last executing test programs:

1m26.840735779s ago: executing program 2 (id=697):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfa, 0x1528, &(0x7f0000000140)="$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")
capset(&(0x7f0000000080)={0x20080522}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

1m26.422857559s ago: executing program 2 (id=699):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000400)=0x1)

1m26.067182158s ago: executing program 2 (id=704):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000200)="4000000005000140140000", 0xb)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

1m25.864421843s ago: executing program 2 (id=705):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1444c, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="68dc27454d2e2e9040c99f2221a7ac0d9b621736f9", @ANYRES16, @ANYRES16], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

1m25.078512102s ago: executing program 2 (id=710):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x8946, 0x0)

1m24.3565244s ago: executing program 2 (id=715):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x3, 0x0, @loopback, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0)

1m23.991505028s ago: executing program 32 (id=715):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x3, 0x0, @loopback, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0)

1m14.633975567s ago: executing program 1 (id=760):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)

1m14.407855113s ago: executing program 1 (id=761):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x20044044}, 0xd0)
writev(r0, &(0x7f0000000040), 0x2)

1m13.987568213s ago: executing program 1 (id=763):
syz_usb_connect$uac3(0x2, 0x9b, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x0, 0xb0, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x25, 0xfffffff4}, [@cluster_info_segment={0x6, 0x20, 0x1, 0x4, 0xa}, @selector_unit={0x9, 0x24, 0xc, 0x33, 0x4, "574314e7"}, @source_unit={0xc, 0x24, 0xb, 0xb4, 0x0, 0x7ff, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0xc, 0x5, {0xa, 0x25, 0x25, 0x9, 0x8, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3b, 0x2e, 0xdf, {0xa, 0x25, 0x25, 0x6, 0x9, 0x13}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

1m12.326663304s ago: executing program 1 (id=774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)

1m12.008563631s ago: executing program 1 (id=776):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0x1, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]})
pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000280)="519e", 0x2}], 0x1, 0x1000, 0x81)

1m11.635284761s ago: executing program 1 (id=780):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

56.525319129s ago: executing program 33 (id=780):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

49.907602291s ago: executing program 0 (id=865):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pwritev2(r0, 0x0, 0x0, 0x5a00, 0x0, 0x3)

48.394599178s ago: executing program 0 (id=870):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000380)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0xdc}}, {@nodatasum}, {@noacl}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@ssd}, {}, {@acl}, {@datacow}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x300481, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c6e66732c756e695f786c6174653d302c757466383d27ab71756965742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c757466383d302c757466383d302c636865636b3d7374726963742c636f6465706167653d3737352c696f636861727365743d63703836342c6e6f6e756d7461696c3d302c646d61736b3d3030303030303030303030303030303030303030342c756e695f786c6174653d302c000000"], 0x1, 0x2c0, &(0x7f0000000e80)="$eJzs3b9qLGUUAPAzm93ZvVrsFlYiOKCF1eXmtjYb5AbEVIYt1EKDSUCyi5BAwD+4prK1sbDwCQTBB7HxDQRbwc4IgZGZncnuJps1K9mI5vcr7j355pyZM5OPZFLk5IOXRkf7WRyeff5LdDpJNPrRj/MketGI2pcxp/91AAD/Zed5Hr/nE6vUJRHRWV9bAMAa3e77f3Ma/ngvbQEAa7T7zrtvbe3sPHs7yzqxPfrqdFD8ZF/8Pzm+dRgfxTAO4kl04yKifFFoRfm2UISPqvNkWdaLV0fj00FROXr/p2p967eIsn4zutErly7fNop/t9/cebaZTczUj4s+nquu3y/qn0Y3Xrgsnqt/uqA+Bmm89spM/4+jGz9/GB/HMPbLJqb1X2xm2Rv5N3989l7RXlGfjE8H7TJvKt+4x08LAAAAAAAAAAAAAAAAAAAAAAD/c4+r2TntKOf3FEvV/J2Ni+KDVmS13vx8nkl9Up9odj5QnufjPL6r5+s8ybIsrxKn9c14sTk7WBAAAAAAAAAAAAAAAAAAAAAerpNPPj3aGw4Pju8kqKcBNCPiz92If3qe/szKy7E8uV1dc284bFThfE5zdiU26pwkYmkbxU3c0WNZEpSXeHSt5yr4/odVT9j5+5zW4mutFNRzG27IqXfX0V6y+Bm2o17pVJvk2zRimpPedOarQXrToTxW2X7pwkPdlZ9P+nwZjJfkRLKssdd/nTy5aiW5ehdp+VQXlreqYKb8yt641X6OzqT8+teKxLQOAAAAAAAAAAAAAAAAAABYq+lv/y44eLa0tJG319YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyr6d//XyEYV8W3SE7j+ORfvkUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAegL8CAAD//9eBVL4=")
openat(0xffffffffffffff9c, 0x0, 0x129b43, 0x18)
write$UHID_INPUT(r0, 0x0, 0x0)

45.710261053s ago: executing program 0 (id=875):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x800, 0x0, 0x3, 0x3, 0x4, 0x6}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e26, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty}, 0x1c)

44.21887431s ago: executing program 0 (id=878):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x32040a7, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='s'], 0x0, 0x0, 0x2)

43.460037869s ago: executing program 0 (id=882):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x58, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0xffff, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfffc}, @md5sig={0x13, 0x12, "47e775eabcd164c11365cc2789fc33c9"}, @fastopen={0x22, 0x7, "44cadfe0ac"}, @md5sig={0x13, 0x12, "aeeffa806b9f203870f701b10213eb43"}, @md5sig={0x13, 0x12, "436f7f1cc9584fae520ef0d03d3dd603"}]}}}}}}}}, 0x0)

39.522968335s ago: executing program 0 (id=898):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x5, 0x0, {0x7fffffff, 0x1, 0x0, 0xc, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x6, 0x4}}]}, 0x48}}, 0x810)

38.770477993s ago: executing program 34 (id=898):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x5, 0x0, {0x7fffffff, 0x1, 0x0, 0xc, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x6, 0x4}}]}, 0x48}}, 0x810)

11.220076186s ago: executing program 3 (id=1002):
syz_open_procfs(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$cont(0x15, r0, 0x6a, 0x200008)

10.790936246s ago: executing program 3 (id=1006):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x47a, &(0x7f0000000e00)="$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")
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
listxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=""/130, 0x82)

9.854128709s ago: executing program 3 (id=1013):
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='-bond0', 0x6)

9.166328816s ago: executing program 4 (id=1017):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040))

8.474341203s ago: executing program 3 (id=1021):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1444c, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="68dc27454d2e2e9040c99f2221a7ac0d9b621736f9", @ANYRES16, @ANYRES16], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

8.452762983s ago: executing program 5 (id=1022):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)

8.069830243s ago: executing program 5 (id=1023):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f00000000c0)={0x29, 0x300000000})

7.7603628s ago: executing program 3 (id=1024):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./bus\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x1, 0x1530, &(0x7f0000002f80)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)
open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)

7.483095447s ago: executing program 7 (id=1025):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022400010000000009040000020300000009210000000122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022190000000501150025ff090491010901a102750896010e09309102c0"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x1)

7.258947943s ago: executing program 3 (id=1026):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f2, 0x0, 0x6}]})

6.583022349s ago: executing program 35 (id=1026):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f2, 0x0, 0x6}]})

6.104940831s ago: executing program 5 (id=1030):
syz_usb_connect$uac2(0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
faccessat(0xffffffffffffffff, 0x0, 0x8)

5.962899774s ago: executing program 4 (id=1031):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0xffffffffffffff4e, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

5.172051534s ago: executing program 4 (id=1033):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ftruncate(0xffffffffffffffff, 0x6000000)
unshare(0x28000600)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r6 = syz_open_pts(r5, 0xea283)
dup3(r6, r5, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)

4.848316942s ago: executing program 7 (id=1035):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10)
syz_emit_ethernet(0xdd, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0)

4.4908046s ago: executing program 7 (id=1036):
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ftruncate(0xffffffffffffffff, 0x6000000)
unshare(0x28000600)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x3, 0xfffa}, 0x3a, [0x8000, 0x401, 0xb, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x7fff, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x7, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x7, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xa, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0x9, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0xbe0f, 0x8a6, 0x7, 0xa, 0xffffffff, 0x5, 0x20, 0x120000, 0x2008077f, 0x2, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x2000004, 0xffff, 0x5, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xe, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x1, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r6 = syz_open_pts(r5, 0xea283)
dup3(r6, r5, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)

4.446300601s ago: executing program 6 (id=1037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x40)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x8848, @void, @void, @val={0x3, 0x1, 0x5c}, @void, @val={0x6, 0x2, 0x10}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40)

3.457207436s ago: executing program 7 (id=1038):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
userfaultfd(0x80801)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)

3.358948128s ago: executing program 6 (id=1039):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0)

2.881505499s ago: executing program 6 (id=1040):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @private2, {[@routing={0x3b, 0x0, 0x0, 0x1}]}}}}}, 0x0)

2.838251571s ago: executing program 7 (id=1041):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGPHYS(r1, 0x4008c001, 0x0)

2.490886799s ago: executing program 6 (id=1042):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x4305}, @val={0x4, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x12, 0xb, 0x5c, 0x0, @rand_addr=0x64010101, @multicast1, {[@timestamp={0x44, 0x4, 0xe6, 0x0, 0x7}]}}, "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"}}, 0xfce)

2.218627396s ago: executing program 4 (id=1043):
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
clock_settime(0x1ed5d7404, &(0x7f0000000240)={0x77359400})

2.0631352s ago: executing program 4 (id=1044):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ftruncate(0xffffffffffffffff, 0x6000000)
unshare(0x28000600)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x3, 0xfffa}, 0x3a, [0x8000, 0x401, 0xb, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x7fff, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x7, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x7, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xa, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0x9, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0xbe0f, 0x8a6, 0x7, 0xa, 0xffffffff, 0x5, 0x20, 0x120000, 0x2008077f, 0x2, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x2000004, 0xffff, 0x5, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xe, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x1, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r6 = syz_open_pts(r5, 0xea283)
dup3(r6, r5, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)

1.65090778s ago: executing program 5 (id=1045):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1.019846465s ago: executing program 6 (id=1046):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00')
read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
read$FUSE(r0, &(0x7f0000005dc0)={0x2020}, 0x2020)

973.154296ms ago: executing program 4 (id=1047):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x0, 0xfffffffd, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135)
syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0)
write$UHID_INPUT2(r0, &(0x7f00000006c0)={0xc, {0x7, "20004c5bf5728f"}}, 0xd)

875.068859ms ago: executing program 5 (id=1048):
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='-bond0', 0x6)

644.817614ms ago: executing program 6 (id=1049):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x2f}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x4, 0x0, 0x18, {[@window={0x9, 0x3}, @exp_fastopen={0xfe, 0xe, 0xf989, "fc565b1d1e1e3ba2aa68"}]}}}}}}, 0x4a)

523.677157ms ago: executing program 7 (id=1050):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)

0s ago: executing program 5 (id=1051):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x40, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5fe}]}, 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

ndex 0 descriptor too short (expected 16456, got 72)
[  194.493268][ T4324] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  194.501450][ T4325] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  194.532507][ T4325] usb 4-1: USB disconnect, device number 10
[  194.542555][ T4470] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  194.558244][ T4470] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  194.568716][ T4470] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  194.579915][ T4470] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  194.589360][ T4470] usb 1-1: config 0 has no interface number 0
[  194.595872][ T4470] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  194.614584][ T4470] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  194.634796][ T4470] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  194.648606][ T4470] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  194.662061][ T4470] usb 1-1: config 0 interface 125 has no altsetting 0
[  194.679391][ T4470] usb 1-1: config 0 interface 125 has no altsetting 2
[  194.711389][ T4470] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  194.742152][ T4470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.768529][ T4324] usb 3-1: Using ep0 maxpacket: 32
[  194.775739][ T4324] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  194.785372][ T4324] usb 3-1: config 0 has no interface number 0
[  194.792126][ T4324] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  194.804954][ T4324] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  194.808913][ T4470] usb 1-1: Product: syz
[  194.816064][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.818199][ T4470] usb 1-1: Manufacturer: syz
[  194.827278][ T4324] usb 3-1: Product: syz
[  194.845517][ T4324] usb 3-1: Manufacturer: syz
[  194.853840][ T4324] usb 3-1: SerialNumber: syz
[  194.864865][ T4470] usb 1-1: SerialNumber: syz
[  194.879652][ T4324] usb 3-1: config 0 descriptor??
[  194.886217][ T4470] usb 1-1: config 0 descriptor??
[  194.887495][ T5552] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  194.913370][ T4470] usb 1-1: selecting invalid altsetting 2
[  194.981732][ T4895] udevd[4895]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  195.115832][ T5552] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  195.132321][ T5570] loop3: detected capacity change from 0 to 512
[  195.195715][   T27] audit: type=1800 audit(1791217741.307:4): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.400" name="bus" dev="loop3" ino=1048655 res=0 errno=0
[  195.327582][    C1] usb 1-1: async_complete: urb error -71
[  195.333383][    C1] usb 1-1: async_complete: urb error -71
[  195.339115][    C1] usb 1-1: async_complete: urb error -71
[  195.344840][    C1] usb 1-1: async_complete: urb error -71
[  195.350680][ T4470] get_1284_register: usb error -71
[  195.389258][ T4470] usb 1-1: USB disconnect, device number 11
[  195.415792][ T5573] loop4: detected capacity change from 0 to 8192
[  195.476929][ T5573] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  195.491686][ T5573] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  195.502064][ T5573] REISERFS (device loop4): using ordered data mode
[  195.509096][ T5573] reiserfs: using flush barriers
[  195.515955][ T5573] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  195.533147][ T5573] REISERFS (device loop4): checking transaction log (loop4)
[  195.544260][ T5573] REISERFS (device loop4): Using r5 hash to sort names
[  195.551518][ T5573] REISERFS (device loop4): using 3.5.x disk format
[  195.559160][ T5573] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  195.615096][ T5579] loop3: detected capacity change from 0 to 512
[  195.643085][ T5579] EXT4-fs: Ignoring removed nomblk_io_submit option
[  195.694651][ T5579] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  195.711570][ T5579] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  195.778978][ T4324] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  195.823447][ T4324] asix: probe of 3-1:0.188 failed with error -71
[  195.858224][ T4324] usb 3-1: USB disconnect, device number 9
[  196.099422][ T5591] loop0: detected capacity change from 0 to 16
[  196.155151][ T5591] erofs: (device loop0): mounted with root inode @ nid 36.
[  196.178150][ T5591] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  196.196733][ T5591] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  196.343885][ T4468] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  196.388722][ T4324] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  196.446021][ T5597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.402'.
[  196.470028][ T5586] loop4: detected capacity change from 0 to 32768
[  196.516941][ T5586] JBD2: Ignoring recovery information on journal
[  196.538747][ T4468] usb 2-1: Using ep0 maxpacket: 16
[  196.546849][ T4468] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.558708][ T4468] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.568936][ T4468] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  196.582612][ T4468] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.589769][ T4468] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  196.598959][ T4324] usb 4-1: Using ep0 maxpacket: 16
[  196.604500][ T4468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.612469][ T4324] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.612528][ T4324] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.612552][ T4324] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  196.612581][ T4324] usb 4-1: config 0 interface 0 has no altsetting 0
[  196.612643][ T4324] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  196.664051][ T4468] usb 2-1: config 0 descriptor??
[  196.705443][ T5586] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  196.730763][ T4325] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  196.775927][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.806988][ T4324] usb 4-1: config 0 descriptor??
[  196.920571][ T4325] usb 1-1: config 0 interface 0 has no altsetting 0
[  196.937501][ T4325] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  196.954973][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.976161][ T4325] usb 1-1: config 0 descriptor??
[  197.046370][ T4274] ocfs2: Unmounting device (7,4) on (node local)
[  197.245909][ T4324] hid (null): unknown global tag 0xd
[  197.251622][ T4324] hid (null): invalid report_count 32411
[  197.295080][ T4468] usb 2-1: USB disconnect, device number 9
[  197.318859][ T4469] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  197.378794][ T5611] loop4: detected capacity change from 0 to 512
[  197.394228][ T5611] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  197.413239][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.421739][ T5611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  197.421837][ T5611] System zones: 1-12
[  197.436631][ T5611] EXT4-fs (loop4): orphan cleanup on readonly fs
[  197.476308][ T5611] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.407: attempt to clear invalid blocks 1024 len 1
[  197.480360][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.498599][ T4324] usb 4-1: USB disconnect, device number 11
[  197.512146][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x4
[  197.520040][ T4469] usb 3-1: not running at top speed; connect to a high speed hub
[  197.546648][ T4469] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  197.556488][ T4469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.565145][ T5611] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.407: bg 0: block 361: padding at end of block bitmap is not set
[  197.566029][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.579894][ T4469] usb 3-1: Product: syz
[  197.579915][ T4469] usb 3-1: Manufacturer: syz
[  197.579931][ T4469] usb 3-1: SerialNumber: syz
[  197.595034][ T4469] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected
[  197.619742][ T4469] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  197.629299][ T5611] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  197.645234][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.651450][ T5611] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.407: invalid indirect mapped block 1811939328 (level 0)
[  197.662947][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.675114][ T4469] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  197.687205][ T4469] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  197.689687][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.702912][ T5611] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.407: invalid indirect mapped block 2 (level 2)
[  197.723734][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.732471][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.739946][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.748175][ T4469] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  197.750553][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.763579][ T4325] wacom 0003:056A:00D0.000D: unknown main item tag 0x0
[  197.771622][ T4325] wacom 0003:056A:00D0.000D: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[  197.782973][ T5611] EXT4-fs (loop4): 1 truncate cleaned up
[  197.791804][ T5611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  197.803965][ T4325] wacom 0003:056A:00D0.000D: hidraw0: USB HID v0.81 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0
[  197.844793][ T4325] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.000D/input/input17
[  197.950558][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  198.074241][ T5616] loop4: detected capacity change from 0 to 128
[  198.106323][ T5616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  198.133943][ T4325] usb 1-1: USB disconnect, device number 12
[  198.154099][ T5616] hpfs: filesystem error: improperly stopped
[  198.168844][ T5616] hpfs: You really don't want any checks? You are crazy...
[  198.207123][ T5616] hpfs: hpfs_map_sector(): read error
[  198.226617][ T5616] hpfs: code page support is disabled
[  198.242604][ T5616] hpfs: hpfs_map_4sectors(): unaligned read
[  198.263210][ T5616] hpfs: hpfs_map_4sectors(): unaligned read
[  198.282645][ T5616] hpfs: filesystem error: unable to find root dir
[  198.486737][ T5621] fido_id[5621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  198.563318][ T5626] loop3: detected capacity change from 0 to 256
[  198.619966][ T5628] loop0: detected capacity change from 0 to 16
[  198.649163][ T5626] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  198.677747][ T5628] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  198.702619][ T5630] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  199.005806][ T5637] loop0: detected capacity change from 0 to 2048
[  199.091581][ T5637] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  199.192521][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  199.228528][ T4469] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  199.418853][ T4469] usb 4-1: Using ep0 maxpacket: 32
[  199.426424][ T4469] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  199.452039][ T4469] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  199.463787][ T4469] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  199.475718][ T4469] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  199.490143][ T4469] usb 4-1: config 0 interface 0 has no altsetting 0
[  199.505727][ T4469] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  199.531976][ T4469] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  199.546842][ T4469] usb 4-1: Product: syz
[  199.553065][ T4469] usb 4-1: Manufacturer: syz
[  199.557820][ T4469] usb 4-1: SerialNumber: syz
[  199.578347][ T4469] usb 4-1: config 0 descriptor??
[  199.593290][ T4469] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  199.633084][ T4469] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  199.934857][ T5661] loop0: detected capacity change from 0 to 512
[  199.964835][ T4469] usb 4-1: USB disconnect, device number 12
[  199.971438][ T5638] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  199.979156][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  200.029304][ T5661] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  200.080241][ T4469] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  200.130186][ T5661] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  200.246379][ T4470] usb 3-1: USB disconnect, device number 10
[  200.254806][ T5661] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  200.317907][ T4470] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  200.333790][ T5661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  200.361660][ T5661] System zones: 0-2, 18-18, 34-34
[  200.401981][ T4470] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  200.434299][ T5661] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.428: bad orphan inode 15
[  200.478089][ T4470] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  200.495752][ T5661] ext4_test_bit(bit=14, block=18) = 1
[  200.505326][ T5661] is_bad_inode(inode)=0
[  200.531695][ T4470] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  200.547621][ T5661] NEXT_ORPHAN(inode)=2264924160
[  200.554115][ T5661] max_ino=32
[  200.557371][ T5661] i_nlink=0
[  200.571214][ T4470] keyspan 3-1:1.0: device disconnected
[  200.593426][ T5661] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.428: corrupted inode contents
[  200.622383][ T5661] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #15: comm syz.0.428: mark_inode_dirty error
[  200.634414][ T5661] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.428: corrupted inode contents
[  200.649176][ T5661] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2950: inode #15: comm syz.0.428: mark_inode_dirty error
[  200.668118][ T5661] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2953: inode #15: comm syz.0.428: mark inode dirty (error -117)
[  200.702169][ T5661] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117)
[  200.740248][ T5661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  200.766082][ T5659] loop4: detected capacity change from 0 to 131072
[  200.781848][ T5659] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0)
[  200.791393][ T5659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  200.805802][ T5659] F2FS-fs (loop4): invalid crc value
[  200.831426][ T5659] F2FS-fs (loop4): Found nat_bits in checkpoint
[  200.877334][ T5659] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  200.886269][ T5659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  200.908098][ T5659] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4
[  200.988571][ T4470] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  201.089321][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  201.191334][ T4470] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.222597][ T4470] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  201.254676][ T4470] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  201.272618][ T4470] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  201.308593][ T4470] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  201.317723][ T4470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.766365][ T4470] gud 3-1:1.0: Failed to get properties (error=-5)
[  202.774611][ T4470] gud: probe of 3-1:1.0 failed with error -5
[  202.798829][ T4470] usb 3-1: USB disconnect, device number 11
[  202.929735][ T5691] netlink: 'syz.0.433': attribute type 13 has an invalid length.
[  203.593249][ T5704] loop4: detected capacity change from 0 to 16
[  203.660280][ T5704] erofs: (device loop4): mounted with root inode @ nid 36.
[  203.694432][ T5704] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89
[  203.723591][ T5704] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89
[  203.790604][ T5704] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89
[  203.878799][ T5704] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89
[  203.905581][ T4468] corsair-cpro 0003:1B1C:0C10.000E: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  203.919102][ T5704] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89
[  203.929289][ T5704] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  203.937900][   T27] audit: type=1800 audit(1791217750.047:5): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.439" name="file2" dev="loop4" ino=89 res=0 errno=0
[  203.959827][ T5715] corsair-cpro 0003:1B1C:0C10.000E: Event data for report 0 was too short (16 vs 1)
[  203.991812][ T4468] corsair-cpro: probe of 0003:1B1C:0C10.000E failed with error -71
[  204.225470][ T5716] fido_id[5716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  204.265462][ T5718] loop2: detected capacity change from 0 to 4096
[  204.412185][ T5718] ntfs3: loop2: Failed to load $Extend.
[  204.874822][ T5730] loop4: detected capacity change from 0 to 164
[  205.036681][ T5734] loop2: detected capacity change from 0 to 512
[  205.092381][ T5734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.160250][ T5734] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.453: iget: bad i_size value: 38620345925642
[  205.200440][ T5734] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.453: couldn't read orphan inode 15 (err -117)
[  205.237260][ T5739] loop0: detected capacity change from 0 to 1024
[  205.254199][ T5734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  205.358048][ T5742] EXT4-fs (loop2): shut down requested (1)
[  205.596420][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  205.816315][ T5752] loop4: detected capacity change from 0 to 512
[  205.857828][ T5752] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  206.032311][ T5727] loop3: detected capacity change from 0 to 32768
[  206.101763][ T5727] XFS (loop3): Mounting V5 Filesystem
[  206.271259][ T5727] XFS (loop3): Ending clean mount
[  206.313576][ T5727] XFS (loop3): Quotacheck needed: Please wait.
[  206.397746][ T5727] XFS (loop3): Quotacheck: Done.
[  206.438656][ T4284] Bluetooth: hci0: command 0x0406 tx timeout
[  206.444752][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  206.451413][ T4294] Bluetooth: hci1: command 0x0406 tx timeout
[  206.457469][ T4294] Bluetooth: hci2: command 0x0406 tx timeout
[  206.566004][ T4283] XFS (loop3): Unmounting Filesystem
[  206.862068][ T5774] loop4: detected capacity change from 0 to 32768
[  206.878625][ T4468] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  207.078899][ T4470] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  207.093862][ T4468] usb 3-1: Using ep0 maxpacket: 32
[  207.101444][ T4468] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  207.133907][ T4468] usb 3-1: config 0 has no interface number 0
[  207.146459][ T4468] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  207.175223][ T4468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.188198][ T4468] usb 3-1: Product: syz
[  207.195155][ T4468] usb 3-1: Manufacturer: syz
[  207.204728][ T4468] usb 3-1: SerialNumber: syz
[  207.225772][ T4468] usb 3-1: config 0 descriptor??
[  207.247638][ T4468] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  207.298641][ T4470] usb 1-1: Using ep0 maxpacket: 32
[  207.327126][ T4470] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  207.408669][ T4470] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  207.444885][ T4470] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  207.465565][ T4468] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  207.495597][ T4468] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  207.512852][ T4470] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  207.563508][ T4470] usb 1-1: config 0 interface 0 has no altsetting 0
[  207.597846][ T4470] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  207.626763][ T4470] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  207.646942][ T4470] usb 1-1: Product: syz
[  207.654409][ T4470] usb 1-1: Manufacturer: syz
[  207.687560][ T4470] usb 1-1: SerialNumber: syz
[  207.703815][ T4470] usb 1-1: config 0 descriptor??
[  207.716983][ T4470] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  207.753360][ T4470] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  207.872864][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  207.886497][   T14] usb 3-1: USB disconnect, device number 12
[  207.912208][   T14] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  207.954630][   T14] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  208.037357][ T5781] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  208.055392][ T4468] usb 1-1: USB disconnect, device number 13
[  208.055460][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  208.079191][ T4468] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  208.095665][   T14] quatech2 3-1:0.51: device disconnected
[  208.142078][ T5795] loop4: detected capacity change from 0 to 256
[  208.193410][ T5797] loop3: detected capacity change from 0 to 2048
[  208.206614][   T27] audit: type=1800 audit(1791217754.317:6): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.473" name="file1" dev="loop4" ino=1048658 res=0 errno=0
[  208.231833][ T5795] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  208.259471][ T5797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.279154][ T5795] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  208.582832][ T5802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  208.689992][ T5802] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  208.792051][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  209.024069][ T5818] set_capacity_and_notify: 1 callbacks suppressed
[  209.024091][ T5818] loop3: detected capacity change from 0 to 512
[  209.183498][ T5818] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  209.250566][ T5818] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.483: bad orphan inode 11
[  209.279628][ T5818] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  209.326546][ T5818] EXT4-fs error (device loop3): __ext4_new_inode:1083: comm syz.3.483: reserved inode found cleared - inode=18
[  209.364728][ T5818] CacheFiles: mkdir cache failed with error -28
[  209.374847][ T5818] CacheFiles: Failed to register: -28
[  209.574145][ T5814] loop2: detected capacity change from 0 to 32768
[  209.629113][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  209.736753][ T5814] XFS (loop2): Mounting V5 Filesystem
[  210.112204][ T5814] XFS (loop2): Ending clean mount
[  210.236451][ T5814] XFS (loop2): Quotacheck needed: Please wait.
[  210.335229][ T5814] XFS (loop2): Quotacheck: Done.
[  210.722942][ T4276] XFS (loop2): Unmounting Filesystem
[  210.747039][ T5860] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  211.025873][ T5866] loop4: detected capacity change from 0 to 4096
[  211.040002][ T5866] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  211.248573][ T4468] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  211.526629][ T4468] usb 2-1: Using ep0 maxpacket: 8
[  211.545886][ T4468] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  211.595266][ T4468] usb 2-1: config 179 has no interface number 0
[  211.616562][ T4468] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  211.634031][ T5873] jffs2: notice: (5873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  211.650727][ T4468] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  211.674357][ T4468] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  211.707552][ T4468] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  211.734891][ T4468] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  211.773718][ T4468] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  211.798559][ T4468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.820421][ T5868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  211.948504][ T4325] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  212.326296][ T4325] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  213.321470][ T4468] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20
[  213.577081][ T5890] loop4: detected capacity change from 0 to 256
[  214.042575][ T5890] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  214.222582][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  214.230940][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  214.243063][ T4342] usb 2-1: USB disconnect, device number 10
[  214.257302][ T4342] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  214.477331][ T5890] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.534269][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.968537][ T4325] usb 1-1: config 0 descriptor??
[  215.975583][ T4325] usb 1-1: can't set config #0, error -71
[  215.982847][ T4325] usb 1-1: USB disconnect, device number 14
[  216.523638][ T5885] netlink: 'syz.3.507': attribute type 13 has an invalid length.
[  216.688651][ T4327] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  216.733063][ T5909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.515'.
[  216.878498][ T4327] usb 2-1: Using ep0 maxpacket: 32
[  216.886825][ T4327] usb 2-1: unable to get BOS descriptor or descriptor too short
[  216.900319][ T4327] usb 2-1: config 1 interface 0 has no altsetting 0
[  216.910638][ T5914] tap0: tun_chr_ioctl cmd 1074025673
[  216.929706][ T4327] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40
[  216.948629][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.956798][ T4327] usb 2-1: Product: syz
[  216.976157][ T4327] usb 2-1: Manufacturer: syz
[  216.988663][ T4327] usb 2-1: SerialNumber: syz
[  217.095571][ T5917] loop4: detected capacity change from 0 to 512
[  217.219929][ T4327] usbhid 2-1:1.0: can't add hid device: -71
[  217.225994][ T4327] usbhid: probe of 2-1:1.0 failed with error -71
[  217.276468][ T4327] usb 2-1: USB disconnect, device number 11
[  217.474572][ T5907] loop2: detected capacity change from 0 to 32768
[  218.441111][   T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  218.625345][ T5931] loop3: detected capacity change from 0 to 131072
[  218.634204][ T5931] F2FS-fs (loop3): invalid crc value
[  218.664160][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.703527][   T14] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  218.725893][ T5931] F2FS-fs (loop3): Found nat_bits in checkpoint
[  218.731321][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  218.757888][   T14] usb 1-1: Product: syz
[  218.767872][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout
[  218.777756][   T14] usb 1-1: Manufacturer: syz
[  218.787834][ T4284] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  218.806209][ T5931] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  218.811442][   T14] usb 1-1: selecting invalid altsetting 1
[  218.819679][   T14] dvb_ttusb_budget: ttusb_init_controller: error
[  218.826071][   T14] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  218.930476][ T5947] loop2: detected capacity change from 0 to 512
[  219.001788][ T5947] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: comm syz.2.531: inode #196608: comm syz.2.531: iget: illegal inode #
[  219.026656][ T5927] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  219.071230][ T5947] EXT4-fs (loop2): Remounting filesystem read-only
[  219.088552][ T5947] EXT4-fs (loop2): no journal found
[  219.094600][ T5947] EXT4-fs (loop2): can't get journal size
[  219.104030][ T5951] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  219.136916][   T14] DVB: Unable to find symbol cx22700_attach()
[  219.137594][ T5947] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  219.189685][ T5947] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  219.197403][ T5947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  219.357521][ T5947] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 4: comm syz.2.531: path /88/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0
[  219.427318][   T14] DVB: Unable to find symbol tda10046_attach()
[  219.434811][   T14] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  219.457310][   T14] usb 1-1: USB disconnect, device number 15
[  219.471170][ T5947] EXT4-fs (loop2): Remounting filesystem read-only
[  219.598377][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  220.054884][ T5968] loop0: detected capacity change from 0 to 164
[  220.078334][ T5970] Bluetooth: hci0: unsupported parameter 5135
[  220.128553][ T5970] Bluetooth: hci0: unsupported parameter 8192
[  220.134871][ T5970] Bluetooth: hci0: unsupported parameter 5135
[  220.167828][ T5970] Bluetooth: hci0: unsupported parameter 8192
[  220.395370][ T5980] loop2: detected capacity change from 0 to 64
[  220.457390][ T5980] hfs: request for non-existent node 131072 in B*Tree
[  220.468486][   T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  220.497795][ T5980] hfs: request for non-existent node 131072 in B*Tree
[  220.516444][ T5982] loop4: detected capacity change from 0 to 128
[  220.690347][   T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.714623][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  220.915382][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  220.925813][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  220.935750][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  220.955844][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  220.969419][   T14] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  220.989337][   T14] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  221.000211][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.028561][   T14] usb 2-1: Product: syz
[  221.042606][   T14] usb 2-1: Manufacturer: syz
[  221.048677][   T14] usb 2-1: SerialNumber: syz
[  221.070799][ T5973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  221.088876][ T5973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  221.097214][ T5973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  221.118138][   T14] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected
[  221.126705][   T14] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  221.135999][   T14] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82
[  221.144151][   T14] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  221.189472][   T14] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  221.214896][ T6000] loop4: detected capacity change from 0 to 8
[  221.247477][ T5998] loop0: detected capacity change from 0 to 2048
[  221.263689][ T6000] syz.4.551: attempt to access beyond end of device
[  221.263689][ T6000] loop4: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8
[  221.299919][ T5998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.355296][ T6000] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5
[  221.386813][   T27] audit: type=1800 audit(1791217767.497:7): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.550" name="file1" dev="loop0" ino=1367 res=0 errno=0
[  221.424263][ T6000] unable to read xattr id index table
[  221.884381][ T4327] usb 2-1: USB disconnect, device number 12
[  221.933703][ T4327] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  222.009977][ T6013] loop4: detected capacity change from 0 to 256
[  222.031877][ T4327] keyspan 2-1:1.0: device disconnected
[  222.069319][ T6013] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[  222.128915][   T27] audit: type=1800 audit(1791217768.237:8): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.556" name="file0" dev="loop4" ino=1048661 res=0 errno=0
[  222.861695][ T6010] loop0: detected capacity change from 0 to 32768
[  222.907841][ T6010] XFS (loop0): Mounting V5 Filesystem
[  223.095884][ T6010] XFS (loop0): Ending clean mount
[  223.110370][ T6010] XFS (loop0): Quotacheck needed: Please wait.
[  223.181707][ T6010] XFS (loop0): Quotacheck: Done.
[  223.314089][ T4277] XFS (loop0): Unmounting Filesystem
[  223.485027][ T4327] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  223.556614][ T6041] loop3: detected capacity change from 0 to 4096
[  223.597784][ T6041] EXT4-fs (loop3): Test dummy encryption mode enabled
[  223.658951][ T6041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  223.681281][ T4327] usb 5-1: config 0 has an invalid interface number: 4 but max is 3
[  223.709559][ T6051] loop0: detected capacity change from 0 to 1024
[  223.727873][ T4327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4
[  223.738598][ T6051] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  223.781243][ T4327] usb 5-1: config 0 has no interface number 0
[  223.787423][ T4327] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  223.828489][   T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  223.848085][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.882121][ T6051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  223.894124][ T4327] usb 5-1: config 0 descriptor??
[  223.918139][ T4327] ums-realtek 5-1:0.4: USB Mass Storage device detected
[  223.955288][   T27] audit: type=1800 audit(1791217770.067:9): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.565" name="bus" dev="loop0" ino=18 res=0 errno=0
[  223.975429][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.030515][   T14] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  224.042122][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.086844][   T14] usb 3-1: config 0 descriptor??
[  224.149597][ T4327] usb 5-1: USB disconnect, device number 13
[  224.194437][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  224.547456][ T6041] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  224.624328][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  224.966514][ T6062] loop0: detected capacity change from 0 to 40427
[  224.983396][   T14] usb 3-1: Cannot set autoneg
[  225.041344][ T6062] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  225.066594][ T6062] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  225.097712][   T14] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[  225.114786][ T6062] F2FS-fs (loop0): invalid crc value
[  225.121107][   T14] usb 3-1: USB disconnect, device number 13
[  225.144576][ T6062] F2FS-fs (loop0): Found nat_bits in checkpoint
[  225.227848][ T6062] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  225.251327][ T6062] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  225.298724][ T4325] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  225.384564][   T27] audit: type=1800 audit(1791217771.497:10): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.570" name="file1" dev="loop0" ino=10 res=0 errno=0
[  225.422678][ T6062] syz.0.570: attempt to access beyond end of device
[  225.422678][ T6062] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  225.527677][ T4325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.549578][ T4325] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  225.595628][ T4325] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  225.598927][ T4277] syz-executor: attempt to access beyond end of device
[  225.598927][ T4277] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  225.619027][ T4807] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  225.635083][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.653759][ T4325] usb 5-1: Product: syz
[  225.658020][ T4325] usb 5-1: Manufacturer: syz
[  225.693933][ T4325] usb 5-1: SerialNumber: syz
[  225.811070][ T4807] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  225.836003][ T4807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.870383][ T4807] usb 4-1: config 0 descriptor??
[  226.143520][ T4327] usb 5-1: USB disconnect, device number 14
[  226.462766][ T6084] loop2: detected capacity change from 0 to 32768
[  226.499153][ T4807] usb 4-1: string descriptor 0 read error: -71
[  226.510849][ T4807] uclogic 0003:256C:006E.000F: failed retrieving string descriptor #200: -71
[  226.525277][ T4807] uclogic 0003:256C:006E.000F: failed retrieving pen parameters: -71
[  226.537130][ T4807] uclogic 0003:256C:006E.000F: failed probing pen v2 parameters: -71
[  226.549431][ T4807] uclogic 0003:256C:006E.000F: failed probing parameters: -71
[  226.558111][ T4807] uclogic: probe of 0003:256C:006E.000F failed with error -71
[  226.572997][ T6088] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21
[  226.585967][ T4807] usb 4-1: USB disconnect, device number 13
[  226.886220][ T6095] loop2: detected capacity change from 0 to 136
[  226.964785][ T6095] rock: directory entry would overflow storage
[  226.994292][ T6095] rock: sig=0x4f50, size=4, remaining=3
[  227.000536][ T6095] iso9660: Corrupted directory entry in block 2 of inode 1472
[  227.377700][ T6104] loop4: detected capacity change from 0 to 512
[  227.500239][ T6104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  227.558762][ T6104] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.785360][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  227.802183][ T6119] input: syz0 as /devices/virtual/input/input22
[  228.107146][ T6129] loop4: detected capacity change from 0 to 256
[  228.140712][ T6130] loop0: detected capacity change from 0 to 2048
[  228.214430][ T6130] EXT4-fs: Ignoring removed nomblk_io_submit option
[  228.227526][ T6129] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  228.277703][ T6130] EXT4-fs: inline encryption not supported
[  228.389808][ T6130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  228.539574][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  228.617494][ T6139] input: syz1 as /devices/virtual/input/input23
[  229.248160][ T6145] loop0: detected capacity change from 0 to 32768
[  229.287457][ T6145] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  229.491818][ T6147] loop2: detected capacity change from 0 to 32768
[  229.616119][ T6147] XFS (loop2): Mounting V5 Filesystem
[  229.709310][ T6147] XFS (loop2): Ending clean mount
[  229.767111][ T4895] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  229.850546][ T4276] XFS (loop2): Unmounting Filesystem
[  230.018604][ T4807] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  230.208780][ T4807] usb 5-1: Using ep0 maxpacket: 8
[  230.216108][ T4807] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  230.265816][ T4807] usb 5-1: config 179 has no interface number 0
[  230.275202][ T6154] loop3: detected capacity change from 0 to 32768
[  230.305021][ T4807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  230.431043][ T4807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  230.508545][ T4807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  230.606612][ T4807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  230.686930][ T4807] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  230.782532][ T4807] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  230.840860][ T4807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.877870][ T6154] XFS (loop3): Mounting V5 Filesystem
[  230.885985][ T6171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  231.125900][ T6154] XFS (loop3): Ending clean mount
[  231.144663][ T4807] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input24
[  231.414847][ T4283] XFS (loop3): Unmounting Filesystem
[  231.426023][ T4325] usb 5-1: USB disconnect, device number 15
[  231.426090][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  231.426134][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  231.505935][ T4325] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  231.588830][ T6197] 
[  232.189477][ T6207] loop4: detected capacity change from 0 to 2048
[  232.248685][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'.
[  232.414579][ T6207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  232.426029][ T6207] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  232.457573][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.612580][ T6207] fs-verity: sha512 using implementation "sha512-avx2"
[  232.628552][ T4325] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  232.719156][ T4284] Bluetooth: hci4: link tx timeout
[  232.725084][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  232.736172][ T4284] Bluetooth: hci4: link tx timeout
[  232.741872][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  232.749736][ T4284] Bluetooth: hci4: link tx timeout
[  232.754921][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  232.764849][ T4284] Bluetooth: hci4: link tx timeout
[  232.770554][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  232.809694][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  232.862923][ T6226] loop2: detected capacity change from 0 to 512
[  232.871087][ T4325] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  232.880321][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.903834][ T6226] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  232.918700][ T4325] usb 4-1: config 0 descriptor??
[  232.947721][ T4325] cp210x 4-1:0.0: cp210x converter detected
[  232.979723][ T6226] EXT4-fs (loop2): #blocks per group too big: 65535
[  233.346805][ T4325] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  233.361738][ T4325] usb 4-1: cp210x converter now attached to ttyUSB0
[  233.441630][ T4468] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  233.484908][ T6238] loop2: detected capacity change from 0 to 1024
[  233.563363][ T4325] usb 4-1: USB disconnect, device number 14
[  233.575267][ T6223] loop0: detected capacity change from 0 to 32768
[  233.602806][ T4325] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  233.633754][ T4325] cp210x 4-1:0.0: device disconnected
[  233.640251][ T6223] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  233.652851][ T4468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.678798][ T4468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.698576][ T6238] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  233.712594][ T6238] hfsplus: xattr search failed
[  233.721334][ T4468] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.772127][ T4468] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  233.807158][ T4468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.861362][ T4468] usb 2-1: config 0 descriptor??
[  233.872280][ T4375] hfsplus: b-tree write err: -5, ino 25
[  233.879582][ T4375] hfsplus: b-tree write err: -5, ino 4
[  233.889688][ T4375] hfsplus: b-tree write err: -5, ino 2
[  233.902163][ T4375] hfsplus: b-tree write err: -5, ino 28
[  234.090552][ T4896] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  234.659325][ T4468] plantronics 0003:047F:FFFF.0010: unbalanced collection at end of report description
[  234.669990][ T4468] plantronics 0003:047F:FFFF.0010: parse failed
[  234.676365][ T4468] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22
[  234.768693][ T4284] Bluetooth: hci4: command 0x0406 tx timeout
[  234.889599][ T4325] usb 2-1: USB disconnect, device number 13
[  235.111263][ T6242] loop0: detected capacity change from 0 to 32768
[  235.118383][ T6256] loop5: detected capacity change from 0 to 7
[  235.146480][ T4895] Dev loop5: unable to read RDB block 7
[  235.155574][ T4895]  loop5: unable to read partition table
[  235.187512][ T4895] loop5: partition table beyond EOD, truncated
[  235.242096][ T6242] JBD2: Ignoring recovery information on journal
[  235.357468][ T6256] Dev loop5: unable to read RDB block 7
[  235.363394][ T6256]  loop5: unable to read partition table
[  235.389299][ T6256] loop5: partition table beyond EOD, truncated
[  235.395607][ T6256] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  235.408768][ T6242] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  235.423177][ T6262] Falling back ldisc for ttyS3.
[  235.581018][ T6242] overlayfs: upper fs does not support tmpfile.
[  235.614752][ T6242] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  235.641490][ T6242] overlayfs: failed to set xattr on upper
[  235.657959][ T6242] overlayfs: ...falling back to index=off,metacopy=off.
[  235.678221][ T6242] overlayfs: upper fs missing required features.
[  235.701675][ T6267] loop3: detected capacity change from 0 to 512
[  235.747008][ T6267] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  235.781378][ T6267] EXT4-fs (loop3): 1 truncate cleaned up
[  235.787105][ T6267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  235.895994][ T6267] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.642: Logical block already allocated
[  235.964881][ T6267] EXT4-fs (loop3): Remounting filesystem read-only
[  235.995462][ T4277] ocfs2: Unmounting device (7,0) on (node local)
[  236.013564][ T6274] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #2: comm syz.3.642: invalid size
[  236.090318][ T6274] EXT4-fs (loop3): Remounting filesystem read-only
[  236.138567][ T4342] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  236.218242][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  236.334980][ T4342] usb 5-1: Using ep0 maxpacket: 32
[  236.368646][ T4342] usb 5-1: unable to get BOS descriptor or descriptor too short
[  236.376487][ T4342] usb 5-1: no configurations
[  236.396783][ T4342] usb 5-1: can't read configurations, error -22
[  237.836638][ T6322] loop3: detected capacity change from 0 to 256
[  237.859698][ T6322] exfat: Bad value for 'uid'
[  237.919087][ T4895] blk_print_req_error: 5 callbacks suppressed
[  237.919105][ T4895] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  237.972100][ T6324] loop2: detected capacity change from 0 to 1024
[  237.977271][ T6303] loop4: detected capacity change from 0 to 32768
[  238.051598][ T6324] EXT4-fs: Ignoring removed mblk_io_submit option
[  238.074639][ T6324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  238.127664][ T6303] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  238.177504][ T6303] XFS (loop4): Mounting V5 Filesystem
[  238.192678][ T6324] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.665: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  238.270179][ T6324] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.665: couldn't read orphan inode 11 (err -117)
[  238.312818][ T6303] XFS (loop4): Ending clean mount
[  238.358744][ T6324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  238.384107][ T4342] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  238.440681][ T6324] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.665: Invalid block bitmap block 0 in block_group 0
[  238.507140][ T6324] Quota error (device loop2): write_blk: dquota write failed
[  238.517414][ T4274] XFS (loop4): Unmounting Filesystem
[  238.527042][ T6324] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  238.556492][ T6324] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.665: Failed to acquire dquot type 0
[  238.568476][ T4342] usb 1-1: Using ep0 maxpacket: 16
[  238.577999][ T4342] usb 1-1: unable to get BOS descriptor or descriptor too short
[  238.602888][ T6324] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.665: Invalid inode bitmap blk 137438953472 in block_group 0
[  238.637185][ T4342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.669809][ T4342] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  238.701249][ T4342] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  238.731306][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.758707][ T4342] usb 1-1: Product: syz
[  238.774204][ T4342] usb 1-1: Manufacturer: syz
[  238.794571][ T4342] usb 1-1: SerialNumber: syz
[  238.875776][ T4719] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm kworker/u4:13: Invalid inode table block 8589934593 in block_group 0
[  238.930085][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  239.036685][ T4342] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  239.066396][ T4342] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  239.343556][ T4342] usb 1-1: 2:1 : can't get High Capability descriptor
[  239.387859][ T6351] loop3: detected capacity change from 0 to 64
[  239.554386][   T14] usb 1-1: USB disconnect, device number 16
[  239.583439][ T6353] loop2: detected capacity change from 0 to 512
[  239.672934][ T6353] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.673: inode has both inline data and extents flags
[  239.710973][ T6353] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.673: couldn't read orphan inode 15 (err -117)
[  239.738789][ T6353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  239.824997][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  240.074536][ T6368] TCP: tcp_parse_options: Illegal window scaling value 129 > 14 received
[  240.489757][ T4342] wiimote 0005:057E:0306.0011: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0
[  240.501660][ T4342] wiimote 0005:057E:0306.0011: New device registered
[  240.513411][ T6378] loop3: detected capacity change from 0 to 256
[  240.788491][ T4327] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  240.867877][ T6388] loop2: detected capacity change from 0 to 1024
[  240.885664][ T6388] EXT4-fs: Ignoring removed bh option
[  240.893706][ T6388] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  240.906442][ T6389] program syz.3.684 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.927605][ T6391] loop4: detected capacity change from 0 to 512
[  240.973589][ T6388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  240.982325][ T4327] usb 1-1: Using ep0 maxpacket: 8
[  240.989588][ T4327] usb 1-1: config 0 has no interfaces?
[  241.007685][ T4327] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  241.022388][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.030688][ T4327] usb 1-1: Product: syz
[  241.032204][ T6391] EXT4-fs (loop4): 1 truncate cleaned up
[  241.034894][ T4327] usb 1-1: Manufacturer: syz
[  241.034911][ T4327] usb 1-1: SerialNumber: syz
[  241.051171][ T4327] usb 1-1: config 0 descriptor??
[  241.072789][ T6388] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  241.091607][ T6391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  241.128718][ T4325] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  241.159308][ T6391] EXT4-fs error (device loop4): ext4_lookup:1864: inode #2: comm syz.4.686: deleted inode referenced: 15
[  241.193813][ T6391] EXT4-fs (loop4): Remounting filesystem read-only
[  241.215505][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  241.273859][ T4327] usb 1-1: USB disconnect, device number 17
[  241.292641][ T6375] wiimote 0005:057E:0306.0011: Device removed
[  241.339790][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  241.348723][ T4325] usb 2-1: Using ep0 maxpacket: 8
[  241.362875][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  241.378678][ T4325] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  241.416594][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.445409][ T4325] usb 2-1: config 0 descriptor??
[  241.560308][ T6407] loop4: detected capacity change from 0 to 128
[  241.625629][ T6407] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  241.641908][ T6407] hpfs: filesystem error: improperly stopped
[  241.648187][ T6407] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  241.661500][ T6407] hpfs: You really don't want any checks? You are crazy...
[  241.669939][ T6407] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  241.683596][ T6407] hpfs: code page support is disabled
[  241.695639][ T4325] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  241.711797][ T6407] hpfs: hpfs_map_4sectors(): unaligned read
[  241.721294][ T6407] hpfs: hpfs_map_4sectors(): unaligned read
[  241.727240][ T6407] hpfs: filesystem error: unable to find root dir
[  241.768595][ T4262] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  241.853809][ T6412] loop4: detected capacity change from 0 to 512
[  241.875304][ T6412] EXT4-fs: Ignoring removed mblk_io_submit option
[  241.889995][ T6414] loop2: detected capacity change from 0 to 64
[  241.915239][ T6412] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.694: corrupted in-inode xattr
[  241.935706][ T4325] usb 2-1: USB disconnect, device number 14
[  241.954375][ T6412] EXT4-fs (loop4): Remounting filesystem read-only
[  241.972469][ T4262] usb 4-1: Using ep0 maxpacket: 8
[  241.988577][ T6412] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.694: couldn't read orphan inode 15 (err -117)
[  241.991102][ T4262] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  242.016775][ T6412] EXT4-fs (loop4): Remounting filesystem read-only
[  242.037290][ T6412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  242.067256][ T6412] EXT4-fs (loop4): shut down requested (0)
[  242.082919][ T4262] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  242.112367][ T4262] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  242.148555][ T4262] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  242.178504][ T4262] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  242.203713][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  242.209706][ T4262] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  242.225887][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.314056][ T6420] loop4: detected capacity change from 0 to 1024
[  242.361171][ T6422] loop2: detected capacity change from 0 to 256
[  242.386145][ T6420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  242.398940][ T6420] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.412553][ T6422] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  242.436497][   T27] audit: type=1800 audit(1791217788.547:11): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.696" name="file1" dev="loop4" ino=15 res=0 errno=0
[  242.442041][ T6420] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.696: lblock 0 mapped to illegal pblock 0 (length 6)
[  242.497303][ T6420] EXT4-fs error (device loop4): ext4_ext_remove_space:2945: inode #15: comm syz.4.696: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  242.525880][ T4262] usb 4-1: GET_CAPABILITIES returned 0
[  242.531653][ T4262] usbtmc 4-1:16.0: can't read capabilities
[  242.643670][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  242.743753][ T4262] usb 4-1: USB disconnect, device number 15
[  242.856664][ T6437] input: syz1 as /devices/virtual/input/input25
[  243.044509][ T6439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.318627][ T4342] wiimote 0005:057E:0306.0011: detected device: Nintendo Wii Remote (Gen 1)
[  243.458018][ T6448] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  243.475494][ T4342] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0011/input/input27
[  243.505338][ T6448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.569036][ T4342] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0011/input/input28
[  243.582408][ T6451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  243.634439][ T4342] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0011/input/input26
[  243.647770][ T6451] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.712248][ T6448] overlayfs: upper fs needs to support d_type.
[  243.783609][ T6448] overlayfs: cleanup of 'work/#6' failed (-2)
[  243.797182][ T6455] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  243.851150][ T6448] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  243.858254][ T6448] overlayfs: failed to set xattr on upper
[  243.868617][ T6455] EXT4-fs (loop3): Remounting filesystem read-only
[  243.930724][ T6448] overlayfs: ...falling back to index=off,metacopy=off.
[  243.968876][ T6457] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  244.008743][ T6458] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  244.023051][ T4276] UDF-fs: error (device loop2): udf_read_inode: (ino 1347) failed !bh
[  244.049612][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  244.057132][ T4276] UDF-fs: error (device loop2): udf_read_inode: (ino 1347) failed !bh
[  244.191961][ T6462] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  244.807873][ T4546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.845206][ T6474] set_capacity_and_notify: 3 callbacks suppressed
[  244.845223][ T6474] loop3: detected capacity change from 0 to 128
[  244.917238][ T6474] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  244.963732][ T6474] hpfs: filesystem error: improperly stopped
[  244.988508][ T6474] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  245.007419][ T4546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.043737][ T6474] hpfs: You really don't want any checks? You are crazy...
[  245.073808][ T6474] hpfs: Code page index out of array
[  245.087264][ T6474] hpfs: code page support is disabled
[  245.136362][ T6474] hpfs: hpfs_map_4sectors(): unaligned read
[  245.171623][ T4546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.188070][ T6474] hpfs: hpfs_map_4sectors(): unaligned read
[  245.195522][ T6474] hpfs: filesystem error: unable to find root dir
[  245.234170][ T6474] hpfs: hpfs_map_4sectors(): unaligned read
[  245.442567][ T4546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.497204][ T6483] loop4: detected capacity change from 0 to 256
[  245.573307][ T6483] exfat: Deprecated parameter 'utf8'
[  245.679917][ T6483] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  245.834218][   T27] audit: type=1800 audit(1791217791.947:12): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.721" name="file1" dev="loop4" ino=1048675 res=0 errno=0
[  246.112057][ T6489] futex_wake_op: syz.3.722 tries to shift op by 144; fix this program
[  246.174415][ T6490] loop3: detected capacity change from 0 to 256
[  246.262295][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.282714][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.291384][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.300120][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.307746][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  246.316671][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.410849][ T4546] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  246.612469][ T6501] loop3: detected capacity change from 0 to 164
[  246.680684][ T6501] iso9660: Corrupted directory entry in block 2 of inode 1792
[  246.814186][ T4546] batman_adv: batadv0: Removing interface: ip6gretap1
[  247.232282][ T6491] chnl_net:caif_netlink_parms(): no params data found
[  248.184514][ T6530] loop3: detected capacity change from 0 to 8
[  248.248807][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.259419][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.277092][ T6491] device bridge_slave_0 entered promiscuous mode
[  248.323196][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.330614][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.358564][ T4284] Bluetooth: hci2: command 0x0409 tx timeout
[  248.366276][ T6491] device bridge_slave_1 entered promiscuous mode
[  248.505720][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.563189][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.585204][ T4807] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  248.692743][ T6491] team0: Port device team_slave_0 added
[  248.723952][ T6491] team0: Port device team_slave_1 added
[  248.781603][ T4807] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  248.805647][ T4807] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  248.843392][ T4807] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  248.863156][ T4807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.893576][ T4807] usb 5-1: Product: syz
[  248.897866][ T4807] usb 5-1: Manufacturer: syz
[  248.920294][ T4807] usb 5-1: SerialNumber: syz
[  248.939811][ T4807] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[  248.990766][ T4807] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  249.019764][ T4807] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  249.295502][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.313014][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.380574][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.409305][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.452754][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.513601][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.756251][ T4546] device hsr_slave_0 left promiscuous mode
[  249.770158][ T4546] device hsr_slave_1 left promiscuous mode
[  249.803530][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.818596][ T4546] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.849600][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.857116][ T4546] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.901925][ T4546] device bridge_slave_1 left promiscuous mode
[  249.910489][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.988216][ T4546] device bridge_slave_0 left promiscuous mode
[  249.995921][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.134729][ T4546] device veth1_macvtap left promiscuous mode
[  250.163348][ T4546] device veth0_macvtap left promiscuous mode
[  250.176316][ T4546] device veth1_vlan left promiscuous mode
[  250.202522][ T6528] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  250.217110][ T4546] device veth0_vlan left promiscuous mode
[  250.238592][ T6528] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  250.279592][ T6528] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  250.324173][ T6528] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32
[  250.366362][ T4469] usb 5-1: USB disconnect, device number 18
[  250.415351][ T4469] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  250.448720][ T4284] Bluetooth: hci2: command 0x041b tx timeout
[  250.569831][ T4469] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  250.623325][ T4469] ti_usb_3410_5052 5-1:2.0: device disconnected
[  252.129669][ T4546] team0 (unregistering): Port device team_slave_1 removed
[  252.185076][ T4546] team0 (unregistering): Port device team_slave_0 removed
[  252.253718][ T4546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.330740][ T4546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.519850][ T4287] Bluetooth: hci2: command 0x040f tx timeout
[  252.944194][ T4546] bond0 (unregistering): Released all slaves
[  253.112597][ T6491] device hsr_slave_0 entered promiscuous mode
[  253.129203][ T6491] device hsr_slave_1 entered promiscuous mode
[  253.136980][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.146051][ T6491] Cannot create hsr debugfs directory
[  253.591643][ T6491] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  253.638082][ T6491] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  253.691856][ T6491] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  253.754200][ T6491] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  254.086233][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.308277][ T6491] 8021q: adding VLAN 0 to HW filter on device team0
[  254.317944][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  254.333127][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  254.401748][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  254.444849][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  254.492796][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.500004][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.539071][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  254.585663][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  254.598817][ T4287] Bluetooth: hci2: command 0x0419 tx timeout
[  254.621020][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  254.686571][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.693822][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.762675][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  254.815815][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  254.835854][ T6642] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.761'.
[  254.858878][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  254.881792][ T6642] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.761'.
[  254.916849][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.956488][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.982114][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  255.027345][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  255.053158][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  255.072249][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  255.113956][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  255.138298][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  255.155491][ T6491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  255.399591][ T4807] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  255.453949][ T6657] loop3: detected capacity change from 0 to 256
[  255.488175][ T6657] exfat: Unknown parameter '�'
[  255.561526][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  255.567890][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  255.621166][ T4807] usb 2-1: unable to get BOS descriptor or descriptor too short
[  255.642165][ T4807] usb 2-1: not running at top speed; connect to a high speed hub
[  255.672043][   T27] audit: type=1807 audit(1791217801.787:13): action=measure func=FILE_CHECK res=1
[  255.693246][ T4807] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 4
[  255.700664][ T6659] ima: policy update completed
[  255.719391][ T5106] wlan1: Trigger new scan to find an IBSS to join
[  255.739351][ T4807] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[  255.758818][   T27] audit: type=1802 audit(1791217801.867:14): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.766" res=1 errno=0
[  255.792105][ T4807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.819966][ T4807] usb 2-1: Product: syz
[  255.840016][ T4807] usb 2-1: Manufacturer: syz
[  255.854999][ T4807] usb 2-1: SerialNumber: syz
[  255.919276][   T27] audit: type=1800 audit(1791217802.037:15): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0
[  255.997620][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.013537][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  256.059444][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.124729][   T27] audit: type=1800 audit(1791217802.237:16): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52925 res=0 errno=0
[  256.145360][ T4807] usb 2-1: unable to issue vendor read request (ret = -71)
[  256.178852][ T4807] usb 2-1: unable to issue vendor read request (ret = -71)
[  256.186646][ T4807] usb 2-1: unable to issue vendor read request (ret = -71)
[  256.198726][   T27] audit: type=1800 audit(1791217802.267:17): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=52948 res=0 errno=0
[  256.226858][ T4807] usb 2-1: unable to issue vendor read request (ret = -71)
[  256.313465][   T27] audit: type=1800 audit(1791217802.427:18): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143138 res=0 errno=0
[  256.328590][ T4807] usb 2-1: USB disconnect, device number 15
[  256.418392][   T27] audit: type=1800 audit(1791217802.467:19): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=143181 res=0 errno=0
[  256.447408][ T4895] udevd[4895]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  256.498977][   T27] audit: type=1800 audit(1791217802.467:20): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=143145 res=0 errno=0
[  256.588525][   T27] audit: type=1800 audit(1791217802.467:21): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=143146 res=0 errno=0
[  256.644345][   T27] audit: type=1800 audit(1791217802.467:22): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=143167 res=0 errno=0
[  257.778601][ T4807] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  257.837731][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  257.852731][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  257.907943][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  257.926894][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  257.950257][ T6491] device veth0_vlan entered promiscuous mode
[  257.976726][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  257.991086][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  257.996521][ T4807] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  258.031903][ T6491] device veth1_vlan entered promiscuous mode
[  258.039768][ T4807] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  258.080505][ T4807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.105052][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  258.117738][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  258.138043][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.148136][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.183304][ T6491] device veth0_macvtap entered promiscuous mode
[  258.217631][ T6491] device veth1_macvtap entered promiscuous mode
[  258.283901][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.314921][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.337860][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.355555][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.356090][ T4807] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device
[  258.376031][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.404190][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.417430][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.433820][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.475190][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.507008][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  258.529597][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  258.558276][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  258.578804][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  258.601422][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.622263][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.654043][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.685619][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.718495][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.738537][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.770648][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.788434][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.830129][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.867334][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  258.877300][ T4807] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 82:c2:dc:cd:6f:ef
[  258.909185][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  258.952562][ T6491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.978637][ T4807] usb 5-1: USB disconnect, device number 19
[  258.992435][ T6491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.027694][ T4807] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[  259.037590][ T6491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.107792][ T6491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.300009][ T6724] loop3: detected capacity change from 0 to 512
[  259.359252][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.367126][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.402007][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.419927][ T6724] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.782: invalid indirect mapped block 4294967295 (level 1)
[  259.442091][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  259.485987][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.508984][ T6724] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.782: invalid indirect mapped block 4294967295 (level 1)
[  259.516946][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  259.567657][ T6724] EXT4-fs (loop3): 2 truncates cleaned up
[  259.574013][ T6724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  259.644033][ T6724] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.782: bg 0: block 5: invalid block bitmap
[  259.720441][ T6724] EXT4-fs error (device loop3) in ext4_setattr:5695: error 28
[  260.026169][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  260.658616][ T4325] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  260.678966][ T4327] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  260.760054][ T4546] wlan1: Trigger new scan to find an IBSS to join
[  260.876835][ T4327] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.881507][ T6772] device syzkaller1 entered promiscuous mode
[  260.893091][ T4325] usb 4-1: Using ep0 maxpacket: 8
[  260.900334][ T4325] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  260.920148][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.920910][ T4327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  260.967210][ T4325] pvrusb2: Hardware description: Terratec Grabster AV400
[  260.973789][ T4327] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  261.000387][ T4325] pvrusb2: **********
[  261.004518][ T4325] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  261.007971][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.051385][ T4325] pvrusb2: Important functionality might not be entirely working.
[  261.070995][ T4327] usb 5-1: config 0 descriptor??
[  261.078062][ T4325] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  261.098165][ T4327] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  261.122625][ T4327] dvb-usb: bulk message failed: -22 (3/0)
[  261.123287][ T4325] pvrusb2: **********
[  261.176499][ T2313] pvrusb2: Invalid write control endpoint
[  261.183934][ T4327] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  261.193332][   T27] kauditd_printk_skb: 44 callbacks suppressed
[  261.193346][   T27] audit: type=1800 audit(1791217807.317:67): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144385 res=0 errno=0
[  261.256530][ T4327] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  261.283363][   T27] audit: type=1800 audit(1791217807.317:68): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=144425 res=0 errno=0
[  261.305459][ T6761] dvb-usb: bulk message failed: -22 (4/0)
[  261.319557][ T4327] usb 5-1: media controller created
[  261.364045][ T4327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  261.407056][ T6755] dvb-usb: bulk message failed: -22 (2/0)
[  261.409415][   T27] audit: type=1800 audit(1791217807.317:69): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=144392 res=0 errno=0
[  261.457956][ T4342] usb 4-1: USB disconnect, device number 16
[  261.472769][ T4327] dvb-usb: bulk message failed: -22 (6/0)
[  261.491101][ T4327] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  261.520441][   T27] audit: type=1800 audit(1791217807.327:70): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=144393 res=0 errno=0
[  261.558907][ T4327] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29
[  261.607453][ T4327] dvb-usb: schedule remote query interval to 150 msecs.
[  261.608584][   T27] audit: type=1800 audit(1791217807.327:71): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=144394 res=0 errno=0
[  261.638789][ T4327] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  261.657648][ T2313] pvrusb2: Invalid write control endpoint
[  261.686981][ T4327] usb 5-1: USB disconnect, device number 20
[  261.696854][ T2313] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  261.728513][   T27] audit: type=1800 audit(1791217807.387:72): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144434 res=0 errno=0
[  261.751214][   T57] wlan1: Creating new IBSS network, BSSID ca:c1:fe:dc:01:27
[  261.764779][ T2313] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  261.782371][ T4327] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  261.788495][ T2313] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  261.818585][   T27] audit: type=1800 audit(1791217807.467:73): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144581 res=0 errno=0
[  261.848348][ T2313] pvrusb2: Device being rendered inoperable
[  261.885782][ T2313] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  261.908645][ T2313] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  261.929063][   T27] audit: type=1800 audit(1791217807.497:74): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=144585 res=0 errno=0
[  261.970984][ T2313] pvrusb2: Attached sub-driver cx25840
[  261.976865][ T2313] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  262.027948][   T27] audit: type=1800 audit(1791217807.517:75): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144567 res=0 errno=0
[  262.060602][ T2313] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  262.120606][   T27] audit: type=1800 audit(1791217807.597:76): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=144568 res=0 errno=0
[  262.658571][ T4807] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  262.817691][ T6793] FAULT_INJECTION: forcing a failure.
[  262.817691][ T6793] name fail_futex, interval 1, probability 0, space 0, times 1
[  262.848915][ T6793] CPU: 1 PID: 6793 Comm: syz.3.801 Not tainted syzkaller #0
[  262.856305][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  262.866408][ T6793] Call Trace:
[  262.869742][ T6793]  <TASK>
[  262.872722][ T6793]  dump_stack_lvl+0x188/0x24e
[  262.877453][ T6793]  ? show_regs_print_info+0x12/0x12
[  262.882706][ T6793]  ? load_image+0x410/0x410
[  262.887253][ T6793]  ? kasan_set_track+0x60/0x70
[  262.892074][ T6793]  ? slab_free_freelist_hook+0x133/0x1b0
[  262.897752][ T6793]  ? do_renameat2+0xbe9/0xc80
[  262.902471][ T6793]  ? __x64_sys_rename+0x82/0x90
[  262.907393][ T6793]  ? do_syscall_64+0x4c/0xa0
[  262.912052][ T6793]  should_fail_ex+0x390/0x4c0
[  262.916801][ T6793]  get_futex_key+0x1b1/0x1000
[  262.921516][ T6793]  ? futex_setup_timer+0xc0/0xc0
[  262.926477][ T6793]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  262.932498][ T6793]  futex_wake+0x123/0x4f0
[  262.936852][ T6793]  ? kasan_quarantine_put+0xd4/0x210
[  262.942185][ T6793]  ? lockdep_hardirqs_on+0x94/0x140
[  262.947431][ T6793]  ? futex_wake_mark+0x150/0x150
[  262.952392][ T6793]  ? slab_free_freelist_hook+0x133/0x1b0
[  262.958086][ T6793]  ? do_renameat2+0xbe9/0xc80
[  262.962794][ T6793]  ? kmem_cache_free+0xf7/0x2a0
[  262.967677][ T6793]  do_futex+0x2e2/0x320
[  262.971870][ T6793]  ? __ia32_sys_get_robust_list+0x100/0x100
[  262.977800][ T6793]  __se_sys_futex+0x381/0x410
[  262.982507][ T6793]  ? __x64_sys_futex+0xf0/0xf0
[  262.987327][ T6793]  ? __x64_sys_futex+0x1d/0xf0
[  262.992147][ T6793]  do_syscall_64+0x4c/0xa0
[  262.996599][ T6793]  ? clear_bhb_loop+0x60/0xb0
[  263.001303][ T6793]  ? clear_bhb_loop+0x60/0xb0
[  263.006008][ T6793]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  263.011937][ T6793] RIP: 0033:0x7f542559e199
[  263.016380][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.036009][ T6793] RSP: 002b:00007f54264fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  263.044464][ T6793] RAX: ffffffffffffffda RBX: 00007f5425825fa8 RCX: 00007f542559e199
[  263.052470][ T6793] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5425825fac
[  263.060463][ T6793] RBP: 00007f5425825fa0 R08: 002ceab24c5ca3e2 R09: 0000000000000000
[  263.068455][ T6793] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  263.076540][ T6793] R13: 00007f5425826038 R14: 00007fff9eb415b0 R15: 00007fff9eb41698
[  263.084546][ T6793]  </TASK>
[  263.118579][ T4807] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  263.136795][ T4807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.166797][ T4807] usb 5-1: Product: syz
[  263.187108][ T4807] usb 5-1: Manufacturer: syz
[  263.212487][ T4807] usb 5-1: SerialNumber: syz
[  263.291156][ T4807] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  263.543118][ T6783] loop0: detected capacity change from 0 to 32768
[  263.597880][ T6783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.797 (6783)
[  263.687618][ T6783] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  263.719317][ T6783] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  263.733224][ T6783] BTRFS info (device loop0): setting nodatacow, compression disabled
[  263.771802][ T6783] BTRFS info (device loop0): using free space tree
[  263.942105][ T6808] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  263.990401][ T6822] loop5: detected capacity change from 0 to 136
[  264.518658][ T4807] usb 5-1: Service connection timeout for: 256
[  264.528578][ T4807] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  264.633723][ T4807] ath9k_htc: Failed to initialize the device
[  264.660471][ T4277] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  264.691915][ T4807] usb 5-1: ath9k_htc: USB layer deinitialized
[  264.753474][ T4807] usb 5-1: USB disconnect, device number 21
[  264.798756][ T4468] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  264.848561][ T4342] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  264.997729][ T4468] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  265.049556][ T4342] usb 6-1: Using ep0 maxpacket: 32
[  265.062134][ T4468] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  265.074495][ T4342] usb 6-1: unable to get BOS descriptor or descriptor too short
[  265.113822][ T4342] usb 6-1: config 1 has an invalid interface number: 32 but max is 2
[  265.132315][ T4468] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  265.162103][ T4342] usb 6-1: config 1 has no interface number 0
[  265.180379][ T4468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.199172][ T4342] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  265.220621][ T4468] usb 4-1: Product: syz
[  265.224854][ T4468] usb 4-1: Manufacturer: syz
[  265.255226][ T4468] usb 4-1: SerialNumber: syz
[  265.263476][ T4342] usb 6-1: string descriptor 0 read error: -22
[  265.284827][ T4342] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  265.334414][ T4342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.517798][ T4468] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  265.725438][ T6844] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  265.736602][    C0] usblp0: nonzero read bulk status received: -71
[  265.757628][ T6845] usb 4-1: USB disconnect, device number 17
[  265.788756][ T4342] snd-usb-audio: probe of 6-1:1.32 failed with error -71
[  265.829293][ T4342] usb 6-1: USB disconnect, device number 2
[  265.957411][ T6830] usblp0: removed
[  265.968328][ T6844] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  265.990214][ T6844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.013555][ T6844] usb 1-1: Product: syz
[  266.027967][ T6844] usb 1-1: Manufacturer: syz
[  266.043415][ T6844] usb 1-1: SerialNumber: syz
[  266.069246][ T6844] usb 1-1: config 0 descriptor??
[  266.207669][   T27] kauditd_printk_skb: 118 callbacks suppressed
[  266.207685][   T27] audit: type=1800 audit(1791217812.317:195): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145325 res=0 errno=0
[  266.258956][   T27] audit: type=1800 audit(1791217812.357:196): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145344 res=0 errno=0
[  266.340540][   T27] audit: type=1800 audit(1791217812.357:197): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145357 res=0 errno=0
[  266.363165][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.411437][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.440486][   T27] audit: type=1800 audit(1791217812.357:198): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145370 res=0 errno=0
[  266.461592][ T6845] usb 1-1: USB disconnect, device number 18
[  266.562598][   T27] audit: type=1800 audit(1791217812.367:199): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=145326 res=0 errno=0
[  266.625620][   T27] audit: type=1800 audit(1791217812.367:200): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=145329 res=0 errno=0
[  266.666863][   T27] audit: type=1800 audit(1791217812.377:201): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145411 res=0 errno=0
[  266.795314][   T27] audit: type=1800 audit(1791217812.477:202): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145344 res=0 errno=0
[  267.556627][ T6855] syz.4.811 (6855): drop_caches: 2
[  269.044292][ T6904] loop3: detected capacity change from 0 to 512
[  269.154602][ T6906] loop0: detected capacity change from 0 to 256
[  269.166757][ T6904] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  269.220052][ T6904] FAT-fs (loop3): Filesystem has been set read-only
[  269.228347][ T6904] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  269.276581][ T6906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  269.329268][ T6904] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  269.375103][ T6906] syz.0.824: attempt to access beyond end of device
[  269.375103][ T6906] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256
[  269.430773][ T6906] syz.0.824: attempt to access beyond end of device
[  269.430773][ T6906] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256
[  269.495056][ T6906] syz.0.824: attempt to access beyond end of device
[  269.495056][ T6906] loop0: rw=0, sector=280, nr_sectors = 8 limit=256
[  269.534998][   T27] audit: type=1800 audit(1791217815.647:203): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.824" name="file1" dev="loop0" ino=1048688 res=0 errno=0
[  269.672053][ T6911] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548)
[  269.884118][   T27] audit: type=1800 audit(1791217815.997:204): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53075 res=0 errno=0
[  270.082138][ T6931] loop0: detected capacity change from 0 to 1024
[  270.138640][ T4342] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  270.342483][ T4342] usb 5-1: Using ep0 maxpacket: 16
[  270.362993][ T4342] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.414711][ T4342] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  270.459744][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  270.467818][ T4342] usb 5-1: SerialNumber: syz
[  270.512461][ T4342] hub 5-1:1.0: bad descriptor, ignoring hub
[  270.539385][ T4342] hub: probe of 5-1:1.0 failed with error -5
[  270.708670][ T4468] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  270.800090][ T6926] loop5: detected capacity change from 0 to 32768
[  270.916326][ T6926] XFS (loop5): Mounting V5 Filesystem
[  270.922357][ T4468] usb 4-1: Using ep0 maxpacket: 8
[  270.954174][ T4468] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  270.988505][ T4468] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  271.007918][ T4468] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  271.038789][ T4470] usb 5-1: reset high-speed USB device number 22 using dummy_hcd
[  271.105405][ T4468] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.140804][ T6952] loop0: detected capacity change from 0 to 256
[  271.166059][ T4468] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  271.211090][ T4468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.254273][   T27] kauditd_printk_skb: 11 callbacks suppressed
[  271.254288][   T27] audit: type=1800 audit(1791217817.367:216): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145608 res=0 errno=0
[  271.367618][ T6926] XFS (loop5): Ending clean mount
[  271.492919][ T4468] usb 4-1: GET_CAPABILITIES returned 0
[  271.498773][ T4468] usbtmc 4-1:16.0: can't read capabilities
[  271.539439][   T27] audit: type=1800 audit(1791217817.647:217): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=145648 res=0 errno=0
[  271.570013][ T4342] usb 5-1: USB disconnect, device number 22
[  271.626459][   T27] audit: type=1800 audit(1791217817.657:218): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=145615 res=0 errno=0
[  271.705661][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  271.705695][ T6491] XFS (loop5): Unmounting Filesystem
[  271.744599][ T4468] usb 4-1: USB disconnect, device number 18
[  271.777028][   T27] audit: type=1800 audit(1791217817.677:219): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=145616 res=0 errno=0
[  271.868154][   T27] audit: type=1800 audit(1791217817.677:220): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=145617 res=0 errno=0
[  271.927019][   T27] audit: type=1800 audit(1791217817.697:221): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145657 res=0 errno=0
[  271.969076][   T27] audit: type=1800 audit(1791217817.697:222): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145675 res=0 errno=0
[  272.346795][ T4342] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  272.530648][ T4342] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  272.552076][ T4342] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.609114][ T4342] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  272.636689][ T4342] usb 1-1: config 0 interface 0 has no altsetting 0
[  272.653531][ T4342] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  272.676419][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.701681][   T27] audit: type=1800 audit(1791217818.807:223): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145748 res=0 errno=0
[  272.729867][ T4342] usb 1-1: config 0 descriptor??
[  272.788656][   T27] audit: type=1800 audit(1791217818.817:224): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=145788 res=0 errno=0
[  272.878639][   T27] audit: type=1800 audit(1791217818.817:225): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=145755 res=0 errno=0
[  273.168199][ T4342] input: HID 1532:011d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1532:011D.0012/input/input30
[  273.274576][ T4342] hid-rmi 0003:1532:011D.0012: input,hidraw0: USB HID v0.00 Joystick [HID 1532:011d] on usb-dummy_hcd.0-1/input0
[  273.371882][ T4468] usb 1-1: USB disconnect, device number 19
[  273.650407][ T6980] fido_id[6980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  273.734016][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  273.746939][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  273.755814][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  273.764657][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  273.773066][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  273.794188][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  273.968481][ T4468] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  274.057017][ T6991] FAULT_INJECTION: forcing a failure.
[  274.057017][ T6991] name failslab, interval 1, probability 0, space 0, times 1
[  274.115587][ T6991] CPU: 1 PID: 6991 Comm: syz.0.846 Not tainted syzkaller #0
[  274.123114][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  274.133217][ T6991] Call Trace:
[  274.136540][ T6991]  <TASK>
[  274.139510][ T6991]  dump_stack_lvl+0x188/0x24e
[  274.144241][ T6991]  ? show_regs_print_info+0x12/0x12
[  274.149480][ T6991]  ? load_image+0x410/0x410
[  274.154074][ T6991]  ? __might_sleep+0xd0/0xd0
[  274.158715][ T6991]  ? __lock_acquire+0x7ea0/0x7ea0
[  274.163803][ T6991]  should_fail_ex+0x390/0x4c0
[  274.168541][ T6991]  should_failslab+0x5/0x20
[  274.173087][ T6991]  slab_pre_alloc_hook+0x59/0x300
[  274.178156][ T6991]  ? __up_read+0x2b4/0x6b0
[  274.182640][ T6991]  kmem_cache_alloc_lru+0x49/0x2e0
[  274.187801][ T6991]  ? __d_alloc+0x2e/0x6e0
[  274.192178][ T6991]  __d_alloc+0x2e/0x6e0
[  274.196390][ T6991]  d_alloc_parallel+0xdc/0x1590
[  274.201291][ T6991]  ? __d_lookup+0x8b/0x7c0
[  274.205773][ T6991]  ? __lock_acquire+0x7ea0/0x7ea0
[  274.210856][ T6991]  ? __d_lookup+0x8b/0x7c0
[  274.215328][ T6991]  ? d_hash_and_lookup+0x1b0/0x1b0
[  274.220517][ T6991]  path_openat+0x949/0x2f10
[  274.225085][ T6991]  ? kasan_set_track+0x60/0x70
[  274.229909][ T6991]  ? verify_lock_unused+0x140/0x140
[  274.235164][ T6991]  ? do_filp_open+0x420/0x420
[  274.239914][ T6991]  do_filp_open+0x1ee/0x420
[  274.244473][ T6991]  ? vfs_tmpfile+0x470/0x470
[  274.249131][ T6991]  ? _raw_spin_unlock+0x24/0x40
[  274.254021][ T6991]  ? alloc_fd+0x590/0x640
[  274.258416][ T6991]  do_sys_openat2+0x14b/0x4f0
[  274.263151][ T6991]  ? do_sys_open+0xe0/0xe0
[  274.267647][ T6991]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  274.273693][ T6991]  ? lock_chain_count+0x20/0x20
[  274.278618][ T6991]  __x64_sys_openat+0x135/0x160
[  274.283533][ T6991]  do_syscall_64+0x4c/0xa0
[  274.288021][ T6991]  ? clear_bhb_loop+0x60/0xb0
[  274.292751][ T6991]  ? clear_bhb_loop+0x60/0xb0
[  274.297482][ T6991]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.303435][ T6991] RIP: 0033:0x7fec8959e199
[  274.307890][ T6991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.327558][ T6991] RSP: 002b:00007fec8a50e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  274.336032][ T6991] RAX: ffffffffffffffda RBX: 00007fec89825fa0 RCX: 00007fec8959e199
[  274.344060][ T6991] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  274.352079][ T6991] RBP: 00007fec896350b8 R08: 0000000000000000 R09: 0000000000000000
[  274.360098][ T6991] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000
[  274.368114][ T6991] R13: 00007fec89826038 R14: 00007fec89825fa0 R15: 00007fff4978d308
[  274.376150][ T6991]  </TASK>
[  274.408480][ T4468] usb 6-1: Using ep0 maxpacket: 8
[  274.416019][ T4468] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  274.468508][ T4468] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  274.477728][ T4468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.531458][ T4468] usb 6-1: config 0 descriptor??
[  274.586226][ T6984] chnl_net:caif_netlink_parms(): no params data found
[  274.761047][ T4468] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  274.785474][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  274.803621][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  274.900145][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  275.232245][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.257895][ T4342] usb 6-1: USB disconnect, device number 3
[  275.317886][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.353903][ T6984] device bridge_slave_0 entered promiscuous mode
[  275.377163][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.401244][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.418034][ T6984] device bridge_slave_1 entered promiscuous mode
[  275.438286][ T7009] netlink: 'syz.3.850': attribute type 10 has an invalid length.
[  275.446806][ T7009] tipc: Resetting bearer <eth:syz_tun>
[  275.454767][ T7009] device syz_tun entered promiscuous mode
[  275.481891][ T7009] tipc: Resetting bearer <eth:syz_tun>
[  275.500972][ T7009] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  275.568268][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.588485][ T6842] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  275.598031][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.682562][ T6984] team0: Port device team_slave_0 added
[  275.705911][ T6984] team0: Port device team_slave_1 added
[  275.797149][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.820270][ T6842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.820670][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.860143][ T6842] usb 1-1: config 0 interface 0 has no altsetting 0
[  275.878636][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[  275.889263][ T6842] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  275.926506][ T6842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.948782][ T6842] usb 1-1: Product: syz
[  275.953008][ T6842] usb 1-1: Manufacturer: syz
[  275.957639][ T6842] usb 1-1: SerialNumber: syz
[  275.963566][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.012557][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.042462][ T6842] usb 1-1: config 0 descriptor??
[  276.061567][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.073534][ T6842] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  276.214449][ T6842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  276.245199][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.278961][ T6842] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  276.298629][ T6845] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  276.338675][ T6842] usb 1-1: media controller created
[  276.349281][ T6984] device hsr_slave_0 entered promiscuous mode
[  276.368236][ T6984] device hsr_slave_1 entered promiscuous mode
[  276.389212][ T6984] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.398342][ T6984] Cannot create hsr debugfs directory
[  276.415642][ T6842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  276.440018][   T27] kauditd_printk_skb: 37 callbacks suppressed
[  276.440033][   T27] audit: type=1800 audit(1791217822.547:263): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151186 res=0 errno=0
[  276.509068][   T27] audit: type=1800 audit(1791217822.607:264): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151297 res=0 errno=0
[  276.531190][ T6845] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  276.552158][ T6845] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  276.606262][ T6845] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  276.633645][ T6845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.668711][   T27] audit: type=1800 audit(1791217822.777:265): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151806 res=0 errno=0
[  276.735388][   T27] audit: type=1800 audit(1791217822.777:266): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=151848 res=0 errno=0
[  276.783273][ T6842] DVB: Unable to find symbol tda10046_attach()
[  276.803171][ T6842] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  276.819169][ T6842] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  276.835708][   T27] audit: type=1800 audit(1791217822.807:267): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=151813 res=0 errno=0
[  276.907183][ T6845] usb 4-1: usb_control_msg returned -32
[  276.913540][ T6845] usbtmc 4-1:16.0: can't read capabilities
[  276.954383][   T27] audit: type=1800 audit(1791217822.807:268): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=151814 res=0 errno=0
[  277.012856][   T27] audit: type=1800 audit(1791217822.807:269): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=151815 res=0 errno=0
[  277.049077][   T27] audit: type=1800 audit(1791217823.017:270): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=46683 res=0 errno=0
[  277.078765][ T6842] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71
[  277.098132][ T6842] usb 1-1: USB disconnect, device number 20
[  277.142086][   T27] audit: type=1800 audit(1791217823.017:271): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46682 res=0 errno=0
[  277.172612][   T27] audit: type=1800 audit(1791217823.027:272): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152880 res=0 errno=0
[  277.238266][ T6984] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  277.275857][ T6984] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  277.305792][ T6984] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  277.337460][ T6984] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  277.494760][ T6842] usb 4-1: USB disconnect, device number 19
[  277.586571][ T6984] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.628159][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  277.659508][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  277.701629][ T6984] 8021q: adding VLAN 0 to HW filter on device team0
[  277.741892][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  277.761069][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  277.790273][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.797475][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.837598][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  277.857091][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  277.888145][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  277.925286][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.932583][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.958819][ T4284] Bluetooth: hci5: command 0x041b tx timeout
[  277.965414][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  277.995293][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  278.016536][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  278.039067][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  278.089120][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  278.129637][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  278.173115][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  278.206662][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  278.235481][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  278.257545][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  278.296236][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  278.332155][ T6984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  278.831254][ T7038] loop0: detected capacity change from 0 to 32768
[  278.870151][ T7038] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  278.930920][ T7060] loop4: detected capacity change from 0 to 16
[  279.018041][ T7060] erofs: (device loop4): mounted with root inode @ nid 36.
[  279.384486][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  279.403066][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  279.477576][ T6984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.559238][ T7067] FAULT_INJECTION: forcing a failure.
[  279.559238][ T7067] name failslab, interval 1, probability 0, space 0, times 0
[  279.588883][ T7067] CPU: 0 PID: 7067 Comm: syz.5.866 Not tainted syzkaller #0
[  279.596267][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  279.606369][ T7067] Call Trace:
[  279.609709][ T7067]  <TASK>
[  279.612675][ T7067]  dump_stack_lvl+0x188/0x24e
[  279.617414][ T7067]  ? show_regs_print_info+0x12/0x12
[  279.622663][ T7067]  ? load_image+0x410/0x410
[  279.627224][ T7067]  ? __might_sleep+0xd0/0xd0
[  279.631880][ T7067]  ? __lock_acquire+0x7ea0/0x7ea0
[  279.636960][ T7067]  should_fail_ex+0x390/0x4c0
[  279.641675][ T7067]  should_failslab+0x5/0x20
[  279.646201][ T7067]  slab_pre_alloc_hook+0x59/0x300
[  279.651255][ T7067]  kmem_cache_alloc+0x56/0x2f0
[  279.656050][ T7067]  ? mpol_new+0x165/0x300
[  279.660418][ T7067]  mpol_new+0x165/0x300
[  279.664604][ T7067]  __se_sys_mbind+0x401/0x810
[  279.669314][ T7067]  ? __ia32_sys_get_robust_list+0x100/0x100
[  279.675238][ T7067]  ? __x64_sys_mbind+0xf0/0xf0
[  279.680056][ T7067]  ? lock_chain_count+0x20/0x20
[  279.684945][ T7067]  ? __x64_sys_mbind+0x1d/0xf0
[  279.689743][ T7067]  do_syscall_64+0x4c/0xa0
[  279.694198][ T7067]  ? clear_bhb_loop+0x60/0xb0
[  279.698901][ T7067]  ? clear_bhb_loop+0x60/0xb0
[  279.703602][ T7067]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  279.709515][ T7067] RIP: 0033:0x7f7ee439e199
[  279.713982][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.733605][ T7067] RSP: 002b:00007f7ee25f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  279.742047][ T7067] RAX: ffffffffffffffda RBX: 00007f7ee4625fa0 RCX: 00007f7ee439e199
[  279.750094][ T7067] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000
[  279.758089][ T7067] RBP: 00007f7ee44350b8 R08: 0000000000000000 R09: 0000000000000002
[  279.766189][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.774179][ T7067] R13: 00007f7ee4626038 R14: 00007f7ee4625fa0 R15: 00007ffe37429388
[  279.782176][ T7067]  </TASK>
[  279.864766][ T4895] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  280.039313][ T4287] Bluetooth: hci5: command 0x040f tx timeout
[  280.108516][ T4325] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  280.128597][ T4342] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  280.328509][ T4342] usb 5-1: Using ep0 maxpacket: 32
[  280.335899][ T4342] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  280.347680][ T4325] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  280.364774][ T4342] usb 5-1: config 0 has no interface number 0
[  280.378574][ T4342] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  280.391346][ T4325] usb 4-1: config 0 interface 0 has no altsetting 0
[  280.401441][ T4342] usb 5-1: config 0 interface 85 has no altsetting 0
[  280.417278][ T4325] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  280.436762][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.448529][ T4342] usb 5-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice=f0.72
[  280.478487][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.481728][ T4325] usb 4-1: config 0 descriptor??
[  280.508567][ T4342] usb 5-1: Product: syz
[  280.518935][ T4287] Bluetooth: hci2: command 0x0409 tx timeout
[  280.528658][ T4342] usb 5-1: Manufacturer: syz
[  280.533312][ T4342] usb 5-1: SerialNumber: syz
[  280.559456][ T4342] usb 5-1: config 0 descriptor??
[  280.948273][ T4325] input: HID 13ec:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:13EC:0006.0013/input/input32
[  280.962095][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  280.989764][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  281.043686][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  281.055261][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  281.068308][ T4325] zydacron 0003:13EC:0006.0013: input,hidraw0: USB HID v36.2c Joystick [HID 13ec:0006] on usb-dummy_hcd.3-1/input0
[  281.082657][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  281.111540][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  281.141247][ T6984] device veth0_vlan entered promiscuous mode
[  281.237640][ T4325] usb 4-1: USB disconnect, device number 20
[  281.266753][ T6984] device veth1_vlan entered promiscuous mode
[  281.351834][ T4342] appletouch 5-1:0.85: Geyser mode initialized.
[  281.359916][ T4342] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input31
[  281.442692][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  281.459797][   T27] kauditd_printk_skb: 34 callbacks suppressed
[  281.459811][   T27] audit: type=1800 audit(1791217827.577:307): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=153639 res=0 errno=0
[  281.474198][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  281.545468][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  281.575638][ T7086] fido_id[7086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  281.590958][   T27] audit: type=1800 audit(1791217827.617:308): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=153642 res=0 errno=0
[  281.603416][ T4342] usb 5-1: USB disconnect, device number 23
[  281.632012][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  281.676583][ T4342] appletouch 5-1:0.85: input: appletouch disconnected
[  281.683441][ T6984] device veth0_macvtap entered promiscuous mode
[  281.709323][ T6984] device veth1_macvtap entered promiscuous mode
[  281.756250][   T27] audit: type=1800 audit(1791217827.617:309): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=153641 res=0 errno=0
[  281.817679][   T27] audit: type=1800 audit(1791217827.617:310): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=153640 res=0 errno=0
[  281.840926][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.885471][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.898742][   T27] audit: type=1800 audit(1791217827.617:311): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=153631 res=0 errno=0
[  281.933818][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.987494][   T27] audit: type=1800 audit(1791217827.617:312): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=153634 res=0 errno=0
[  282.007483][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.047825][   T27] audit: type=1800 audit(1791217827.617:313): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=153481 res=0 errno=0
[  282.058620][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.090717][ T7090] loop3: detected capacity change from 0 to 512
[  282.111839][   T27] audit: type=1800 audit(1791217827.617:314): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=153484 res=0 errno=0
[  282.126093][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.136479][ T4287] Bluetooth: hci5: command 0x0419 tx timeout
[  282.176076][ T7083] loop0: detected capacity change from 0 to 32768
[  282.211975][ T7083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.870 (7083)
[  282.220122][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.255927][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.294895][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.308206][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.321483][   T27] audit: type=1800 audit(1791217827.667:315): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=153627 res=0 errno=0
[  282.359258][ T7083] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.375044][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.405343][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  282.413292][ T7083] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  282.432546][   T27] audit: type=1800 audit(1791217827.667:316): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=48452 res=0 errno=0
[  282.464820][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  282.468941][ T7083] BTRFS info (device loop0): metadata ratio 220
[  282.511529][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  282.518528][ T7083] BTRFS info (device loop0): setting nodatasum
[  282.526214][ T7083] BTRFS info (device loop0): metadata ratio 4
[  282.549805][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  282.558464][ T7083] BTRFS info (device loop0): enabling ssd optimizations
[  282.565465][ T7083] BTRFS info (device loop0): allowing degraded mounts
[  282.600343][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.608522][ T7083] BTRFS info (device loop0): using free space tree
[  282.637751][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.675075][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.705587][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.724006][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.744782][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.756136][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.775844][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.787223][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.805179][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.835390][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.848525][ T4325] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  282.932618][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  282.979089][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  283.007068][ T6984] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.058443][ T6984] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.073613][ T4325] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[  283.098500][ T6984] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.107308][ T6984] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.118500][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.126595][ T4325] usb 5-1: Product: syz
[  283.178411][ T4325] usb 5-1: Manufacturer: syz
[  283.185787][ T4325] usb 5-1: SerialNumber: syz
[  283.238990][ T4342] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  283.417538][ T4325] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0
[  283.432879][ T4342] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  283.445628][ T4325] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  283.478838][ T4342] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  283.486761][ T4546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.499416][ T4277] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.528513][ T4546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.541277][ T4342] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  283.599839][ T4342] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  283.621201][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  283.631995][ T4325] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0
[  283.658087][ T4546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.669695][ T4342] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  283.687582][ T4325] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  283.698470][ T4546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.721090][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.729588][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  283.766858][ T4342] usb 4-1: Product: syz
[  283.782149][ T4342] usb 4-1: Manufacturer: syz
[  283.786816][ T4342] usb 4-1: SerialNumber: syz
[  283.821742][ T4325] kalmia 5-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.4-1, Samsung Kalmia LTE USB dongle, d2:22:f6:a3:f5:a5
[  283.840107][ T7117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  283.861296][ T4342] cdc_mbim 4-1:1.0: skipping garbage
[  283.878030][ T4325] usb 5-1: USB disconnect, device number 24
[  283.902777][ T4325] kalmia 5-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.4-1, Samsung Kalmia LTE USB dongle
[  284.076764][ T7117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  284.097849][ T7117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  284.678607][ T7127] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  284.733161][ T7117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  284.750710][ T7117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  284.760235][ T4342] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  284.788348][ T4342] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  284.828702][ T4325] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  284.837351][ T4342] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 9a:75:0a:8a:ab:9b
[  284.858620][ T7127] usb 7-1: device descriptor read/64, error -71
[  284.986434][ T7144] loop0: detected capacity change from 0 to 1024
[  285.004578][ T4342] usb 4-1: USB disconnect, device number 21
[  285.012060][ T4342] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  285.040441][ T4325] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  285.044529][ T7144] EXT4-fs: Ignoring removed bh option
[  285.078607][ T4325] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  285.111686][ T7144] EXT4-fs: Ignoring removed bh option
[  285.128485][ T7127] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  285.137424][ T4325] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  285.207968][ T4325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  285.232730][ T7144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  285.260143][ T4325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  285.311384][ T4325] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  285.321041][ T7127] usb 7-1: device descriptor read/64, error -71
[  285.357843][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  285.386651][ T4325] usb 6-1: Product: syz
[  285.401237][ T4325] usb 6-1: Manufacturer: syz
[  285.426582][ T4325] cdc_wdm 6-1:1.0: skipping garbage
[  285.442299][ T4325] cdc_wdm 6-1:1.0: skipping garbage
[  285.451586][ T7127] usb usb7-port1: attempt power cycle
[  285.474123][ T4325] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  285.490496][ T4325] cdc_wdm 6-1:1.0: Unknown control protocol
[  285.700246][ T4277] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /185/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  285.814004][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  285.846204][ T4277] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /185/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  285.889073][ T7127] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  285.942851][ T7127] usb 7-1: device descriptor read/8, error -71
[  286.148940][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  286.248926][ T7127] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  286.370312][ T7127] usb 7-1: device descriptor read/8, error -71
[  286.462899][ T4277] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  286.563860][ T6838] usb 6-1: USB disconnect, device number 4
[  286.679816][ T7127] usb usb7-port1: unable to enumerate USB device
[  286.695844][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  286.728569][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  286.762949][ T7173] loop3: detected capacity change from 0 to 512
[  286.764929][ T4277] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /185/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  286.803870][   T27] kauditd_printk_skb: 51 callbacks suppressed
[  286.803885][   T27] audit: type=1800 audit(1791217832.917:368): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0
[  286.944518][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  286.959648][ T4277] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /185/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  287.086398][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  287.099133][ T4277] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  287.201204][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  287.239040][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  287.286301][ T4277] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /185/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  287.309631][ T7173] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  287.344703][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  287.389629][ T4277] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /185/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  287.498862][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  287.505790][ T4277] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  287.584221][ T7188] loop4: detected capacity change from 0 to 512
[  287.604843][ T7190] loop6: detected capacity change from 0 to 512
[  287.611717][ T4277] EXT4-fs (loop0): Remounting filesystem read-only
[  287.618264][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  287.652137][   T27] audit: type=1800 audit(1791217833.767:369): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37740 res=0 errno=0
[  287.720504][ T4277] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /185/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  287.771431][ T7190] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  287.781450][ T7188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  287.803716][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  287.855796][ T7190] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.868568][ T7188] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.903740][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  287.938964][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  287.990888][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  288.058959][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  288.080247][ T6984] EXT4-fs (loop6): unmounting filesystem.
[  288.148522][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  288.207145][ T4277] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  288.265838][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  288.542042][ T7204] loop6: detected capacity change from 0 to 4096
[  288.591437][ T7204] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  288.726351][ T7204] ntfs3: loop6: ntfs_set_state r=3 failed, -22.
[  288.746666][ T7185] loop5: detected capacity change from 0 to 32768
[  288.827322][ T7204] ntfs3: loop6: no free space to extend mft
[  288.835533][ T7185] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.885 (7185)
[  288.877570][ T7214] ntfs3: loop6: no free space to extend mft
[  288.927867][   T27] audit: type=1800 audit(1791217835.037:370): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154971 res=0 errno=0
[  288.968164][ T7185] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  289.052042][ T7185] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  289.104730][ T7185] BTRFS error (device loop5): superblock checksum mismatch
[  289.153461][ T7185] BTRFS error (device loop5): open_ctree failed: -22
[  289.193752][ T4375] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22.
[  289.214406][ T6984] ntfs3: loop6: ntfs_set_state r=3 failed, -22.
[  289.237829][ T4896] udevd[4896]: incorrect btrfs checksum on /dev/loop5
[  289.249064][ T6984] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  289.256610][ T6984] ntfs3: loop6: ntfs_set_state r=3 failed, -22.
[  289.317074][ T1193] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22.
[  289.364644][ T6984] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22.
[  289.624851][ T7225] FAULT_INJECTION: forcing a failure.
[  289.624851][ T7225] name failslab, interval 1, probability 0, space 0, times 0
[  289.668282][ T7225] CPU: 1 PID: 7225 Comm: syz.5.897 Not tainted syzkaller #0
[  289.675646][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  289.685747][ T7225] Call Trace:
[  289.689080][ T7225]  <TASK>
[  289.692050][ T7225]  dump_stack_lvl+0x188/0x24e
[  289.696786][ T7225]  ? show_regs_print_info+0x12/0x12
[  289.702046][ T7225]  ? load_image+0x410/0x410
[  289.706616][ T7225]  ? __lock_acquire+0x7ea0/0x7ea0
[  289.711725][ T7225]  ? do_futex+0x310/0x320
[  289.716114][ T7225]  should_fail_ex+0x390/0x4c0
[  289.720878][ T7225]  should_failslab+0x5/0x20
[  289.725423][ T7225]  slab_pre_alloc_hook+0x59/0x300
[  289.730490][ T7225]  ? do_eventfd+0x7a/0x2d0
[  289.734940][ T7225]  __kmem_cache_alloc_node+0x4f/0x270
[  289.740336][ T7225]  ? do_eventfd+0x7a/0x2d0
[  289.744795][ T7225]  kmalloc_trace+0x26/0xe0
[  289.749233][ T7225]  do_eventfd+0x7a/0x2d0
[  289.753508][ T7225]  __x64_sys_eventfd2+0x56/0x60
[  289.758406][ T7225]  do_syscall_64+0x4c/0xa0
[  289.762859][ T7225]  ? clear_bhb_loop+0x60/0xb0
[  289.767566][ T7225]  ? clear_bhb_loop+0x60/0xb0
[  289.772276][ T7225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  289.778195][ T7225] RIP: 0033:0x7f7ee439e199
[  289.782637][ T7225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.802428][ T7225] RSP: 002b:00007f7ee25f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122
[  289.810889][ T7225] RAX: ffffffffffffffda RBX: 00007f7ee4625fa0 RCX: 00007f7ee439e199
[  289.818901][ T7225] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000ccf
[  289.826900][ T7225] RBP: 00007f7ee44350b8 R08: 0000000000000000 R09: 0000000000000000
[  289.834897][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.842893][ T7225] R13: 00007f7ee4626038 R14: 00007f7ee4625fa0 R15: 00007ffe37429388
[  289.850917][ T7225]  </TASK>
[  289.889869][ T4375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.972925][ T7229] device ip6_vti0 entered promiscuous mode
[  290.140667][ T4375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.489777][ T4375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.658503][ T4469] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  290.679957][ T4375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.786227][ T7231] loop3: detected capacity change from 0 to 32768
[  290.848139][   T27] audit: type=1800 audit(1791217836.957:371): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0
[  290.853611][ T4469] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.888630][ T7231] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.899 (7231)
[  290.928693][ T7239] syz.4.902 (7239) used greatest stack depth: 18144 bytes left
[  290.960765][ T7241] syz.4.902 (7241) used greatest stack depth: 16624 bytes left
[  290.973678][   T27] audit: type=1800 audit(1791217837.067:372): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155082 res=0 errno=0
[  290.990859][ T4469] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.054141][ T4469] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  291.111038][   T27] audit: type=1800 audit(1791217837.067:373): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=155087 res=0 errno=0
[  291.111045][ T4469] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.148856][ T4469] usb 7-1: config 0 descriptor??
[  291.273143][ T7231] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  291.286474][ T4375] tipc: Left network mode
[  291.293819][   T27] audit: type=1800 audit(1791217837.067:374): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=155091 res=0 errno=0
[  291.339604][ T7231] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  291.379450][ T7231] BTRFS info (device loop3): setting nodatasum
[  291.426322][ T7231] BTRFS info (device loop3): metadata ratio 9
[  291.438632][   T27] audit: type=1800 audit(1791217837.067:375): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=155090 res=0 errno=0
[  291.479078][ T7231] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  291.528422][ T7231] BTRFS info (device loop3): use lzo compression, level 0
[  291.540351][   T27] audit: type=1800 audit(1791217837.067:376): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=155093 res=0 errno=0
[  291.571585][ T7231] BTRFS info (device loop3): turning on flush-on-commit
[  291.601933][ T7231] BTRFS info (device loop3): enabling auto defrag
[  291.612118][ T4469] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0
[  291.634391][ T7231] BTRFS info (device loop3): max_inline at 56
[  291.649315][ T7127] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  291.658198][   T27] audit: type=1800 audit(1791217837.137:377): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155166 res=0 errno=0
[  291.681897][ T4469] hid-steam 0003:28DE:1142.0014: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  291.698502][ T7231] BTRFS info (device loop3): using free space tree
[  291.739039][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  291.750132][ T4293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  291.759298][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  291.769478][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  291.778856][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  291.779766][ T4546] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  291.786884][ T4293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  291.815526][ T4469] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0
[  291.837098][   T27] kauditd_printk_skb: 18 callbacks suppressed
[  291.837111][   T27] audit: type=1800 audit(1791217837.947:396): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155578 res=0 errno=0
[  291.868254][ T7127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.872034][ T4469] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  291.910824][ T7127] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  291.943726][ T7127] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  291.953337][ T7127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.959410][ T4469] hid-steam 0003:28DE:1142.0014: Steam wireless receiver connected
[  291.964214][ T7127] usb 5-1: Product: syz
[  291.973756][ T7127] usb 5-1: Manufacturer: syz
[  291.979012][ T7127] usb 5-1: SerialNumber: syz
[  291.989447][ T7127] cdc_mbim 5-1:1.0: skipping garbage
[  291.990681][ T4469] hid-steam 0003:28DE:1142.0014: No HID_FEATURE_REPORT submitted -  nothing to read
[  292.000195][   T27] audit: type=1800 audit(1791217837.947:397): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155567 res=0 errno=0
[  292.070714][   T27] audit: type=1800 audit(1791217838.167:398): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155408 res=0 errno=0
[  292.128533][ T7231] BTRFS info (device loop3): enabling ssd optimizations
[  292.160723][   T27] audit: type=1800 audit(1791217838.167:399): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=155341 res=0 errno=0
[  292.195305][ T7252] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  292.288671][   T27] audit: type=1800 audit(1791217838.167:400): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=155342 res=0 errno=0
[  292.384175][   T27] audit: type=1800 audit(1791217838.167:401): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=155343 res=0 errno=0
[  292.453247][   T27] audit: type=1800 audit(1791217838.187:402): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155467 res=0 errno=0
[  292.555488][ T7283] jffs2: notice: (7283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  292.588157][   T27] audit: type=1800 audit(1791217838.297:403): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155505 res=0 errno=0
[  292.645636][   T27] audit: type=1800 audit(1791217838.297:404): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155551 res=0 errno=0
[  292.667310][   T27] audit: type=1800 audit(1791217838.327:405): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155590 res=0 errno=0
[  292.782272][ T4283] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  292.911750][ T7252] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  292.921844][ T7127] cdc_mbim 5-1:1.0: setting rx_max = 16384
[  293.132578][ T7127] cdc_mbim 5-1:1.0: setting tx_max = 184
[  293.139537][ T4327] usb 7-1: reset high-speed USB device number 6 using dummy_hcd
[  293.148198][ T7127] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  293.260089][ T4895] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4895)
[  293.280828][ T7127] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 46:0e:5c:53:24:7c
[  293.368336][ T7127] usb 5-1: USB disconnect, device number 25
[  293.419153][ T7127] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  293.625688][ T7256] chnl_net:caif_netlink_parms(): no params data found
[  293.878874][ T4293] Bluetooth: hci3: command 0x0409 tx timeout
[  294.013054][ T7306] loop4: detected capacity change from 0 to 256
[  294.033658][ T7306] exfat: Deprecated parameter 'utf8'
[  294.045826][ T4469] usb 7-1: USB disconnect, device number 6
[  294.056535][ T7305] tipc: Started in network mode
[  294.061761][ T7306] exfat: Deprecated parameter 'utf8'
[  294.067360][ T7306] exfat: Deprecated parameter 'namecase'
[  294.077077][ T7305] tipc: Node identity 7f000001, cluster identity 4711
[  294.104527][ T4469] hid-steam 0003:28DE:1142.0014: Steam wireless receiver disconnected
[  294.132114][ T7306] exfat: Deprecated parameter 'namecase'
[  294.161378][ T7305] tipc: Enabled bearer <udp:syz1>, priority 10
[  294.201727][ T7306] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  294.550396][ T4375] bond0: (slave wlan1): Releasing backup interface
[  294.655064][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.715654][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.760059][ T7256] device bridge_slave_0 entered promiscuous mode
[  294.790872][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.814479][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.869436][ T7256] device bridge_slave_1 entered promiscuous mode
[  295.384345][ T4375] device hsr_slave_0 left promiscuous mode
[  295.425438][ T4375] device hsr_slave_1 left promiscuous mode
[  295.450941][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.487572][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.517859][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.547997][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.591494][ T4375] device bridge_slave_1 left promiscuous mode
[  295.618694][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.671068][ T4375] device bridge_slave_0 left promiscuous mode
[  295.677353][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.847409][ T4375] device vlan0 left promiscuous mode
[  295.853877][ T7339] FAULT_INJECTION: forcing a failure.
[  295.853877][ T7339] name failslab, interval 1, probability 0, space 0, times 0
[  295.881403][ T4375] device veth1_macvtap left promiscuous mode
[  295.887540][ T4375] device veth0_macvtap left promiscuous mode
[  295.922763][ T7339] CPU: 1 PID: 7339 Comm: syz.4.919 Not tainted syzkaller #0
[  295.930154][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  295.940258][ T7339] Call Trace:
[  295.943576][ T7339]  <TASK>
[  295.946546][ T7339]  dump_stack_lvl+0x188/0x24e
[  295.951295][ T7339]  ? show_regs_print_info+0x12/0x12
[  295.956551][ T7339]  ? load_image+0x410/0x410
[  295.961115][ T7339]  ? __lock_acquire+0x7ea0/0x7ea0
[  295.966216][ T7339]  should_fail_ex+0x390/0x4c0
[  295.970952][ T7339]  should_failslab+0x5/0x20
[  295.975520][ T7339]  slab_pre_alloc_hook+0x59/0x300
[  295.980597][ T7339]  ? security_prepare_creds+0x47/0x130
[  295.986105][ T7339]  __kmem_cache_alloc_node+0x4f/0x270
[  295.991514][ T7339]  ? security_prepare_creds+0x47/0x130
[  295.997003][ T7339]  __kmalloc+0xa3/0x240
[  296.001184][ T7339]  security_prepare_creds+0x47/0x130
[  296.006526][ T7339]  prepare_creds+0x450/0x610
[  296.011148][ T7339]  join_session_keyring+0x17/0x440
[  296.016292][ T7339]  lookup_user_key+0x516/0x1110
[  296.021179][ T7339]  ? lookup_user_key_possessed+0x40/0x40
[  296.026848][ T7339]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  296.032866][ T7339]  ? __might_fault+0xc2/0x120
[  296.037571][ T7339]  ? __might_fault+0xa6/0x120
[  296.042326][ T7339]  __se_sys_add_key+0x311/0x410
[  296.047214][ T7339]  ? __x64_sys_add_key+0xc0/0xc0
[  296.052189][ T7339]  ? lockdep_hardirqs_on+0x94/0x140
[  296.057421][ T7339]  ? __x64_sys_add_key+0x1c/0xc0
[  296.062402][ T7339]  do_syscall_64+0x4c/0xa0
[  296.066863][ T7339]  ? clear_bhb_loop+0x60/0xb0
[  296.071572][ T7339]  ? clear_bhb_loop+0x60/0xb0
[  296.076276][ T7339]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  296.082192][ T7339] RIP: 0033:0x7f8a9299e199
[  296.086627][ T7339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.106259][ T7339] RSP: 002b:00007f8a93826028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  296.114724][ T7339] RAX: ffffffffffffffda RBX: 00007f8a92c25fa0 RCX: 00007f8a9299e199
[  296.122725][ T7339] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040
[  296.130717][ T7339] RBP: 00007f8a92a350b8 R08: fffffffffffffffd R09: 0000000000000000
[  296.138714][ T7339] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  296.146705][ T7339] R13: 00007f8a92c26038 R14: 00007f8a92c25fa0 R15: 00007ffd2068a1a8
[  296.154749][ T7339]  </TASK>
[  296.166853][ T4293] Bluetooth: hci3: command 0x041b tx timeout
[  296.218778][ T4375] device veth1_vlan left promiscuous mode
[  296.248648][ T4375] device veth0_vlan left promiscuous mode
[  297.738924][ T4375] team0 (unregistering): Port device team_slave_1 removed
[  297.813208][ T7356] FAULT_INJECTION: forcing a failure.
[  297.813208][ T7356] name failslab, interval 1, probability 0, space 0, times 0
[  297.838606][ T7356] CPU: 1 PID: 7356 Comm: syz.5.924 Not tainted syzkaller #0
[  297.845950][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  297.856041][ T7356] Call Trace:
[  297.859351][ T7356]  <TASK>
[  297.862312][ T7356]  dump_stack_lvl+0x188/0x24e
[  297.867054][ T7356]  ? show_regs_print_info+0x12/0x12
[  297.872328][ T7356]  ? load_image+0x410/0x410
[  297.876893][ T7356]  ? __might_sleep+0xd0/0xd0
[  297.881518][ T7356]  ? __lock_acquire+0x7ea0/0x7ea0
[  297.886594][ T7356]  should_fail_ex+0x390/0x4c0
[  297.891338][ T7356]  should_failslab+0x5/0x20
[  297.895878][ T7356]  slab_pre_alloc_hook+0x59/0x300
[  297.900946][ T7356]  ? security_sk_alloc+0x47/0x130
[  297.906017][ T7356]  __kmem_cache_alloc_node+0x4f/0x270
[  297.911435][ T7356]  ? security_sk_alloc+0x47/0x130
[  297.916533][ T7356]  __kmalloc+0xa3/0x240
[  297.920725][ T7356]  ? sk_prot_alloc+0xe7/0x210
[  297.925448][ T7356]  security_sk_alloc+0x47/0x130
[  297.930343][ T7356]  sk_prot_alloc+0x101/0x210
[  297.934967][ T7356]  ? sk_alloc+0x20/0x330
[  297.939260][ T7356]  sk_alloc+0x36/0x330
[  297.943375][ T7356]  alg_create+0xa0/0x130
[  297.947660][ T7356]  __sock_create+0x49a/0x940
[  297.952309][ T7356]  __sys_socket+0xc4/0x190
[  297.956780][ T7356]  __x64_sys_socket+0x76/0x80
[  297.961503][ T7356]  do_syscall_64+0x4c/0xa0
[  297.965983][ T7356]  ? clear_bhb_loop+0x60/0xb0
[  297.970731][ T7356]  ? clear_bhb_loop+0x60/0xb0
[  297.975485][ T7356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  297.981443][ T7356] RIP: 0033:0x7f7ee439e199
[  297.985897][ T7356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.005561][ T7356] RSP: 002b:00007f7ee25f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  298.014013][ T7356] RAX: ffffffffffffffda RBX: 00007f7ee4625fa0 RCX: 00007f7ee439e199
[  298.022013][ T7356] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026
[  298.030006][ T7356] RBP: 00007f7ee44350b8 R08: 0000000000000000 R09: 0000000000000000
[  298.037999][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.046024][ T7356] R13: 00007f7ee4626038 R14: 00007f7ee4625fa0 R15: 00007ffe37429388
[  298.054027][ T7356]  </TASK>
[  298.085073][ T4375] team0 (unregistering): Port device team_slave_0 removed
[  298.196957][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.199523][ T4293] Bluetooth: hci3: command 0x040f tx timeout
[  298.272958][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  298.824454][ T4375] bond0 (unregistering): Released all slaves
[  298.896320][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.912573][ T4327] tipc: Node number set to 2130706433
[  298.946222][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.124078][ T7256] team0: Port device team_slave_0 added
[  299.151691][ T7256] team0: Port device team_slave_1 added
[  299.255598][ T7368] FAULT_INJECTION: forcing a failure.
[  299.255598][ T7368] name failslab, interval 1, probability 0, space 0, times 0
[  299.280484][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.287604][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.373045][ T7368] CPU: 1 PID: 7368 Comm: syz.3.929 Not tainted syzkaller #0
[  299.373923][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.380501][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  299.380518][ T7368] Call Trace:
[  299.380526][ T7368]  <TASK>
[  299.380535][ T7368]  dump_stack_lvl+0x188/0x24e
[  299.380570][ T7368]  ? show_regs_print_info+0x12/0x12
[  299.417412][ T7368]  ? load_image+0x410/0x410
[  299.421988][ T7368]  ? __might_sleep+0xd0/0xd0
[  299.426639][ T7368]  ? __lock_acquire+0x7ea0/0x7ea0
[  299.431754][ T7368]  should_fail_ex+0x390/0x4c0
[  299.436492][ T7368]  should_failslab+0x5/0x20
[  299.441024][ T7368]  slab_pre_alloc_hook+0x59/0x300
[  299.446090][ T7368]  ? do_epoll_create+0x107/0x340
[  299.451052][ T7368]  __kmem_cache_alloc_node+0x4f/0x270
[  299.456448][ T7368]  ? do_epoll_create+0x107/0x340
[  299.461418][ T7368]  kmalloc_trace+0x26/0xe0
[  299.465853][ T7368]  do_epoll_create+0x107/0x340
[  299.470665][ T7368]  __x64_sys_epoll_create1+0x33/0x40
[  299.475986][ T7368]  do_syscall_64+0x4c/0xa0
[  299.480436][ T7368]  ? clear_bhb_loop+0x60/0xb0
[  299.485147][ T7368]  ? clear_bhb_loop+0x60/0xb0
[  299.489874][ T7368]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  299.495785][ T7368] RIP: 0033:0x7f542559e199
[  299.500225][ T7368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.519862][ T7368] RSP: 002b:00007f54264fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[  299.528301][ T7368] RAX: ffffffffffffffda RBX: 00007f5425825fa0 RCX: 00007f542559e199
[  299.536299][ T7368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[  299.544289][ T7368] RBP: 00007f54256350b8 R08: 0000000000000000 R09: 0000000000000000
[  299.552281][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.560295][ T7368] R13: 00007f5425826038 R14: 00007f5425825fa0 R15: 00007fff9eb41698
[  299.568299][ T7368]  </TASK>
[  299.609995][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.616992][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.777247][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.905418][ T7384] FAULT_INJECTION: forcing a failure.
[  299.905418][ T7384] name failslab, interval 1, probability 0, space 0, times 0
[  299.974734][ T7384] CPU: 1 PID: 7384 Comm: syz.5.931 Not tainted syzkaller #0
[  299.982083][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  299.992169][ T7384] Call Trace:
[  299.995486][ T7384]  <TASK>
[  299.998458][ T7384]  dump_stack_lvl+0x188/0x24e
[  300.003183][ T7384]  ? show_regs_print_info+0x12/0x12
[  300.008432][ T7384]  ? load_image+0x410/0x410
[  300.012985][ T7384]  ? __lock_acquire+0x7ea0/0x7ea0
[  300.018066][ T7384]  should_fail_ex+0x390/0x4c0
[  300.022798][ T7384]  should_failslab+0x5/0x20
[  300.027344][ T7384]  slab_pre_alloc_hook+0x59/0x300
[  300.032428][ T7384]  ? security_prepare_creds+0x47/0x130
[  300.037936][ T7384]  __kmem_cache_alloc_node+0x4f/0x270
[  300.043334][ T7384]  ? security_prepare_creds+0x47/0x130
[  300.048825][ T7384]  __kmalloc+0xa3/0x240
[  300.053019][ T7384]  security_prepare_creds+0x47/0x130
[  300.058338][ T7384]  prepare_creds+0x450/0x610
[  300.062973][ T7384]  join_session_keyring+0x17/0x440
[  300.068121][ T7384]  lookup_user_key+0x516/0x1110
[  300.072999][ T7384]  ? lookup_user_key_possessed+0x40/0x40
[  300.078676][ T7384]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  300.084685][ T7384]  ? __might_fault+0xc2/0x120
[  300.089398][ T7384]  ? __might_fault+0xa6/0x120
[  300.094107][ T7384]  __se_sys_add_key+0x311/0x410
[  300.098984][ T7384]  ? __x64_sys_add_key+0xc0/0xc0
[  300.103953][ T7384]  ? lockdep_hardirqs_on+0x94/0x140
[  300.109175][ T7384]  ? __x64_sys_add_key+0x1c/0xc0
[  300.114135][ T7384]  do_syscall_64+0x4c/0xa0
[  300.118567][ T7384]  ? clear_bhb_loop+0x60/0xb0
[  300.123268][ T7384]  ? clear_bhb_loop+0x60/0xb0
[  300.127971][ T7384]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  300.133880][ T7384] RIP: 0033:0x7f7ee439e199
[  300.138316][ T7384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.157950][ T7384] RSP: 002b:00007f7ee25f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  300.166409][ T7384] RAX: ffffffffffffffda RBX: 00007f7ee4625fa0 RCX: 00007f7ee439e199
[  300.174431][ T7384] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040
[  300.182429][ T7384] RBP: 00007f7ee44350b8 R08: fffffffffffffffd R09: 0000000000000000
[  300.190424][ T7384] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  300.198426][ T7384] R13: 00007f7ee4626038 R14: 00007f7ee4625fa0 R15: 00007ffe37429388
[  300.206434][ T7384]  </TASK>
[  300.250367][ T7256] device hsr_slave_0 entered promiscuous mode
[  300.271644][ T7256] device hsr_slave_1 entered promiscuous mode
[  300.278623][ T4293] Bluetooth: hci3: command 0x0419 tx timeout
[  300.341024][ T7256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  300.388425][ T7256] Cannot create hsr debugfs directory
[  300.473548][ T7390] loop6: detected capacity change from 0 to 2048
[  300.538155][   T27] kauditd_printk_skb: 24 callbacks suppressed
[  300.538167][   T27] audit: type=1800 audit(1791217846.647:430): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0
[  300.584238][ T7390] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.906335][   T27] audit: type=1800 audit(1791217847.017:431): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=46683 res=0 errno=0
[  300.929913][ T7398] loop5: detected capacity change from 0 to 136
[  301.008049][   T27] audit: type=1800 audit(1791217847.037:432): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46682 res=0 errno=0
[  301.018614][ T7398] rock: directory entry would overflow storage
[  301.117295][   T27] audit: type=1800 audit(1791217847.197:433): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0
[  301.148467][ T7398] rock: sig=0x4f50, size=4, remaining=3
[  301.160235][ T7398] iso9660: Corrupted directory entry in block 2 of inode 1472
[  301.368917][   T27] audit: type=1800 audit(1791217847.477:434): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162567 res=0 errno=0
[  301.444389][ T7256] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  301.466598][ T7408] loop5: detected capacity change from 0 to 64
[  301.482027][ T7256] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  301.516309][   T27] audit: type=1800 audit(1791217847.627:435): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0
[  301.570591][ T7256] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  301.691046][ T7256] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  301.936485][ T7386] loop3: detected capacity change from 0 to 40427
[  302.015032][ T7386] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff
[  302.033496][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.050329][ T7386] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4
[  302.082456][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  302.104033][ T7386] F2FS-fs (loop3): invalid crc value
[  302.111377][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  302.153448][ T7256] 8021q: adding VLAN 0 to HW filter on device team0
[  302.165142][ T7386] F2FS-fs (loop3): Found nat_bits in checkpoint
[  302.219924][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  302.249232][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  302.273550][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.280845][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.322762][ T7386] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00
[  302.341558][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.420829][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  302.452788][ T7386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  302.463726][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  302.499122][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.506345][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.578652][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  302.629476][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  302.651513][ T7386] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20
[  302.696562][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  302.713396][ T7386] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10a/0xfc0
[  302.726533][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  302.799827][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  302.829630][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.867723][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  302.897655][ T4283] syz-executor: attempt to access beyond end of device
[  302.897655][ T4283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  302.928962][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  302.966822][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  303.005506][ T7256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  303.051953][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.096558][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  303.119325][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  303.488616][ T4468] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  303.696656][ T4468] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  303.726311][ T4468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.759413][ T4468] usb 7-1: Product: syz
[  303.763658][ T4468] usb 7-1: Manufacturer: syz
[  303.799258][ T4468] usb 7-1: SerialNumber: syz
[  303.878700][   T27] audit: type=1800 audit(1791217849.987:436): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163129 res=0 errno=0
[  303.917642][ T4468] ums-karma 7-1:1.0: USB Mass Storage device detected
[  303.959977][ T4468] ums-karma 7-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  303.959977][ T4468]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  304.017041][   T27] audit: type=1800 audit(1791217850.017:437): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=163172 res=0 errno=0
[  304.208078][   T27] audit: type=1800 audit(1791217850.017:438): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=163136 res=0 errno=0
[  304.228998][   T27] audit: type=1800 audit(1791217850.017:439): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=163137 res=0 errno=0
[  304.280263][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  304.287829][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  304.338077][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.363560][ T7437] loop5: detected capacity change from 0 to 32768
[  304.450390][ T4468] ums-karma: probe of 7-1:1.0 failed with error -5
[  304.471315][ T7437] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  304.600049][ T4327] usb 7-1: USB disconnect, device number 7
[  304.706096][ T7464] FAULT_INJECTION: forcing a failure.
[  304.706096][ T7464] name failslab, interval 1, probability 0, space 0, times 0
[  304.772618][ T7464] CPU: 1 PID: 7464 Comm: syz.3.948 Not tainted syzkaller #0
[  304.779983][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  304.790094][ T7464] Call Trace:
[  304.793416][ T7464]  <TASK>
[  304.796403][ T7464]  dump_stack_lvl+0x188/0x24e
[  304.801133][ T7464]  ? show_regs_print_info+0x12/0x12
[  304.806382][ T7464]  ? load_image+0x410/0x410
[  304.810954][ T7464]  ? __might_sleep+0xd0/0xd0
[  304.815614][ T7464]  ? __lock_acquire+0x7ea0/0x7ea0
[  304.820712][ T7464]  should_fail_ex+0x390/0x4c0
[  304.825454][ T7464]  should_failslab+0x5/0x20
[  304.830002][ T7464]  slab_pre_alloc_hook+0x59/0x300
[  304.835092][ T7464]  ? file_end_write+0x156/0x250
[  304.840025][ T7464]  kmem_cache_alloc_lru+0x49/0x2e0
[  304.845187][ T7464]  ? new_inode_pseudo+0x7e/0x1c0
[  304.850205][ T7464]  new_inode_pseudo+0x7e/0x1c0
[  304.855019][ T7464]  create_pipe_files+0x4c/0x6b0
[  304.859970][ T7464]  __do_pipe_flags+0x46/0x1f0
[  304.864801][ T7464]  do_pipe2+0xa7/0x190
[  304.868918][ T7464]  ? _compound_head+0x120/0x120
[  304.873818][ T7464]  ? lock_chain_count+0x20/0x20
[  304.878722][ T7464]  ? syscall_enter_from_user_mode+0x21/0x80
[  304.884723][ T7464]  __x64_sys_pipe+0x36/0x40
[  304.889308][ T7464]  do_syscall_64+0x4c/0xa0
[  304.893787][ T7464]  ? clear_bhb_loop+0x60/0xb0
[  304.898508][ T7464]  ? clear_bhb_loop+0x60/0xb0
[  304.903231][ T7464]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  304.909166][ T7464] RIP: 0033:0x7f542559e199
[  304.913622][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.933285][ T7464] RSP: 002b:00007f54264fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[  304.941763][ T7464] RAX: ffffffffffffffda RBX: 00007f5425825fa0 RCX: 00007f542559e199
[  304.949790][ T7464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  304.957805][ T7464] RBP: 00007f54256350b8 R08: 0000000000000000 R09: 0000000000000000
[  304.965829][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.973856][ T7464] R13: 00007f5425826038 R14: 00007f5425825fa0 R15: 00007fff9eb41698
[  304.981907][ T7464]  </TASK>
[  305.203619][ T7382] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  305.473321][ T7474] loop5: detected capacity change from 0 to 512
[  305.549510][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  305.609902][ T7474] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.950: iget: bad i_size value: 38620345925642
[  305.703227][ T7474] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.950: couldn't read orphan inode 15 (err -117)
[  305.779950][ T7474] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  305.847808][ T7474] EXT4-fs error (device loop5): ext4_check_dx_root:2268: inode #2: comm syz.5.950: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  306.082812][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  306.122668][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  306.182623][ T6491] EXT4-fs (loop5): unmounting filesystem.
[  306.208550][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  306.225691][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  306.270319][ T7256] device veth0_vlan entered promiscuous mode
[  306.289258][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  306.316310][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  306.357842][ T7256] device veth1_vlan entered promiscuous mode
[  306.511480][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  306.539415][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  306.588349][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  306.620868][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  306.672999][ T7256] device veth0_macvtap entered promiscuous mode
[  306.721507][ T7256] device veth1_macvtap entered promiscuous mode
[  306.798766][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.850497][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.880971][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.938237][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.987882][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.051475][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.093620][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.145144][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.161281][ T7511] FAULT_INJECTION: forcing a failure.
[  307.161281][ T7511] name failslab, interval 1, probability 0, space 0, times 0
[  307.188479][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.217603][ T7511] CPU: 1 PID: 7511 Comm: syz.4.957 Not tainted syzkaller #0
[  307.224960][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  307.235079][ T7511] Call Trace:
[  307.238395][ T7511]  <TASK>
[  307.240045][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.241429][ T7511]  dump_stack_lvl+0x188/0x24e
[  307.255982][ T7511]  ? show_regs_print_info+0x12/0x12
[  307.261262][ T7511]  ? load_image+0x410/0x410
[  307.265824][ T7511]  ? __might_sleep+0xd0/0xd0
[  307.270461][ T7511]  ? __lock_acquire+0x7ea0/0x7ea0
[  307.275547][ T7511]  should_fail_ex+0x390/0x4c0
[  307.280304][ T7511]  should_failslab+0x5/0x20
[  307.284849][ T7511]  slab_pre_alloc_hook+0x59/0x300
[  307.289946][ T7511]  ? do_epoll_create+0x107/0x340
[  307.294956][ T7511]  __kmem_cache_alloc_node+0x4f/0x270
[  307.298492][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.300364][ T7511]  ? do_epoll_create+0x107/0x340
[  307.312572][ T7511]  kmalloc_trace+0x26/0xe0
[  307.317039][ T7511]  do_epoll_create+0x107/0x340
[  307.321868][ T7511]  __x64_sys_epoll_create1+0x33/0x40
[  307.327204][ T7511]  do_syscall_64+0x4c/0xa0
[  307.331669][ T7511]  ? clear_bhb_loop+0x60/0xb0
[  307.336401][ T7511]  ? clear_bhb_loop+0x60/0xb0
[  307.341149][ T7511]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  307.347099][ T7511] RIP: 0033:0x7f8a9299e199
[  307.351580][ T7511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.371234][ T7511] RSP: 002b:00007f8a93826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[  307.379701][ T7511] RAX: ffffffffffffffda RBX: 00007f8a92c25fa0 RCX: 00007f8a9299e199
[  307.387723][ T7511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[  307.395739][ T7511] RBP: 00007f8a92a350b8 R08: 0000000000000000 R09: 0000000000000000
[  307.398514][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.403737][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.422182][ T7511] R13: 00007f8a92c26038 R14: 00007f8a92c25fa0 R15: 00007ffd2068a1a8
[  307.430221][ T7511]  </TASK>
[  307.477538][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.530899][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.588029][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.647630][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.709442][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.751320][ T7503] loop5: detected capacity change from 0 to 32768
[  307.766838][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.799554][ T7503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.954 (7503)
[  307.825264][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.855578][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.886154][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  307.886169][   T27] audit: type=1800 audit(1791217853.997:447): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163330 res=0 errno=0
[  307.919148][ T7501] loop6: detected capacity change from 0 to 40427
[  307.925690][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.949805][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.963428][ T7501] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff
[  307.996289][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  308.009441][ T7503] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  308.023338][ T7501] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x30e4
[  308.033065][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  308.058269][   T27] audit: type=1800 audit(1791217854.167:448): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0
[  308.091581][ T7503] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  308.097852][ T7501] F2FS-fs (loop6): invalid crc value
[  308.129321][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  308.143079][ T7503] BTRFS info (device loop5): force clearing of disk cache
[  308.152068][ T7501] F2FS-fs (loop6): Found nat_bits in checkpoint
[  308.171772][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  308.196068][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  308.198750][ T7503] BTRFS info (device loop5): enabling auto defrag
[  308.246093][ T7501] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00
[  308.257812][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  308.258805][ T7503] BTRFS info (device loop5): max_inline at 0
[  308.300654][ T7256] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.319379][ T7256] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.334533][ T7503] BTRFS info (device loop5): enabling disk space caching
[  308.360103][ T7256] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.363839][ T7503] BTRFS info (device loop5): disk space caching is enabled
[  308.406634][ T7501] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  308.422910][ T7256] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
Stopping sshd: [  308.553398][ T7503] BTRFS info (device loop5): enabling ssd optimizations
[  308.562138][ T7503] BTRFS info (device loop5): rebuilding free space tree
[  308.660911][ T7503] BTRFS info (device loop5): disabling free space tree
[  308.681582][ T7503] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  308.729355][ T7501] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20
stopped /usr/sbin/sshd (pid 4027)
[  308.789184][ T7503] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  308.800418][   T27] audit: type=1800 audit(1791217854.917:449): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163524 res=0 errno=0
OK
[  308.868050][ T7501] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10a/0xfc0
[  308.905189][ T5106] kworker/u4:18: attempt to access beyond end of device
[  308.905189][ T5106] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  308.964204][ T5072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.974240][   T27] audit: type=1800 audit(1791217855.097:450): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163695 res=0 errno=0
[  309.032428][ T7551] loop3: detected capacity change from 0 to 512
[  309.038968][ T5072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.056437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  309.091033][ T7551] EXT4-fs: Ignoring removed oldalloc option
[  309.173747][   T27] audit: type=1800 audit(1791217855.287:451): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0
[  309.193848][ T4546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.217265][ T4546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.268046][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
Stopping crond: [  309.310310][   T27] audit: type=1800 audit(1791217855.337:452): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.954" name="bus" dev="loop5" ino=263 res=0 errno=0
[  309.356424][ T7551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  309.435207][   T27] audit: type=1800 audit(1791217855.547:453): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.959" name="file1" dev="loop3" ino=15 res=0 errno=0
[  309.551237][ T6491] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
stopped /usr/sbin/crond (pid 4012)
OK
[  309.768726][    T7] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  309.979607][    T7] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  310.002914][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.019684][    T7] usb 5-1: Product: syz
[  310.037025][    T7] usb 5-1: Manufacturer: syz
[  310.051665][    T7] usb 5-1: SerialNumber: syz
[  310.059451][   T27] audit: type=1800 audit(1791217856.177:454): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163923 res=0 errno=0
[  310.115153][    T7] ums-karma 5-1:1.0: USB Mass Storage device detected
[  310.135648][   T27] audit: type=1800 audit(1791217856.177:455): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=163966 res=0 errno=0
[  310.200994][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  310.217046][   T27] audit: type=1800 audit(1791217856.197:456): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=163930 res=0 errno=0
[  310.260065][    T7] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  310.260065][    T7]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  310.521910][ T7577] loop7: detected capacity change from 0 to 512
[  310.582110][ T7577] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
Stopping dhcpcd...
[  310.716569][ T7577] EXT4-fs (loop7): 1 truncate cleaned up
[  310.746264][ T7577] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  310.785346][    T7] ums-karma: probe of 5-1:1.0 failed with error -5
[  310.889045][ T7577] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.964: Logical block already allocated
[  310.901989][ T7582] loop3: detected capacity change from 0 to 1024
[  310.925743][ T4324] usb 5-1: USB disconnect, device number 26
[  310.946075][ T7577] EXT4-fs (loop7): Remounting filesystem read-only
[  311.126176][ T7582] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  311.146274][ T7582] hfsplus: xattr searching failed
stopped /sbin/dhcpcd (pid 3934)
[  311.191702][ T7588] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  311.241902][ T7588] hfsplus: xattr search failed
[  311.369928][ T7256] EXT4-fs (loop7): unmounting filesystem.
[  311.516119][ T4805] hfsplus: b-tree write err: -5, ino 25
[  311.528568][ T4805] hfsplus: b-tree write err: -5, ino 4
[  311.534163][ T4805] hfsplus: b-tree write err: -5, ino 2
[  311.578508][ T4805] hfsplus: b-tree write err: -5, ino 28
[  311.912207][ T7611] loop5: detected capacity change from 0 to 7
[  311.945943][ T7399] Dev loop5: unable to read RDB block 7
[  311.953097][ T7399]  loop5: unable to read partition table
[  311.982476][ T7399] loop5: partition table beyond EOD, truncated
Stopping network: [  312.012660][ T7611] Dev loop5: unable to read RDB block 7
[  312.020011][ T7611]  loop5: unable to read partition table
[  312.048606][ T7611] loop5: partition table beyond EOD, truncated
[  312.088757][ T7611] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  312.568206][ T7626] loop5: detected capacity change from 0 to 1024
[  312.626383][ T7626] EXT4-fs: Ignoring removed mblk_io_submit option
[  312.706205][ T7626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  312.774747][ T7626] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.978: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  312.886130][ T7626] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.978: couldn't read orphan inode 11 (err -117)
[  312.939133][ T7626] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  313.051594][ T7626] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.978: Invalid block bitmap block 0 in block_group 0
[  313.124731][ T7626] __quota_error: 15 callbacks suppressed
[  313.124750][ T7626] Quota error (device loop5): write_blk: dquota write failed
[  313.181763][ T7626] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  313.232642][ T7626] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.978: Failed to acquire dquot type 0
[  313.280232][ T7617] loop3: detected capacity change from 0 to 32768
[  313.321833][ T7626] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.978: Invalid inode bitmap blk 137438953472 in block_group 0
[  313.357091][ T7617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.975 (7617)
[  313.377480][   T27] audit: type=1800 audit(1791217859.467:472): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0
[  313.451794][ T7617] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  313.487032][   T27] audit: type=1800 audit(1791217859.547:473): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164211 res=0 errno=0
[  313.528504][ T7617] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  313.582523][ T7617] BTRFS info (device loop3): force clearing of disk cache
[  313.610405][ T7617] BTRFS info (device loop3): enabling auto defrag
[  313.647500][ T7617] BTRFS info (device loop3): max_inline at 0
[  313.684920][ T4375] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm kworker/u4:8: Invalid inode table block 8589934593 in block_group 0
[  313.727597][ T7617] BTRFS info (device loop3): enabling disk space caching
[  313.755628][ T7617] BTRFS info (device loop3): disk space caching is enabled
[  313.763188][ T6491] EXT4-fs (loop5): unmounting filesystem.
[  314.087404][   T27] audit: type=1800 audit(1791217860.197:474): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.988" name="pm_freeze_timeout" dev="sysfs" ino=1350 res=0 errno=0
[  314.109415][ T7667] loop5: detected capacity change from 0 to 7
[  314.118053][ T7552] Dev loop5: unable to read RDB block 7
[  314.124327][ T7552]  loop5: unable to read partition table
[  314.156403][ T7552] loop5: partition table beyond EOD, truncated
[  314.234981][ T7667] Dev loop5: unable to read RDB block 7
[  314.268518][ T7667]  loop5: unable to read partition table
[  314.284665][ T7667] loop5: partition table beyond EOD, truncated
[  314.308438][ T7667] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  314.427085][ T7617] BTRFS info (device loop3): enabling ssd optimizations
[  314.478739][ T7617] BTRFS info (device loop3): rebuilding free space tree
[  314.491395][   T27] audit: type=1800 audit(1791217860.607:475): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0
[  314.523517][ T7617] BTRFS info (device loop3): disabling free space tree
[  314.553270][ T7617] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  314.607740][ T7617] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  314.741208][ T7684] FAULT_INJECTION: forcing a failure.
[  314.741208][ T7684] name failslab, interval 1, probability 0, space 0, times 0
[  314.768503][ T7684] CPU: 0 PID: 7684 Comm: syz.5.989 Not tainted syzkaller #0
[  314.775863][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  314.785968][ T7684] Call Trace:
[  314.789285][ T7684]  <TASK>
[  314.792252][ T7684]  dump_stack_lvl+0x188/0x24e
[  314.797020][ T7684]  ? show_regs_print_info+0x12/0x12
[  314.802276][ T7684]  ? load_image+0x410/0x410
[  314.806848][ T7684]  ? __might_sleep+0xd0/0xd0
[  314.811485][ T7684]  ? __lock_acquire+0x7ea0/0x7ea0
[  314.816580][ T7688] loop4: detected capacity change from 0 to 512
[  314.816607][ T7684]  should_fail_ex+0x390/0x4c0
[  314.827600][ T7684]  should_failslab+0x5/0x20
[  314.832146][ T7684]  slab_pre_alloc_hook+0x59/0x300
[  314.837228][ T7684]  kmem_cache_alloc+0x56/0x2f0
[  314.842076][ T7684]  ? getname_flags+0xb7/0x500
[  314.846798][ T7684]  getname_flags+0xb7/0x500
[  314.851387][ T7684]  do_mq_open+0x19e/0x750
[  314.855767][ T7684]  ? mq_put_mnt+0x40/0x40
[  314.860147][ T7684]  __x64_sys_mq_open+0x182/0x1e0
[  314.865140][ T7684]  ? proc_ipc_sem_dointvec+0x170/0x170
[  314.870662][ T7684]  ? lockdep_hardirqs_on+0x94/0x140
[  314.875165][ T7688] EXT4-fs: Ignoring removed oldalloc option
[  314.875903][ T7684]  do_syscall_64+0x4c/0xa0
[  314.875938][ T7684]  ? clear_bhb_loop+0x60/0xb0
[  314.891024][ T7684]  ? clear_bhb_loop+0x60/0xb0
[  314.895743][ T7684]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.901730][ T7684] RIP: 0033:0x7f7ee439e199
[  314.906205][ T7684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.925887][ T7684] RSP: 002b:00007f7ee25f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  314.934384][ T7684] RAX: ffffffffffffffda RBX: 00007f7ee4625fa0 RCX: 00007f7ee439e199
[  314.942415][ T7684] RDX: 0000000000000014 RSI: 0000000000000042 RDI: 0000000000000000
[  314.950422][ T7684] RBP: 00007f7ee44350b8 R08: 0000000000000000 R09: 0000000000000000
[  314.958440][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.966480][ T7684] R13: 00007f7ee4626038 R14: 00007f7ee4625fa0 R15: 00007ffe37429388
[  314.974500][ T7684]  </TASK>
[  314.985971][   T27] audit: type=1800 audit(1791217861.097:476): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164316 res=0 errno=0
[  315.067573][   T27] audit: type=1800 audit(1791217861.097:477): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164330 res=0 errno=0
[  315.151468][ T7643] loop6: detected capacity change from 0 to 32768
[  315.171638][   T27] audit: type=1800 audit(1791217861.137:478): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.975" name="bus" dev="loop3" ino=263 res=0 errno=0
[  315.209294][ T7643] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.983 (7643)
[  315.223940][ T7688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
OK
[  315.348733][ T4283] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  315.396878][   T27] audit: type=1800 audit(1791217861.447:479): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.991" name="file1" dev="loop4" ino=15 res=0 errno=0
[  315.566577][ T7399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop3 scanned by udevd (7399)
[  315.727230][ T7382] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
Stopping iptables: [  315.990195][ T4274] EXT4-fs (loop4): unmounting filesystem.
OK
[  317.005925][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  317.013728][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
Stopping system message bus: [  317.240122][ T7721] loop7: detected capacity change from 0 to 512
[  317.468454][ T4473] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  317.499033][ T7721] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  317.548901][ T7721] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.717307][ T7721] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  317.728510][ T4473] usb 5-1: Using ep0 maxpacket: 16
[  317.742353][ T4473] usb 5-1: unable to get BOS descriptor or descriptor too short
[  317.771946][ T4473] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  317.798628][ T7737] jffs2: notice: (7737) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  317.828503][ T4473] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  317.869634][ T7721] EXT4-fs (loop7): Remounting filesystem read-only
[  317.889569][ T4473] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  317.957967][ T4473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.015087][ T4473] usb 5-1: Product: syz
[  318.035903][ T4473] usb 5-1: Manufacturer: syz
[  318.046807][ T7743] program syz.6.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  318.064198][ T7256] EXT4-fs (loop7): unmounting filesystem.
[  318.071416][ T4473] usb 5-1: SerialNumber: syz
[  318.326080][ T4473] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  318.355166][ T4473] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  318.381942][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  318.381956][   T27] audit: type=1800 audit(1791217864.497:489): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164510 res=0 errno=0
[  318.444182][ T7755] loop6: detected capacity change from 0 to 128
[  318.490372][   T27] audit: type=1800 audit(1791217864.527:490): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164528 res=0 errno=0
[  318.513069][ T7755] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  318.533780][ T7757] loop3: detected capacity change from 0 to 512
[  318.541317][ T4473] usb 5-1: 2:1 : can't get High Capability descriptor
[  318.568583][    T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  318.598434][ T7755] hpfs: filesystem error: improperly stopped
[  318.618570][   T27] audit: type=1800 audit(1791217864.677:491): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164589 res=0 errno=0
[  318.657601][ T7755] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  318.675455][ T7757] EXT4-fs (loop3): 1 truncate cleaned up
[  318.699677][ T7755] hpfs: You really don't want any checks? You are crazy...
[  318.706944][ T7755] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  318.710549][ T7757] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  318.744337][   T27] audit: type=1800 audit(1791217864.687:492): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164602 res=0 errno=0
[  318.768737][    T7] usb 6-1: Using ep0 maxpacket: 8
[  318.795172][    T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  318.824358][ T7755] hpfs: code page support is disabled
[  318.850211][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  318.869106][ T7755] hpfs: hpfs_map_4sectors(): unaligned read
[  318.874794][   T27] audit: type=1800 audit(1791217864.707:493): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=164529 res=0 errno=0
[  318.895911][ T7755] hpfs: hpfs_map_4sectors(): unaligned read
[  318.895965][ T7755] hpfs: filesystem error: unable to find root dir
[  318.906652][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  318.928616][ T7757] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz.3.1006: deleted inode referenced: 15
done
[  318.997536][    T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.013295][ T7757] EXT4-fs (loop3): Remounting filesystem read-only
[  319.055177][    T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  319.068492][   T27] audit: type=1800 audit(1791217864.707:494): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164643 res=0 errno=0
[  319.108474][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.158563][ T4324] usb 5-1: USB disconnect, device number 27
[  319.218117][   T27] audit: type=1800 audit(1791217864.707:495): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=164532 res=0 errno=0
[  319.259479][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  319.321828][ T7765] syz.7.1011 uses obsolete (PF_INET,SOCK_PACKET)
[  319.372046][   T27] audit: type=1800 audit(1791217864.727:496): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164565 res=0 errno=0
[  319.374293][    T7] usb 6-1: GET_CAPABILITIES returned 0
[  319.430674][    T7] usbtmc 6-1:16.0: can't read capabilities
[  319.477089][   T27] audit: type=1800 audit(1791217864.757:497): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0
[  319.556323][ T7773] bonding: bond0 is being deleted...
[  319.584536][   T27] audit: type=1800 audit(1791217864.897:498): pid=3640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164589 res=0 errno=0
[  319.649523][    T7] usb 6-1: USB disconnect, device number 5
[  319.806109][ T7780] loop6: detected capacity change from 0 to 164
[  319.899736][ T7780] iso9660: Corrupted directory entry in block 2 of inode 1792
[  320.027165][ T7773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.078677][ T4473] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  320.110739][ T7773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.156935][ T7773] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  320.189799][ T7773] tipc: Resetting bearer <eth:syz_tun>
[  320.229200][ T7773] tipc: Resetting bearer <eth:syz_tun>
[  320.237331][ T7773] bond0 (unregistering): Released all slaves
[  320.250675][ T5106] tipc: Subscription rejected, illegal request
[  320.270801][ T4362] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  320.289727][ T4473] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.315814][ T4473] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  320.350678][ T4473] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  320.378505][ T4473] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.397219][ T7789] ip_tables: iptables: counters copy to user failed while replacing table
[  320.405999][ T4473] usb 8-1: Product: syz
[  320.413397][ T4473] usb 8-1: Manufacturer: syz
[  320.433273][ T4473] usb 8-1: SerialNumber: syz
[  320.520534][ T4362] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  320.548875][ T4362] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  320.592431][ T4362] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  320.628752][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.651028][ T7793] loop6: detected capacity change from 0 to 2048
[  320.732157][ T7793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  320.762942][ T7797] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  320.814391][ T7797] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  320.850626][ T7796] loop3: detected capacity change from 0 to 2048
[  320.886075][ T4362] usb 5-1: usb_control_msg returned -32
[  320.897943][ T4362] usbtmc 5-1:16.0: can't read capabilities
[  320.920169][ T7796] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  320.939762][ T4473] usb 8-1: USB disconnect, device number 2
[  320.981839][ T7796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  321.060888][ T7796] overlayfs: upper fs needs to support d_type.
[  321.090848][ T7796] overlayfs: cleanup of 'work/#a' failed (-2)
[  321.126219][ T7796] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  321.156999][ T7796] overlayfs: failed to set xattr on upper
[  321.189725][ T7796] overlayfs: ...falling back to index=off,metacopy=off.
[  321.325744][ T4283] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh
[  321.388651][ T4283] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh
[  321.688818][ T4520] tipc: Disabling bearer <eth:syz_tun>
[  321.988595][ T4362] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  322.065190][ T4858] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.180317][ T4362] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.221917][ T4362] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.259188][ T4362] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  322.297437][ T4362] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  322.324304][ T4362] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.361737][ T4362] usb 8-1: config 0 descriptor??
Stopping klogd: [  322.480482][ T7800] loop5: detected capacity change from 0 to 32768
[  322.502554][ T4858] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.567858][ T7800] XFS (loop5): Mounting V5 Filesystem
[  322.660610][ T4858] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.718893][ T7800] XFS (loop5): Ending clean mount
[  322.781443][ T4858] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.797154][ T4362] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  322.849358][ T4362] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  322.981927][ T6491] XFS (loop5): Unmounting Filesystem
[  323.053481][ T4807] usb 5-1: USB disconnect, device number 28
OK
[  323.172179][ T4473] usb 8-1: USB disconnect, device number 3
[  323.264977][ T4858] tipc: Left network mode
Stopping acpid: [  324.370227][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  324.413131][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  324.421685][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  324.429794][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  324.438953][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  324.446299][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  325.656297][ T7854] loop7: detected capacity change from 0 to 512
[  325.716848][ T7854] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.1038: inode #1: comm syz.7.1038: iget: illegal inode #
[  325.785847][ T7854] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1038: error while reading EA inode 1 err=-117
[  325.856265][ T7854] EXT4-fs (loop7): 1 orphan inode deleted
[  325.904126][ T7854] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
OK
[  325.946441][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  325.967908][ T7858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.056308][ T7854] IPv6: addrconf: prefix option has invalid lifetime
[  326.261282][ T7256] EXT4-fs (loop7): unmounting filesystem.
Stopping syslogd: [  326.456138][ T7832] chnl_net:caif_netlink_parms(): no params data found
[  326.518615][ T4284] Bluetooth: hci4: command 0x0409 tx timeout
stopped /sbin/syslogd (pid 3622)
OK
[  326.698685][    T7] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  326.878560][    T7] usb 8-1: Using ep0 maxpacket: 8
[  326.885733][    T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  326.953046][    T7] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  327.007223][    T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.050025][    T7] usb 8-1: config 0 descriptor??
[  327.327483][    T7] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  327.349636][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.357531][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.366404][ T7832] device bridge_slave_0 entered promiscuous mode
[  327.375986][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.383235][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.664816][ T7832] device bridge_slave_1 entered promiscuous mode
[  327.859964][ T4473] usb 8-1: USB disconnect, device number 4
[  328.223370][ T7127] wiimote 0005:057E:0306.0017: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0
[  328.258757][ T7127] wiimote 0005:057E:0306.0017: New device registered
[  328.296833][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.324613][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  328.324629][   T27] audit: type=1800 audit(1791217874.437:513): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1048" name="bonding_masters" dev="sysfs" ino=135455 res=0 errno=0
umount: can't remount debugfs read-only
[  328.476333][ T7895] bonding: bond0 is being deleted...
[  328.538623][ T7127] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  328.602667][ T4284] Bluetooth: hci4: command 0x041b tx timeout
[  328.647147][ T7895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.728464][ T7127] usb 5-1: Using ep0 maxpacket: 8
[  328.735349][ T7127] usb 5-1: config 0 has no interfaces?
[  328.748254][ T7895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.769277][ T7127] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  328.790369][ T7895] bond0 (unregistering): Released all slaves
[  328.798239][ T7127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.833067][ T7127] usb 5-1: Product: syz
[  328.841135][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.859268][ T7127] usb 5-1: Manufacturer: syz
[  328.883607][ T7127] usb 5-1: SerialNumber: syz
[  328.908551][ T4324] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  328.932278][ T7127] usb 5-1: config 0 descriptor??
[  328.973004][ T4858] device hsr_slave_0 left promiscuous mode
[  328.986085][ T4858] device hsr_slave_1 left promiscuous mode
[  329.000224][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.013798][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.053178][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.061906][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.079786][ T4858] device bridge_slave_1 left promiscuous mode
[  329.096216][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.108558][ T4858] device bridge_slave_0 left promiscuous mode
[  329.114831][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.129244][ T4324] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  329.174473][ T7889] wiimote 0005:057E:0306.0017: Device removed
[  329.189716][ T7127] usb 5-1: USB disconnect, device number 29
[  329.196859][ T4324] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  329.235094][ T4324] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  329.264803][ T4324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.284841][ T4324] usb 8-1: Product: syz
[  329.289310][ T4324] usb 8-1: Manufacturer: syz
[  329.293974][ T4324] usb 8-1: SerialNumber: syz
[  329.317099][ T4324] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected
[  329.328781][ T4858] device veth1_macvtap left promiscuous mode
[  329.345503][ T4324] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  329.354172][ T4858] device veth0_macvtap left promiscuous mode
[  329.366958][ T4324] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  329.375872][ T4858] device veth1_vlan left promiscuous mode
[  329.398810][ T4858] device veth0_vlan left promiscuous mode
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
Connection to 10.128.0.209 closed by remote host.
[  329.754981][ T7127] usb 8-1: USB disconnect, device number 5
[  329.785962][ T7127] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  329.822773][ T7127] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  329.848960][ T7127] ti_usb_3410_5052 8-1:2.0: device disconnected
[  330.688504][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[  330.856330][ T4858] team0 (unregistering): Port device team_slave_1 removed
Sent SIGKILL to all processes
Requesting syst[  330.918176][ T4858] team0 (unregistering): Port device team_slave_0 removed
em poweroff
[  331.248827][    T7] wiimote 0005:057E:0306.0017: detected device: Nintendo Wii Remote (Gen 1)
[  331.282855][    T7] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input35
[  331.312010][    T7] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input36
[  331.347998][    T7] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input34
[  331.921661][ T7906] kvm: exiting hardware virtualization
[  332.758496][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[  333.135287][ T4858] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.233259][ T4858] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.317818][ T4858] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.488693][ T4858] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.629950][ T4858] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.729588][ T4858] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.799683][ T4858] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.928109][ T4858] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.111446][ T4858] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.239602][ T4858] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.333674][ T4858] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.425622][ T4858] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.629101][ T4858] tipc: Disabling bearer <udp:syz1>
[  334.650880][ T4858] tipc: Left network mode
serialport: VM disconnected.