last executing test programs:

2m39.12158804s ago: executing program 1 (id=83):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14)

2m38.708326806s ago: executing program 1 (id=87):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020)

2m38.44432471s ago: executing program 1 (id=89):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0)

2m38.238959377s ago: executing program 1 (id=91):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

2m37.938784083s ago: executing program 1 (id=92):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000001c0)=ANY=[], 0x1, 0xf1e, &(0x7f0000006600)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
creat(&(0x7f0000000040)='./file1\x00', 0xd)

2m36.879318997s ago: executing program 1 (id=94):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d)

2m20.939125346s ago: executing program 32 (id=94):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d)

1m26.623686507s ago: executing program 4 (id=410):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0xc)
fchdir(r1)
setuid(0xee00)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)

1m26.440453552s ago: executing program 4 (id=405):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="f71d", 0x2}], 0x1}, 0x5)
sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010041)
recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)

1m26.206284653s ago: executing program 4 (id=407):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g')
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002480)=""/4100, 0x1004}], 0x1, 0x8, 0xc056)

1m23.776915266s ago: executing program 4 (id=423):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000006c0), 0x1, 0x42f, &(0x7f0000000940)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
chdir(&(0x7f00000015c0)='./file0\x00')
truncate(&(0x7f0000000280)='./file1\x00', 0x1)

1m23.192351737s ago: executing program 4 (id=429):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000004c0)={@val={0xa, 0x6003}, @void, @eth={@multicast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "38960c", 0x10, 0x3c, 0x0, @local, @private1, {[@hopopts={0x2c}, @hopopts={0x33}]}}}}}}, 0x4a)

1m21.317406412s ago: executing program 4 (id=444):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

1m20.704644016s ago: executing program 33 (id=444):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

6.940799118s ago: executing program 5 (id=810):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)='5F', 0x2}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)

6.666870973s ago: executing program 0 (id=813):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r0])

5.00504009s ago: executing program 2 (id=821):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)

4.77201828s ago: executing program 2 (id=822):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x84, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

4.488218815s ago: executing program 0 (id=824):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')

4.403959202s ago: executing program 2 (id=825):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5557, &(0x7f0000006440)="$eJzs3M2LG2UYAPBndrut/XQRD946UIRdaJZm+4Heqrb4gS3Fj4MnzSZpSJtklk2arj0pehQP/iei4Mmjf4MHz97Eg+JNUDLvxFrrRyXpph+/H0yemXfeeeZ9h7DLMxMmgMfWav7LT1kci4MRsRwRR7Io17NqKZ1P4ZmIOB4RS39asqr9j4b9EXEoIo5NkqecWbXrs5PjE2d/fO3nr789sO/w5199t7hZA4v2bET0t9P6zX6KRSfFa1V7Y9wtY//MuIppR/96tV2spOPbW2WGm41pv0YZT3dS/2L7xnASr/YazUnsdK+W7duDdMLhuDPNUx5wrbFTbrfaW2XsDosydm6lce3eSn/bbg1HKU+ryvd+mT5Go2lM7e3ddprP9vUyNgejqj3lLVrt3UkcV7E6XTSLXqscx9YsV/rB9np3cGM3H7d3ht1ikJ/dqD+3UT9Xq+8UrfaofabW6LfOncnXOr1Jt9qo3eif7xRFp9feaBb99Xyt02zW6vV87UJ7q9sY5PX6xumNU7Wz69Xayfzly2/nvVa+Nokvdgc39nd7w/xqsZOnI9bzzY3Tz6/nJ+r5m5eu5FfeuHjx0pW33r3wzuUXLr36UtXprmHla5unNjdr9VO1zfr6AzD/yf/de5z/aJb5fxwRH1YDv8f5Z7NdHvh3vmAA/9td9X+o/4H7bz71f4qLqP9jnvV/ROTq//+uf5dmr/9nqn8f1Pr/IZ4/zET9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw2Pp+5YtXypXVtH24aj9aNT1VbWcRsRQRv/2N5dh/R87lKs/KP/Rf+csYvsmizDA5x4FqORQR56vl1yfv91UAAACAR9eXHxz/NFXr6WN10QNiL6WbNktH3ptTviwiVlZ/mFO2pcnH03NKVn6/98XunLKVN7CemFOydMtt37yy3ZPlafjo6O3GckJZCkt7OhwAAGBPLN8R9rYKAQAAYC99sugBsBhZTB9lTp8Fl7+8v/1o8+Ad+wAAAICHULboAQAAAAD3XVn/e/8fAAAAPNrS+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535ylgbCOAC//fr1A/9FYtx7FXdwDI/g0qVwAC/BEfAKXoAzoCuPYMAwMyHWQCJhsIE8T9KWaclvZoDNvCUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Jq+d6vZ18/vvlyas91dps5sAAAAgGM23WqWXkxy+0U5/6qcelPaTUQ8RMSxtXsbT73MtuR0J97f/TWGbxEpYd/HqGzPI+J92X69Tl0DAAAA5/mx360Xy2lerefdZOhR8T/los3Dyw+V8pqI6CY/K6Wlis/bSmHp9/0YnyqlpQLWuFJYLrk9Hr/2VKuTvjZ/Im1ulZmM5+lLTC31NgAAuENt73BiFQIAAMAd+Dj0ABhGc9gd7jOO8qHcEHzWawEAAAA3qBl6AAAAAMDVpfX/jTz/DwAAAPjDOX/Wz8//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Jo23Wq2Xiynp67P/zFnu7tMvRkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwG/25x0FQiAMwmDv+s5k7n9YadDQ2KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePO7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5f982qjgA4F+ffe4PQISAMgRQkRhgoYlbWjrCAIoY+BOQotQpAZdCm4FWEVUWmFDmLghGhJBAYev/0LmRupStg4cgIbEZnX3nXNtArSrcuennI717X19O977v2YryzbsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBC/714JcnjZnaYGcXFudu7GytZv/NAn7m5dWc+a1nceNRA37578MlPt1fLL07Mldbo+vj0zmAwqDgtAAAADrNmUd9HxN10eynrk5mIfnvvmqzm/+G5UVzUqg/W/Tu7G0fzL80X9f/vv917aXyTmdE4aUSsrvW6iw+n0vpfJvgEeP6RV7SGKz/83Utz+IYkH26+2E+H69n47tat99vD8EgV2QIAj+Nk0edB8fNQ1nfqTAyAp0arVHgX9X9zpt6cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKrQ34xnirgREfOtvTizs7uxsl9/c+vOfNHO3rixVb5ndos0IlbXet20wrlMuytXr3223Ot1L1cfnIiI+kbPg48nuCbiv6/JP55R3yz+PWhMRxq1Bkn+/kxLPgcZFJ+9g79zTd+QAAA4tNK8ZXX93XR7KTvXmI0Y/Hh//f9GKY4J6/97n5y9XR6rXP93Kpvh9FtYv/jFwpWr195au7h8oXuh+/nbpzrvdE6fO3Pm3EK2VosLq5F0F+tOEwAAgCdYO2/l+j+ZfXj///go/Pt6fm6S+v/L7ztfl8dqqv/3tbfpV3cmAAAAT6P2OHrhtb/+bOxzRaPdjq+W19cvd0bH8etTo2Ol6T6mI3kr1//N2bqzAgAAAKrQ32zct/9/vhTHhPv/z/708i/lezYj4ljEpYjonly51Dtf3XSmWhV/qDwcqF33TAEAAKjLsbyV9//T4fP/yfiRhyQi3nx9FBf/62qS+r/5wTc/l8cqP/9/uropTqVkbrQew34uojVXd0YAAAAcZkfzlhX7f6TbS5/+evyjtuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKr2TwAAAP//XHw7aQ==")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x63)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.174651073s ago: executing program 5 (id=828):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010006, &(0x7f00000000c0)=ANY=[@ANYBLOB="67727071756f74612c6e6f646973636172642c696f636861727365743d6d6163726f6d616e69616e2c6572726f72733d636f6e74696e75652c696f636861727365743d6b6f69382d72752c6572726f72733d72656d6f756e742d726f2c696e746567726974792c75737271756f74612c646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6b6f69382d722c0048ffe5a15f6312b5858ee5"], 0x24, 0x62cd, &(0x7f000000c880)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x100000c, 0x810, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184)
lseek(r0, 0x8, 0x1)
getdents(r0, 0x0, 0x40)

2.992120327s ago: executing program 3 (id=831):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0x1, 0x800, 0x4, 0x0, [<r4=>0x0], [0x0, 0x6, 0x0, 0x4], [0xa, 0x8, 0x10000, 0x3], [0x1019cd22, 0x0, 0xe4, 0x21d]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2, r4], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]})

2.716071821s ago: executing program 3 (id=832):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/56, 0x38}], 0x3, 0x0)

2.372284841s ago: executing program 5 (id=833):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000240)=0xffff, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)

2.1629119s ago: executing program 2 (id=834):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}, 0x2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
dup2(r0, r1)

1.774416494s ago: executing program 0 (id=835):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10000, 0x3, &(0x7f0000003000/0x10000)=nil)
r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\xe4\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:S\x81\xd5\xda\x84\x83>\xa5\x96(\xdf\xe3A_\x05XCk\x1d\xc9\xf0ZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x95rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x05\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oZ\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94#\xf81U\x88,\x81\xa1r\xfah', 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0xff64000)
read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020)

1.523974916s ago: executing program 0 (id=836):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"cfc8752a08b459c22211981d67fc3b1822b3b0da6a04654e1c351e111c62f087a30886e37771683102e190e7605effbae324dfce22c050b5cb06caa01193d6b4779c57bd49948b71ca7865efa8c93c807b92fa676fe763264f8a770dab16bd15f32369481f34a1fcf93787dd0f642c98b6dace47fe64538c4706257ad770ed973a878d59b1271c71730e4d0dc3298543efe507f2154472e53679644c09b57639c01e59dabdfade2ad385ecc6cb75ca1100b3f883bb092b769433e8cba7eac7bd350202f357773cce8e7c788bd250d2a5faad9da3e9ee9d5a0c052a0f82e45734c708148b45cffcb208622dbd0b5a18605f453ebd20770a9f3d0839df63b477d50a94ab0023d8f52223fc700ad74e8c9512b745ae82d952e635776da6c4264ab43f6c5198e460281d17aa23a27a97fb82f0073248aa7c3df76bde448af6ab8d22e7fa1f3a8e6cbec2deacdcf12f76891c60a9448ef50c6e06e8dc791d6b34f42a31defbaca876be47111d055497c9f039a3de690885d2c4a098277e356c9eb458a31fda780b82778cc32f1f5d62ab9afd9352e174b9b420bb55399f93a5310eb93bca35e34ec1a4c7ba28bfd8a0fb5fd879d4264709216679b9fe852329c35a912e25cac60756a452824fce4fba63754a0e24026ffd7a23037f8eec9ca3e670aa3332da4d6514c64d1013dfda55b7fa071db419811f172e907a1c1fa2f34efb4ded276246b3140f5d61b7d1003b376fd0ea470c24c286327d528dd5110e5cc8826a1e2228f669b3e477eef1bde1ee76fb9afc5cb971faa0dbe4dff449541654640c198e2dc10fb5b79824c13b8e55919aa641a7297b92d09dae29d4429858e5d6d34d424fce911780f9e11aa74c17dde2b965b00ec5da7c302e21b7875093412ac2e17aed03c781280fde946c59977d82edfd385c3742928dcf31f1395f1199eb0f2b094425ea33bb29475ce2b18a4b3532a5cab2e7f35131356aee5d1052fbe31c457bab1d5fb140dc9488555c116bfd6cc82b5be3eb59a7caa5c0a8fbb0d19b7db4146de07088701042b772e093cc779c49764d329c8e2b9a1ac8551415d554e2dbaff7acf29c1b574592eab4f301f3d1a9318dbc4847f72908a199bd703a72c441be48f25103ab0925dea8b608096625530cc082026eddf3f9d349f2a8f68b86dfcc586c795dce98ef390da9b35b93212d9099cdff18ee96fcd8391098e93d9aca1a9d4b9f8e40a7867761d7aa0f2a845627953503098527bd07645b8c842e7a9dc6d92bdd85a0d2a8b9b209409a74736c5eb8e46fa5c6b3068a218f41919cbd7c69f71e15ee6e7effa87a56bfbbde790437774b0ec7add8947c510ce26947e2db1c89f9f9115785cd34df97b43165eca1183f4cb587307648333cae00304575784ba2e7a61b79052d505ba68f02b3103768352936aa2704b673c62b1b00"})
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xffffffff, 0x150000, 0x7ff, 0x0, 0x4})

1.25073695s ago: executing program 5 (id=837):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)

1.186543796s ago: executing program 3 (id=838):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84)

1.076563066s ago: executing program 0 (id=839):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x3ec0)

1.048281488s ago: executing program 5 (id=840):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r0 = syz_io_uring_setup(0xbdf, &(0x7f0000000640)={0x0, 0x82f4, 0x800, 0x1, 0x2ac}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

756.067584ms ago: executing program 2 (id=841):
r0 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="f5", 0x1}, {&(0x7f0000000040)="22517920d1f96d4ad0a9c6ca476099ab8508809ad3506332bbff1002950d2a77f7ab51d2a645fe46f99fa87a69f4912afdc495", 0x33}, {&(0x7f0000000100)="b33b7210d2331b9bfa0f5786829d349114ae083ae3d33545", 0x18}], 0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendfile(r2, r0, &(0x7f0000000280)=0x4b, 0x7fff)

698.211659ms ago: executing program 3 (id=842):
r0 = socket(0xa, 0x3, 0x87)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r2})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private1, 0x18, r2})
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000))

611.602656ms ago: executing program 2 (id=843):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0x6}, 0x8)

472.662259ms ago: executing program 3 (id=844):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x2c, 0x13, 0x400, 0x0, 0x25dfdbfb, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

289.202745ms ago: executing program 3 (id=845):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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")
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="e3"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

223.887721ms ago: executing program 5 (id=846):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r0, 0x5, 0x3)

0s ago: executing program 0 (id=847):
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000740)={0xf0, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xcd, 0x0, 0x0, 0x1, [@generic="b308062bb3eb6db2103d7bf69e1beb05d20799da539b86148b5def4185def2d0a01898891f1075909ee6c358c334dfeabd884e418717d87eecb0d1be7a32c9244e3bf79aa06cd0ce01379fd72dc80d5b7f418ad253", @generic="5fb76fab50b69913057c69d844512502fee8754d75b1993dce090c32365d9f8f7ba7dd1a18877654e0e0cd3e2fbf2374efa0d38816a92fb477bbf6c7f315cc58c78fd3beb32be01c2d5e748ac0f93766f1e8761c2d4292044fe1ba7e0ba9a32b3b53e8490bcc931aa6a5506b477c7ab7f428d6c6"]}]}, 0xf0}], 0x2}, 0x0)

kernel console output (not intermixed with test programs):

sbhid: probe of 3-1:0.0 failed with error -71
[  120.066656][ T1189] usb 3-1: USB disconnect, device number 3
[  120.699481][ T6303] loop0: detected capacity change from 0 to 128
[  120.773844][ T6303] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.910449][ T6303] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  121.086710][ T6303] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.125: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  121.117018][ T6303] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem
[  121.166359][ T6308] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.125: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  121.212282][ T6308] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem
[  121.424035][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.713338][ T6316] random: crng reseeded on system resumption
[  122.389837][ T6337] loop2: detected capacity change from 0 to 512
[  122.396915][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  122.436488][ T6337] EXT4-fs: Ignoring removed oldalloc option
[  122.621867][ T6337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.145600][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.422992][ T6332] loop0: detected capacity change from 0 to 32768
[  123.459047][ T6332] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.133 (6332)
[  123.565658][ T6332] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  123.612679][ T6332] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  123.642408][ T6332] BTRFS info (device loop0): using free space tree
[  123.841410][ T6332] BTRFS info (device loop0): enabling ssd optimizations
[  123.876066][ T6332] BTRFS info (device loop0): auto enabling async discard
[  124.155924][   T27] audit: type=1800 audit(1771623605.744:7): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="bus" dev="loop0" ino=263 res=0 errno=0
[  124.202530][ T5832] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  124.263556][   T27] audit: type=1800 audit(1771623605.844:8): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="bus" dev="loop0" ino=263 res=0 errno=0
[  124.462573][ T5832] usb 3-1: Using ep0 maxpacket: 32
[  124.480647][ T5832] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  124.512687][ T5832] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  124.558379][ T5832] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  124.600519][ T5832] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  124.643907][ T5832] usb 3-1: config 0 interface 0 has no altsetting 0
[  124.664841][ T5832] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  124.680401][ T5832] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  124.716704][ T5771] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.732487][ T5832] usb 3-1: Product: syz
[  124.736739][ T5832] usb 3-1: Manufacturer: syz
[  124.741484][ T5832] usb 3-1: SerialNumber: syz
[  124.790367][ T5832] usb 3-1: config 0 descriptor??
[  124.836424][ T5832] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  124.866190][ T5832] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  125.435390][ T6373] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  125.436577][ T1189] usb 3-1: USB disconnect, device number 4
[  125.443081][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  125.479829][ T5832] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  125.681708][ T1189] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  125.693243][ T5832] usb 4-1: Using ep0 maxpacket: 32
[  125.705364][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.748766][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.777565][ T5832] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.50
[  125.798547][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0
[  125.842157][ T5832] usb 4-1: Product: syz
[  125.861786][ T5832] usb 4-1: config 0 descriptor??
[  125.894019][ T5832] hub 4-1:0.0: USB hub found
[  126.182622][ T5832] hub 4-1:0.0: 1 port detected
[  126.820240][ T6399] loop0: detected capacity change from 0 to 32768
[  126.840934][ T5832] hub 4-1:0.0: activate --> -90
[  127.250595][ T1189] usb 4-1: USB disconnect, device number 4
[  127.558652][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.573318][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.585277][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.605098][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.613392][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  127.623061][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.679348][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.705080][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.715117][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.748108][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.776468][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  127.802521][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.412610][   T28] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  128.607084][ T6419] chnl_net:caif_netlink_parms(): no params data found
[  128.642474][   T28] usb 1-1: Using ep0 maxpacket: 32
[  128.663899][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.706072][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.754544][   T28] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  128.794741][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.827811][   T28] usb 1-1: config 0 descriptor??
[  129.089285][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.136868][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.166097][ T6419] bridge_slave_0: entered allmulticast mode
[  129.192903][ T6419] bridge_slave_0: entered promiscuous mode
[  129.232081][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.260087][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.291943][ T6419] bridge_slave_1: entered allmulticast mode
[  129.323008][ T6419] bridge_slave_1: entered promiscuous mode
[  129.455718][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.472531][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.485391][   T28] ft260 0003:0403:6030.0003: chip code: 6424 8183
[  129.625085][ T6419] team0: Port device team_slave_0 added
[  129.651196][ T6419] team0: Port device team_slave_1 added
[  129.687910][   T28] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  129.773333][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.795048][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.849045][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.868681][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.877670][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.907147][   T28] ft260 0003:0403:6030.0003: failed to retrieve status: -71, no wakeup
[  129.917984][ T5781] Bluetooth: hci1: command tx timeout
[  129.935364][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.946853][   T28] ft260 0003:0403:6030.0003: failed to retrieve status: -71
[  129.955868][   T28] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71
[  130.083382][   T28] usb 1-1: USB disconnect, device number 3
[  130.165085][ T6419] hsr_slave_0: entered promiscuous mode
[  130.194747][ T6419] hsr_slave_1: entered promiscuous mode
[  130.239594][ T6419] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.259793][ T6419] Cannot create hsr debugfs directory
[  130.313570][ T6469] loop3: detected capacity change from 0 to 512
[  130.339166][ T6469] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  130.376698][ T6469] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  130.447295][ T6469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.460386][ T6469] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.538145][ T6469] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.157: corrupted inode contents
[  130.555000][ T6469] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #2: comm syz.3.157: mark_inode_dirty error
[  130.569856][ T6469] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.157: corrupted inode contents
[  130.654489][ T6469] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.157: corrupted inode contents
[  130.681985][ T6469] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #2: comm syz.3.157: mark_inode_dirty error
[  130.694947][ T6469] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.157: corrupted inode contents
[  130.708221][ T6469] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.157: mark_inode_dirty error
[  130.721615][ T6469] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.157: corrupted inode contents
[  130.736317][ T6469] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #2: comm syz.3.157: mark_inode_dirty error
[  130.988744][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.051424][ T6419] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  131.134648][ T6419] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  131.179472][ T6419] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  131.261831][ T6419] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  131.671081][ T6419] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.725375][ T6419] 8021q: adding VLAN 0 to HW filter on device team0
[  131.732686][ T6498] Bluetooth: MGMT ver 1.22
[  131.746842][ T6495] loop0: detected capacity change from 0 to 1024
[  131.764167][ T6498] Bluetooth: hci0: invalid length 2, exp 1 for type 31
[  131.784246][ T6495] EXT4-fs: inline encryption not supported
[  131.800149][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.807417][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.832513][ T6495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  131.896693][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.904002][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.957467][ T6495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.992828][ T5781] Bluetooth: hci1: command tx timeout
[  132.111632][ T6505] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  132.294720][ T6495] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4047: comm syz.0.164: Allocating blocks 497-513 which overlap fs metadata
[  132.391852][ T6495] EXT4-fs (loop0): Remounting filesystem read-only
[  132.467722][ T6515] loop2: detected capacity change from 0 to 1024
[  132.511441][ T6515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  132.557997][ T6494] EXT4-fs (loop0): pa ffff888056047740: logic 256, phys. 385, len 8
[  132.595515][ T6515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.685240][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.875534][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.151501][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.372535][   T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  133.613469][   T23] usb 1-1: Using ep0 maxpacket: 32
[  133.633928][   T23] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  133.656154][   T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  133.682159][ T6539] loop2: detected capacity change from 0 to 1024
[  133.702476][   T23] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  133.733662][ T6539] EXT4-fs: Ignoring removed orlov option
[  133.782604][   T23] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  133.852746][   T23] usb 1-1: config 0 interface 0 has no altsetting 0
[  133.901943][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.955458][   T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  133.997127][   T23] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  134.066769][ T5781] Bluetooth: hci1: command tx timeout
[  134.089960][   T23] usb 1-1: Product: syz
[  134.124946][   T23] usb 1-1: Manufacturer: syz
[  134.182643][   T23] usb 1-1: SerialNumber: syz
[  134.232974][   T23] usb 1-1: config 0 descriptor??
[  134.295831][   T23] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  134.390009][   T23] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  134.441750][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.662369][    C0] sched: RT throttling activated
[  134.813564][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  134.828776][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  134.899989][ T6527] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  134.923714][   T23] usb 1-1: USB disconnect, device number 4
[  134.923809][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  134.951402][ T6419] veth0_vlan: entered promiscuous mode
[  134.979016][ T6542] loop3: detected capacity change from 0 to 131072
[  134.994530][ T6542] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  135.002861][ T6542] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  135.023738][ T6542] F2FS-fs (loop3): invalid crc value
[  135.059645][   T23] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  135.064649][ T6542] F2FS-fs (loop3): Found nat_bits in checkpoint
[  135.125193][ T6419] veth1_vlan: entered promiscuous mode
[  135.155496][ T6542] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  135.163125][ T6542] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  135.260280][ T6419] veth0_macvtap: entered promiscuous mode
[  135.309362][ T6419] veth1_macvtap: entered promiscuous mode
[  135.390939][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.434956][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.473475][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.511178][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.611534][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.642747][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.676875][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.749198][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.791656][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.842647][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.871098][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.909101][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.975054][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.017515][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.055799][ T6419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.081994][ T6419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.097026][ T6419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.107786][ T6419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.143038][ T5781] Bluetooth: hci1: command tx timeout
[  136.322532][  T788] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  136.407258][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.452387][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.549400][  T788] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  136.599705][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.599959][  T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.608982][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.669151][  T788] usb 1-1: Product: syz
[  136.674129][  T788] usb 1-1: Manufacturer: syz
[  136.705195][  T788] usb 1-1: SerialNumber: syz
[  136.736826][  T788] usb 1-1: config 0 descriptor??
[  136.775352][  T788] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  137.412077][ T6588] input: syz0 as /devices/virtual/input/input6
[  137.781388][ T6593] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96
[  138.011567][  T788] gspca_stk1135: reg_w 0xd err -71
[  138.018355][  T788] gspca_stk1135: serial bus timeout: status=0x00
[  138.032476][  T788] gspca_stk1135: Sensor write failed
[  138.037988][  T788] gspca_stk1135: serial bus timeout: status=0x00
[  138.045599][  T788] gspca_stk1135: Sensor write failed
[  138.051094][  T788] gspca_stk1135: serial bus timeout: status=0x00
[  138.057960][  T788] gspca_stk1135: Sensor read failed
[  138.068521][  T788] gspca_stk1135: serial bus timeout: status=0x00
[  138.082456][  T788] gspca_stk1135: Sensor read failed
[  138.088101][  T788] gspca_stk1135: Detected sensor type unknown (0x0)
[  138.103038][  T788] gspca_stk1135: serial bus timeout: status=0x00
[  138.116132][  T788] gspca_stk1135: Sensor read failed
[  138.131695][  T788] gspca_stk1135: serial bus timeout: status=0x00
[  138.162621][  T788] gspca_stk1135: Sensor read failed
[  138.167982][  T788] gspca_stk1135: serial bus timeout: status=0x00
[  138.211756][  T788] gspca_stk1135: Sensor write failed
[  138.225198][  T788] gspca_stk1135: serial bus timeout: status=0x00
[  138.248892][  T788] gspca_stk1135: Sensor write failed
[  138.256046][  T788] stk1135: probe of 1-1:0.0 failed with error -71
[  138.298524][  T788] usb 1-1: USB disconnect, device number 5
[  138.824043][ T6608] ªªªªªª: renamed from vlan0 (while UP)
[  139.205980][ T6617] loop4: detected capacity change from 0 to 1024
[  139.288901][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  139.298593][ T6620] random: crng reseeded on system resumption
[  139.370465][ T6617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.596893][ T6636] loop4: detected capacity change from 0 to 128
[  140.646115][ T6636] FAT-fs (loop4): bogus number of reserved sectors
[  140.687076][ T6636] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  140.713868][ T6636] FAT-fs (loop4): Can't find a valid FAT filesystem
[  142.582868][ T6653] loop0: detected capacity change from 0 to 40427
[  142.615381][ T6653] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff
[  142.651360][ T6653] F2FS-fs (loop0): invalid crc value
[  142.693369][ T6653] F2FS-fs (loop0): Found nat_bits in checkpoint
[  142.750474][ T6662] loop2: detected capacity change from 0 to 32768
[  142.788997][ T6662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.200 (6662)
[  142.852881][ T6662] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.878430][ T6653] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.889275][ T6665] loop4: detected capacity change from 0 to 40427
[  142.892994][ T6662] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  142.915806][ T6662] BTRFS info (device loop2): using free space tree
[  142.969700][ T6665] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  142.990863][ T6665] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  143.057355][ T6662] BTRFS info (device loop2): enabling ssd optimizations
[  143.067194][ T6665] F2FS-fs (loop4): invalid crc value
[  143.085467][ T6662] BTRFS info (device loop2): auto enabling async discard
[  143.223075][ T5771] syz-executor: attempt to access beyond end of device
[  143.223075][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  143.300061][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  143.450777][ T6665] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  143.472437][ T6665] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  143.659636][   T27] audit: type=1800 audit(1771623625.264:9): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.202" name="file1" dev="loop4" ino=10 res=0 errno=0
[  143.840638][ T6419] syz-executor: attempt to access beyond end of device
[  143.840638][ T6419] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  143.892807][ T6419] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  143.905891][ T5773] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.976327][ T6711] netlink: 'syz.3.209': attribute type 12 has an invalid length.
[  144.002954][ T6711] netlink: 'syz.3.209': attribute type 29 has an invalid length.
[  144.018117][ T6711] netlink: 148 bytes leftover after parsing attributes in process `syz.3.209'.
[  144.064141][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.209'.
[  144.908527][ T6724] loop0: detected capacity change from 0 to 1024
[  144.973341][ T6724] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  145.067093][ T6724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  145.119952][ T6724] System zones: 0-1, 3-36
[  145.168386][ T6724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.182442][ T5832] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  145.392639][ T5832] usb 3-1: Using ep0 maxpacket: 32
[  145.409827][ T5832] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  145.430533][ T5832] usb 3-1: config 0 has no interface number 0
[  145.453019][ T6741] loop3: detected capacity change from 0 to 256
[  145.455797][ T5832] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  145.509164][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.510150][ T6741] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.546747][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.557220][ T5832] usb 3-1: Product: syz
[  145.561442][ T5832] usb 3-1: Manufacturer: syz
[  145.563821][ T6741] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  145.589828][ T5832] usb 3-1: SerialNumber: syz
[  145.621253][ T6741] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xbd65fb57, utbl_chksum : 0xe619d30d)
[  145.645668][ T5832] usb 3-1: config 0 descriptor??
[  145.684606][ T5832] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  145.754352][   T27] audit: type=1800 audit(1771623627.364:10): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.213" name="bus" dev="loop3" ino=1048597 res=0 errno=0
[  145.805241][ T6747] input: syz0 as /devices/virtual/input/input7
[  146.009153][ T5832] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  146.077876][ T5832] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  146.335085][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6
[  146.537356][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  146.545557][  T788] usb 3-1: USB disconnect, device number 5
[  146.559217][ T6759] loop3: detected capacity change from 0 to 2048
[  146.571203][  T788] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  146.608717][ T6759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.642291][  T788] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  146.683434][  T788] quatech2 3-1:0.51: device disconnected
[  147.137136][ T6771] process 'syz.3.225' launched './file1' with NULL argv: empty string added
[  149.048457][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'.
[  149.916636][ T6858] loop3: detected capacity change from 0 to 512
[  150.189075][ T6858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.308206][ T6858] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.844471][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.904914][ T6842] loop2: detected capacity change from 0 to 262144
[  150.923533][ T6842] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.233 (6842)
[  150.963327][ T6842] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  150.974329][ T6842] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  150.983698][ T6842] BTRFS info (device loop2): using free space tree
[  152.022051][ T5773] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  152.826362][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'.
[  152.882536][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'.
[  152.954506][ T6921] geneve2: entered promiscuous mode
[  152.983329][ T6921] geneve2: entered allmulticast mode
[  153.133019][  T788] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  153.344102][  T788] usb 3-1: Using ep0 maxpacket: 16
[  153.376899][  T788] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.416077][  T788] usb 3-1: config 0 interface 0 has no altsetting 0
[  153.440396][  T788] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  153.481438][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.531378][  T788] usb 3-1: config 0 descriptor??
[  154.027624][ T6950] loop0: detected capacity change from 0 to 512
[  154.093768][  T788] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  154.137335][ T6950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  154.212556][ T6950] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.253476][ T6958] loop3: detected capacity change from 0 to 1024
[  154.689113][   T23] usb 3-1: USB disconnect, device number 6
[  154.709249][   T27] audit: type=1800 audit(1771623636.314:11): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.258" name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
[  154.954409][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  155.097100][ T6813] hfsplus: b-tree write err: -5, ino 4
[  155.459682][ T6979] loop3: detected capacity change from 0 to 2048
[  155.567484][ T6979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.109055][ T6997] loop2: detected capacity change from 0 to 512
[  156.129598][ T6979] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 241664 lbcount: 245760 extent 129+209920
[  156.220548][ T6997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.264086][ T6997] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.279965][ T7005] ALSA: seq fatal error: cannot create timer (-16)
[  156.528065][ T7008] "syz.4.271" (7008) uses obsolete ecb(arc4) skcipher
[  156.567433][ T7008] trusted_key: syz.4.271 sent an empty control message without MSG_MORE.
[  156.614965][ T7012] tls_set_device_offload: netdev not found
[  156.734193][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.396947][ T7028] loop0: detected capacity change from 0 to 4096
[  157.574471][ T7038] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.808847][ T7028] syz.0.275 (7028) used greatest stack depth: 19824 bytes left
[  158.346725][ T7061] input: syz0 as /devices/virtual/input/input8
[  159.080981][ T7071] loop0: detected capacity change from 0 to 2048
[  159.222147][ T7071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.292146][ T7071] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  161.581899][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.930938][ T7118] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[
[  161.930938][ T7118] Q&|xùX
[  163.397606][ T7149] loop2: detected capacity change from 0 to 4096
[  163.848394][   T27] audit: type=1800 audit(1771623645.454:12): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.305" name="file1" dev="loop2" ino=33 res=0 errno=0
[  163.905709][ T2132] psmouse serio2: Failed to reset mouse on : -5
[  165.632488][   T27] audit: type=1326 audit(1771623647.224:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  165.721572][   T27] audit: type=1326 audit(1771623647.224:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  165.802470][   T27] audit: type=1326 audit(1771623647.234:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  165.830336][ T7195] loop3: detected capacity change from 0 to 2048
[  165.853816][ T7195] EXT4-fs: Ignoring removed i_version option
[  165.882821][   T27] audit: type=1326 audit(1771623647.234:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  165.969440][   T27] audit: type=1326 audit(1771623647.234:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  166.033791][ T7195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.056886][   T27] audit: type=1326 audit(1771623647.234:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  166.095263][ T7195] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.147503][   T27] audit: type=1326 audit(1771623647.254:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  166.172419][   T27] audit: type=1326 audit(1771623647.254:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  166.195753][   T27] audit: type=1326 audit(1771623647.254:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db6d9c629 code=0x7ffc0000
[  166.231064][ T7195] fs-verity: sha512 using implementation "sha512-avx2"
[  166.329631][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.722471][ T2132] misc userio: Buffer overflowed, userio client isn't keeping up
[  167.800366][ T5814] IPVS: starting estimator thread 0...
[  167.914375][ T7225] IPVS: using max 16 ests per chain, 38400 per kthread
[  168.564111][ T7234] loop0: detected capacity change from 0 to 2048
[  168.600621][ T6824] IPVS: stop unused estimator thread 0...
[  168.636033][ T6181] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  168.672816][ T5832] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  168.784953][ T2132] input: PS/2 Generic Mouse as /devices/serio2/input/input9
[  168.885123][ T5832] usb 4-1: Using ep0 maxpacket: 8
[  168.910408][ T5832] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  168.929597][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.951827][ T5832] usb 4-1: Product: syz
[  168.967457][ T5832] usb 4-1: Manufacturer: syz
[  168.986738][ T5832] usb 4-1: SerialNumber: syz
[  168.996386][ T5832] usb 4-1: config 0 descriptor??
[  169.022594][ T2132] psmouse serio2: Failed to enable mouse on 
[  169.062014][ T7238] input: syz1 as /devices/virtual/input/input10
[  169.243359][ T5832] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  169.760271][ T7248] loop2: detected capacity change from 0 to 1024
[  169.775696][ T7248] EXT4-fs: Ignoring removed nomblk_io_submit option
[  169.820120][ T7248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.254153][ T5832] gspca_sunplus: reg_w_riv err -71
[  170.265883][ T5832] sunplus: probe of 4-1:0.0 failed with error -71
[  170.302550][ T5832] usb 4-1: USB disconnect, device number 5
[  170.766026][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.270141][ T7267] input: syz1 as /devices/virtual/input/input11
[  172.835736][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  172.861927][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  172.884209][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  172.902862][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  172.925609][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  172.946891][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  172.970381][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  172.995913][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.015088][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.032869][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.051248][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.073089][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.095452][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.112197][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.128101][ T7296] smc: net device bond0 applied user defined pnetid SYZ2
[  173.140502][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.155341][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.171756][ T5832] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  173.183563][ T7296] netlink: 14 bytes leftover after parsing attributes in process `syz.0.355'.
[  173.231945][ T5832] hid-generic 0006:0004:0009.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  173.421319][ T7300] fido_id[7300]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  173.517006][ T7296] smc: removing net device bond0 with user defined pnetid SYZ2
[  173.583608][ T7296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.774233][ T7296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.844066][ T7296] bond0 (unregistering): Released all slaves
[  173.870969][ T7311] loop4: detected capacity change from 0 to 128
[  173.955378][ T7311] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  174.048946][ T7311] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.178081][ T7311] syz.4.361 (pid 7311) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  174.305898][ T6419] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  174.437311][ T7316] loop3: detected capacity change from 0 to 4096
[  174.649713][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  174.649729][   T27] audit: type=1800 audit(1771623656.254:25): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.362" name="file1" dev="loop3" ino=33 res=0 errno=0
[  175.129007][ T7325] loop2: detected capacity change from 0 to 16
[  175.198932][ T7325] erofs: (device loop2): mounted with root inode @ nid 36.
[  175.257804][ T7325] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  175.320859][ T7325] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  175.579875][ T7333] loop3: detected capacity change from 0 to 16
[  175.623723][ T7333] erofs: (device loop3): mounted with root inode @ nid 36.
[  175.692303][ T7333] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  175.774418][ T7333] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  175.828446][ T7333] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  175.846523][ T7338] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  175.860323][ T7333] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  175.875194][ T7333] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  176.195438][ T7343] team0: entered promiscuous mode
[  176.211291][ T7343] team_slave_0: entered promiscuous mode
[  176.232793][ T7343] team_slave_1: entered promiscuous mode
[  176.239592][ T7343] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  176.308144][ T7343] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  176.518074][ T7358] loop2: detected capacity change from 0 to 8
[  176.580767][ T7358] SQUASHFS error: Unable to read inode 0x127
[  177.971908][ T7411] batadv0: entered promiscuous mode
[  178.006809][ T7411] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  178.153225][ T7415] loop0: detected capacity change from 0 to 128
[  178.738056][ T7430] loop0: detected capacity change from 0 to 512
[  178.847153][ T7430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.889763][ T7430] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.044411][   T27] audit: type=1800 audit(1771623660.654:26): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.395" name="file2" dev="loop0" ino=16 res=0 errno=0
[  179.122630][   T27] audit: type=1804 audit(1771623660.684:27): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.395" name="/newroot/95/bus/bus" dev="loop0" ino=18 res=1 errno=0
[  179.149850][ T7408] loop2: detected capacity change from 0 to 40427
[  179.173546][ T7408] F2FS-fs (loop2): invalid crc value
[  179.204884][ T7408] F2FS-fs (loop2): Found nat_bits in checkpoint
[  179.219683][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.438563][ T7408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  179.675741][ T5773] syz-executor: attempt to access beyond end of device
[  179.675741][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.731150][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  180.132794][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'.
[  180.158216][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'.
[  180.232700][  T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  180.437266][  T788] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  180.457061][  T788] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  180.488728][  T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  180.512488][  T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  180.529664][  T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  180.559708][  T788] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  180.569848][  T788] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  180.584070][  T788] usb 1-1: Product: syz
[  180.588321][  T788] usb 1-1: Manufacturer: syz
[  180.606288][  T788] cdc_wdm 1-1:1.0: skipping garbage
[  180.611585][  T788] cdc_wdm 1-1:1.0: skipping garbage
[  180.627942][  T788] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  180.634306][  T788] cdc_wdm 1-1:1.0: Unknown control protocol
[  181.096524][    C0] cdc_wdm 1-1:1.0: Unexpected error -71
[  181.104599][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.111556][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.121695][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.128399][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.135027][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.141689][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.148067][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.154730][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.161220][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.167862][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.174525][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.181189][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.187852][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.194519][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.200909][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.207668][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.214078][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.220743][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.227146][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  181.234073][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  181.242779][ T5832] usb 1-1: USB disconnect, device number 6
[  181.248711][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  181.582283][ T7478] loop2: detected capacity change from 0 to 512
[  181.591483][ T7478] EXT4-fs: Ignoring removed oldalloc option
[  181.619733][ T7478] EXT4-fs (loop2): 1 truncate cleaned up
[  181.630265][ T7478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.653771][  T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  181.858517][  T788] usb 5-1: Using ep0 maxpacket: 16
[  181.869443][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.880398][  T788] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.912663][  T788] usb 5-1: config 0 interface 0 has no altsetting 0
[  181.949741][  T788] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  181.990618][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.041931][  T788] usb 5-1: config 0 descriptor??
[  182.148025][ T7486] atomic_op ffff88807d526998 conn xmit_atomic 0000000000000000
[  182.533432][  T788] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  182.632482][ T1189] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  182.653842][ T7495] pim6reg: entered allmulticast mode
[  182.710942][ T7495] pim6reg: left allmulticast mode
[  182.811806][ T7498] kvm: user requested TSC rate below hardware speed
[  182.842583][ T1189] usb 4-1: Using ep0 maxpacket: 32
[  182.845782][ T7498] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  182.873205][ T1189] usb 4-1: config 0 interface 0 has no altsetting 0
[  182.899577][ T1189] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  182.933564][ T1189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.944562][ T1189] usb 4-1: Product: syz
[  182.951696][ T1189] usb 4-1: Manufacturer: syz
[  182.959893][  T788] usb 5-1: USB disconnect, device number 2
[  182.996244][ T1189] usb 4-1: SerialNumber: syz
[  183.021844][ T1189] usb 4-1: config 0 descriptor??
[  183.052007][ T1189] gs_usb 4-1:0.0: Required endpoints not found
[  183.313378][   T23] usb 4-1: USB disconnect, device number 6
[  183.606514][ T7513] loop4: detected capacity change from 0 to 512
[  183.648297][ T7513] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  183.713762][ T7513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  183.770121][ T7513] EXT4-fs (loop4): 1 truncate cleaned up
[  183.777529][ T7513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.989987][ T7524] loop2: detected capacity change from 0 to 512
[  184.070568][ T6419] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /60/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  184.108888][ T7524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002]
[  184.129534][ T6419] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  184.153952][ T7524] System zones: 1-12
[  184.165336][ T7524] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.426: error while reading EA inode 32 err=-116
[  184.201173][ T7524] EXT4-fs (loop2): Remounting filesystem read-only
[  184.218751][ T7524] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  184.238384][ T7524] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -5)
[  184.250287][ T6419] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /60/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  184.273830][ T7524] EXT4-fs (loop2): 1 orphan inode deleted
[  184.281126][ T7524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.324879][ T6419] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  184.406112][ T6419] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /60/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  184.429130][ T7530] capability: warning: `syz.3.430' uses 32-bit capabilities (legacy support in use)
[  184.468213][ T6419] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  184.513549][ T6419] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /60/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  184.536535][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.615555][ T6419] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  184.718257][ T6419] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /60/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  184.803165][ T6419] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  185.204742][ T7548] syz.2.437: attempt to access beyond end of device
[  185.204742][ T7548] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  185.904353][ T6419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.159615][   T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.345875][   T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.479640][   T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.621906][   T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.799958][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  187.811431][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  187.841323][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.862831][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.872581][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  187.880055][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.409851][ T7572] loop2: detected capacity change from 0 to 32768
[  188.427503][ T7576] loop0: detected capacity change from 0 to 32768
[  188.543978][ T7572] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.809309][ T7580] chnl_net:caif_netlink_parms(): no params data found
[  188.872612][ T7572] XFS (loop2): Ending clean mount
[  188.903811][ T7572] XFS (loop2): Quotacheck needed: Please wait.
[  189.160018][ T7572] XFS (loop2): Quotacheck: Done.
[  189.531307][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.002469][ T5781] Bluetooth: hci1: command tx timeout
[  190.504533][ T7623] use of bytesused == 0 is deprecated and will be removed in the future,
[  190.542996][ T7623] use the actual size instead.
[  190.689050][   T42] hsr_slave_0: left promiscuous mode
[  190.714417][   T42] hsr_slave_1: left promiscuous mode
[  190.719606][ T7626] loop2: detected capacity change from 0 to 8192
[  190.728586][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.761268][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.768738][   T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  190.777157][ T7626] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  190.797492][ T7626] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  190.810943][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.823852][ T7626] REISERFS (device loop2): using ordered data mode
[  190.858982][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.883041][ T7626] reiserfs: using flush barriers
[  190.916715][ T7626] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  190.945930][   T42] bridge_slave_1: left allmulticast mode
[  190.951757][   T42] bridge_slave_1: left promiscuous mode
[  190.976981][ T7626] REISERFS (device loop2): checking transaction log (loop2)
[  190.992444][   T23] usb 1-1: Using ep0 maxpacket: 16
[  190.998007][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.046862][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.070022][   T42] bridge_slave_0: left allmulticast mode
[  191.076305][   T23] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  191.110164][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.118433][   T42] bridge_slave_0: left promiscuous mode
[  191.118881][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.144817][ T7626] REISERFS (device loop2): Using r5 hash to sort names
[  191.184971][   T23] usb 1-1: config 0 descriptor??
[  191.202405][ T7626] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  191.287236][   T42] batadv0: left promiscuous mode
[  191.317616][   T42] veth1_macvtap: left promiscuous mode
[  191.334177][   T42] veth0_macvtap: left promiscuous mode
[  191.339966][   T42] veth1_vlan: left promiscuous mode
[  191.363193][   T42] veth0_vlan: left promiscuous mode
[  191.503421][ T1189] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  191.555454][ T7626] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3725, free_space(entry_count) 2
[  191.606143][   T23] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  191.613716][ T7626] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  191.645113][   T23] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  191.656772][ T7626] REISERFS (device loop2): Remounting filesystem read-only
[  191.671200][   T23] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  191.677644][ T7626] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  191.695734][   T23] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  191.724464][ T1189] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  191.740517][   T23] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  191.766678][ T1189] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  191.776168][   T23] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  191.814517][ T1189] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  191.852470][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.956383][ T7636] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  192.060639][ T7628] i2c i2c-1: unsupported multi-msg i2c transaction
[  192.066687][ T5781] Bluetooth: hci1: command tx timeout
[  192.085842][ T1189] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  192.172997][ T5832] usb 1-1: USB disconnect, device number 7
[  192.207504][   T42] bond0 (unregistering): (slave vlan2): Releasing backup interface
[  192.396398][ T1189] usb 4-1: USB disconnect, device number 7
[  193.815614][ T5832] kernel read not supported for file /admmidi2 (pid: 5832 comm: kworker/0:4)
[  194.146433][ T5781] Bluetooth: hci1: command tx timeout
[  194.767975][ T7667] loop3: detected capacity change from 0 to 8192
[  194.864198][   T42] team0 (unregistering): Port device team_slave_1 removed
[  194.982088][ T7667] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  195.035534][ T7667] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  195.045483][ T7667] REISERFS (device loop3): using ordered data mode
[  195.052175][ T7667] reiserfs: using flush barriers
[  195.061926][ T7667] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  195.100709][   T42] team0 (unregistering): Port device team_slave_0 removed
[  195.116434][ T7667] REISERFS (device loop3): checking transaction log (loop3)
[  195.187404][ T7667] REISERFS (device loop3): Using r5 hash to sort names
[  195.231901][ T7667] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  195.385051][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.494731][ T7674] loop0: detected capacity change from 0 to 1024
[  195.534494][ T7667] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3725, free_space(entry_count) 2
[  195.614866][ T7667] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  195.665593][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.676146][ T7667] REISERFS (device loop3): Remounting filesystem read-only
[  195.741673][ T7667] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  195.923971][ T6820] hfsplus: b-tree write err: -5, ino 4
[  195.944845][ T7669] loop2: detected capacity change from 0 to 32768
[  196.099963][ T7669] (syz.2.469,7669,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  196.142822][ T7669] (syz.2.469,7669,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  196.228676][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  196.231553][ T5781] Bluetooth: hci1: command tx timeout
[  196.236764][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  196.270937][ T7669] JBD2: Ignoring recovery information on journal
[  196.445743][ T7669] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  196.986191][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  197.290709][   T42] bond0 (unregistering): Released all slaves
[  197.428026][ T7686] loop2: detected capacity change from 0 to 512
[  197.436955][ T7686] EXT4-fs: Ignoring removed orlov option
[  197.497726][ T7686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.524847][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.540623][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.548706][ T7580] bridge_slave_0: entered allmulticast mode
[  197.559622][ T7580] bridge_slave_0: entered promiscuous mode
[  197.652626][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.659852][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.702908][ T7580] bridge_slave_1: entered allmulticast mode
[  197.731694][ T7580] bridge_slave_1: entered promiscuous mode
[  197.884398][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.927195][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.031875][ T7580] team0: Port device team_slave_0 added
[  198.098551][ T7580] team0: Port device team_slave_1 added
[  198.220980][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.256253][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.312453][ T5814] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  198.339636][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.389342][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.434842][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.524480][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.567503][ T7686] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.476: Directory block failed checksum
[  198.572663][ T5814] usb 4-1: Using ep0 maxpacket: 8
[  198.615438][ T5814] usb 4-1: config 0 interface 0 altsetting 41 endpoint 0x2 has an invalid bInterval 186, changing to 11
[  198.647695][ T5814] usb 4-1: config 0 interface 0 has no altsetting 0
[  198.663212][ T5814] usb 4-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00
[  198.709158][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.733644][ T5814] usb 4-1: config 0 descriptor??
[  198.882269][ T7580] hsr_slave_0: entered promiscuous mode
[  198.909631][ T7580] hsr_slave_1: entered promiscuous mode
[  198.922251][ T7580] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.959175][ T7580] Cannot create hsr debugfs directory
[  199.157746][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.323095][ T5814] ntrig 0003:1B96:000E.0008: hidraw0: USB HID v0.09 Device [HID 1b96:000e] on usb-dummy_hcd.3-1/input0
[  199.535833][ T5814] usb 4-1: USB disconnect, device number 8
[  199.711927][ T7713] fido_id[7713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  200.037720][ T7580] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  200.073542][ T7580] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  200.108249][ T7580] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  200.132599][ T2132] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  200.145089][ T7580] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  200.351807][ T2132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.384146][ T2132] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  200.404587][ T2132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.446837][ T2132] usb 1-1: config 0 descriptor??
[  200.579709][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.614260][ T7580] 8021q: adding VLAN 0 to HW filter on device team0
[  200.629408][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.636866][ T6824] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.678591][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.685857][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.700071][ T2132] usbhid 1-1:0.0: can't add hid device: -71
[  200.711838][ T2132] usbhid: probe of 1-1:0.0 failed with error -71
[  200.732864][ T2132] usb 1-1: USB disconnect, device number 8
[  200.752891][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  200.967164][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.011128][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.043754][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  201.057241][   T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  201.066530][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.093449][   T23] usb 3-1: config 0 descriptor??
[  201.158900][ T7739] loop3: detected capacity change from 0 to 2048
[  201.174726][ T7739] EXT4-fs: Ignoring removed i_version option
[  201.230816][ T7739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.292542][ T7739] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.362648][ T2132] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  201.479730][ T7739] fs-verity (loop3, inode 18): Unknown hash algorithm number: 3
[  201.538420][   T23] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  201.551664][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.582791][ T2132] usb 1-1: Using ep0 maxpacket: 32
[  201.596227][ T2132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.614005][   T23] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  201.652843][ T2132] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  201.688857][ T2132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.720750][ T2132] usb 1-1: config 0 descriptor??
[  201.732567][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.766538][ T2132] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  201.811497][ T2132] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  202.661799][ T7580] veth0_vlan: entered promiscuous mode
[  202.801880][ T7580] veth1_vlan: entered promiscuous mode
[  202.939705][ T7580] veth0_macvtap: entered promiscuous mode
[  202.963387][ T5814] usb 1-1: USB disconnect, device number 9
[  202.980649][ T7580] veth1_macvtap: entered promiscuous mode
[  203.030945][ T5814] ldusb 1-1:0.0: LD USB Device #1 now disconnected
[  203.082227][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.116396][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.137384][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.165300][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.194476][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.216544][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.248238][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.292702][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.319350][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.349376][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.381006][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.384193][ T7763] loop3: detected capacity change from 0 to 40427
[  203.420959][ T7763] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  203.429025][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.452439][ T7763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  203.460069][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.500236][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.536017][ T7763] F2FS-fs (loop3): Found nat_bits in checkpoint
[  203.550546][ T7580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.595760][ T7580] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.639685][ T7580] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.678773][ T7580] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.800229][ T7763] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  203.849019][   T23] usb 3-1: USB disconnect, device number 7
[  203.855167][ T7763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  204.142219][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.185643][   T27] audit: type=1800 audit(1771623685.794:28): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.488" name="bus" dev="loop3" ino=10 res=0 errno=0
[  204.197479][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.205783][    C0] vkms_vblank_simulate: vblank timer overrun
[  204.248379][ T7763] syz.3.488: attempt to access beyond end of device
[  204.248379][ T7763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  204.299140][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.337569][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.373738][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[  204.407479][ T5772] syz-executor: attempt to access beyond end of device
[  204.407479][ T5772] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  204.471643][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  204.522412][   T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  204.750498][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  204.770737][   T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  204.812496][   T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.858925][   T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  204.890627][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  204.925269][   T23] usb 3-1: Product: syz
[  204.929529][   T23] usb 3-1: Manufacturer: syz
[  204.956166][   T23] usb 3-1: SerialNumber: syz
[  205.233554][   T23] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  205.551453][    T8] usb 3-1: USB disconnect, device number 8
[  205.731753][ T7816] netlink: 'syz.3.493': attribute type 4 has an invalid length.
[  205.765219][ T7786] usblp0: removed
[  205.874038][ T7817] netlink: 'syz.3.493': attribute type 4 has an invalid length.
[  206.193655][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.500'.
[  206.329549][ T7828] loop3: detected capacity change from 0 to 2048
[  206.368541][ T7828] UDF-fs: iocharset maccenteur37ØŸ»)¬â�~\ª¹�éði®Ô�}­”îvU§~ÝÑ#ê@IË«š9€Ìx‚ÅÔHÓ¦ŸI"¡“½Áæ3:Ö not found
[  206.788792][ T7841] loop3: detected capacity change from 0 to 256
[  206.879805][ T7841] FAT-fs (loop3): Directory bread(block 64) failed
[  206.912570][   T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  206.920422][ T7841] FAT-fs (loop3): Directory bread(block 65) failed
[  206.949187][ T7841] FAT-fs (loop3): Directory bread(block 66) failed
[  206.962501][ T7841] FAT-fs (loop3): Directory bread(block 67) failed
[  206.983025][ T1189] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  206.992806][ T7841] FAT-fs (loop3): Directory bread(block 68) failed
[  206.999428][ T7841] FAT-fs (loop3): Directory bread(block 69) failed
[  207.058160][ T7841] FAT-fs (loop3): Directory bread(block 70) failed
[  207.086139][ T7841] FAT-fs (loop3): Directory bread(block 71) failed
[  207.112480][   T23] usb 3-1: Using ep0 maxpacket: 32
[  207.120919][ T7841] FAT-fs (loop3): Directory bread(block 72) failed
[  207.133445][   T23] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  207.144326][ T7841] FAT-fs (loop3): Directory bread(block 73) failed
[  207.162948][   T23] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  207.171647][   T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  207.214683][ T1189] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  207.243808][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  207.252874][ T1189] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  207.283739][   T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  207.287219][ T1189] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  207.323359][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  207.343721][ T1189] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  207.382738][ T1189] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  207.387831][   T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  207.427386][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.447438][ T1189] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  207.464795][   T23] usb 3-1: config 0 descriptor??
[  207.483711][ T1189] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  207.491882][ T1189] usb 6-1: Product: syz
[  207.536116][ T1189] usb 6-1: Manufacturer: syz
[  207.550730][ T7830] loop0: detected capacity change from 0 to 32768
[  207.566493][ T1189] cdc_wdm 6-1:1.0: skipping garbage
[  207.571864][ T1189] cdc_wdm 6-1:1.0: skipping garbage
[  207.614310][ T1189] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  207.620320][ T1189] cdc_wdm 6-1:1.0: Unknown control protocol
[  207.682025][ T7830] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.717605][   T23] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  208.004480][ T7830] XFS (loop0): Ending clean mount
[  208.035891][ T5832] usb 3-1: USB disconnect, device number 9
[  208.058265][ T7830] XFS (loop0): Quotacheck needed: Please wait.
[  208.098032][ T5832] usblp1: removed
[  208.165806][    C1] cdc_wdm 6-1:1.0: Unexpected error -71
[  208.171551][    C1] wdm_int_callback: 13 callbacks suppressed
[  208.171572][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.184650][    C1] wdm_int_callback: 13 callbacks suppressed
[  208.184666][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.198237][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.204913][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.211750][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.218529][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.225983][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.232665][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.239544][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.247002][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.253643][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.260583][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.267208][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.273887][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.280360][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.287103][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.293539][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.300410][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.307177][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  208.313861][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  208.320789][ T5814] usb 6-1: USB disconnect, device number 2
[  208.327119][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  208.390065][ T7830] XFS (loop0): Quotacheck: Done.
[  208.472695][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  208.560522][   T27] audit: type=1800 audit(1771623690.164:29): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.502" name="file1" dev="loop0" ino=4420 res=0 errno=0
[  208.693201][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.712385][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.734484][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  208.756937][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  208.780056][    T9] usb 4-1: SerialNumber: syz
[  208.790502][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.046409][    T9] usb 4-1: 0:2 : does not exist
[  209.154822][    T9] usb 4-1: USB disconnect, device number 9
[  209.278853][ T6181] udevd[6181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  209.392664][ T1189] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  209.582947][ T1189] usb 6-1: Using ep0 maxpacket: 16
[  209.594795][ T1189] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.610887][ T1189] usb 6-1: config 0 interface 0 has no altsetting 0
[  209.618287][ T1189] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  209.628384][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.640497][ T1189] usb 6-1: config 0 descriptor??
[  210.143209][ T1189] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  210.663283][ T5832] usb 6-1: USB disconnect, device number 3
[  211.432656][ T5814] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  211.636994][ T5814] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  211.658493][ T5814] usb 4-1: config 220 has an invalid descriptor of length 128, skipping remainder of the config
[  211.713223][ T5814] usb 4-1: config 220 has no interface number 2
[  211.719632][ T5814] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0
[  211.734570][ T5814] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  211.759305][ T5814] usb 4-1: config 220 interface 0 has no altsetting 0
[  211.778193][ T5814] usb 4-1: config 220 interface 76 has no altsetting 0
[  211.792522][   T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  211.825769][ T5814] usb 4-1: config 220 interface 1 has no altsetting 0
[  211.850077][ T5814] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  211.859996][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.891167][ T5814] usb 4-1: Product: syz
[  211.917408][ T5814] usb 4-1: Manufacturer: syz
[  211.946636][ T5814] usb 4-1: SerialNumber: syz
[  212.019628][   T23] usb 3-1: Using ep0 maxpacket: 16
[  212.041484][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.056173][   T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  212.076350][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.099944][   T23] usb 3-1: config 0 descriptor??
[  212.234563][ T5814] usb 4-1: selecting invalid altsetting 0
[  212.299379][ T5814] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  212.336131][ T5814] usb 4-1: No valid video chain found.
[  212.394411][ T5814] usb 4-1: selecting invalid altsetting 0
[  212.410616][ T5814] usbtest: probe of 4-1:220.1 failed with error -22
[  212.427659][ T5814] usb 4-1: USB disconnect, device number 10
[  212.853704][ T5832] usb 3-1: USB disconnect, device number 10
[  213.351590][ T7964] syzkaller1: entered promiscuous mode
[  213.382659][ T7964] syzkaller1: entered allmulticast mode
[  214.100348][ T7979] binder: 7978:7979 ioctl 40046205 0 returned -22
[  214.932503][ T2132] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  215.132479][ T2132] usb 6-1: Using ep0 maxpacket: 32
[  215.151709][ T2132] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  215.173690][ T2132] usb 6-1: config 0 has no interface number 0
[  215.194436][ T2132] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  215.216945][ T2132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.252601][ T2132] usb 6-1: Product: syz
[  215.270571][ T2132] usb 6-1: Manufacturer: syz
[  215.297503][ T2132] usb 6-1: SerialNumber: syz
[  215.319476][ T2132] usb 6-1: config 0 descriptor??
[  215.333172][ T2132] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  215.568857][ T2132] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  215.609702][ T2132] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  215.812542][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  216.032840][    T9] usb 4-1: Using ep0 maxpacket: 32
[  216.041101][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.045162][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  216.072980][ T2132] usb 6-1: USB disconnect, device number 4
[  216.088800][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.115944][ T2132] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  216.120586][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  216.166935][ T2132] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  216.180287][    T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  216.201841][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.214482][ T2132] quatech2 6-1:0.51: device disconnected
[  216.258812][    T9] usb 4-1: config 0 descriptor??
[  216.272444][   T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  216.464183][   T23] usb 3-1: Using ep0 maxpacket: 16
[  216.473019][   T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  216.492115][   T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.523853][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  216.556739][   T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  216.572044][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.592803][   T23] usb 3-1: Product: syz
[  216.597038][   T23] usb 3-1: Manufacturer: syz
[  216.601910][   T23] usb 3-1: SerialNumber: syz
[  216.767794][    T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000C/input/input13
[  216.929280][    T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000C/input/input14
[  217.043315][    T9] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  217.064410][   T23] usb 3-1: 0:2 : does not exist
[  217.883722][    C1] kye 0003:0458:5011.000C: usb_submit_urb(ctrl) failed: -1
[  217.901651][   T23] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  217.956411][   T23] usb 3-1: USB disconnect, device number 11
[  218.006748][ T6181] udevd[6181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.018718][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  218.242448][    T9] usb 6-1: Using ep0 maxpacket: 8
[  218.260491][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  218.272531][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  218.283350][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  218.313857][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  218.351294][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  218.373872][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.678975][    T9] usb 6-1: GET_CAPABILITIES returned 0
[  218.704127][    T9] usbtmc 6-1:16.0: can't read capabilities
[  218.759471][ T1189] usb 4-1: USB disconnect, device number 11
[  218.796400][ T8067] loop0: detected capacity change from 0 to 256
[  218.862867][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'.
[  218.880837][ T8067] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  218.907262][ T8067] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  219.014893][    T8] usb 6-1: USB disconnect, device number 5
[  220.022424][    T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  220.222395][    T8] usb 3-1: Using ep0 maxpacket: 16
[  220.236401][    T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.261270][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  220.287098][    T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  220.310498][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.328831][    T8] usb 3-1: Product: syz
[  220.337978][    T8] usb 3-1: Manufacturer: syz
[  220.347354][    T8] usb 3-1: SerialNumber: syz
[  220.643005][    T8] usb 3-1: 0:2 : does not exist
[  220.669410][    T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  220.699524][    T8] usb 3-1: USB disconnect, device number 12
[  220.860927][ T6181] udevd[6181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.505773][ T8115] loop5: detected capacity change from 0 to 2048
[  221.600549][ T8115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.672624][ T8122] loop0: detected capacity change from 0 to 256
[  221.736318][ T8122] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.788507][ T8122] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  221.889972][ T8122] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  222.080248][ T8129] exFAT-fs (loop0): invalid start cluster (2155889475)
[  222.540920][ T8140] loop2: detected capacity change from 0 to 1024
[  222.739465][ T8143] syzkaller1: entered promiscuous mode
[  222.766746][ T8143] syzkaller1: entered allmulticast mode
[  222.834092][ T8140] hfsplus: catalog searching failed
[  222.997724][ T6824] hfsplus: b-tree write err: -5, ino 3
[  223.022097][ T5773] hfsplus: node 4:3 still has 1 user(s)!
[  223.380766][ T8158] loop5: detected capacity change from 0 to 1024
[  223.476023][   T28] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  223.613262][ T8158] hfsplus: xattr searching failed
[  223.682743][   T28] usb 3-1: Using ep0 maxpacket: 16
[  223.695534][   T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  223.735813][   T28] usb 3-1: config 0 interface 0 has no altsetting 0
[  223.784894][   T28] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  223.824322][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.862075][   T28] usb 3-1: Product: syz
[  223.871357][   T28] usb 3-1: Manufacturer: syz
[  223.887508][   T28] usb 3-1: SerialNumber: syz
[  223.917068][   T28] usb 3-1: config 0 descriptor??
[  224.238022][   T28] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15
[  224.656257][   T27] audit: type=1326 audit(1771623706.264:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.5.610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5117f9c629 code=0x0
[  224.692694][   T28] rc_core: IR keymap rc-imon-pad not found
[  224.698963][   T28] Registered IR keymap rc-empty
[  224.735113][   T28] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  224.768840][   T28] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  224.826997][   T28] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  224.886880][   T28] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  224.934394][   T28] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:13> initialized
[  225.377804][    C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  225.395517][   T28] usb 3-1: USB disconnect, device number 13
[  225.549584][ T8165] loop3: detected capacity change from 0 to 32768
[  226.263687][ T1189] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  226.491881][ T1189] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  226.554961][ T1189] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  226.603304][ T1189] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  226.639408][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.684205][ T8195] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  226.726355][ T1189] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  226.839080][ T8214] loop3: detected capacity change from 0 to 1024
[  226.894875][   T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  227.022455][ T8214] hfsplus: bad catalog folder thread
[  227.132510][   T23] usb 3-1: Using ep0 maxpacket: 8
[  227.133424][ T1189] usb 6-1: USB disconnect, device number 6
[  227.200749][   T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  227.232623][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.240800][   T23] usb 3-1: Product: syz
[  227.278608][   T23] usb 3-1: Manufacturer: syz
[  227.292365][   T23] usb 3-1: SerialNumber: syz
[  227.315798][   T23] usb 3-1: config 0 descriptor??
[  227.356617][   T23] gspca_main: vc032x-2.14.0 probing 046d:0896
[  228.414537][ T8235] loop0: detected capacity change from 0 to 8192
[  228.449503][ T8235] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  228.502565][ T8235] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  228.559172][   T23] gspca_vc032x: reg_w err -71
[  228.566038][ T8235] REISERFS (device loop0): using ordered data mode
[  228.566563][   T23] vc032x: probe of 3-1:0.0 failed with error -71
[  228.599497][   T23] usb 3-1: USB disconnect, device number 14
[  228.634342][ T8235] reiserfs: using flush barriers
[  228.657804][ T8235] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  228.723575][ T8235] REISERFS (device loop0): checking transaction log (loop0)
[  228.735521][ T8235] REISERFS (device loop0): Using r5 hash to sort names
[  228.774016][ T8235] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  229.220139][ T8250] loop3: detected capacity change from 0 to 256
[  229.273470][ T8253] syz.5.626 (8253): attempted to duplicate a private mapping with mremap.  This is not supported.
[  229.309741][ T8250] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  229.677273][ T8264] syzkaller0: entered allmulticast mode
[  229.927862][ T8262] syzkaller0 (unregistering): left allmulticast mode
[  230.953943][ T8280] netlink: 'syz.3.632': attribute type 10 has an invalid length.
[  230.996190][ T8280] netlink: 2 bytes leftover after parsing attributes in process `syz.3.632'.
[  231.041456][ T8280] bridge0: port 3(team0) entered blocking state
[  231.059124][ T8280] bridge0: port 3(team0) entered disabled state
[  231.092682][ T8280] team0: entered allmulticast mode
[  231.119280][ T8280] team_slave_0: entered allmulticast mode
[  231.142763][ T8280] team_slave_1: entered allmulticast mode
[  231.170008][ T8280] team0: left allmulticast mode
[  231.190840][ T8280] team_slave_0: left allmulticast mode
[  231.207392][ T8280] team_slave_1: left allmulticast mode
[  232.532465][   T28] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  232.669958][ T8327] Illegal XDP return value 4294967274 on prog  (id 41) dev syz_tun, expect packet loss!
[  232.723029][   T28] usb 3-1: Using ep0 maxpacket: 32
[  232.734515][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.765585][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.796519][   T28] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  232.825092][   T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.865813][   T28] usb 3-1: config 0 descriptor??
[  232.893186][   T28] hub 3-1:0.0: USB hub found
[  233.114527][   T28] hub 3-1:0.0: 1 port detected
[  233.300554][    T8] IPVS: starting estimator thread 0...
[  233.444601][ T8340] IPVS: using max 17 ests per chain, 40800 per kthread
[  233.802046][   T28] hub 3-1:0.0: activate --> -90
[  234.207113][   T23] usb 3-1: USB disconnect, device number 15
[  234.213403][   T28] usb 3-1-port1: cannot disable (err = -71)
[  234.266252][ T8336] loop3: detected capacity change from 0 to 32768
[  234.300981][ T8336] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.647 (8336)
[  234.367862][ T8336] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  234.397980][ T8336] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  234.417168][ T8336] BTRFS info (device loop3): force clearing of disk cache
[  234.437416][ T8336] BTRFS info (device loop3): max_inline at 0
[  234.455648][ T8336] BTRFS info (device loop3): enabling auto defrag
[  234.478260][ T8336] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  234.519834][ T8336] BTRFS info (device loop3): force zstd compression, level 3
[  234.561857][ T8336] BTRFS info (device loop3): enabling disk space caching
[  234.592092][ T8336] BTRFS info (device loop3): disk space caching is enabled
[  234.669816][ T8344] loop5: detected capacity change from 0 to 32768
[  234.777655][ T8336] BTRFS info (device loop3): enabling ssd optimizations
[  234.802619][ T8344] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  234.844127][ T8336] BTRFS info (device loop3): auto enabling async discard
[  234.919318][ T8336] BTRFS info (device loop3): rebuilding free space tree
[  234.960627][ T8344] XFS (loop5): Ending clean mount
[  234.999306][ T8344] XFS (loop5): Quotacheck needed: Please wait.
[  235.098702][ T8392] input: syz1 as /devices/virtual/input/input17
[  235.177250][ T8336] BTRFS info (device loop3): disabling free space tree
[  235.211903][ T8336] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  235.235422][ T8344] XFS (loop5): Quotacheck: Done.
[  235.306406][ T8336] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  235.571567][   T27] audit: type=1800 audit(1771623717.174:31): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.647" name="file1" dev="loop3" ino=260 res=0 errno=0
[  235.924481][   T42] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  235.981214][ T7580] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  236.183623][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880265b5400: rx timeout, send abort
[  236.197200][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880265b5400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  236.224033][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.442657][ T2132] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  236.637066][ T2132] usb 3-1: Using ep0 maxpacket: 16
[  236.657539][ T2132] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  236.683028][ T2132] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  236.716510][ T2132] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  236.755934][ T2132] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  236.779176][ T2132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.804190][ T2132] usb 3-1: Product: syz
[  236.808445][ T2132] usb 3-1: Manufacturer: syz
[  236.830510][ T2132] usb 3-1: SerialNumber: syz
[  237.132999][ T2132] usb 3-1: 0:2 : does not exist
[  237.210726][ T2132] usb 3-1: USB disconnect, device number 16
[  237.320923][ T6181] udevd[6181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.531968][ T8424] netlink: 172 bytes leftover after parsing attributes in process `syz.0.662'.
[  237.959838][ T8430] input: syz0 as /devices/virtual/input/input18
[  238.023927][ T8427] loop0: detected capacity change from 0 to 8192
[  238.419621][ T8435] netlink: 'syz.3.668': attribute type 1 has an invalid length.
[  238.445613][ T8435] netlink: 88 bytes leftover after parsing attributes in process `syz.3.668'.
[  238.612026][ T8437] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=811541631 (3246166524 ns) > initial count (3243941116 ns). Using initial count to start timer.
[  239.121642][ T8431] loop2: detected capacity change from 0 to 32768
[  239.168103][ T8431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.666 (8431)
[  239.225088][ T8431] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.254691][ T8431] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  239.272904][ T5814] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  239.290104][ T8431] BTRFS info (device loop2): setting nodatacow, compression disabled
[  239.328221][ T8431] BTRFS info (device loop2): turning on flush-on-commit
[  239.366591][ T8431] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  239.394559][ T8431] BTRFS info (device loop2): use lzo compression, level 0
[  239.412135][ T8431] BTRFS info (device loop2): setting nodatasum
[  239.430403][ T8431] BTRFS info (device loop2): use no compression
[  239.457667][ T8431] BTRFS info (device loop2): trying to use backup root at mount time
[  239.467492][ T5814] usb 1-1: Using ep0 maxpacket: 8
[  239.489497][ T8431] BTRFS info (device loop2): max_inline at 0
[  239.496561][ T5814] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  239.513007][ T5814] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  239.523844][ T8431] BTRFS info (device loop2): using free space tree
[  239.536603][ T5814] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  239.556703][ T5814] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  239.574773][ T5814] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  239.599817][ T5814] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  239.637611][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.678402][ T6819] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  239.705689][ T8431] BTRFS warning (device loop2): couldn't read tree root
[  239.722425][ T8431] BTRFS warning (device loop2): try to load backup roots slot 1
[  239.748433][  T146] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  239.784380][ T8431] BTRFS warning (device loop2): couldn't read tree root
[  239.814443][ T8431] BTRFS warning (device loop2): try to load backup roots slot 2
[  239.855259][  T146] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  239.923046][ T8431] BTRFS warning (device loop2): couldn't read tree root
[  239.932473][ T5814] usb 1-1: GET_CAPABILITIES returned 0
[  239.938073][ T5814] usbtmc 1-1:16.0: can't read capabilities
[  239.944293][ T8431] BTRFS warning (device loop2): try to load backup roots slot 3
[  239.984252][ T8431] BTRFS info (device loop2): enabling ssd optimizations
[  239.991299][ T8431] BTRFS info (device loop2): auto enabling async discard
[  240.036123][ T8431] BTRFS info (device loop2): rebuilding free space tree
[  240.105573][ T8431] BTRFS info (device loop2): checking UUID tree
[  240.193040][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.255066][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.264290][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.273544][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.282700][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.297357][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.306660][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.315836][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.325087][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.377902][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.387119][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.396376][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.405552][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.416358][   T27] audit: type=1800 audit(1771623721.944:32): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.666" name="file1" dev="loop2" ino=257 res=0 errno=0
[  240.439646][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.448821][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.457974][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.540473][ T1189] usb 1-1: USB disconnect, device number 10
[  240.925799][ T5773] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.182084][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'.
[  241.575896][ T5814] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  241.804432][ T5814] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  241.816231][ T5814] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  241.834105][ T5814] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  241.880093][ T5814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  241.919709][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  241.951051][ T5814] usb 1-1: Product: syz
[  241.960137][ T5814] usb 1-1: Manufacturer: syz
[  241.978302][ T5814] usb 1-1: SerialNumber: syz
[  242.020897][ T8496] netlink: 'syz.5.687': attribute type 12 has an invalid length.
[  242.233034][ T5814] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  242.469837][    T9] usb 1-1: USB disconnect, device number 11
[  242.538419][ T8503] loop3: detected capacity change from 0 to 764
[  242.645857][ T8503] rock: directory entry would overflow storage
[  242.667513][ T8503] rock: sig=0x5850, size=36, remaining=22
[  242.681235][ T8485] usblp0: removed
[  242.716595][ T8506] loop5: detected capacity change from 0 to 2048
[  242.829631][ T8506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  242.956906][ T7580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  243.020593][ T8490] loop2: detected capacity change from 0 to 32768
[  243.100769][ T8490] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.309932][ T8490] XFS (loop2): Ending clean mount
[  243.360035][ T8490] XFS (loop2): Quotacheck needed: Please wait.
[  243.412659][   T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  243.549383][ T8490] XFS (loop2): Quotacheck: Done.
[  243.567105][ T8526] loop5: detected capacity change from 0 to 512
[  243.610898][ T8526] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.695: inode has both inline data and extents flags
[  243.632634][   T23] usb 4-1: Using ep0 maxpacket: 16
[  243.668525][ T8526] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.695: couldn't read orphan inode 15 (err -117)
[  243.696825][   T23] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  243.733946][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.744730][ T8526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.771283][   T23] usb 4-1: Product: syz
[  243.786885][   T23] usb 4-1: Manufacturer: syz
[  243.794977][   T23] usb 4-1: SerialNumber: syz
[  243.836901][   T23] usb 4-1: config 0 descriptor??
[  243.879013][ T8526] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 1718579813 > max in inode 18
[  243.984296][ T7580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.082038][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.306263][   T23] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  244.339456][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  244.363212][   T23] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  244.384152][   T23] usb 4-1: media controller created
[  244.440967][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  244.575506][   T23] zl10353_read_register: readreg error (reg=127, ret==0)
[  244.590776][   T23] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  244.610318][   T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  245.206186][ T8545] loop5: detected capacity change from 0 to 512
[  245.327219][ T8545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.386589][ T8545] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  245.429470][   T23] usb 4-1: USB disconnect, device number 12
[  245.620643][   T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  245.798775][ T7580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.834834][ T8555] netlink: 'syz.2.699': attribute type 3 has an invalid length.
[  246.330715][ T8567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.711'.
[  246.389829][ T8567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.711'.
[  246.978739][ T8584] loop2: detected capacity change from 0 to 1024
[  247.163368][ T8584] loop2: detected capacity change from 1024 to 64
[  247.237330][ T8587] syz.2.715: attempt to access beyond end of device
[  247.237330][ T8587] loop2: rw=0, sector=96, nr_sectors = 4 limit=64
[  247.282876][ T8587] Buffer I/O error on dev loop2, logical block 24, async page read
[  247.310173][ T8587] syz.2.715: attempt to access beyond end of device
[  247.310173][ T8587] loop2: rw=0, sector=100, nr_sectors = 4 limit=64
[  247.353754][ T8587] Buffer I/O error on dev loop2, logical block 25, async page read
[  247.531266][ T8591] loop0: detected capacity change from 0 to 256
[  247.541841][ T5773] syz-executor: attempt to access beyond end of device
[  247.541841][ T5773] loop2: rw=2049, sector=1022, nr_sectors = 1 limit=64
[  247.575912][ T8591] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  247.600820][ T8591] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  247.665487][ T8591] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  248.068488][ T8598] 9pnet: p9_errstr2errno: server reported unknown error _vlan
[  248.370745][ T8606] loop0: detected capacity change from 0 to 128
[  248.391504][ T8607] input: syz0 as /devices/virtual/input/input19
[  248.461489][ T8606] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  248.536546][ T8606] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  248.617275][ T8611] loop5: detected capacity change from 0 to 512
[  248.651225][ T8611] EXT4-fs (loop5): 1 truncate cleaned up
[  248.676277][ T8606] ext2 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.691030][ T8611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.856025][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  249.060929][ T7580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.613774][ T8651] loop0: detected capacity change from 0 to 128
[  250.672816][ T8651] EXT4-fs: Ignoring removed nobh option
[  250.749648][ T8651] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  250.813933][ T8651] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  251.049900][ T8661] loop5: detected capacity change from 0 to 512
[  251.103795][ T8661] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.743: inode has both inline data and extents flags
[  251.207231][ T8661] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.743: couldn't read orphan inode 15 (err -117)
[  251.272148][ T8661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.374982][   T27] audit: type=1804 audit(1771623732.984:33): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.743" name="/newroot/76/file0/bus" dev="loop5" ino=18 res=1 errno=0
[  251.470006][   T27] audit: type=1800 audit(1771623733.014:34): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.743" name="bus" dev="loop5" ino=18 res=0 errno=0
[  251.516902][ T8661] Invalid ELF header magic: != ELF
[  251.769412][ T7580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.050345][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  252.345388][ T8683] binder: 8682:8683 ioctl c0306201 2000000003c0 returned -14
[  252.482414][ T5781] block nbd5: Receive control failed (result -32)
[  252.509056][ T8679] block nbd5: shutting down sockets
[  252.833744][ T8695] sctp: [Deprecated]: syz.0.756 (pid 8695) Use of struct sctp_assoc_value in delayed_ack socket option.
[  252.833744][ T8695] Use struct sctp_sack_info instead
[  253.305983][ T8711] loop3: detected capacity change from 0 to 128
[  253.331312][ T8712] loop0: detected capacity change from 0 to 1024
[  253.496440][ T8714] Bluetooth: hci0: unsupported parameter 256
[  253.521058][ T8714] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[  253.608460][ T8716] netlink: 'syz.5.764': attribute type 2 has an invalid length.
[  253.643192][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.5.764'.
[  253.685471][ T6819] hfsplus: b-tree write err: -5, ino 3
[  253.743821][ T5771] hfsplus: node 4:3 still has 1 user(s)!
[  254.775262][ T8741] netlink: 104 bytes leftover after parsing attributes in process `syz.2.775'.
[  255.042492][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  255.262541][    T9] usb 6-1: Using ep0 maxpacket: 8
[  255.275028][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  255.299689][    T9] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.321269][    T9] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 57943, setting to 1024
[  255.359647][    T9] usb 6-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.391548][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  255.421851][    T9] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[  255.447626][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.482210][    T9] usb 6-1: Product: syz
[  255.504617][    T9] usb 6-1: Manufacturer: syz
[  255.519629][    T9] usb 6-1: SerialNumber: syz
[  255.982074][ T8754] loop2: detected capacity change from 0 to 32768
[  256.020861][ T8754] JBD2: Ignoring recovery information on journal
[  256.078903][ T8754] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  256.201568][ T8762] loop3: detected capacity change from 0 to 256
[  256.249856][ T8754] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  256.269333][ T8754] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  256.279452][ T8754] OCFS2: File system is now read-only.
[  256.285163][ T8754] (syz.2.781,8754,0):ocfs2_search_chain:1761 ERROR: status = -30
[  256.293112][ T8754] (syz.2.781,8754,0):ocfs2_search_chain:1871 ERROR: status = -30
[  256.300962][ T8754] (syz.2.781,8754,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  256.309504][ T8754] (syz.2.781,8754,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  256.318255][ T8754] (syz.2.781,8754,0):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  256.326600][ T8754] (syz.2.781,8754,0):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  256.334892][ T8754] (syz.2.781,8754,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30
[  256.344095][ T8754] (syz.2.781,8754,0):ocfs2_block_group_alloc:705 ERROR: status = -30
[  256.352811][ T8754] (syz.2.781,8754,0):ocfs2_block_group_alloc:758 ERROR: status = -30
[  256.361784][ T8754] (syz.2.781,8754,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30
[  256.373744][ T8754] (syz.2.781,8754,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[  256.383654][ T8754] (syz.2.781,8754,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30
[  256.392974][ T8754] (syz.2.781,8754,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30
[  256.402972][ T8754] (syz.2.781,8754,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30
[  256.411336][ T8754] (syz.2.781,8754,0):ocfs2_extend_dir:3205 ERROR: status = -30
[  256.420190][ T8754] (syz.2.781,8754,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  256.428968][ T8754] (syz.2.781,8754,0):ocfs2_mknod:298 ERROR: status = -30
[  256.436167][ T8754] (syz.2.781,8754,0):ocfs2_mknod:502 ERROR: status = -30
[  256.443622][ T8754] (syz.2.781,8754,0):ocfs2_create:676 ERROR: status = -30
[  256.626670][ T8754] syz.2.781 (8754) used greatest stack depth: 17712 bytes left
[  256.664610][    T9] steelseries 0003:1038:1410.000D: invalid report_count 58840
[  256.690886][    T9] steelseries 0003:1038:1410.000D: item 0 2 1 9 parsing failed
[  256.710461][    T9] steelseries 0003:1038:1410.000D: parse failed
[  256.730110][    T9] steelseries: probe of 0003:1038:1410.000D failed with error -22
[  256.788400][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  256.872489][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  256.960964][ T2132] usb 6-1: USB disconnect, device number 7
[  257.072496][    T8] usb 1-1: Using ep0 maxpacket: 32
[  257.084296][    T8] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  257.116097][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.153256][    T8] usb 1-1: config 0 descriptor??
[  257.195486][    T8] gspca_main: sunplus-2.14.0 probing 041e:400b
[  257.676491][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  257.683021][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  257.852969][ T8785] loop5: detected capacity change from 0 to 2048
[  257.889707][ T8785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.903733][ T8785] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.066069][ T7580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.401466][    T8] gspca_sunplus: reg_w_riv err -71
[  258.408187][    T8] sunplus: probe of 1-1:0.0 failed with error -71
[  258.420785][    T8] usb 1-1: USB disconnect, device number 12
[  259.582628][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout
[  259.584885][ T8773] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  260.318724][ T8773] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  260.345318][ T8773] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  260.901501][ T8849] netlink: 'syz.3.815': attribute type 27 has an invalid length.
[  260.932487][ T8849] netlink: 236 bytes leftover after parsing attributes in process `syz.3.815'.
[  261.057851][ T8851] loop2: detected capacity change from 0 to 256
[  261.072532][ T5832] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  261.117068][ T8851] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3322664b, utbl_chksum : 0xe619d30d)
[  261.191366][   T27] audit: type=1800 audit(1771623742.794:35): pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.816" name="file1" dev="loop2" ino=1048634 res=0 errno=0
[  261.262649][ T5832] usb 1-1: Using ep0 maxpacket: 32
[  261.270795][ T5832] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  261.279220][ T5832] usb 1-1: config 0 has no interface number 0
[  261.295265][ T5832] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  261.308066][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.334625][ T5832] usb 1-1: Product: syz
[  261.342243][ T5832] usb 1-1: Manufacturer: syz
[  261.347380][ T5832] usb 1-1: SerialNumber: syz
[  261.392906][ T5832] usb 1-1: config 0 descriptor??
[  261.417241][ T5832] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  261.642888][ T5832] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  261.672589][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout
[  261.689121][ T5832] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  262.071268][ T8861] loop3: detected capacity change from 0 to 1024
[  262.106780][ T8861] EXT4-fs: inline encryption not supported
[  262.121066][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  262.124105][ T2132] usb 1-1: USB disconnect, device number 13
[  262.197751][ T8861] EXT4-fs: Ignoring removed nobh option
[  262.215246][ T2132] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  262.235725][ T8861] EXT4-fs: Ignoring removed bh option
[  262.295438][ T2132] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  262.310986][ T8861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.339665][ T2132] quatech2 1-1:0.51: device disconnected
[  262.372750][ T8861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.592246][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.152777][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  263.352588][    T9] usb 1-1: Using ep0 maxpacket: 16
[  263.365102][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.409416][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  263.428849][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  263.438838][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.467977][    T9] usb 1-1: config 0 descriptor??
[  263.742844][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout
[  263.904981][    T9] HID 045e:07da: Invalid code 65791 type 1
[  263.935579][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input20
[  263.993570][    T9] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  264.151903][ T8880] loop2: detected capacity change from 0 to 40427
[  264.199888][ T8880] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  264.232731][ T8880] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  264.292051][ T8880] F2FS-fs (loop2): invalid crc_offset: 33558524
[  264.362748][ T8880] F2FS-fs (loop2): Found nat_bits in checkpoint
[  264.537380][ T8880] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  264.582888][ T8880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  264.665194][ T8889] loop5: detected capacity change from 0 to 32768
[  264.894746][ T5832] usb 1-1: USB disconnect, device number 14
[  264.914953][ T8899] f2fs_ckpt-7:2: attempt to access beyond end of device
[  264.914953][ T8899] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  264.966954][ T8899] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.983704][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'.
[  267.138783][   T27] audit: type=1326 audit(1771623748.744:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.182513][   T27] audit: type=1326 audit(1771623748.774:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.219491][ T8943] loop3: detected capacity change from 0 to 128
[  267.255776][   T27] audit: type=1326 audit(1771623748.814:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.282497][   T29] INFO: task syz-executor:5774 blocked for more than 143 seconds.
[  267.318615][   T29]       Not tainted syzkaller #0
[  267.347702][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.374345][   T27] audit: type=1326 audit(1771623748.824:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.398275][   T29] task:syz-executor    state:D stack:21608 pid:5774  ppid:1      flags:0x00004002
[  267.424705][   T29] Call Trace:
[  267.439465][   T29]  <TASK>
[  267.446879][   T29]  __schedule+0x1553/0x45a0
[  267.471932][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  267.478171][   T27] audit: type=1326 audit(1771623748.824:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.513576][   T29]  ? lock_chain_count+0x20/0x20
[  267.518546][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  267.538053][   T29]  ? asan.module_dtor+0x20/0x20
[  267.560040][   T29]  ? _raw_spin_unlock+0x40/0x40
[  267.567366][   T27] audit: type=1326 audit(1771623748.834:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.601686][   T29]  ? prepare_to_wait_event+0x3db/0x470
[  267.633345][   T29]  ? prepare_to_wait_event+0x434/0x470
[  267.638928][   T29]  schedule+0xbd/0x170
[  267.643812][   T29]  wb_wait_for_completion+0x173/0x2a0
[  267.649422][   T29]  ? __bpf_trace_writeback_inode_template+0x100/0x100
[  267.657172][   T27] audit: type=1326 audit(1771623748.834:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.682028][   T29]  ? wake_bit_function+0x200/0x200
[  267.687321][   T29]  sync_inodes_sb+0x1c9/0xa10
[  267.692877][   T29]  ? filemap_fdatawrite_range+0x160/0x160
[  267.698704][   T29]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[  267.725504][   T27] audit: type=1326 audit(1771623748.834:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.750357][   T29]  ? nilfs_put_super+0x150/0x150
[  267.761316][   T29]  ? get_nr_dirty_inodes+0x1d4/0x220
[  267.777634][   T29]  sync_filesystem+0x171/0x220
[  267.788860][   T29]  generic_shutdown_super+0x6f/0x2b0
[  267.805167][   T27] audit: type=1326 audit(1771623748.834:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.828601][   T29]  kill_block_super+0x44/0x90
[  267.835723][   T29]  deactivate_locked_super+0x97/0x100
[  267.841217][   T29]  cleanup_mnt+0x43b/0x4d0
[  267.857911][   T29]  task_work_run+0x1d4/0x260
[  267.869748][   T29]  ? task_work_cancel+0x220/0x220
[  267.878026][   T27] audit: type=1326 audit(1771623748.834:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5117f9c629 code=0x7ffc0000
[  267.900450][   T29]  ? do_exit+0x955/0x2460
[  267.908856][   T29]  ? kmem_cache_free+0xf8/0x270
[  267.914376][   T29]  do_exit+0x95a/0x2460
[  267.918664][   T29]  ? put_task_struct+0xc0/0xc0
[  267.924298][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  267.930530][   T29]  ? lock_chain_count+0x20/0x20
[  267.937371][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[  267.942694][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[  267.948579][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  267.976017][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  267.981370][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  268.008178][   T29]  do_group_exit+0x21b/0x2d0
[  268.019308][   T29]  __x64_sys_exit_group+0x3f/0x40
[  268.028270][   T29]  do_syscall_64+0x55/0xa0
[  268.038761][   T29]  ? clear_bhb_loop+0x40/0x90
[  268.049603][   T29]  ? clear_bhb_loop+0x40/0x90
[  268.060516][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.071957][   T29] RIP: 0033:0x7fb4fc19c629
[  268.083556][   T29] RSP: 002b:00007ffe8426db68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  268.097755][   T29] RAX: ffffffffffffffda RBX: 00007fb4fc231f50 RCX: 00007fb4fc19c629
[  268.116054][   T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  268.130177][   T29] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fb4fc231ef0
[  268.148617][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8426ee20
[  268.166867][   T29] R13: 00007fb4fc231ef0 R14: 00005555586c74e8 R15: 00007ffe8426fef0
[  268.182911][   T29]  </TASK>
[  268.190354][   T29] 
[  268.190354][   T29] Showing all locks held in the system:
[  268.207847][   T29] 1 lock held by khungtaskd/29:
[  268.235955][   T29]  #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  268.256582][   T29] 2 locks held by kworker/u4:10/3472:
[  268.269028][   T29]  #0: ffff888018ea4538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  268.297651][   T29]  #1: ffffc9000c9d7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  268.345873][   T29] 2 locks held by getty/5533:
[  268.362527][   T29]  #0: ffff88814c8d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  268.389461][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  268.411859][   T29] 2 locks held by syz-executor/5774:
[  268.424294][   T29]  #0: ffff8880294960e0 (&type->s_umount_key#74){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0
[  268.459633][   T29]  #1: ffff888140f767d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x1ad/0xa10
[  268.489155][   T29] 4 locks held by kworker/u4:17/6819:
[  268.498830][   T29]  #0: ffff888018ea4538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  268.525668][   T29]  #1: ffffc900047efd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  268.549602][   T29]  #2: ffff88814de580e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  268.575025][   T29]  #3: ffff88814de5abd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  268.602991][   T29] 2 locks held by syz.3.832/8910:
[  268.622794][   T29] 
[  268.629102][   T29] =============================================
[  268.629102][   T29] 
[  268.645756][   T29] NMI backtrace for cpu 0
[  268.650181][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  268.657437][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  268.667806][   T29] Call Trace:
[  268.671140][   T29]  <TASK>
[  268.674115][   T29]  dump_stack_lvl+0x18c/0x250
[  268.678853][   T29]  ? show_regs_print_info+0x20/0x20
[  268.684110][   T29]  ? load_image+0x400/0x400
[  268.688727][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  268.693736][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  268.699950][   T29]  ? _printk+0xde/0x130
[  268.704161][   T29]  ? load_image+0x400/0x400
[  268.708734][   T29]  ? load_image+0x400/0x400
[  268.713297][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  268.719431][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  268.725487][   T29]  watchdog+0xf3d/0xf80
[  268.729719][   T29]  ? watchdog+0x1e1/0xf80
[  268.734130][   T29]  kthread+0x2fa/0x390
[  268.738250][   T29]  ? hungtask_pm_notify+0x90/0x90
[  268.743343][   T29]  ? kthread_blkcg+0xd0/0xd0
[  268.748862][   T29]  ret_from_fork+0x48/0x80
[  268.753382][   T29]  ? kthread_blkcg+0xd0/0xd0
[  268.758023][   T29]  ret_from_fork_asm+0x11/0x20
[  268.762896][   T29]  </TASK>
[  268.766664][   T29] Sending NMI from CPU 0 to CPUs 1:
[  268.771981][    C1] NMI backtrace for cpu 1
[  268.771999][    C1] CPU: 1 PID: 6173 Comm: segctord Not tainted syzkaller #0
[  268.772014][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  268.772024][    C1] RIP: 0010:__lock_acquire+0x969/0x7d40
[  268.772053][    C1] Code: 41 81 e6 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 00 f5 1b 91 be 08 00 00 00 e8 41 17 77 00 4c 0f a3 35 d9 c5 b3 0f 73 1a <49> 69 c6 d0 00 00 00 4c 8d b0 c0 73 b2 90 49 b8 00 00 00 00 00 fc
[  268.772068][    C1] RSP: 0018:ffffc90004fbf700 EFLAGS: 00000057
[  268.772082][    C1] RAX: 0000000000000101 RBX: 0000000000000001 RCX: ffffffff81682f1f
[  268.772094][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911bf650
[  268.772104][    C1] RBP: ffffc90004fbf948 R08: ffffffff911bf657 R09: 1ffffffff2237eca
[  268.772116][    C1] R10: dffffc0000000000 R11: fffffbfff2237ecb R12: 0000000000000003
[  268.772128][    C1] R13: ffff888028ce4728 R14: 0000000000000a88 R15: ffff888028ce4728
[  268.772139][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  268.772153][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  268.772164][    C1] CR2: 00007fb1799e82f8 CR3: 000000005de16000 CR4: 00000000003506e0
[  268.772178][    C1] Call Trace:
[  268.772184][    C1]  <TASK>
[  268.772201][    C1]  ? verify_lock_unused+0x140/0x140
[  268.772221][    C1]  ? verify_lock_unused+0x140/0x140
[  268.772238][    C1]  ? __lock_acquire+0x1347/0x7d40
[  268.772258][    C1]  ? verify_lock_unused+0x140/0x140
[  268.772287][    C1]  lock_acquire+0x19e/0x420
[  268.772306][    C1]  ? raw_spin_rq_lock_nested+0x2a/0x140
[  268.772339][    C1]  ? read_lock_is_recursive+0x20/0x20
[  268.772362][    C1]  ? select_task_rq_fair+0x672/0x31f0
[  268.772387][    C1]  _raw_spin_lock_nested+0x32/0x50
[  268.772408][    C1]  ? raw_spin_rq_lock_nested+0x2a/0x140
[  268.772433][    C1]  raw_spin_rq_lock_nested+0x2a/0x140
[  268.772460][    C1]  try_to_wake_up+0x609/0x1190
[  268.772476][    C1]  ? do_raw_spin_lock+0x11f/0x2c0
[  268.772501][    C1]  nilfs_segctor_wakeup+0x20c/0x330
[  268.772522][    C1]  nilfs_segctor_construct+0x472/0x690
[  268.772551][    C1]  nilfs_segctor_thread+0x536/0x10d0
[  268.772581][    C1]  ? nilfs_iput_work_func+0x70/0x70
[  268.772596][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  268.772614][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  268.772632][    C1]  ? wake_bit_function+0x200/0x200
[  268.772651][    C1]  ? __kthread_parkme+0x7a/0x1c0
[  268.772670][    C1]  kthread+0x2fa/0x390
[  268.772684][    C1]  ? nilfs_iput_work_func+0x70/0x70
[  268.772701][    C1]  ? kthread_blkcg+0xd0/0xd0
[  268.772716][    C1]  ret_from_fork+0x48/0x80
[  268.772736][    C1]  ? kthread_blkcg+0xd0/0xd0
[  268.772752][    C1]  ret_from_fork_asm+0x11/0x20
[  268.772782][    C1]  </TASK>
[  269.038483][    C1] vkms_vblank_simulate: vblank timer overrun
[  269.068792][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  269.075720][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  269.083242][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  269.093341][   T29] Call Trace:
[  269.096660][   T29]  <TASK>
[  269.099658][   T29]  dump_stack_lvl+0x18c/0x250
[  269.104401][   T29]  ? show_regs_print_info+0x20/0x20
[  269.109654][   T29]  ? load_image+0x400/0x400
[  269.114223][   T29]  panic+0x2dc/0x730
[  269.118161][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  269.123853][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  269.128400][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  269.134016][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  269.140239][   T29]  watchdog+0xf7c/0xf80
[  269.144447][   T29]  ? watchdog+0x1e1/0xf80
[  269.148835][   T29]  kthread+0x2fa/0x390
[  269.152946][   T29]  ? hungtask_pm_notify+0x90/0x90
[  269.158022][   T29]  ? kthread_blkcg+0xd0/0xd0
[  269.162660][   T29]  ret_from_fork+0x48/0x80
[  269.167154][   T29]  ? kthread_blkcg+0xd0/0xd0
[  269.171793][   T29]  ret_from_fork_asm+0x11/0x20
[  269.176644][   T29]  </TASK>
[  269.180266][   T29] Kernel Offset: disabled
[  269.185485][   T29] Rebooting in 86400 seconds..