4633] hfsplus: b-tree write err: -5, ino 3
[  118.031260][ T4646] device bridge_slave_0 left promiscuous mode
[  118.059075][ T4185] hfsplus: node 4:3 still has 3 user(s)!
[  118.069004][ T4646] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.120797][ T5271] syz.0.323 (5271): drop_caches: 2
[  118.219537][ T4646] device veth1_macvtap left promiscuous mode
[  118.251512][ T4646] device veth0_macvtap left promiscuous mode
[  118.260555][ T5299] loop3: detected capacity change from 0 to 512
[  118.288617][ T4646] device veth1_vlan left promiscuous mode
[  118.310890][ T4646] device veth0_vlan left promiscuous mode
[  118.392731][ T5299] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.329: inode has both inline data and extents flags
[  118.411243][ T5299] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.329: couldn't read orphan inode 15 (err -117)
[  118.426487][ T5299] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.898102][ T5320] loop3: detected capacity change from 0 to 512
[  118.997592][ T5320] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #11: comm syz.3.335: unexpected EA_INODE flag
[  119.063705][ T5320] EXT4-fs (loop3): Remounting filesystem read-only
[  119.088408][ T5320] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.335: couldn't read orphan inode 11 (err -117)
[  119.136868][ T5320] EXT4-fs (loop3): Remounting filesystem read-only
[  119.170345][ T5320] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[  119.237675][ T5326] loop1: detected capacity change from 0 to 256
[  119.300249][ T4186] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  119.376269][ T5326] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  119.401551][ T4186] EXT4-fs (loop3): Remounting filesystem read-only
[  119.412440][ T4186] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[  119.482470][ T5227] Bluetooth: hci4: command 0x040f tx timeout
[  119.518115][ T4186] EXT4-fs (loop3): Remounting filesystem read-only
[  119.531298][ T4186] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[  119.551644][ T4186] EXT4-fs (loop3): Remounting filesystem read-only
[  119.555714][ T4646] team0 (unregistering): Port device team_slave_1 removed
[  119.622666][ T4646] team0 (unregistering): Port device team_slave_0 removed
[  119.758200][ T4646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.820545][ T4646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.985650][ T4646] bond0 (unregistering): Released all slaves
[  120.084571][ T5120] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  120.222408][ T5120] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  120.510069][ T5344] loop1: detected capacity change from 0 to 128
[  120.553370][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.601747][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.616618][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.650466][ T5120] 8021q: adding VLAN 0 to HW filter on device team0
[  120.732193][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.741719][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.802614][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.811255][ T4651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.849740][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  120.918439][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.944808][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.979838][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.987505][ T4651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.005887][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  121.032967][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  121.106916][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  121.141566][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  121.183090][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  121.225880][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  121.279256][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  121.312722][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.331480][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.366675][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.393751][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.426814][ T5120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  121.562462][ T4234] Bluetooth: hci4: command 0x0419 tx timeout
[  121.945744][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.047549][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  122.069292][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.139831][ T5357] chnl_net:caif_netlink_parms(): no params data found
[  122.231977][ T5306] ODEBUG: Out of memory. ODEBUG disabled
[  122.335304][ T5353] loop1: detected capacity change from 0 to 40427
[  122.370496][ T5353] F2FS-fs (loop1): invalid crc value
[  122.437448][ T5353] F2FS-fs (loop1): Found nat_bits in checkpoint
[  122.553942][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.556261][ T5353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  122.613299][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.643746][   T26] audit: type=1800 audit(1774537684.714:7): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.347" name="file1" dev="loop1" ino=10 res=0 errno=0
[  122.673310][ T5357] device bridge_slave_0 entered promiscuous mode
[  122.715033][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.742320][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.750922][ T5357] device bridge_slave_1 entered promiscuous mode
[  122.764159][ T5353] attempt to access beyond end of device
[  122.764159][ T5353] loop1: rw=2049, want=78792, limit=40427
[  122.826282][ T5353] attempt to access beyond end of device
[  122.826282][ T5353] loop1: rw=2049, want=78784, limit=40427
[  122.868791][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.898781][ T5390] attempt to access beyond end of device
[  122.898781][ T5390] loop1: rw=0, want=77848, limit=40427
[  122.934880][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.060606][ T5357] team0: Port device team_slave_0 added
[  123.070606][ T4184] attempt to access beyond end of device
[  123.070606][ T4184] loop1: rw=2049, want=45104, limit=40427
[  123.149152][ T5357] team0: Port device team_slave_1 added
[  123.259351][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.312761][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.345583][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.372497][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.471966][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.483374][ T4234] Bluetooth: hci1: command 0x0409 tx timeout
[  123.537856][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.577924][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.672456][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.698417][ T5120] device veth0_vlan entered promiscuous mode
[  123.716035][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.739896][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.777256][ T5120] device veth1_vlan entered promiscuous mode
[  123.837657][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.854256][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.870636][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.879930][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.951770][ T5357] device hsr_slave_0 entered promiscuous mode
[  123.971321][ T5357] device hsr_slave_1 entered promiscuous mode
[  124.001100][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.012435][ T5357] Cannot create hsr debugfs directory
[  124.039437][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.066341][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.120270][ T5120] device veth0_macvtap entered promiscuous mode
[  124.187498][ T5120] device veth1_macvtap entered promiscuous mode
[  124.301502][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.339594][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.362825][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.392189][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.429393][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.469080][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.494029][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.523066][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.560801][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.629359][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.663086][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.693061][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.749535][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.778088][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.819104][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.844928][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.882090][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.902089][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.932114][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.962164][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.966635][ T5306] Set syz1 is full, maxelem 65536 reached
[  125.002140][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.064135][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.114988][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.146016][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.203972][ T5120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.250238][ T5120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.263516][ T5426] loop1: detected capacity change from 0 to 256
[  125.293290][ T5426] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  125.293438][ T5120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.336165][ T5120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.564567][ T4196] Bluetooth: hci1: command 0x041b tx timeout
[  125.589363][ T5357] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  125.631618][ T5357] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  125.687331][ T5357] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  125.722647][ T5357] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  125.800203][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.815380][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.893818][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.930230][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.961472][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.019842][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.188182][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.258259][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  126.284027][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  126.345071][ T5357] 8021q: adding VLAN 0 to HW filter on device team0
[  126.435360][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  126.469730][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  126.520350][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.527818][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.600553][ T4646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.688275][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.707386][ T5464] loop4: detected capacity change from 0 to 16
[  126.717435][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.734429][ T5464] erofs: (device loop4): mounted with root inode @ nid 36.
[  126.779681][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.864253][ T5436] loop1: detected capacity change from 0 to 32768
[  126.873229][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.880438][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.936114][ T5436] XFS (loop1): Mounting V5 Filesystem
[  127.025527][ T4646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.072214][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  127.081517][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  127.091440][ T5436] XFS (loop1): Ending clean mount
[  127.141170][ T4646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.200044][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  127.220727][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  127.233374][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  127.251178][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  127.263825][ T4184] XFS (loop1): Unmounting Filesystem
[  127.280978][ T5357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  127.291747][ T5357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  127.316275][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  127.327731][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  127.336679][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.345789][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  127.354693][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.394720][ T4646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.464868][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  127.573802][ T5481] netlink: 'syz.5.368': attribute type 10 has an invalid length.
[  127.621987][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.629524][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.653454][ T4196] Bluetooth: hci1: command 0x040f tx timeout
[  127.703799][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.711403][ T5481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.719308][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.726998][ T5481] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.745075][ T5481] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  127.880528][ T5489] loop4: detected capacity change from 0 to 64
[  127.986155][ T5494] netlink: 36 bytes leftover after parsing attributes in process `syz.5.369'.
[  128.026475][   T26] audit: type=1800 audit(1774537690.094:8): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.370" name="file1" dev="loop4" ino=21 res=0 errno=0
[  128.170980][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.369'.
[  128.465971][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  128.481599][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  128.518100][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.620105][ T5466] chnl_net:caif_netlink_parms(): no params data found
[  128.695577][ T5515] loop4: detected capacity change from 0 to 512
[  128.852376][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[  128.892483][ T4270] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.905386][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.913841][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.922876][ T5466] device bridge_slave_0 entered promiscuous mode
[  128.933796][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.941545][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.952014][ T5466] device bridge_slave_1 entered promiscuous mode
[  128.963947][ T5515] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[  129.127517][ T5466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.186731][ T5466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.326949][ T4270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.371840][ T4270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.415797][ T5466] team0: Port device team_slave_0 added
[  129.454476][ T4270] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  129.471506][ T5466] team0: Port device team_slave_1 added
[  129.539891][ T4270] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  129.600866][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.629105][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.662087][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.729092][ T4270] usb 2-1: config 0 descriptor??
[  129.768390][ T5466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.812064][    C0] sched: RT throttling activated
[  129.824262][ T1106] Bluetooth: hci1: command 0x0419 tx timeout
[  129.860349][ T5526] loop5: detected capacity change from 0 to 131072
[  129.880700][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.889990][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.921446][ T5526] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  129.928796][ T5526] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  129.976830][ T5466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.008047][ T5526] F2FS-fs (loop5): invalid crc value
[  130.040662][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  130.063282][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.065125][ T5526] F2FS-fs (loop5): Found nat_bits in checkpoint
[  130.125948][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  130.135626][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.145590][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.153191][ T5526] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  130.160510][ T5526] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  130.180834][   T26] audit: type=1800 audit(1774537692.244:9): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.375" name="file1" dev="loop5" ino=7 res=0 errno=0
[  130.203124][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  130.226791][ T4270] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  130.278708][ T4270] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  130.359314][ T5357] device veth0_vlan entered promiscuous mode
[  130.459265][ T5466] device hsr_slave_0 entered promiscuous mode
[  130.491339][ T5466] device hsr_slave_1 entered promiscuous mode
[  130.518697][ T5466] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.552211][ T5466] Cannot create hsr debugfs directory
[  130.618829][ T5357] device veth1_vlan entered promiscuous mode
[  130.797403][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  130.824358][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  130.846710][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  130.881364][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  130.912335][ T5357] device veth0_macvtap entered promiscuous mode
[  130.992933][ T5357] device veth1_macvtap entered promiscuous mode
[  131.002890][ T1335] Bluetooth: hci3: command 0x041b tx timeout
[  131.044903][ T1335] usb 2-1: USB disconnect, device number 3
[  131.092855][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  131.112098][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  131.146815][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.168542][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.193596][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.217281][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.239183][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.257764][ T5556] loop4: detected capacity change from 0 to 32768
[  131.277369][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.297752][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.321481][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.342357][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.372198][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.393900][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.410740][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  131.431661][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.444201][ T5556] XFS: attr2 mount option is deprecated.
[  131.505775][ T5556] XFS (loop4): Mounting V5 Filesystem
[  131.524088][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.555202][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.595959][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.608065][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.618851][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.631228][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.665503][ T5556] XFS (loop4): Ending clean mount
[  131.689009][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.742400][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.758233][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.769903][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.782989][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.800373][ T5466] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  131.827087][ T4185] XFS (loop4): Unmounting Filesystem
[  131.837640][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.855596][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.881871][ T5357] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.889177][ T5584] loop5: detected capacity change from 0 to 1024
[  131.911289][ T5357] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.930722][ T5357] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.940835][ T5357] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.971063][ T5466] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  132.033819][ T5466] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  132.109059][ T5466] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  132.602986][ T4646] device hsr_slave_0 left promiscuous mode
[  132.633871][ T4646] device hsr_slave_1 left promiscuous mode
[  132.720553][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.759476][ T4646] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.843684][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.871273][ T4646] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.914337][ T4646] device bridge_slave_1 left promiscuous mode
[  132.948304][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.022736][ T4646] device bridge_slave_0 left promiscuous mode
[  133.040343][ T4646] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.086741][ T1335] Bluetooth: hci3: command 0x040f tx timeout
[  133.093599][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  133.165530][ T4646] device veth1_macvtap left promiscuous mode
[  133.194806][ T4646] device veth0_macvtap left promiscuous mode
[  133.225284][ T4646] device veth1_vlan left promiscuous mode
[  133.231288][ T4646] device veth0_vlan left promiscuous mode
[  133.433757][ T5595] loop1: detected capacity change from 0 to 131072
[  133.480082][ T5592] loop4: detected capacity change from 0 to 32768
[  133.507900][ T5595] F2FS-fs (loop1): invalid crc value
[  133.534354][ T5595] F2FS-fs (loop1): Found nat_bits in checkpoint
[  133.586624][ T5595] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  133.597066][ T5595] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  133.633962][ T5592] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  133.690067][ T5592] JBD2: Ignoring recovery information on journal
[  133.893896][ T5592] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  134.230894][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  134.338130][ T4646] team0 (unregistering): Port device team_slave_1 removed
[  134.387887][ T4646] team0 (unregistering): Port device team_slave_0 removed
[  134.421056][ T4646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.465102][ T4646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.617744][ T4646] bond0 (unregistering): Released all slaves
[  134.713912][ T4651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.733371][ T4651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.797074][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  134.844532][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.868617][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.910495][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.927396][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  134.954027][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  134.963051][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  134.973538][ T5466] 8021q: adding VLAN 0 to HW filter on device team0
[  135.030468][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  135.050791][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.095650][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.103118][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.138247][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  135.162250][ T1335] Bluetooth: hci3: command 0x0419 tx timeout
[  135.200163][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  135.224824][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.260360][ T5622] loop4: detected capacity change from 0 to 512
[  135.279434][ T5625] loop5: detected capacity change from 0 to 512
[  135.283815][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.293736][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.324636][ T5622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  135.345688][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  135.377723][ T5622] EXT4-fs (loop4): 1 truncate cleaned up
[  135.384408][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  135.405200][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  135.418091][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  135.425707][ T5622] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  135.443248][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  135.504059][ T5625] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[  135.521231][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  135.591281][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.656915][ T5466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  135.711457][ T5466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.832273][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.841387][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.904522][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.931005][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.951452][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  136.116472][ T5651] loop4: detected capacity change from 0 to 128
[  136.129874][ T5649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'.
[  136.199209][ T5651] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  136.232830][ T5651] hpfs: filesystem error: improperly stopped
[  136.239416][ T5651] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  136.299697][ T5651] hpfs: You really don't want any checks? You are crazy...
[  136.340135][ T5651] hpfs: Code page index out of array
[  136.356849][ T5651] hpfs: code page support is disabled
[  136.382190][ T5651] hpfs: hpfs_map_4sectors(): unaligned read
[  136.406442][ T5651] hpfs: hpfs_map_4sectors(): unaligned read
[  136.430732][ T5651] hpfs: filesystem error: unable to find root dir
[  136.576649][ T5659] loop1: detected capacity change from 0 to 4096
[  136.673594][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  136.691413][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  136.731561][ T5466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.875974][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  136.911585][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  137.573875][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  137.620242][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  137.830429][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  137.870471][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  137.948064][ T5466] device veth0_vlan entered promiscuous mode
[  137.985734][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  138.040214][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  138.165766][ T5466] device veth1_vlan entered promiscuous mode
[  138.319937][ T5700] loop6: detected capacity change from 0 to 16
[  138.425491][ T5700] erofs: (device loop6): mounted with root inode @ nid 36.
[  138.435440][ T5466] device veth0_macvtap entered promiscuous mode
[  138.549699][ T5466] device veth1_macvtap entered promiscuous mode
[  138.606201][ T5700] overlayfs: './file0' not a directory
[  138.664798][ T5702] erofs: (device loop6): init_inode_xattrs: xattr_isize 12 of nid 49 is not supported yet
[  138.726910][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.819741][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.871287][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.892783][ T5702] attempt to access beyond end of device
[  138.892783][ T5702] loop6: rw=524288, want=34359738368, limit=16
[  138.932118][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.952607][ T5705] erofs: (device loop6): init_inode_xattrs: xattr_isize 12 of nid 49 is not supported yet
[  138.984565][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.012582][ T5702] attempt to access beyond end of device
[  139.012582][ T5702] loop6: rw=0, want=34359738368, limit=16
[  139.052084][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.089278][ T5682] loop4: detected capacity change from 0 to 262144
[  139.101617][   T26] audit: type=1800 audit(1774537701.134:10): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.406" name="file0" dev="loop6" ino=49 res=0 errno=0
[  139.110809][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.185557][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.205606][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.219626][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.240283][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.271448][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  139.291326][ T5682] F2FS-fs (loop4): invalid crc value
[  139.300525][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  139.334580][ T5682] F2FS-fs (loop4): Found nat_bits in checkpoint
[  139.371634][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.406302][ T5682] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  139.433333][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.475208][   T26] audit: type=1804 audit(1774537701.544:11): pid=5682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.403" name="/newroot/89/file0/file1" dev="loop4" ino=7 res=1 errno=0
[  139.515167][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  139.563136][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  139.610702][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  139.675259][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.722860][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.773552][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.804235][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.829047][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.891722][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.925349][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.961780][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.996375][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.027149][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.050567][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.098008][ T5466] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.128688][ T5466] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.148274][ T5466] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.197989][ T5466] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.228834][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.243172][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.280332][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.465772][ T4633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.492296][ T4633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.575000][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  140.603982][ T4633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.618891][ T4633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.648419][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  140.664402][ T5730] loop6: detected capacity change from 0 to 512
[  140.792230][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  140.818867][ T5730] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[  141.032217][ T4234] usb 2-1: Using ep0 maxpacket: 32
[  141.152638][ T4234] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  141.173815][ T4234] usb 2-1: config 0 has no interface number 0
[  141.213242][ T4234] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  141.437573][ T4234] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  141.467261][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.507981][ T4234] usb 2-1: Product: syz
[  141.512869][ T4234] usb 2-1: Manufacturer: syz
[  141.552290][ T4234] usb 2-1: SerialNumber: syz
[  141.637056][ T4234] usb 2-1: config 0 descriptor??
[  141.672544][ T5725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  141.772517][ T5760] netlink: 36 bytes leftover after parsing attributes in process `syz.6.415'.
[  141.860538][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.415'.
[  141.910487][ T5725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.822747][ T4234] asix 2-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 106
[  143.042127][ T4234] usb 2-1: USB disconnect, device number 4
[  143.216806][ T5810] loop7: detected capacity change from 0 to 512
[  143.270671][ T5806] IPVS: Scheduler module ip_vs_ not found
[  143.369762][ T5810] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[  143.408664][ T5796] loop4: detected capacity change from 0 to 32768
[  143.507758][ T5796] XFS (loop4): Mounting V5 Filesystem
[  143.622303][ T5796] XFS (loop4): Ending clean mount
[  143.827327][ T5836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.435'.
[  143.858660][ T4185] XFS (loop4): Unmounting Filesystem
[  143.950578][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'.
[  144.590980][ T5860] syz.7.443 sent an empty control message without MSG_MORE.
[  145.135353][ T5885] loop5: detected capacity change from 0 to 512
[  145.266180][ T5885] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[  145.925746][ T5856] loop6: detected capacity change from 0 to 40427
[  145.970600][ T5875] loop7: detected capacity change from 0 to 32768
[  146.062712][ T5856] F2FS-fs (loop6): Found nat_bits in checkpoint
[  146.120550][ T5875] XFS (loop7): Mounting V5 Filesystem
[  146.190808][ T5856] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  146.201774][ T5875] XFS (loop7): Ending clean mount
[  146.440857][ T5466] XFS (loop7): Unmounting Filesystem
[  146.638336][ T5357] attempt to access beyond end of device
[  146.638336][ T5357] loop6: rw=2049, want=45112, limit=40427
[  147.212183][ T4272] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  147.520210][ T5971] loop7: detected capacity change from 0 to 512
[  147.632576][ T4272] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  147.647313][ T5971] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[  147.663298][ T4272] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  147.716832][ T4272] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  147.727100][ T4272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.002206][ T4272] usb 5-1: usb_control_msg returned -32
[  148.008651][ T4272] usbtmc 5-1:16.0: can't read capabilities
[  148.594141][ T4196] usb 5-1: USB disconnect, device number 7
[  149.008426][ T5980] loop6: detected capacity change from 0 to 32768
[  149.077832][ T5980] XFS (loop6): Mounting V5 Filesystem
[  149.179116][ T5980] XFS (loop6): Ending clean mount
[  149.519160][ T5999] loop1: detected capacity change from 0 to 32768
[  149.636864][ T5999] XFS (loop1): Mounting V5 Filesystem
[  149.658970][ T5357] XFS (loop6): Unmounting Filesystem
[  149.815344][ T5999] XFS (loop1): Ending clean mount
[  149.927051][ T4184] XFS (loop1): Unmounting Filesystem
[  150.264114][ T6050] loop5: detected capacity change from 0 to 1024
[  150.513664][ T6050] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  150.601915][ T6058] loop6: detected capacity change from 0 to 4096
[  150.610962][ T6050] EXT4-fs error (device loop5): ext4_read_inline_dir:1618: inode #12: block 7: comm syz.5.497: path /35/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=327694, rec_len=0, size=80 fake=0
[  150.684595][ T6058] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  150.862226][ T6058] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  150.887626][ T6058] ntfs3: loop6: Failed to load $Extend.
[  151.226485][ T6063] chnl_net:caif_netlink_parms(): no params data found
[  151.321306][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.329353][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.338160][ T6063] device bridge_slave_0 entered promiscuous mode
[  151.348275][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.356470][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.365430][ T6063] device bridge_slave_1 entered promiscuous mode
[  151.390122][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.401677][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.428040][ T6063] team0: Port device team_slave_0 added
[  151.436125][ T6063] team0: Port device team_slave_1 added
[  151.456139][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.465610][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.493223][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.506756][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.514124][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.540793][ T6063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.582428][ T6063] device hsr_slave_0 entered promiscuous mode
[  151.590885][ T6063] device hsr_slave_1 entered promiscuous mode
[  151.705740][ T6063] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  151.717341][ T6063] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  151.727238][ T6063] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  151.737852][ T6063] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  151.761551][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.768822][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.776401][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.783820][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.837229][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.855655][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.865133][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.874666][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.885189][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  151.902227][ T6063] 8021q: adding VLAN 0 to HW filter on device team0
[  151.915521][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  151.927608][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.934842][ T4633] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.952821][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.961431][ T4649] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.968680][ T4649] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.991306][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  152.001473][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  152.020203][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  152.038529][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  152.051854][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  152.065062][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  152.182667][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  152.190486][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  152.207983][ T6063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.361767][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  152.375936][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  152.407251][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  152.416738][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  152.428520][ T6063] device veth0_vlan entered promiscuous mode
[  152.436759][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.446112][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.466057][ T6063] device veth1_vlan entered promiscuous mode
[  152.491863][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  152.500837][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  152.510021][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  152.520022][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  152.534502][ T6063] device veth0_macvtap entered promiscuous mode
[  152.547245][ T6063] device veth1_macvtap entered promiscuous mode
[  152.567155][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.579913][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.590714][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.603136][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.614662][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.626078][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.636786][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.647767][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.658099][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.668764][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.680883][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.696114][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.708449][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.718112][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.727431][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.736799][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.746324][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.758634][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.769903][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.781305][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.796180][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.808294][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.820375][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.831986][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.843705][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.855111][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.867423][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.878955][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.890220][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.907534][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.917852][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  152.930906][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  152.942463][ T4270] Bluetooth: hci2: command 0x0409 tx timeout
[  152.951448][ T6063] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.961377][ T6063] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.971202][ T6063] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.982181][ T6063] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.057743][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.071902][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.087823][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  153.117121][ T4633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.127677][ T4633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.136975][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  153.462236][ T5225] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  153.630432][ T6121] netem: unknown loss type 257
[  153.649980][ T6121] netem: change failed
[  153.712965][ T5225] usb 8-1: Using ep0 maxpacket: 8
[  153.832326][ T5225] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  153.843756][ T5225] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  153.872266][ T5225] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  153.900837][ T5225] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  153.922219][ T5225] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  153.950191][ T5225] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  153.989402][ T5225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.292446][ T5225] usb 8-1: usb_control_msg returned -32
[  154.298482][ T5225] usbtmc 8-1:16.0: can't read capabilities
[  154.603499][ T6147] netlink: 44 bytes leftover after parsing attributes in process `syz.5.507'.
[  154.631262][ T6127] loop8: detected capacity change from 0 to 32768
[  154.671442][ T6150] loop1: detected capacity change from 0 to 256
[  154.732820][ T6150] exfat: Deprecated parameter 'namecase'
[  154.765773][ T6127] XFS (loop8): Mounting V5 Filesystem
[  154.787402][ T6150] exfat: Deprecated parameter 'namecase'
[  154.868809][ T6127] XFS (loop8): Ending clean mount
[  154.887182][ T6150] exFAT-fs (loop1): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d)
[  155.032478][ T4270] Bluetooth: hci2: command 0x041b tx timeout
[  155.042315][ T5225] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  155.100157][ T6063] XFS (loop8): Unmounting Filesystem
[  155.218254][ T6165] usbtmc 8-1:16.0: usb_clear_halt returned -32
[  155.391160][ T5227] usb 8-1: USB disconnect, device number 2
[  155.422678][ T5225] usb 6-1: config 127 has an invalid interface number: 84 but max is 0
[  155.449413][ T5225] usb 6-1: config 127 has no interface number 0
[  155.595756][ T6177] loop6: detected capacity change from 0 to 256
[  155.615338][ T5225] usb 6-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5
[  155.652327][ T5225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.691502][ T5225] usb 6-1: Product: syz
[  155.704754][ T5225] usb 6-1: Manufacturer: syz
[  155.719280][ T5225] usb 6-1: SerialNumber: syz
[  156.025051][ T5225] gspca_main: spca501-2.14.0 probing 040a:0002
[  156.362947][ T6198] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  157.102108][ T4196] Bluetooth: hci2: command 0x040f tx timeout
[  157.352228][ T5225] gspca_spca501: reg write: error -71
[  157.358120][ T5225] spca501 6-1:127.84: Reg write failed for 0x00,0x00,0x05
[  157.378434][ T5225] spca501: probe of 6-1:127.84 failed with error -22
[  157.411191][ T5225] usb 6-1: USB disconnect, device number 2
[  157.797099][ T6225] loop7: detected capacity change from 0 to 4096
[  157.937676][ T6225] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback.
[  157.952140][ T5225] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  157.997218][ T6240] loop5: detected capacity change from 0 to 256
[  158.122701][ T6241] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.526: Invalid inode bitmap blk 6219464046470743760 in block_group 0
[  158.173701][ T4270] Process accounting resumed
[  158.184326][ T4270] FAT-fs (loop5): error, clusters badly computed (0 != 128)
[  158.192358][ T5225] usb 7-1: Using ep0 maxpacket: 8
[  158.213974][ T4270] FAT-fs (loop5): Filesystem has been set read-only
[  158.230496][ T4270] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  158.318058][ T5225] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  158.351091][ T5225] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.378797][ T5466] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 10459325113398132510 in block_group 0
[  158.432468][ T5225] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.482585][ T5225] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  158.510801][ T5466] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  158.531687][ T5466] EXT4-fs error (device loop7): ext4_dirty_inode:6058: inode #2: comm syz-executor: mark_inode_dirty error
[  158.552114][ T5225] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.600692][ T5466] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 10459325113398132510 in block_group 0
[  158.617899][ T5225] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  158.649874][ T5466] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 10459325113398132510 in block_group 0
[  158.674499][ T5225] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.782618][ T6220] loop1: detected capacity change from 0 to 32768
[  158.938512][ T6220] XFS (loop1): Mounting V5 Filesystem
[  158.992327][ T5225] usb 7-1: usb_control_msg returned -32
[  158.998171][ T5225] usbtmc 7-1:16.0: can't read capabilities
[  159.091291][ T6220] XFS (loop1): Ending clean mount
[  159.172314][ T1335] Bluetooth: hci2: command 0x0419 tx timeout
[  159.213624][ T4633] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm kworker/u4:11: Invalid inode table block 10459325113398132510 in block_group 0
[  159.287827][ T6276] loop8: detected capacity change from 0 to 1024
[  159.304730][ T4184] XFS (loop1): Unmounting Filesystem
[  159.517944][ T6276] hfsplus: catalog searching failed
[  159.550121][ T4649] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.650935][ T4649] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.681031][ T4640] hfsplus: b-tree write err: -5, ino 3
[  159.705127][ T6063] hfsplus: node 4:3 still has 1 user(s)!
[  159.832308][ T6286] usbtmc 7-1:16.0: usb_clear_halt returned -32
[  159.867301][ T4649] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.991737][ T4649] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.004594][ T5225] usb 7-1: USB disconnect, device number 2
[  160.836422][ T6309] chnl_net:caif_netlink_parms(): no params data found
[  160.851349][ T6329] loop6: detected capacity change from 0 to 64
[  161.076882][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.101989][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.148770][ T6309] device bridge_slave_0 entered promiscuous mode
[  161.221096][ T6338] loop8: detected capacity change from 0 to 1024
[  161.228760][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.243668][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.262776][ T6309] device bridge_slave_1 entered promiscuous mode
[  161.417417][ T6309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.509861][ T6309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.535715][ T4633] hfsplus: bad catalog file entry
[  161.541695][ T4633] hfsplus: b-tree write err: -5, ino 3
[  161.812887][ T6309] team0: Port device team_slave_0 added
[  161.821593][ T6309] team0: Port device team_slave_1 added
[  161.921878][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.939661][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.008851][ T6333] loop5: detected capacity change from 0 to 32768
[  162.032882][ T6309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.133625][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.151796][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.179593][ T6333] XFS (loop5): Mounting V5 Filesystem
[  162.184864][ T6309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.293930][ T4649] device hsr_slave_0 left promiscuous mode
[  162.310238][ T6333] XFS (loop5): Ending clean mount
[  162.318144][ T4649] device hsr_slave_1 left promiscuous mode
[  162.371780][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.393372][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.416273][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.431590][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.441829][ T4649] device bridge_slave_1 left promiscuous mode
[  162.448812][ T5120] XFS (loop5): Unmounting Filesystem
[  162.450975][ T4196] Bluetooth: hci3: command 0x0409 tx timeout
[  162.470452][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.480773][ T4649] device bridge_slave_0 left promiscuous mode
[  162.487480][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.539632][ T4649] device veth1_macvtap left promiscuous mode
[  162.558392][ T4649] device veth0_macvtap left promiscuous mode
[  162.592820][ T4649] device veth1_vlan left promiscuous mode
[  162.598709][ T4649] device veth0_vlan left promiscuous mode
[  163.099800][ T6394] loop5: detected capacity change from 0 to 8
[  163.213124][ T6394] SQUASHFS error: lzo decompression failed, data probably corrupt
[  163.222295][ T6394] SQUASHFS error: Failed to read block 0x0: -5
[  163.228712][ T6394] SQUASHFS error: Unable to read data cache entry [0]
[  163.236009][ T6394] SQUASHFS error: Unable to read page, block 0, size ff
[  163.243668][ T6394] SQUASHFS error: Unable to read data cache entry [0]
[  163.250895][ T6394] SQUASHFS error: Unable to read page, block 0, size ff
[  163.263953][ T6394] SQUASHFS error: lzo decompression failed, data probably corrupt
[  163.272983][ T6394] SQUASHFS error: Failed to read block 0x0: -5
[  163.280439][ T6394] SQUASHFS error: lzo decompression failed, data probably corrupt
[  163.289372][ T6394] SQUASHFS error: Failed to read block 0x0: -5
[  163.319053][ T6394] SQUASHFS error: lzo decompression failed, data probably corrupt
[  163.327473][ T6394] SQUASHFS error: Failed to read block 0x0: -5
[  163.334991][   T26] audit: type=1800 audit(1774537725.404:12): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.560" name="file2" dev="loop5" ino=3 res=0 errno=0
[  163.440808][ T4649] team0 (unregistering): Port device team_slave_1 removed
[  163.497238][ T4649] team0 (unregistering): Port device team_slave_0 removed
[  163.509460][ T6400] 9pnet: p9_errstr2errno: server reported unknown error ��00000000000000000000004
[  163.520142][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.549094][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.687208][ T4649] bond0 (unregistering): Released all slaves
[  163.786121][ T6309] device hsr_slave_0 entered promiscuous mode
[  163.798372][ T6309] device hsr_slave_1 entered promiscuous mode
[  163.822780][ T6309] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.842734][ T6309] Cannot create hsr debugfs directory
[  163.899119][ T6380] netlink: 'syz.8.559': attribute type 12 has an invalid length.
[  163.911088][ T6380] netlink: 'syz.8.559': attribute type 29 has an invalid length.
[  163.948124][ T6380] netlink: 148 bytes leftover after parsing attributes in process `syz.8.559'.
[  164.002425][ T6380] netlink: 'syz.8.559': attribute type 2 has an invalid length.
[  164.030624][ T6380] netlink: 'syz.8.559': attribute type 1 has an invalid length.
[  164.059807][ T6380] netlink: 'syz.8.559': attribute type 2 has an invalid length.
[  164.576256][ T6402] loop5: detected capacity change from 0 to 131072
[  164.598390][ T4272] Bluetooth: hci3: command 0x041b tx timeout
[  164.714366][ T6402] F2FS-fs (loop5): Found nat_bits in checkpoint
[  164.786046][ T6402] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  165.162459][ T6309] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  165.243191][ T6309] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  165.264393][ T6309] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  165.304694][ T6309] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  165.654067][ T6446] loop5: detected capacity change from 0 to 128
[  165.687719][ T6309] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.787090][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  165.807039][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  165.854179][ T6309] 8021q: adding VLAN 0 to HW filter on device team0
[  165.914026][ T6446] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.982366][ T6446] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  166.129282][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.181558][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.220795][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.228272][ T4633] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.287702][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.361047][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.412822][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.420378][ T4633] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.686327][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.694766][ T4196] Bluetooth: hci3: command 0x040f tx timeout
[  166.735609][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  166.794497][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  166.845821][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.922181][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.932513][ T4196] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  166.974138][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.049072][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.070415][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.113720][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.138514][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.177511][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.185951][ T4196] usb 6-1: Using ep0 maxpacket: 16
[  167.223852][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.275271][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.324395][ T4196] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  167.345730][ T4196] usb 6-1: config 1 has no interface number 0
[  167.374624][ T4196] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  167.411406][ T4196] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  167.460124][ T4196] usb 6-1: config 1 interface 105 has no altsetting 0
[  167.657754][ T4196] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  167.679871][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[  167.684917][ T4196] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  167.724875][ T6518] netlink: 'syz.1.583': attribute type 14 has an invalid length.
[  167.743676][ T4196] usb 6-1: Product: syz
[  167.763953][ T4196] usb 6-1: Manufacturer: syz
[  167.784922][ T4196] usb 6-1: SerialNumber: syz
[  167.797130][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  167.811261][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  167.842491][ T6489] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  167.855931][ T6489] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  167.875004][ T6309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.362594][ T6489] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  168.369982][ T6489] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  168.381467][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  168.405265][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  168.522734][ T6309] device veth0_vlan entered promiscuous mode
[  168.560727][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  168.574902][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  168.636297][ T6542] netlink: 'syz.1.588': attribute type 1 has an invalid length.
[  168.725457][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.761814][ T6309] device veth1_vlan entered promiscuous mode
[  168.772368][ T4270] Bluetooth: hci3: command 0x0419 tx timeout
[  168.821438][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  168.838725][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  168.884342][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  168.902388][ T4196] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  168.982430][ T4196] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  169.059594][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  169.093152][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  169.113715][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  169.184531][ T4196] aqc111 6-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee
[  169.190534][ T6309] device veth0_macvtap entered promiscuous mode
[  169.273607][ T4196] usb 6-1: USB disconnect, device number 3
[  169.280659][ T4196] aqc111 6-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  169.306961][ T6309] device veth1_macvtap entered promiscuous mode
[  169.479490][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  169.508197][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  169.548421][ T4196] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  169.551952][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.588936][ T4196] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  169.629852][ T4196] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  169.630597][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.722559][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.753610][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.790984][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.833372][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.874977][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.911834][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.970648][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.005354][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.049237][ T6577] loop5: detected capacity change from 0 to 128
[  170.051473][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.091723][ T6577] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  170.129810][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.156148][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.210258][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.238733][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.301077][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.352118][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.402134][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.451811][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.483826][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.502146][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.522296][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.552744][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.577171][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.599187][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.609679][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.621270][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.642479][ T5225] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  170.661248][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.680733][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.741612][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.766664][ T6594] loop5: detected capacity change from 0 to 128
[  170.786029][ T6309] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.804909][ T6309] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.820419][ T6309] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.864719][ T6309] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.003575][ T5225] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  171.032256][ T5225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.061102][ T5225] usb 2-1: config 0 has no interface number 0
[  171.223503][ T4651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.231856][ T4651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.282471][ T5225] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  171.291638][ T5225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.319433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  171.340818][ T5225] usb 2-1: Product: syz
[  171.349384][ T4640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.362140][ T5225] usb 2-1: Manufacturer: syz
[  171.376218][ T4640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.392613][ T5225] usb 2-1: SerialNumber: syz
[  171.419761][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  171.428955][ T5225] usb 2-1: config 0 descriptor??
[  171.515212][ T5225] hub 2-1:0.31: bad descriptor, ignoring hub
[  171.521884][ T5225] hub: probe of 2-1:0.31 failed with error -5
[  171.564097][ T5225] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  171.571586][ T5225] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized!
[  171.619382][ T5225] usb 2-1: Failed to create links for entity 6
[  171.634909][ T5225] usb 2-1: Failed to register entities (-22).
[  171.701771][ T6615] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  171.733191][ T5225] usb 2-1: USB disconnect, device number 5
[  171.872219][ T4233] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  172.145800][ T4233] usb 6-1: Using ep0 maxpacket: 32
[  172.302288][ T4233] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  172.313087][ T4233] usb 6-1: config 0 has no interface number 0
[  172.319541][ T4233] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  172.327706][   T26] audit: type=1326 audit(1774537734.384:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.8.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9852e6a799 code=0x0
[  172.435380][ T6638] loop9: detected capacity change from 0 to 2048
[  172.509557][ T6638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.593492][ T4233] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  172.619678][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.662916][ T4233] usb 6-1: Product: syz
[  172.674553][ T4233] usb 6-1: Manufacturer: syz
[  172.690797][ T4233] usb 6-1: SerialNumber: syz
[  172.709416][ T4233] usb 6-1: config 0 descriptor??
[  172.776149][ T4233] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  172.796934][ T4233] em28xx 6-1:0.132: Video interface 132 found:
[  172.958616][ T6655] device sit0 entered promiscuous mode
[  172.989675][ T6655] netlink: 'syz.9.608': attribute type 1 has an invalid length.
[  173.015694][ T6658] netlink: 272 bytes leftover after parsing attributes in process `syz.1.610'.
[  173.028153][ T6655] netlink: 9 bytes leftover after parsing attributes in process `syz.9.608'.
[  173.222436][ T4233] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  173.530122][ T6678] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  173.715287][ T4233] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  173.757422][ T4233] em28xx 6-1:0.132: board has no eeprom
[  173.773191][ T6692] loop9: detected capacity change from 0 to 128
[  173.818891][ T6692] EXT4-fs (loop9): Test dummy encryption mode enabled
[  173.844456][ T6692] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  173.863067][ T6692] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  173.912245][ T4233] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  173.952200][ T4233] em28xx 6-1:0.132: analog set to bulk mode.
[  173.976205][ T4233] em28xx 6-1:0.132: Registering V4L2 extension
[  174.024051][ T4270] usb 6-1: USB disconnect, device number 4
[  174.073763][ T4270] em28xx 6-1:0.132: Disconnecting em28xx
[  174.391343][ T4233] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  174.423149][ T4233] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  174.451971][ T4233] em28xx 6-1:0.132: No AC97 audio processor
[  174.468937][ T4233] usb 6-1: Decoder not found
[  174.474500][ T4233] em28xx 6-1:0.132: failed to create media graph
[  174.481457][ T4233] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  174.505739][ T4233] em28xx 6-1:0.132: Remote control support is not available for this card.
[  174.545845][ T4270] em28xx 6-1:0.132: Closing input extension
[  174.612784][ T6692] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  174.639473][ T4270] em28xx 6-1:0.132: Freeing device
[  174.698911][ T6675] loop8: detected capacity change from 0 to 32768
[  174.899903][ T6675] XFS (loop8): Mounting V5 Filesystem
[  174.964919][ T6692] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  175.039501][ T6675] XFS (loop8): Ending clean mount
[  175.201090][ T6763] IPVS: sed: FWM 3 0x00000003 - no destination available
[  175.291285][ T6063] XFS (loop8): Unmounting Filesystem
[  175.345223][ T4270] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  175.766317][ T4270] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  175.785003][ T4270] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  175.810042][ T4270] usb 6-1: config 8 has no interface number 0
[  175.830224][ T4270] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  175.955388][ T6748] loop1: detected capacity change from 0 to 40427
[  176.066039][ T6748] F2FS-fs (loop1): Found nat_bits in checkpoint
[  176.073484][ T4270] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  176.094333][ T4270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.139239][ T4270] usb 6-1: Product: syz
[  176.156879][ T4270] usb 6-1: Manufacturer: syz
[  176.161638][ T4270] usb 6-1: SerialNumber: syz
[  176.291028][ T6748] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.310275][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.9.637'.
[  176.360337][ T6798] loop6: detected capacity change from 0 to 128
[  176.367682][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.375962][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.433673][ T4184] attempt to access beyond end of device
[  176.433673][ T4184] loop1: rw=2049, want=45104, limit=40427
[  176.522226][ T4270] usb 6-1: USB disconnect, device number 5
[  176.614642][ T6798] attempt to access beyond end of device
[  176.614642][ T6798] loop6: rw=2049, want=250, limit=128
[  177.182956][ T6813] Invalid ELF header magic: != ELF
[  177.283652][ T6829] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96
[  177.494962][ T6836] netlink: 'syz.5.651': attribute type 1 has an invalid length.
[  177.689542][ T6843] bond1: (slave gretap1): making interface the new active one
[  177.706227][ T6843] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  177.717283][ T6851] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  177.735448][ T6843] syz.5.651 (6843) used greatest stack depth: 19664 bytes left
[  177.766424][ T6852] loop5: detected capacity change from 0 to 7
[  177.808034][ T6852] Dev loop5: unable to read RDB block 7
[  177.828415][ T6852]  loop5: AHDI p1 p2 p3
[  177.865968][ T6852] loop5: partition table partially beyond EOD, truncated
[  177.914631][ T6852] loop5: p1 start 1818582900 is beyond EOD, truncated
[  177.921839][ T6852] loop5: p3 start 335544320 is beyond EOD, truncated
[  178.001082][ T6861] loop8: detected capacity change from 0 to 8
[  178.126795][ T6865] loop1: detected capacity change from 0 to 2048
[  178.319350][ T6865] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  178.392332][ T6865] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  179.190278][ T6884] chnl_net:caif_netlink_parms(): no params data found
[  179.378975][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.6.679'.
[  179.428532][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.452128][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.483990][ T6884] device bridge_slave_0 entered promiscuous mode
[  179.504556][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.541411][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.569010][ T6884] device bridge_slave_1 entered promiscuous mode
[  179.767245][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.808368][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.885241][ T6884] team0: Port device team_slave_0 added
[  179.906258][ T6884] team0: Port device team_slave_1 added
[  179.989043][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.007847][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.067713][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.105127][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.137939][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.211754][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.285046][ T6968] loop8: detected capacity change from 0 to 512
[  180.376189][ T6884] device hsr_slave_0 entered promiscuous mode
[  180.386850][ T6884] device hsr_slave_1 entered promiscuous mode
[  180.438923][ T6968] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,quota,quota,bsddf,dioread_lock,,errors=continue. Quota mode: writeback.
[  180.467634][ T6884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.482427][ T6968] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.503819][ T6884] Cannot create hsr debugfs directory
[  180.602994][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[  180.624400][ T6968] 
[  180.626800][ T6968] ======================================================
[  180.634493][ T6968] WARNING: possible circular locking dependency detected
[  180.641939][ T6968] syzkaller #0 Not tainted
[  180.646479][ T6968] ------------------------------------------------------
[  180.654019][ T6968] syz.8.686/6968 is trying to acquire lock:
[  180.660134][ T6968] ffff88805a95c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  180.669548][ T6968] 
[  180.669548][ T6968] but task is already holding lock:
[  180.677513][ T6968] ffff8880170ee628 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0
[  180.686878][ T6968] 
[  180.686878][ T6968] which lock already depends on the new lock.
[  180.686878][ T6968] 
[  180.697404][ T6968] 
[  180.697404][ T6968] the existing dependency chain (in reverse order) is:
[  180.706726][ T6968] 
[  180.706726][ T6968] -> #5 (&ei->i_data_sem){++++}-{3:3}:
[  180.714488][ T6968]        down_write+0x38/0x60
[  180.719362][ T6968]        ext4_truncate+0x97f/0x10f0
[  180.725223][ T6968]        ext4_setattr+0xffe/0x19e0
[  180.730755][ T6968]        notify_change+0xbcd/0xee0
[  180.735980][ T6968]        do_truncate+0x1ac/0x240
[  180.741073][ T6968]        do_sys_ftruncate+0x31b/0x3d0
[  180.746615][ T6968]        do_syscall_64+0x4c/0xa0
[  180.751843][ T6968]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.758461][ T6968] 
[  180.758461][ T6968] -> #4 (jbd2_handle){++++}-{0:0}:
[  180.766010][ T6968]        wait_transaction_locked+0x1bb/0x270
[  180.772123][ T6968]        add_transaction_credits+0x103/0xc80
[  180.778301][ T6968]        start_this_handle+0x74d/0x15c0
[  180.783963][ T6968]        jbd2__journal_start+0x2b7/0x5a0
[  180.789733][ T6968]        jbd2_journal_start+0x26/0x30
[  180.795313][ T6968]        ocfs2_start_trans+0x3b2/0x6f0
[  180.800973][ T6968]        ocfs2_release_dquot+0x462/0xbe0
[  180.806627][ T6968]        quota_release_workfn+0x35e/0x610
[  180.812372][ T6968]        process_one_work+0x85f/0x1010
[  180.817955][ T6968]        worker_thread+0xaa6/0x1290
[  180.823540][ T6968]        kthread+0x436/0x520
[  180.828252][ T6968]        ret_from_fork+0x1f/0x30
[  180.833305][ T6968] 
[  180.833305][ T6968] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  180.842356][ T6968]        down_read+0x44/0x2e0
[  180.847066][ T6968]        ocfs2_start_trans+0x3a6/0x6f0
[  180.852664][ T6968]        ocfs2_modify_bh+0xe0/0x4c0
[  180.857953][ T6968]        ocfs2_local_read_info+0x13c8/0x1750
[  180.863947][ T6968]        dquot_load_quota_sb+0x756/0xac0
[  180.869942][ T6968]        dquot_load_quota_inode+0x2d8/0x5d0
[  180.876647][ T6968]        ocfs2_enable_quotas+0x1c5/0x490
[  180.882428][ T6968]        ocfs2_fill_super+0x3cd2/0x50f0
[  180.887995][ T6968]        mount_bdev+0x287/0x3c0
[  180.892961][ T6968]        legacy_get_tree+0xe6/0x180
[  180.898513][ T6968]        vfs_get_tree+0x88/0x270
[  180.903707][ T6968]        do_new_mount+0x24a/0xa40
[  180.909025][ T6968]        __se_sys_mount+0x2e3/0x3d0
[  180.914590][ T6968]        do_syscall_64+0x4c/0xa0
[  180.919635][ T6968]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.926257][ T6968] 
[  180.926257][ T6968] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  180.933843][ T6968]        ocfs2_start_trans+0x2a7/0x6f0
[  180.939912][ T6968]        ocfs2_acquire_dquot+0x688/0xb10
[  180.945769][ T6968]        dqget+0x778/0xeb0
[  180.950215][ T6968]        __dquot_initialize+0x3c3/0xcd0
[  180.956067][ T6968]        ocfs2_get_init_inode+0x144/0x1b0
[  180.961813][ T6968]        ocfs2_symlink+0xc39/0x27e0
[  180.967351][ T6968]        vfs_symlink+0x247/0x3d0
[  180.972418][ T6968]        do_symlinkat+0x1ab/0x6b0
[  180.977543][ T6968]        __x64_sys_symlinkat+0x95/0xa0
[  180.983405][ T6968]        do_syscall_64+0x4c/0xa0
[  180.988453][ T6968]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.995081][ T6968] 
[  180.995081][ T6968] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  181.003990][ T6968]        down_write+0x38/0x60
[  181.009071][ T6968]        ocfs2_create_local_dquot+0x199/0x1850
[  181.015640][ T6968]        ocfs2_acquire_dquot+0x7ed/0xb10
[  181.021490][ T6968]        dqget+0x778/0xeb0
[  181.026225][ T6968]        __dquot_initialize+0x3c3/0xcd0
[  181.031979][ T6968]        ocfs2_get_init_inode+0x144/0x1b0
[  181.037814][ T6968]        ocfs2_symlink+0xc39/0x27e0
[  181.043117][ T6968]        vfs_symlink+0x247/0x3d0
[  181.048175][ T6968]        do_symlinkat+0x1ab/0x6b0
[  181.053314][ T6968]        __x64_sys_symlinkat+0x95/0xa0
[  181.059184][ T6968]        do_syscall_64+0x4c/0xa0
[  181.064679][ T6968]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  181.071302][ T6968] 
[  181.071302][ T6968] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  181.079229][ T6968]        __lock_acquire+0x2c42/0x7d10
[  181.084887][ T6968]        lock_acquire+0x19e/0x400
[  181.089938][ T6968]        __mutex_lock_common+0x1e3/0x2400
[  181.095846][ T6968]        mutex_lock_nested+0x17/0x20
[  181.101262][ T6968]        dquot_commit+0x5a/0x410
[  181.106940][ T6968]        ext4_write_dquot+0x1f0/0x360
[  181.112523][ T6968]        mark_all_dquot_dirty+0xf9/0x400
[  181.118265][ T6968]        __dquot_free_space+0x7ca/0xb90
[  181.123835][ T6968]        ext4_free_blocks+0x1b2b/0x24d0
[  181.129533][ T6968]        ext4_ext_remove_space+0x1f86/0x42b0
[  181.135969][ T6968]        ext4_ext_truncate+0x192/0x240
[  181.141482][ T6968]        ext4_truncate+0xa09/0x10f0
[  181.146696][ T6968]        ext4_setattr+0xffe/0x19e0
[  181.152419][ T6968]        notify_change+0xbcd/0xee0
[  181.157811][ T6968]        do_truncate+0x1ac/0x240
[  181.162858][ T6968]        path_openat+0x2922/0x2fa0
[  181.168001][ T6968]        do_filp_open+0x1e2/0x410
[  181.173346][ T6968]        do_sys_openat2+0x150/0x4b0
[  181.178615][ T6968]        __x64_sys_creat+0x8c/0xb0
[  181.183975][ T6968]        do_syscall_64+0x4c/0xa0
[  181.189044][ T6968]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  181.195655][ T6968] 
[  181.195655][ T6968] other info that might help us debug this:
[  181.195655][ T6968] 
[  181.206344][ T6968] Chain exists of:
[  181.206344][ T6968]   &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem
[  181.206344][ T6968] 
[  181.219309][ T6968]  Possible unsafe locking scenario:
[  181.219309][ T6968] 
[  181.227038][ T6968]        CPU0                    CPU1
[  181.232412][ T6968]        ----                    ----
[  181.238052][ T6968]   lock(&ei->i_data_sem);
[  181.242516][ T6968]                                lock(jbd2_handle);
[  181.249312][ T6968]                                lock(&ei->i_data_sem);
[  181.256974][ T6968]   lock(&dquot->dq_lock);
[  181.261835][ T6968] 
[  181.261835][ T6968]  *** DEADLOCK ***
[  181.261835][ T6968] 
[  181.270449][ T6968] 5 locks held by syz.8.686/6968:
[  181.275503][ T6968]  #0: ffff88805ae08460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  181.284935][ T6968]  #1: ffff8880170ee7a0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240
[  181.295537][ T6968]  #2: ffff8880170ee940 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xdb6/0x19e0
[  181.306337][ T6968]  #3: ffff8880170ee628 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0
[  181.316738][ T6968]  #4: ffffffff8c441538 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30
[  181.326491][ T6968] 
[  181.326491][ T6968] stack backtrace:
[  181.333444][ T6968] CPU: 0 PID: 6968 Comm: syz.8.686 Not tainted syzkaller #0
[  181.341253][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  181.351982][ T6968] Call Trace:
[  181.355842][ T6968]  <TASK>
[  181.358806][ T6968]  dump_stack_lvl+0x188/0x250
[  181.363716][ T6968]  ? load_image+0x400/0x400
[  181.368510][ T6968]  ? show_regs_print_info+0x20/0x20
[  181.374072][ T6968]  ? print_circular_bug+0x12b/0x1a0
[  181.379946][ T6968]  check_noncircular+0x296/0x330
[  181.385465][ T6968]  ? add_chain_block+0x940/0x940
[  181.390606][ T6968]  ? lockdep_lock+0xf1/0x1f0
[  181.395405][ T6968]  ? mark_lock+0x94/0x320
[  181.399958][ T6968]  __lock_acquire+0x2c42/0x7d10
[  181.405048][ T6968]  ? __bfs+0x2a3/0x5c0
[  181.409315][ T6968]  ? verify_lock_unused+0x140/0x140
[  181.414645][ T6968]  ? check_noncircular+0x189/0x330
[  181.420144][ T6968]  ? add_chain_block+0x940/0x940
[  181.425098][ T6968]  ? lockdep_lock+0xf1/0x1f0
[  181.429823][ T6968]  ? lockdep_unlock+0x143/0x2e0
[  181.434896][ T6968]  lock_acquire+0x19e/0x400
[  181.439588][ T6968]  ? dquot_commit+0x5a/0x410
[  181.444496][ T6968]  ? __might_sleep+0xf0/0xf0
[  181.449493][ T6968]  ? read_lock_is_recursive+0x10/0x10
[  181.455328][ T6968]  ? mark_lock+0x94/0x320
[  181.460035][ T6968]  ? dquot_commit+0x5a/0x410
[  181.464921][ T6968]  __mutex_lock_common+0x1e3/0x2400
[  181.470141][ T6968]  ? dquot_commit+0x5a/0x410
[  181.474909][ T6968]  ? __might_sleep+0xf0/0xf0
[  181.480041][ T6968]  ? mutex_lock_io_nested+0x60/0x60
[  181.485631][ T6968]  mutex_lock_nested+0x17/0x20
[  181.490516][ T6968]  dquot_commit+0x5a/0x410
[  181.495203][ T6968]  ? __ext4_journal_start_sb+0x1bd/0x360
[  181.501309][ T6968]  ext4_write_dquot+0x1f0/0x360
[  181.506449][ T6968]  mark_all_dquot_dirty+0xf9/0x400
[  181.511862][ T6968]  __dquot_free_space+0x7ca/0xb90
[  181.517463][ T6968]  ext4_free_blocks+0x1b2b/0x24d0
[  181.522629][ T6968]  ? ext4_mb_discard_preallocations_should_retry+0x690/0x690
[  181.530304][ T6968]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  181.537058][ T6968]  ? ext4_inode_journal_mode+0x18f/0x460
[  181.542886][ T6968]  ext4_ext_remove_space+0x1f86/0x42b0
[  181.548699][ T6968]  ? ext4_ext_index_trans_blocks+0xf0/0xf0
[  181.555350][ T6968]  ? ext4_es_remove_extent+0x24f/0x3e0
[  181.561223][ T6968]  ext4_ext_truncate+0x192/0x240
[  181.566361][ T6968]  ext4_truncate+0xa09/0x10f0
[  181.571240][ T6968]  ? clear_nonspinnable+0x60/0x60
[  181.576385][ T6968]  ? up_write+0x1bb/0x420
[  181.581320][ T6968]  ? __ext4_mark_inode_dirty+0x700/0x700
[  181.587616][ T6968]  ext4_setattr+0xffe/0x19e0
[  181.592413][ T6968]  ? ext4_write_inode+0x5f0/0x5f0
[  181.597522][ T6968]  notify_change+0xbcd/0xee0
[  181.603048][ T6968]  do_truncate+0x1ac/0x240
[  181.608021][ T6968]  ? rcu_lock_release+0x20/0x20
[  181.613221][ T6968]  ? ima_bprm_check+0x200/0x200
[  181.618629][ T6968]  ? bpf_lsm_path_truncate+0x5/0x10
[  181.624044][ T6968]  path_openat+0x2922/0x2fa0
[  181.628862][ T6968]  ? do_filp_open+0x410/0x410
[  181.633670][ T6968]  do_filp_open+0x1e2/0x410
[  181.638214][ T6968]  ? vfs_tmpfile+0x300/0x300
[  181.642828][ T6968]  ? _raw_spin_unlock+0x24/0x40
[  181.647834][ T6968]  ? alloc_fd+0x598/0x630
[  181.652453][ T6968]  do_sys_openat2+0x150/0x4b0
[  181.657151][ T6968]  ? do_sys_open+0xe0/0xe0
[  181.661685][ T6968]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  181.667863][ T6968]  ? lock_chain_count+0x20/0x20
[  181.672730][ T6968]  ? vtime_user_exit+0x2c8/0x3e0
[  181.677797][ T6968]  __x64_sys_creat+0x8c/0xb0
[  181.682502][ T6968]  do_syscall_64+0x4c/0xa0
[  181.687032][ T6968]  ? clear_bhb_loop+0x30/0x80
[  181.691897][ T6968]  ? clear_bhb_loop+0x30/0x80
[  181.696600][ T6968]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  181.702704][ T6968] RIP: 0033:0x7f9852e6a799
[  181.707259][ T6968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.728030][ T6968] RSP: 002b:00007f98510c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  181.737213][ T6968] RAX: ffffffffffffffda RBX: 00007f98530e3fa0 RCX: 00007f9852e6a799
[  181.746075][ T6968] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000e40
[  181.754749][ T6968] RBP: 00007f9852f00c99 R08: 0000000000000000 R09: 0000000000000000
[  181.763214][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.771573][ T6968] R13: 00007f98530e4038 R14: 00007f98530e3fa0 R15: 00007ffd909921a8
[  181.781557][ T6968]  </TASK>
[  181.791711][ T4202] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  181.807659][   T26] audit: type=1800 audit(1774537743.874:14): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.686" name="file2" dev="loop8" ino=16 res=0 errno=0
[  181.864173][ T5227] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  182.112150][ T5227] usb 6-1: Using ep0 maxpacket: 32
[  182.124666][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  182.235876][ T5227] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  182.248580][ T5227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.266742][ T5227] usb 6-1: config 0 descriptor??
[  182.317130][ T5227] gspca_main: sunplus-2.14.0 probing 041e:400b
[  182.461831][ T6884] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  182.476106][ T6884] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  182.487966][ T6884] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  182.501679][ T6884] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  182.583289][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.605980][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  182.618700][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  182.630583][ T6884] 8021q: adding VLAN 0 to HW filter on device team0
[  182.646248][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  182.657397][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  182.666404][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.673560][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.685814][ T4272] Bluetooth: hci3: command 0x041b tx timeout
[  182.692896][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  182.701303][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  182.712539][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  182.721451][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.728720][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.738776][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  182.758947][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  182.768771][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  182.779384][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  182.788534][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  182.798279][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  182.822684][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  182.835183][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  182.846718][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  182.857683][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  182.869144][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.986474][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.994649][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  183.011699][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.037052][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  183.048961][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.080226][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.089525][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.106263][ T6884] device veth0_vlan entered promiscuous mode
[  183.121109][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.130891][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.149135][ T6884] device veth1_vlan entered promiscuous mode
[  183.189517][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  183.203204][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  183.211919][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  183.224331][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.239286][ T6884] device veth0_macvtap entered promiscuous mode
[  183.258325][ T6884] device veth1_macvtap entered promiscuous mode
[  183.287544][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.303903][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.317438][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.329115][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.340871][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.352781][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.363411][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.374697][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.385061][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.396554][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.406691][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.419581][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.431025][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.442105][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.453359][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.478852][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  183.489339][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  183.498738][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  183.507640][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  183.519156][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.533246][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.545163][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.556311][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.567136][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.578320][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.591169][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.604193][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.615632][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.628482][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.639824][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.654830][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.666271][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.677795][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.689655][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.701268][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  183.711017][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  183.724899][ T6884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.734492][ T6884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.746486][ T6884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.756451][ T6884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.797100][ T6884] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht'
[  183.825068][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.832390][ T5227] gspca_sunplus: reg_w_riv err -71
[  183.838978][ T5227] sunplus: probe of 6-1:0.0 failed with error -71
[  183.848698][ T6884] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht'
[  183.849363][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.871488][ T5227] usb 6-1: USB disconnect, device number 6
[  183.886688][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.919373][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.928462][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.939437][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  184.763035][ T5227] Bluetooth: hci3: command 0x040f tx timeout
[  185.162185][  T144] wlan1: Trigger new scan to find an IBSS to join
[  186.842633][ T5227] Bluetooth: hci3: command 0x0419 tx timeout
[  188.126794][ T4640] wlan1: Trigger new scan to find an IBSS to join
[  189.052468][ T4640] wlan1: Creating new IBSS network, BSSID 22:32:62:bd:ce:5b