last executing test programs:

59.850476138s ago: executing program 4 (id=702):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc853, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x1742a680}}, {@nomblk_io_submit}, {@quota}]}, 0x4, 0x52e, &(0x7f0000000140)="$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")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10)
write$binfmt_script(r0, &(0x7f0000000100), 0x10)

59.306483326s ago: executing program 4 (id=712):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x271, &(0x7f0000000a00)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
creat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19c)

58.838129394s ago: executing program 4 (id=717):
close(0x3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

58.656305027s ago: executing program 4 (id=719):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

58.234261464s ago: executing program 4 (id=723):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000680)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',iocharset=cp1255,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=iso8859-6,shortad,,unhide,\x00'/54], 0x1, 0xc4d, &(0x7f0000003b00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

56.549714611s ago: executing program 4 (id=732):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x1, 0x35d, &(0x7f0000000f00)="$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")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0xf4e, 0x4}}, 0x30)
sync_file_range(r0, 0x6, 0x10000000400000, 0x7)

56.317135085s ago: executing program 32 (id=732):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x1, 0x35d, &(0x7f0000000f00)="$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")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0xf4e, 0x4}}, 0x30)
sync_file_range(r0, 0x6, 0x10000000400000, 0x7)

52.650023395s ago: executing program 0 (id=751):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10)
socket$kcm(0xa, 0x2, 0x73)

52.400533749s ago: executing program 0 (id=752):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x80}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000)

51.897543597s ago: executing program 0 (id=755):
r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x400, 0x2, 0x157}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000004080)="17", 0xf5}], 0x1, &(0x7f0000006a80)=ANY=[], 0x348}}], 0x1, 0xbc75a2656df7d18c)

36.681749694s ago: executing program 0 (id=755):
r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x400, 0x2, 0x157}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000004080)="17", 0xf5}], 0x1, &(0x7f0000006a80)=ANY=[], 0x348}}], 0x1, 0xbc75a2656df7d18c)

23.207501083s ago: executing program 0 (id=755):
r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x400, 0x2, 0x157}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000004080)="17", 0xf5}], 0x1, &(0x7f0000006a80)=ANY=[], 0x348}}], 0x1, 0xbc75a2656df7d18c)

7.99192985s ago: executing program 0 (id=755):
r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x400, 0x2, 0x157}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000004080)="17", 0xf5}], 0x1, &(0x7f0000006a80)=ANY=[], 0x348}}], 0x1, 0xbc75a2656df7d18c)

3.905140737s ago: executing program 3 (id=1052):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ftruncate(r0, 0x8800000)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0xffffff53)
truncate(&(0x7f0000000900)='./file1\x00', 0xb73d)

3.740658729s ago: executing program 3 (id=1054):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$eJzs3U9rK1UUAPAz+ddUFwniRhEc0IWr8urWTaM8QexKiaBuDL4+kKQUWghYwdpVP4FL8Wu4defabyC4Fdy1i8rIZGaaxCZttP+g/n6b3t57z52TOUOyyskXr+0On+0lcXz6W7TbSdS2YivOkuhGLSrfRSMAgMfjLMvizywimsX/ycqRjdrdZQUA3KXi87/w0LkAAPfj408/+7C3vf30ozRtxyudk3E/iYjdk3G/WO89j69iFDvxJDpxHpFdKMbvf7D9NBpprhtv7h6N++O583t/xPokfjM60V0cv5kWyvh+RP63GS9EGr3nzeqoTry8OP7tBfHRb8Vbb8zkvxGd+PXL2ItRPIs8dhr/7Waavpd9f/rN5/ll8vikFv21yb7SekRWv7eiAAAAAAAAAAAAAAAAAAAAAADw6G2kaVK075n078mnyv479fPJ+kZa6c735yniL/oFF/2Bsihb9Bxl8UPVX+dJmqZZuXEa34hXG35YAAAAAAAAAAAAAAAAAAAAAHIHXx8OB6PRzv6NB/XhYFR1A6i+1v9fD9yamXk9DoeD+vID11a/1my3gTzXKzdHoxG3cFuuH8TP63k+S/b8WOb7709emxb3kzK8KsytvoqX3r3IMC2Xqps8HCTXXatdFe6n2aVWrJxGkszNTGo72tnPJo/EeTZf0/aSm9m6hbuRP6OtFxcu/ZVl2WrnvPN7UaNyJpm02FgtjWY5WPq0tC/X4pflBy59y6jf9D0HAAAAAAAAAAAAAAAAAABYbP6L0/9wfGVo7c6SAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB7Nv39/2rQjoj5mUuDozL4qj3loBX7Bw/8EgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+DsAAP//tERGig==")
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189800, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0))

3.421340424s ago: executing program 3 (id=1055):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}], 0x1c)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

3.341673866s ago: executing program 1 (id=1057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100", @ANYRES32, @ANYBLOB="08001f00050000000500110001"], 0x70}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

2.884901443s ago: executing program 5 (id=1063):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000014000305000000000000000002180000", @ANYRES32=r2, @ANYBLOB="08000200ac1414c725000100e0000002"], 0x28}}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x100, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc7})

2.850655414s ago: executing program 1 (id=1064):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.658094277s ago: executing program 1 (id=1065):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000000000))

2.565850898s ago: executing program 1 (id=1066):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
rmdir(&(0x7f0000000040)='./file0\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')

2.549321338s ago: executing program 5 (id=1067):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x200, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c)
setreuid(0xee01, 0xee01)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c)

2.49383807s ago: executing program 2 (id=1068):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="0502000000001c0000f90e00000008000300", @ANYRES32=r2], 0x8c}, 0x1, 0x0, 0x0, 0x3b517560ae7f6dc7}, 0x0)

2.294043893s ago: executing program 5 (id=1069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x4078bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0x2}, {0xd, 0x18}}}, 0x24}}, 0x20040004)

2.254181013s ago: executing program 3 (id=1070):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x3)

2.247008864s ago: executing program 1 (id=1071):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

2.169081865s ago: executing program 5 (id=1072):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
close(r0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f00000001c0)=ANY=[], 0x4, 0xf82, &(0x7f0000000f00)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080))
sync_file_range(r0, 0x5, 0x80900, 0x6)

2.152105325s ago: executing program 2 (id=1073):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}], 0x1, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x8, 0x6}, 0xc)

1.965282908s ago: executing program 2 (id=1074):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)=""/125, 0x1a, 0x7d, 0x1, 0x5, 0x0, @void, @value}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000002b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x894, r0}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.86600395s ago: executing program 1 (id=1075):
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "b05c83f6"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x1, 0x4, "9db5d831"}, 0x0})

1.733573342s ago: executing program 5 (id=1076):
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100)={[{@abort}, {@block_validity}, {@usrquota}, {@sb={'sb', 0x3d, 0xfffffffffffffffa}}]}, 0xfe, 0x264, &(0x7f0000000700)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x542, 0x104)
getdents(0xffffffffffffffff, 0x0, 0x58)
pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x24)

1.543038875s ago: executing program 5 (id=1077):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x80000002, 0x0, 0xfffffefc})

1.530216435s ago: executing program 2 (id=1087):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x2, 0x0, 0x4c42817a}, &(0x7f00000001c0)=0x9c)

1.126265992s ago: executing program 3 (id=1078):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x6014, &(0x7f000000a280)="$eJzs3U9vHGcdB/Df/vHacdo0qlAVIg5uyp+W0vxPoPxrygEJOICEeiaR61YpKaAkIFpFxJUPiAvwEuDSC4e+BV5AXwPiBRAp6akHyqCxn8cZb9Zeu4ln1n4+H2kz85tnx/tMvjueWc/MTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8eMf/vxcLyKu/i5NOB7xVAwi+hFH6nop6pEr+fnDiDgR683xXEQM5iPq+df/eSbiYkR8fCzi/oM7y/Xk87vsx6Wzt29+9pMf/OuPf1k78c6bv/hwvP1nX7jw0Z/uRhz/6asffXb3ySw7AAAAlKKqqqqXPuafTJ/v+113CgBoRd7+V0merla3Vv9oxvqjVu9P/ef+Xp7/1NGu+6s+pHVTNdndZhERq8156n0Gh+MB4IBZjU+77gIdkn/RhhFxtOtOADOt13UH2Bf3H9xZ7qV8e83twdJGe/475Zb8V3ub13dsN5xm/ByTtt5fazGIZ7fpz5GW+jBLcv798fyvbrSP0vP2O/+2bJf/aOPSp+Lk/Afj+Y/Zkv9fI+LA5t+fmH+pcv7DveS/OjjA67/8AQAAAAA4/PLf/493fPx3/vEXZVd2Ov671FIfAAAAAAAAAOBJe9z7/21y/z8AAACYWfVn9drfjj2ctt13sdXT3+hFPD32fKAwS40vBwQAAAAAAAAAAAAA2jGMWEzn9c9FxNOLi1VV1Y+m8XqvHnf+g6705YeSdf1LHgAANnx8bOxa/l7EQkS8kb7rb25xcbGq5iJisToyn/dnR/ML1ZHG59o8rKfNj3axQzwcVfUPW2jM1zTt8/K09vGfV7/WqBrsomPt6DBwAIiIja3RfVukQ6aqnomu93I4GKz/h4/1n93o+n0KAAAA7L+qqqpe+jrvk+mYf7/rTgEArcjb//HjAmq1Wl1M/cnGxJnpj1q9j3VTNdndZhERq8156n0Gt+MHgANmNT7tugt0SP5FG0bEia47Acy0XtcdYF/cf3BnuZfy7TW3B0sb7flckC35r/bW58vzTxpOM36OSVvvr7UYxLPb9Oe5lvowS3L+/fH8r26051v8b+azsD/5t2W7/OvlPN5Bf7qW8x+M5z9mv9f/tqxFf2L+pcr5D/eU/0D+AAAAAAAww/Lf/487/psXGQAAAAAAAAAOnPsP7izn617z8f8vTXherznm+s9DI+ff23X+rv89THL+/fH8x07IGTTG773+MP9PHtxZ/vD2f76YhzOf/9xgVL/2XK8/GKZzfqq5t+J63IiVOPvI84db2s890j63pf38lPYLj7SP6vYjuf10LMev40a8udk+P+XEqIUp7dWU9pz/wPpfpJz/sPGo819M7b2xYe3eB/1H1vvmcNLrXPnHf7/66NrVhuGWai0Gm8vWcKz+51RrfXpo/f/k6Ch+e2vl5unfX7t9++a5SIMtU89HGjxhOf+59Mj5v/jCRnv+vd9cX+99MNpz/rNiLYaT8l9/f7/QGK+X96WW+9aFnP8oPXL+eQs0ef0/yPlPXP/Xl+/lDvoDAAAAAAAAAAAAAAAAO6mqav0S0SsRcTld/9PVtZkAQLvy9r9K8nS1Wq1Wq9WHr26qJnutWUTEP5vz1PsMf5j0wwCAWfa/iPh3152gM/IvWP6+v3r45a47A7Tq1nvv//LajRsrN2913RMAAAAAAAAA4PPK9/9catz/ef08oLH7Rm+5/+vrsXRg7//ZHw3W73WeFuj52Pn+36di5/t/D6e83tyU9tGU9vkp7QtT2ide6NGQ838+ZZzzP5kWrKT7v77YQX+6lvM/le71nPP/2tjzmvlXfz/I+fe35H/m9ru/OXPrvfdfuf7utbdX3l751bmzly9euHTxwqVLZ966fmPl7Ma/HfZ4f+X8872vnQdalpx/zlz+Zcn5fyXV8i9Lyn9zN1T+Zcnrf97fk39Zcv75s4/8y5LzfynV8i9Lzv/rqZZ/WXL+L6da/mXJ+X8j1fIvS87/lVTLvyw5/9Opln9Zcv5nUi3/suT88xEu+Zcl55/PbJB/WXL+51Mt/7Lk/C+kWv5lyflfTLX8y5Lzv5Rq+Zcl53851fIvS87/m6mWf1ly/t9KtfzLkvN/NdXyL0vO/9upln9Zcv7fSbX8y5Lz/26qd8r/nRb7RTty/t9LtfW/LDn/76da/mXJ+b+WavmX5eH3/xvZ88jibHTDiJEnP9L1byYAAAAAAAAAAAAAYFwbpxN3vYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuNkau87wd+9uq1IcH/cCcO2OZmYGF3fQOHGEwS8qekF0pC2rSkxrHXZhPf6l0ngFDZFNoSBalI7Qv6omkSJVGktgJVkZpKNEIqUvumal41QpWiVopUV4LKQUmlVIGtzpzneXZmdnZm195dz5zz+SD75505M/PMmTOz+130nQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB6Wz4y+Ud9WZblf2p/bcyyi/N/r8/25V/O7r7QKwQAAADO1zu1v//qknTCviVcqG6bf7z2X747Nzc3l3327TPv/sncXDpjc5YNrMuy2nnRP/38Z3P12wTPZiN9/XVf93e4+YEO5w92OH+ow/nDHc5f1+H8kQ7nL9gBC6wvfh9Tu7Ibav/cWOzS7LJsqHbeDS0u9Wzfuv7++Lucmr7aZeaGDmdT2dFsMhtfcJm+2n9Z9uqW/LYeyOJt9dfd1qYsy87+5OmDcQ19YR/fkDXcWE39Y/fWfdnmt3/y9MFvz7x5davZcTcsWGmWbduar/O5LJv/dVXWl61L+ySus79unZtarHOgYZ19tcvl/25e59klrjPe75Gwzh+0WeemcNoT12dZNpstuk2zZ7P+bEPTrab9PVIcEfl15A/l+7LBZR0nW5ZwnOSX+fH1jcdJ8zEZ9/+WsE8GF1lD/cPx1peGF+z3cz1O8nvdDcdqft0P5Tc6MlL/q9WGYzXf5ukbFz8GWj52LY6BdCzXHQNbOx0D/cMDtWOgf37NWxuOgYkFl+nP+mq3debG9sfA2Myxk2PTTz51+9SxA0cmj0wenxjfvXPHrp07du0aOzx1dHK8+Ht5u7SHbMj60zG4NbzWxGPw5qZt6w/Jua+v3PNgpEueB/l9/+RN+YIu7s8WOcbzbZ7bdv7Pg/R9v+55MFj3PGj5mtrieTC4hOdBvs3ZbUv7njlY96fVGlbrtXBj3TFwIb8f5rf56C2LvxZuCut6/tblfj8cWHAMxLvVF557+Snp572Ru8J+WXhcXJOfcdFwdnp68tQdTxyYmTk1kYWxJi6te6yaj5cNdfcpW3C89C/7eNn3l7+46ZoWp28M+2rktvnHarjF45Bvs3O0/WNVe3VvvT8bTt2ehbHC1np/tvpulu/PlCXaHPv5Ns/dfv4/C6ZcUvf6N9Tp9W9gaLB4/RtIe2Oo4fVv4UMzUFtZlp29fWmvf0Phz1q//l3WJa9/+b569I72x0C+zfNjyz0GBtu+/l0fZl9Yzy0hMYzU5f53a+fPFodp3WPZ8bgZHBwKx81gvMXG42bHgsvk15bf9rbxcztutl3f+Fg1/NxSwuMm31d/Ot7+uMm3eW3i/F871sd/1r12DHc6BoYGhvP1DqWDoHi9m1sfj4E7soPZiexodihdJn+U89sa3b60Y2A4/Fnr146ruuQYyPfVS9vbHwP5Nq/vWNmfnbaFU9I2dT87Nf9+YbHMf83g/PU177aVzvz5Oj+6s/3vhvJt3ty53JzRfj/dFk65qMV+an7+LHZMH8rWZj9dFdZ5dFf7303l21y2e4nH074sy96YeKP2+67w+92/Of2v3234vW+r3ym/MfHGg2MP/3A56wcA4Ny9W/t7drj4WbPu/1gv5f//AwAAAD0h5v7+MBP5HwAAAEoj5v6BMBP5HwAAAEoj5v7BMJOK5P/H79rz8jvPZOndAOeCeH7cDQ/dU2wXO96z4evNc/Py0z/8zaGXv/zM0m67P8uyXzz4/pbbP35PXFfhZFznBxtPX+Cq65Z0+489Mr9d/fsnnN1TXH+8P0s9DGJX+dWx7bXr3fzkRG2+9mBWmw/PPv9scf3F13H7MzuK7f88vGnJvsN9DZffFtZzQ5ibw3vKPLRvfj/kM17u5U3X/sOln5q/vXi5vq3vrd3Nl36vuN74HlEvXlpsH+/3Yuv/+6985+V8+ydubL3+Z/pbr/9MuN4fh/nzvcX29fv8y3Xr/4Ow/nh78XJ3fOP7Ldf/ypXF9q+E4+JrYTav/74//sA7rR6veDv77i4uF29//H921i4Xry9ef/P6R56ZaNgfzdf/2tvF9ez9wk8H6rePp8fbiR67u/H47guPb0OPPMuy7/xh1rCfsw8Vl/u7pvXH6zt5d+v139a0zpN919UuP39/Njbcr69+a3vL+xvXs++vNzbcnxfvD/vv7bHX8+s983A4HsP5//uD4vqa38v0lfsbX2/i9l/bWDxv4/WNNa3/xab1z16X77vO63/g7WL9r9y7rmH9+z4WjqcHitlp/Uf+4pKGy3/928XjceqLo8dPTJ+eOhTuzMam5/G6kfUbLrr4Pe+9JLyWNn+9/8TM45OnNo9vHs+yzT34loGrvf5vhPnfxZhd+Vso/PCnxXH3wseL71s3/6z4+sVw+mPh8YzfH7/6Z0MNx2vz4z57bzHPd/23hnUs1ZVf+Y/rWpz8nwve8/fMZ149/be//2bzzwXx/py8fKR2/17ackXtvL7XivObX69am0tP+3+/vPF5/aPB8dr8Xtivc+GdmbdeUdxe8/XH9yZ54RPF8zf+JBcvnzW9n8jGgcb7cW7rn/ej8HPM969qfP2Lx8f3nml6N+eNWV++hNnw+pDNFufHreL+fuHsFS1vL74PTzZ79XKWuajpJ6fHjk4dP/3E2Mzk9MzY9JNP7T924vTxmf219y7d/7lOl59/fm+oPb8PTe7emdWe7SeKscou9PpPPnLw0J3jNx2aPHzg9OGZR05OnjpycHr64OSh6ZsOHD48+cVOl586tHdi+54dd24fPTJ1aO9de/bs2DM6dfxEvoxiUR3sHv/86PFT+2sXmd67c8/Erl07x0ePnTg0uffO8fHR050uX/veNJpf+gujpyaPHpiZOjY5Oj311OTeiT27d2/v+O6Px04ent48dur08bHT05Onxor7snmmdnL+va/T5amG6RPh9a5JX/jp/NO37U7vj5v75pcWvapik8YfT7O3wntBxe9vnb6OuX8ozKQi+R8AAACqIOb+8Mb/82fI/wAAAFAaMfevCzOR/wEAAKA0Yu4fCTOpSP7X/9f/1//X/9f/X8P+f6b/v9L0/1ek/7/Qqvb/5+n/6//38vr1//X/6azb+v8x96/PskrmfwAAAKiCmPs3hJnI/wAAAFAaMfdfFGYi/wMAAEBpxNx/cZhJNfL/UPM/9f/1//X/6/v/cVv9/0z/X///HOn/6/+3o/+v/9/L6+/C/v96/X+6Tbf1/2Puf0+YSTXyPwAAAFRCzP3vDTNZTv7vX+lVAQAAACsp5v5Lwkz8/38AAAAojZj7N4aZVCT/+/x//X/9f5//r/+v/7+a9P/1/9vR/9f/7+X1d2H/3+f/03W6rf8fc///CzOpSP4HAACAKoi5/31hJvI/AAAAlEbM/ZeGmcj/AAAAUBox918WZlKR/K//r/+v/6//r/+v/7+a9P/1/9vR/9f/7+X16//r/9NZt/X/Y+6/PMykIvkfAAAAqiDm/ivCTOR/AAAAKI2Y+68MM5H/AQAAoDRi7r8qzKQi+V//X/9f/1//X/9f/3816f/r/7ej/6//38vr1//X/6ezbuv/x9x/dZhJRfI/AAAAVEHM/deEmcj/AAAAUBox978/zET+BwAAgNKIuX9TmElF8r/+v/5/1/f/+/X/9f8L+v/6/62sbP+/f9Fz9P8L+v+N9P/1//X/9f9pr9v6/zH3fyDMpCL5HwAAAKog5v5rw0zkfwAAACiNmPuvCzOR/wEAAKA0Yu7fHGZSkfyv/6//3/X9f5//r/8fZuX6/zN9+v9L4PP/9f8z/f9zdqH7872+fv1//X+arV9wSrf1/2Pu3xJmUpH8DwAAAFUQc//WMBP5HwAAAEoj5v7rw0zkfwAAACiNmPtvCDOpSP7X/z/H/n9TtUX/v/X69f/1//X/ff6//r/+fzv6//r/vbx+/f+l9f+HO10RpdZt/f+Y+28MM6lI/gcAAIAqiLn/pjAT+R8AAABKI+b+m8NM5H8AAAAojZj7t4WZVCT/6//7/H/9f/1//X/9/9Wk/7/k/v/CD01eAv3/gv7/ubnQ/fleX38v9f9HWlze5/+zFrqt/x9z/y1hJhXJ/wAAAFAFMfffGmYi/wMAAEBpxNx/W5iJ/A8AAAClEXP/aJhJRfK//r/+v/5/tfv/6/T/9f9XWVn7/+l11Of/6//r/+v/r3L//1uLXL5XPv+fauu2/n/M/beHmVQk/wMAAEAVxNx/R5iJ/A8AAAClEXP/WJiJ/A8AAAClEXP/eJhJRfK//r/+v/5/tfv/mf6//v8qK2v/v/nz/7Ms0//X/0/0//X/u+3z/1vR/2ctdFv/P+b+iTCTiuR/AAAAqIKY+7eHmcj/AAAAUBox9+8IM5H/AQAAoDRi7t8ZZlKR/K//r/+v/6//r/+v/7+aqtL/9/n/xfn6/wX9f/1//X/9/yrqb3Fat/X/Y+7fFWZSkfwPAAAAVRBz/+4wE/kfAAAASiPm/jvDTOR/AAAAKI2Y++8KM6lI/tf/1//X/9f/797+f+Ptr17//7/0/1eR/v/Y64MtHnf9/4L+v/5/L69f/1//n85Wtv9/yXn3/2Pu3xNmUpH8DwAAAFUQc/8Hw0zkfwAAACiNmPvvDjOR/wEAAKCntPocwijm/g+FmVQk/+v/l73/P7dO/1//v3f7/4370+f/6/+3El4+u7r/7/P/F7e6/f/1C25P/7/Rhe7P9/r69f/1/+lsZfv/C348XXb/P+b+vWEmFcn/AAAAUAUx998TZiL/AwAAQGnE3H9vmIn8DwAAAKURc/++MJOK5H/9/7L3/7vv8//7Mv1//f+C/r/+/0rohc//1/9fnM//783+f3zfDf3/7un/58eQ/j/dqNv6/zH33xdmUpH8DwAAAFUQc/+Hw0zkfwAAACiNmPs/EmYi/wMAAEBpxNz/0TCTiuR//X/9f5//r/+v/6//v5r0//X/29H/783+f6T/3z39f5//T7fqtv5/zP33h5lUJP8DAABAFcTc/7EwE/kfAAAASiPm/v8fZiL/AwAAQGnE3P9AmElF8r/+v/6//r/+v/6//v9q0v/X/29nbfv/w1nz/dD/1//X/9f/Z3WtRf9/3TL6/zH3/1KYSUXyPwAAAFRBzP0PhpnI/wAAAFAaMfd/PMxE/gcAAIDSiLn/l8NMKpL/9f/Xpv/fn65f/1//X/9f/1//fyX1aP9/RP+/4PP/9f97ef36//r/dLYW/f9sGf3/mPt/JcykIvkfAAAAqiDm/l8NM5H/AQAAoDRi7v+1MBP5HwAAAEoj5v6Hwkwqkv/1/33+v/6//n/X9v8HG/en/r/+fys92v/3+f+B/r/+fy+vX/9f/5/Ouq3/H3P/r4eZVCT/AwAAQBXE3P9wmIn8DwAAAKURc/8nwkzkfwAAACiNmPs/GWZSkfyv/6//r/+v/9+1/f+m/an/3639/39re67+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/Y+EmVQk/wMAAEAVxNz/qTAT+R8AAABKI+b+3wgzkf8BAACgNGLu/80wk97M//3LvYD+v/6//r/+v/6//v9q0v9f2P/PX8MuZP9/eCkb6v8vif6//r/+v/4/7XVb/z/m/k+HmfRm/gcAAABaiLn/t8JM5H8AAAAojZj7fzvMRP4HAACA0oi5/9Ewk4rkf/1//X/9f/1//X/9/9Wk/+/z/9vR/9f/7+X16//r/9NZt/X/Y+7/TJhJRfI/AAAAVEHM/b8TZiL/AwAAQGnE3L8/zET+BwAAgNKIuf+xMJOK5H/9f/1//X/9/5Xp/8/p/+v/t6T/r//fjv6//n8vr1//X/+fzrqt/x9z/4Ewk4rkfwAAAKiCmPs/G2Yi/wMAAEBpxNx/MMxE/gcAAIDSiLn/UJhJRfK//r/+v/6//r/P/9f/X036//r/7ej/6//38vr1//X/6azb+v8x90+GmVQk/wMAAEAVxNx/OMxE/gcAAIDSiLn/SJiJ/A8AAAClEXP/42EmFcn/+v/6//r/+v/6//r/q0n/X/+/Hf1//f9eXr/+v/4/na1c//+fV6T/H3P/VJhJRfI/AAAAVEHM/Z8LM5H/AQAAoDRi7v98mIn8DwAAAKURc//RMJOK5H/9f/1//f8S9v8H9f8z/f+uof+v/9+O/r/+fy+vX/9f/5/OVq7/n61I/z/m/mNhJhXJ/wAAAFAFMfcfDzOR/wEAAKA0Yu4/EWYi/wMAAEBpxNx/MsykIvlf/1//X/+/hP1/n/9fo//fHfT/9f/b0f/X/+/l9ev/6//TWbf1/2Pu/90wk4rkfwAAAKiCmPtPhZnI/wAAAFAaMfdPh5nI/wAAAPwfe/fRo9ddxXH8MYljWxFixZ63wI4dvIO8BjZsERK9dwgQeu+9915D772X0HsLhA4BKSiZc05i5/G94/E8fu79n89nkZNxJvaNR3L00+iryzBy9983bmmy//X/+n/9v/5f/6//3yX9v/5/iv5/Pf3/yS3/vv5f/6//Z87S+v/c/feLW5rsfwAAAOggd//94xb7HwAAAIaRu/8BcYv9DwAAAMPI3f/AuKXJ/tf/6//1/4vp/w86P/2//l//f0H0//r/zb77/zPxweD9/zb6f/2//p85S+v/c/c/KG5psv8BAACgg9z9D45b7H8AAAAYRu7+h8Qt9j8AAAAMI3f/Q+OWJvtf/6//H7f/P7W2/t/7//PrOmL/f+LWX1b/f7z0//r/zb77/ybv/99G/6//1/8zZ2n9f+7+h8UtTfY/AAAAdJC7/+Fxi/0PAAAAw8jd/4i4xf4HAACAYeTuf2Tc0mT/6//1/+P2/6t7/7/+P7+uQ/T/Z+rn8f5//b/+//z0//r/NT+//l//z7yl9f+5+x8VtzTZ/wAAANBB7v5Hxy32PwAAAAwjd/9j4hb7HwAAAIaRu/+xcUuT/a//1//r//X/+v9L8P5//b/+X/+/lf5f/7/m59f/6/+Zt7T+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuf0LcYv8DAADAMHL3PzFuabL/9f/6f/2//l//r//fJf2//n+K/l//v+bn1//r/5m38/7/qqtvuYft/3P3Xx23NNn/AAAA0EHu/ifFLfY/AAAADCN3/5PjFvsfAAAAhpG7/ylxS5P9v6X/v2yj/2/a/990Qv+v/19m/39j/Cmj/9f/3966+//T+n/9/y0/vLz+/3C/E/p//b/+nzk77/9nev9zP87df03c0mT/AwAAQAe5+58at9j/AAAAMIzc/U+LW+x/AAAAGEbu/qfHLU32v/f/6/+P8/3/+fPq/w/o/73/X/+v/z/u9/+fOedj/f+BLf3/vfI3U/9/fvvu59f+/FP9/90P8fz6fzpYWv+fu/8ZcUuT/Q8AAAAd5O5/Ztxi/wMAAMAwcvc/K26x/wEAAGAYufufHbc02P+X6//rOZL+3/v/D9X/R4Cr/z/7efT/+v9t9P/H2/+fS/9/wPv/j2bf/fzan9/7/+f7/yvnfhKGt7T+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVP9/mf5f/z9N/6//n6L/1/+v+fn1/97/z7yl9f+5+18Qt9Twu/wI/5UAAADAkuTuf2Hc0uT7/wAAANBB7v4XxS32PwAAAAwjd/+L45Ym+1//r//X/+v/vf9f/79L+v/h+v8T+v9b6f/1//p//T/Tltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/9f+7pP8frv/3/v/b0P/r//X/+n+mLa3/z93/irilyf4HAACADnL3vzJusf8BAABgGLn7XxW32P8AAAAwjNz9r45bmux//b/+X/+v/9f/6/93afn9/8lDfZb+/4D+/2y76v9Pn+fX0/8v6/mPp//Pr77+nzEtoP+/x20/zt3/mrilyf4HAACADnL3vzZusf8BAABgGLn7Xxe32P8AAAAwjNz9r49bmuz/8/X/N1x58M9n+v/8DZvo/8+c99fW/+v/N/p//b/+X/9/kbz/X/+/GbD/9/7/dTy/9//r/5m3gP7/rI9z978hbmmy/wEAAKCD3P1vjFvsfwAAABhG7v43xS32PwAAAAwjd/+b45Ym+9/7//X/+n/9v/5f/79L+n/9/5QV9f+ntv2g/l//r//X/zNtaf1/7v63xC1N9j8AAAB0kLv/rXGL/Q8AAADDyN3/trjF/gcAAIBh5O5/e9zSZP/r//X/e+//76D/T/r/+Lrq//X/F0D/r//feP//ke27n1/78+v/9f/MW1r/n7v/HXFLk/0PAAAAHeTuf2fcYv8DAADAMHL3vytusf8BAABgGLn73x23NNn/+n/9/977f+//L/r/+Lrq//X/F0D/r//f6P+PbN/9/NqfX/+v/2fe0vr/3P3viVua7H8AAADoIHf/e+MW+x8AAACGkbv/fXGL/Q8AAADDyN3//rilyf7X/+v/9f/6f/2//n+X9P/6/ymXtv+/5gb9/9n23c+v/fn1//p/5i2t/8/d/4G4pcn+BwAAgA5y938wbrH/AQAAYBi5+z8Ut9j/AAAAMIzc/R+OW5rsf/3/2vv/e14fT7C0/j8/Rf+v/9f/6//1//r/81ru+//P/ZNiO/2//l//r/9n2iXr/+991X3udvPfzPT/ufs/Erc02f8AAADQQe7+a+MW+x8AAACGkbv/o3GL/Q8AAADDyN3/sbilyf7v0f+fvN2njdP/e/+//n/R/X/+oar/1//r//X/Wy23/z8c/b/+X/+v/2fa0t7/n7v/43FLk/0PAAAAHeTu/0TcYv8DAADAMHL3fzJusf8BAABgGLn7PxW3NNn/Pfr/29P/Hzj2/v+mO+n/9f/F+//1/xv9v/5/hv5f/7/m5x+6/z+x0f9zLJbW/+fu/3Tc0mT/AwAAQAe5+z8Tt9j/AAAAMIzc/Z+NW+x/AAAAGEbu/s/FDXe94/4e6ZLS/+v/vf9f/6//1//vkv7/CP3/icsP/Vz6/wP6/6PZdz+/9ucfuv/3/n+OydL6/9z9n49bfP8fAAAAhpG7/wtxi/0PAAAAw8jd/8W4xf4HAACAARz07rn7vxS3NNn/+n/9v/5f/6//1//vkv7f+/+n6P/1/2t+fv2//p95S+v/c/d/OW5psv8BAACgg9z9X4lb7H8AAAAYRu7+r8Yt9j8AAAAMI3f/1+KWJvtf/6//1//r/5fd/5/S/+v/J+n/9f8b/f+R7bufX/vz6//1/8xbWv+fu//rcUuT/Q8AAAAd5O7/Rtxi/wMAAMAwcvd/M26x/wEAAGAYufu/Fbc02f/6f/2//l//v+z+v8X7/09u9P9Hpv/X/2/0/0e2735+7c+v/9f/M29p/X/u/m/HLU32PwAAAHSQu/87cYv9DwAAAMPI3f/duMX+BwAAgGHk7v9e3NJk/4/c/099mv7/gP5f/7/R/y+h//f+/4ug/9f/b/T/R7bvfn7tz6//1/8zb2n9f+7+78ctTfY/AAAAdJC7/wdxi/0PAAAAw8jdf91mc639DwAAAGO67pa/nt78MG5psv9H7v+n6P8P6P/1/xv9v/5/x/T/+v8p+n/9/5qfX/+v/2fe0vr/3P0/ilua7H8AAADoIHf/j+MW+x8AAACGkbv/J3GL/Q8AAADDyN3/07ilyf7X/+v/9f/6f/2//n+X9P/6/yn6f/3/mp9f/6//Z97S+v/c/T+LW5rsfwAAAOggd//P4xb7HwAAAIaRu/8XcYv9DwAAAMPI3f/LuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9v4pbmux/AAAA6CB3/6/jFvsfAAAAhpG7/zdxi/0PAAAAw8jd/9u4pcn+1//r//X/+n/9v/5/l9r2/zf/b1X/P0v/r/9f8/Pr//X/zFta/5+7/3dxS5P9DwAAAB3k7v993GL/AwAAwDBy9/8hbrH/AQAAYBi5+/8YtzTZ//p//b/+X/+/jv7/Cv2//n+rxfb/3v9/KPp//f+an1//r/9n3tL6/9z918ctTfY/AAAAdJC7/09xi/0PAAAAw8jd/+e4xf4HAACAYeTuvyFuabL/9f/6/yH7/1P6//H6f+//X2X/fxf9v/5/mv5f/7/m59f/6/+Zt7T+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAYeTu/1vcYv8DAADAMHL3/z1uabL/9f/6/yH7f+//1//r/xdD/6//n6L/1/+v+fn1//p/5i2t/8/d/4+4pcn+BwAAgA5y9/8zbrH/AQAAYBi5+/8Vt9j/AAAAMIzc/f+OW5rsf/2//l//r//X/+v/d0n/v97+/4qN/n+O/l//r//X/zNtaf1/7v7/xC1N9j8AAAB0kLv/xrhl6/6/8yV6KgAAAOA45e7/b9zi+/8AAAAwjNz9/4tbmux//b/+X/9/Qf3/af2//l//f2H0/+vt/73/f57+X/+v/9f/M21p/X/u/v8HAAD//8+aFhM=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x1)
sendfile(r0, r1, 0x0, 0xfffe82)

602.04659ms ago: executing program 2 (id=1079):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup(r1)
sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0)

1.3916ms ago: executing program 3 (id=1080):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1})

0s ago: executing program 2 (id=1091):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x1)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

.0: fatal: filesystem consistency error
[  117.231097][ T5975]   inode = 11 2339
[  117.231097][ T5975]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[  117.250761][ T5975] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  117.268159][ T5975] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  117.268597][ T5999] loop4: detected capacity change from 0 to 512
[  117.282410][ T5975] CPU: 1 PID: 5975 Comm: syz.1.650 Not tainted 5.15.185-syzkaller #0
[  117.296803][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  117.301160][ T5999] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.652: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964)
[  117.306893][ T5975] Call Trace:
[  117.306908][ T5975]  <TASK>
[  117.306917][ T5975]  dump_stack_lvl+0x168/0x230
[  117.306947][ T5975]  ? show_regs_print_info+0x20/0x20
[  117.306967][ T5975]  ? load_image+0x3b0/0x3b0
[  117.328298][ T5999] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.652: couldn't read orphan inode 15 (err -117)
[  117.328570][ T5975]  ? __lock_acquire+0x7c60/0x7c60
[  117.331762][ T5999] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000001,block_validity,,errors=continue. Quota mode: writeback.
[  117.336186][ T5975]  ? do_raw_spin_unlock+0x11d/0x230
[  117.336218][ T5975]  gfs2_assert_warn_i+0x18f/0x2c0
[  117.336249][ T5975]  gfs2_quota_cleanup+0x4b4/0x6a0
[  117.336278][ T5975]  gfs2_make_fs_ro+0x237/0x5d0
[  117.336300][ T5975]  ? gfs2_dinode_out+0xb00/0xb00
[  117.336318][ T5975]  ? _raw_spin_unlock+0x24/0x40
[  117.336339][ T5975]  ? gfs2_glock_nq+0xcb0/0x1550
[  117.336381][ T5975]  gfs2_withdraw+0x5f9/0x1460
[  117.336416][ T5975]  ? gfs2_lm+0x220/0x220
[  117.336439][ T5975]  ? gfs2_freeze_lock+0x52/0xc0
[  117.425939][ T5975]  ? gfs2_consist_inode_i+0xc0/0xe0
[  117.431172][ T5975]  gfs2_inode_refresh+0xb5e/0xfe0
[  117.436213][ T5975]  ? do_promote+0x71a/0xab0
[  117.440751][ T5975]  ? gfs2_inode_metasync+0xf0/0xf0
[  117.445905][ T5975]  ? __lock_acquire+0x7c60/0x7c60
[  117.450974][ T5975]  inode_go_lock+0x127/0x470
[  117.455607][ T5975]  do_promote+0x741/0xab0
[  117.459986][ T5975]  finish_xmote+0x514/0xb70
[  117.464525][ T5975]  do_xmote+0x7b6/0x1120
[  117.468809][ T5975]  gfs2_glock_nq+0xc7a/0x1550
[  117.473536][ T5975]  do_sync+0x486/0xc00
[  117.477652][ T5975]  ? slot_put+0x1e0/0x1e0
[  117.482043][ T5975]  ? do_sync+0x47e/0xc00
[  117.486503][ T5975]  ? do_raw_spin_unlock+0x11d/0x230
[  117.491733][ T5975]  gfs2_quota_sync+0x32c/0x6f0
[  117.496551][ T5975]  gfs2_sync_fs+0x48/0xb0
[  117.500963][ T5975]  sync_filesystem+0xe6/0x220
[  117.505824][ T5975]  gfs2_reconfigure+0x120/0xcd0
[  117.510751][ T5975]  ? shrink_dcache_sb+0x35d/0x3b0
[  117.515825][ T5975]  ? gfs2_get_tree+0x1e0/0x1e0
[  117.520578][ T5975]  ? dentry_lru_isolate+0x2e0/0x2e0
[  117.525760][ T5975]  ? __might_sleep+0xf0/0xf0
[  117.530352][ T5975]  ? preempt_count_add+0x8d/0x190
[  117.535391][ T5975]  ? hook_sb_remount+0x19/0xc0
[  117.540271][ T5975]  ? bpf_lsm_sb_remount+0x5/0x10
[  117.545221][ T5975]  reconfigure_super+0x219/0x880
[  117.550160][ T5975]  vfs_fsconfig_locked+0x18d/0x3f0
[  117.555266][ T5975]  __se_sys_fsconfig+0x61b/0x750
[  117.560357][ T5975]  ? __x64_sys_fsconfig+0xc0/0xc0
[  117.565446][ T5975]  ? vtime_user_exit+0x2dc/0x400
[  117.570370][ T5975]  ? lockdep_hardirqs_on+0x94/0x140
[  117.575650][ T5975]  ? __x64_sys_fsconfig+0x1c/0xc0
[  117.580673][ T5975]  do_syscall_64+0x4c/0xa0
[  117.585116][ T5975]  ? clear_bhb_loop+0x30/0x80
[  117.589818][ T5975]  ? clear_bhb_loop+0x30/0x80
[  117.594489][ T5975]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  117.600381][ T5975] RIP: 0033:0x7f562f1d4929
[  117.604820][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.624459][ T5975] RSP: 002b:00007f562d03c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  117.632918][ T5975] RAX: ffffffffffffffda RBX: 00007f562f3fbfa0 RCX: 00007f562f1d4929
[  117.640928][ T5975] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[  117.649024][ T5975] RBP: 00007f562f256b39 R08: 0000000000000000 R09: 0000000000000000
[  117.657010][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.657'.
[  117.657311][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.666680][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'.
[  117.674142][ T5975] R13: 0000000000000000 R14: 00007f562f3fbfa0 R15: 00007ffebbf34798
[  117.674180][ T5975]  </TASK>
[  117.674250][    C1] vkms_vblank_simulate: vblank timer overrun
[  117.675510][ T5975] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  117.718569][ T5975] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  117.721880][ T4177] XFS (loop3): Unmounting Filesystem
[  117.727647][ T5975] gfs2: fsid=syz:syz.0: File system withdrawn
[  117.737344][ T5975] CPU: 1 PID: 5975 Comm: syz.1.650 Not tainted 5.15.185-syzkaller #0
[  117.745431][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  117.755579][ T5975] Call Trace:
[  117.758910][ T5975]  <TASK>
[  117.761961][ T5975]  dump_stack_lvl+0x168/0x230
[  117.766671][ T5975]  ? kobject_uevent_env+0x371/0x890
[  117.771860][ T5975]  ? show_regs_print_info+0x20/0x20
[  117.777049][ T5975]  ? load_image+0x3b0/0x3b0
[  117.781565][ T5975]  ? kobject_uevent_env+0x371/0x890
[  117.786801][ T5975]  ? lockref_put_or_lock+0x6e/0xb0
[  117.791904][ T5975]  gfs2_withdraw+0x111b/0x1460
[  117.796674][ T5975]  ? gfs2_lm+0x220/0x220
[  117.800965][ T5975]  ? gfs2_consist_inode_i+0xc0/0xe0
[  117.806190][ T5975]  gfs2_inode_refresh+0xb5e/0xfe0
[  117.811254][ T5975]  ? do_promote+0x71a/0xab0
[  117.815773][ T5975]  ? gfs2_inode_metasync+0xf0/0xf0
[  117.820881][ T5975]  ? __lock_acquire+0x7c60/0x7c60
[  117.825896][ T5975]  inode_go_lock+0x127/0x470
[  117.830467][ T5975]  do_promote+0x741/0xab0
[  117.834782][ T5975]  finish_xmote+0x514/0xb70
[  117.839274][ T5975]  do_xmote+0x7b6/0x1120
[  117.843499][ T5975]  gfs2_glock_nq+0xc7a/0x1550
[  117.848188][ T5975]  do_sync+0x486/0xc00
[  117.852277][ T5975]  ? slot_put+0x1e0/0x1e0
[  117.856612][ T5975]  ? do_sync+0x47e/0xc00
[  117.860833][ T5975]  ? do_raw_spin_unlock+0x11d/0x230
[  117.866011][ T5975]  gfs2_quota_sync+0x32c/0x6f0
[  117.870843][ T5975]  gfs2_sync_fs+0x48/0xb0
[  117.875168][ T5975]  sync_filesystem+0xe6/0x220
[  117.879827][ T5975]  gfs2_reconfigure+0x120/0xcd0
[  117.884664][ T5975]  ? shrink_dcache_sb+0x35d/0x3b0
[  117.889767][ T5975]  ? gfs2_get_tree+0x1e0/0x1e0
[  117.894520][ T5975]  ? dentry_lru_isolate+0x2e0/0x2e0
[  117.899726][ T5975]  ? __might_sleep+0xf0/0xf0
[  117.904328][ T5975]  ? preempt_count_add+0x8d/0x190
[  117.909358][ T5975]  ? hook_sb_remount+0x19/0xc0
[  117.914117][ T5975]  ? bpf_lsm_sb_remount+0x5/0x10
[  117.919035][ T5975]  reconfigure_super+0x219/0x880
[  117.923971][ T5975]  vfs_fsconfig_locked+0x18d/0x3f0
[  117.929082][ T5975]  __se_sys_fsconfig+0x61b/0x750
[  117.934022][ T5975]  ? __x64_sys_fsconfig+0xc0/0xc0
[  117.939074][ T5975]  ? vtime_user_exit+0x2dc/0x400
[  117.944005][ T5975]  ? lockdep_hardirqs_on+0x94/0x140
[  117.949215][ T5975]  ? __x64_sys_fsconfig+0x1c/0xc0
[  117.954257][ T5975]  do_syscall_64+0x4c/0xa0
[  117.958667][ T5975]  ? clear_bhb_loop+0x30/0x80
[  117.963322][ T5975]  ? clear_bhb_loop+0x30/0x80
[  117.967976][ T5975]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  117.973942][ T5975] RIP: 0033:0x7f562f1d4929
[  117.978352][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.997955][ T5975] RSP: 002b:00007f562d03c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  118.006381][ T5975] RAX: ffffffffffffffda RBX: 00007f562f3fbfa0 RCX: 00007f562f1d4929
[  118.014421][ T5975] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[  118.022369][ T5975] RBP: 00007f562f256b39 R08: 0000000000000000 R09: 0000000000000000
[  118.030322][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.038285][ T5975] R13: 0000000000000000 R14: 00007f562f3fbfa0 R15: 00007ffebbf34798
[  118.046474][ T5975]  </TASK>
[  118.049554][    C1] vkms_vblank_simulate: vblank timer overrun
[  118.094740][ T6002] device gretap0 entered promiscuous mode
[  118.174347][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  118.402849][ T6004] loop4: detected capacity change from 0 to 8192
[  118.497196][ T6004] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  118.538260][ T6004] REISERFS (device loop4): using ordered data mode
[  118.546057][ T6004] reiserfs: using flush barriers
[  118.570792][ T6004] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  118.587007][ T5232] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  118.615827][ T6004] REISERFS (device loop4): checking transaction log (loop4)
[  118.674383][ T4214] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  118.813428][ T6004] REISERFS (device loop4): Using tea hash to sort names
[  118.824221][ T5232] usb 3-1: Using ep0 maxpacket: 32
[  118.837807][ T6004] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  119.104376][ T5232] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88
[  119.123892][ T5232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.159742][ T5232] usb 3-1: Product: syz
[  119.165298][ T5232] usb 3-1: Manufacturer: syz
[  119.169966][ T5232] usb 3-1: SerialNumber: syz
[  119.220468][ T5232] usb 3-1: config 0 descriptor??
[  119.250185][   T26] audit: type=1804 audit(1750197023.516:8): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.655" name="/newroot/127/file6/file1" dev="loop4" ino=4 res=1 errno=0
[  119.291516][ T5232] as10x_usb: device has been detected
[  119.318205][ T5232] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  119.324275][ T6029] loop3: detected capacity change from 0 to 40427
[  119.332755][ T6004] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[  119.363416][ T5232] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  119.377027][ T4214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.388470][ T6029] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  119.396297][ T6029] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  119.411141][ T6004] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[  119.426337][ T4214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.436834][ T4214] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  119.454310][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.465412][ T6029] F2FS-fs (loop3): invalid crc value
[  119.499171][ T4214] usb 1-1: config 0 descriptor??
[  119.503424][ T5232] as10x_usb: error during firmware upload part1
[  119.524764][ T5232] Registered device Abilis Systems DVB-Titan
[  119.529745][ T6029] F2FS-fs (loop3): Found nat_bits in checkpoint
[  119.561898][ T5232] usb 3-1: USB disconnect, device number 11
[  119.648553][ T6029] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  119.656076][ T6029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  119.657871][ T5232] Unregistered device Abilis Systems DVB-Titan
[  119.712922][ T5232] as10x_usb: device has been disconnected
[  119.788306][  T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  119.817238][  T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  120.011726][ T4214] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  120.042414][ T4214] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  120.111001][ T6035] loop1: detected capacity change from 0 to 32768
[  120.158663][ T6035] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.669 (6035)
[  120.224375][ T4214] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE
[  120.260590][ T6035] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  120.285558][ T6035] BTRFS info (device loop1): using free space tree
[  120.310936][ T6035] BTRFS info (device loop1): has skinny extents
[  120.387441][ T6049] loop2: detected capacity change from 0 to 256
[  120.452481][ T4214] cp2112 0003:10C4:EA90.0005: error requesting SMBus config
[  120.465965][ T4214] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71
[  120.519350][ T6049] exFAT-fs (loop2): bogus sector size bits : 0
[  120.519350][ T6049] 
[  120.530125][ T4214] usb 1-1: USB disconnect, device number 8
[  120.544292][ T6049] exFAT-fs (loop2): failed to read boot sector
[  120.572180][ T6049] exFAT-fs (loop2): failed to recognize exfat type
[  120.738320][ T6035] BTRFS info (device loop1): enabling ssd optimizations
[  120.750121][ T6065] fido_id[6065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  121.203080][ T6090] loop0: detected capacity change from 0 to 4096
[  121.297642][ T6100] netlink: 136 bytes leftover after parsing attributes in process `syz.4.688'.
[  121.308733][ T6096] loop2: detected capacity change from 0 to 512
[  121.359773][ T6100] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  121.399178][ T6090] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  121.400150][ T6099] loop3: detected capacity change from 0 to 256
[  121.448901][ T6090] ntfs3: loop0: Failed to load $Extend.
[  121.497083][ T6096] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  121.580174][ T6096] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.733316][ T6096] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback.
[  121.755393][ T6113] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  122.384832][ T6140] loop1: detected capacity change from 0 to 8192
[  122.570743][ T6154] loop4: detected capacity change from 0 to 512
[  122.620918][ T6154] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  122.639898][ T6154] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  122.656929][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'.
[  122.674153][ T6154] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  122.695183][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'.
[  122.738729][ T6154] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  122.782664][ T6154] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e04ce01c, mo2=0000]
[  122.794421][ T6167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.707'.
[  122.803352][ T6167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.707'.
[  122.853900][ T6154] EXT4-fs (loop4): failed to initialize system zone (-117)
[  122.863392][ T6154] EXT4-fs (loop4): mount failed
[  122.914479][ T6165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.707'.
[  122.980274][ T6171] loop3: detected capacity change from 0 to 1024
[  123.031289][ T6173] loop2: detected capacity change from 0 to 256
[  123.081587][ T6177] loop4: detected capacity change from 0 to 128
[  123.120682][ T6171] EXT4-fs (loop3): Ignoring removed nobh option
[  123.140289][ T6171] EXT4-fs (loop3): Ignoring removed bh option
[  123.184941][ T6177] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none.
[  123.211920][ T6171] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,bsdgroups,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback.
[  123.225237][ T6177] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.333580][ T6177] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.712: Corrupt dir, invalid name for '.', running e2fsck is recommended
[  123.621077][ T6197] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  123.651495][ T6197] FAT-fs (loop9): unable to read boot sector
[  123.707107][ T6199] loop4: detected capacity change from 0 to 128
[  123.748686][ T6199] EXT4-fs (loop4): Ignoring removed nobh option
[  123.775064][ T6199] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,nojournal_checksum,,errors=continue. Quota mode: none.
[  123.790394][ T6202] device veth1_macvtap left promiscuous mode
[  123.802704][ T6202] device macsec0 entered promiscuous mode
[  123.837719][ T6202] device veth1_macvtap entered promiscuous mode
[  123.838894][ T6199] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.851583][ T6202] device macsec0 left promiscuous mode
[  123.868309][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.010283][ T6193] loop1: detected capacity change from 0 to 32768
[  124.064162][ T6193] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.716 (6193)
[  124.142219][ T4169] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /139/mnt/lost+found: directory fails checksum at offset 1024
[  124.174853][ T6193] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  124.186238][ T6193] BTRFS info (device loop1): enabling disk space caching
[  124.198455][ T6193] BTRFS info (device loop1): doing ref verification
[  124.209863][ T6193] BTRFS info (device loop1): use zlib compression, level 3
[  124.218190][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  124.291510][ T6193] BTRFS info (device loop1): force clearing of disk cache
[  124.324756][ T4169] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /139/mnt/lost+found: directory fails checksum at offset 1024
[  124.346370][ T6193] BTRFS info (device loop1): setting nodatacow, compression disabled
[  124.365556][ T6193] BTRFS info (device loop1): doing ref verification
[  124.373365][ T6193] BTRFS info (device loop1): disk space caching is enabled
[  124.381776][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  124.395627][ T6193] BTRFS info (device loop1): has skinny extents
[  124.402854][ T4169] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /139/mnt/lost+found: directory fails checksum at offset 1024
[  124.438939][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  124.463163][ T4169] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /139/mnt/lost+found: directory fails checksum at offset 1024
[  124.515885][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  124.535840][ T4169] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /139/mnt/lost+found: directory fails checksum at offset 1024
[  124.563030][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  124.655675][ T6193] BTRFS info (device loop1): enabling ssd optimizations
[  124.677865][ T6193] BTRFS info (device loop1): clearing free space tree
[  124.685501][ T6193] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  124.705531][ T6193] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  124.811726][   T26] audit: type=1800 audit(1750197029.076:9): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.716" name="bus" dev="loop1" ino=263 res=0 errno=0
[  124.824310][   T23] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  124.934420][   T26] audit: type=1800 audit(1750197029.206:10): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.716" name="bus" dev="loop1" ino=263 res=0 errno=0
[  125.214307][   T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  125.231141][   T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.245348][   T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  125.265220][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.534228][   T23] usb 3-1: usb_control_msg returned -32
[  125.539966][   T23] usbtmc 3-1:16.0: can't read capabilities
[  125.571034][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.728'.
[  125.910217][ T6239] loop0: detected capacity change from 0 to 32768
[  125.943644][ T6241] loop3: detected capacity change from 0 to 32768
[  126.013884][ T6239] XFS (loop0): Mounting V5 Filesystem
[  126.069899][ T6241] XFS (loop3): Mounting V5 Filesystem
[  126.145754][ T6239] XFS (loop0): Ending clean mount
[  126.205861][ T6239] XFS (loop0): Quotacheck needed: Please wait.
[  126.234318][ T6241] XFS (loop3): Ending clean mount
[  126.307368][ T6239] XFS (loop0): Quotacheck: Done.
[  126.453251][ T4177] XFS (loop3): Unmounting Filesystem
[  126.506759][ T4175] XFS (loop0): Unmounting Filesystem
[  126.515539][ T6245] loop1: detected capacity change from 0 to 32768
[  126.561658][ T6264] chnl_net:caif_netlink_parms(): no params data found
[  126.599887][   T26] audit: type=1800 audit(1750197030.866:11): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.731" name="file1" dev="loop1" ino=4 res=0 errno=0
[  126.782733][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.819572][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.833828][ T6264] device bridge_slave_0 entered promiscuous mode
[  126.863754][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.875105][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.882899][ T6264] device bridge_slave_1 entered promiscuous mode
[  127.049833][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.096821][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.202478][ T6264] team0: Port device team_slave_0 added
[  127.238733][ T6264] team0: Port device team_slave_1 added
[  127.301587][ T6278] loop3: detected capacity change from 0 to 256
[  127.317419][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.334221][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.364719][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.377896][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.384929][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.449598][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.484505][   T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.518621][ T6264] device hsr_slave_0 entered promiscuous mode
[  127.526632][ T6264] device hsr_slave_1 entered promiscuous mode
[  127.533508][ T6264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.547078][ T6264] Cannot create hsr debugfs directory
[  127.571684][ T4214] usb 3-1: USB disconnect, device number 12
[  127.714314][ T6125] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  127.727493][   T23] usb 1-1: Using ep0 maxpacket: 8
[  127.844828][   T23] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  127.853077][   T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  127.894096][   T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  127.927819][   T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  127.928728][ T6287] loop2: detected capacity change from 0 to 4096
[  127.958772][   T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  127.983264][ T6264] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  127.992713][   T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  128.014248][   T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  128.016058][ T6125] usb 2-1: Using ep0 maxpacket: 16
[  128.023600][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.073535][ T6264] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.111251][ T6291] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.123809][ T6264] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.147434][   T26] audit: type=1800 audit(1750197032.416:12): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.741" name="bus" dev="loop2" ino=18 res=0 errno=0
[  128.180234][ T6264] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  128.204147][ T1111] Bluetooth: hci1: command 0x0409 tx timeout
[  128.214462][ T6125] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  128.233863][ T6125] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.253469][ T6125] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.324255][   T23] usb 1-1: GET_CAPABILITIES returned 0
[  128.329915][   T23] usbtmc 1-1:16.0: can't read capabilities
[  128.343130][ T6295] loop3: detected capacity change from 0 to 4096
[  128.426261][ T6295] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  128.460286][ T6125] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.469272][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.488576][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.494094][ T6125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.498380][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.511890][ T6125] usb 2-1: Product: syz
[  128.524058][ T6125] usb 2-1: Manufacturer: syz
[  128.525311][ T6264] 8021q: adding VLAN 0 to HW filter on device team0
[  128.540566][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.549376][ T6125] usb 2-1: SerialNumber: syz
[  128.550675][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.570456][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.577647][ T4499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.591534][    T7] usb 1-1: USB disconnect, device number 9
[  128.641547][ T6298] loop2: detected capacity change from 0 to 4096
[  128.651979][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.656660][ T6295] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  128.680499][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.717048][ T6298] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  128.725598][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.742384][ T4499] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.749687][ T4499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.758300][ T6298] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  128.759052][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.798517][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.813443][  T144] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  128.814552][ T6298] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  128.822683][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.840179][  T144] ntfs3: loop3: ino=1e, Internal error
[  128.846955][ T6298] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  128.847317][  T144] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22.
[  128.870774][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.878181][ T6298] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  128.894584][ T6298] ntfs: volume version 3.1.
[  128.899185][ T6298] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use!
[  128.907775][ T4177] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  128.925957][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.935221][ T4177] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  128.948050][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.957724][ T4177] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  128.966066][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.975594][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.975780][ T4238] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  128.984533][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  129.001389][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  129.010499][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  129.025990][ T4177] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[  129.041340][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  129.052709][ T6300] netem: incorrect gi model size
[  129.058712][ T6300] netem: change failed
[  129.101823][ T6125] usb 2-1: 0:2 : does not exist
[  129.210786][ T6305] loop2: detected capacity change from 0 to 256
[  129.221001][ T6309] loop0: detected capacity change from 0 to 128
[  129.290478][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.304340][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.330178][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.331724][ T6309] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  129.407018][ T6309] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,block_validity,usrquota,sb=0xfffffffffffffffa,,errors=continue. Quota mode: writeback.
[  129.444334][ T6309] ext2 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  129.611377][ T6125] usb 2-1: USB disconnect, device number 9
[  129.695468][ T4184] udevd[4184]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.816831][ T6317] loop2: detected capacity change from 0 to 8192
[  129.856599][ T6317] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  129.876494][ T6317] REISERFS (device loop2): using ordered data mode
[  129.883054][ T6317] reiserfs: using flush barriers
[  129.893312][ T6317] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  129.931733][ T6317] REISERFS (device loop2): checking transaction log (loop2)
[  129.984337][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  130.022928][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.099074][ T6317] REISERFS (device loop2): Using r5 hash to sort names
[  130.115051][ T6307] loop3: detected capacity change from 0 to 32768
[  130.115419][ T6317] REISERFS (device loop2): using 3.5.x disk format
[  130.128133][ T6307] XFS: ikeep mount option is deprecated.
[  130.135180][ T6317] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  130.159382][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  130.168445][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.203244][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.240961][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  130.255908][ T6264] device veth0_vlan entered promiscuous mode
[  130.272119][ T6264] device veth1_vlan entered promiscuous mode
[  130.272187][ T6307] XFS (loop3): Mounting V5 Filesystem
[  130.284392][ T4216] Bluetooth: hci1: command 0x041b tx timeout
[  130.364255][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  130.388304][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  130.399361][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  130.408550][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  130.419894][ T4175] syz-executor (4175) used greatest stack depth: 20096 bytes left
[  130.429376][ T6264] device veth0_macvtap entered promiscuous mode
[  130.482687][ T6264] device veth1_macvtap entered promiscuous mode
[  130.508737][ T6307] XFS (loop3): Ending clean mount
[  130.569092][ T4499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.575285][ T6307] XFS (loop3): Quotacheck needed: Please wait.
[  130.663971][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.697721][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.703187][ T6307] XFS (loop3): Quotacheck: Done.
[  130.722481][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.733741][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.750215][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.771448][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.820002][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.860467][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.920690][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.964183][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.003520][ T4177] XFS (loop3): Unmounting Filesystem
[  131.012544][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.032232][ T6340] loop2: detected capacity change from 0 to 512
[  131.089164][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  131.101564][ T6340] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.756: casefold flag without casefold feature
[  131.130754][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  131.150902][ T6340] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.756: couldn't read orphan inode 15 (err -117)
[  131.178376][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  131.193286][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.214837][ T6340] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  131.302155][ T4499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.426559][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.466675][ T6346] loop1: detected capacity change from 0 to 32768
[  131.478697][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.488793][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.499434][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.509286][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.519766][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.531405][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.571958][ T4499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.589119][ T6346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.758 (6346)
[  131.625141][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.662027][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.672192][ T6346] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  131.681675][ T6346] BTRFS info (device loop1): max_inline at 0
[  131.687976][ T6346] BTRFS info (device loop1): enabling disk space caching
[  131.690967][ T6264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.695156][ T6346] BTRFS info (device loop1): setting nodatasum
[  131.695178][ T6346] BTRFS info (device loop1): enabling auto defrag
[  131.695194][ T6346] BTRFS info (device loop1): turning on flush-on-commit
[  131.695217][ T6346] BTRFS info (device loop1): force clearing of disk cache
[  131.695270][ T6346] BTRFS info (device loop1): enabling ssd optimizations
[  131.704211][ T6264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.710169][ T6346] BTRFS info (device loop1): disabling tree log
[  131.738587][ T6264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.738899][ T6346] BTRFS info (device loop1): disk space caching is enabled
[  131.770487][ T6346] BTRFS info (device loop1): has skinny extents
[  131.779275][ T6264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.847596][ T4499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.057012][ T6346] BTRFS info (device loop1): clearing free space tree
[  132.064123][ T6346] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  132.074117][ T6346] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  132.302355][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.330441][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.364290][   T23] Bluetooth: hci1: command 0x040f tx timeout
[  132.430721][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.448275][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  132.465671][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  132.470223][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.611023][ T4499] tipc: Disabling bearer <eth:geneve1>
[  132.632716][ T4499] tipc: Left network mode
[  132.642031][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  132.662864][ T6343] chnl_net:caif_netlink_parms(): no params data found
[  133.221195][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'.
[  133.235919][ T6402] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  133.413183][ T6374] loop3: detected capacity change from 0 to 32768
[  133.494609][ T4214] Bluetooth: hci2: command 0x0409 tx timeout
[  133.607490][ T6374] XFS (loop3): Mounting V5 Filesystem
[  133.750189][ T6409] loop5: detected capacity change from 0 to 32768
[  133.751816][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.824131][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.843520][ T6374] XFS (loop3): Ending clean mount
[  133.881160][ T6343] device bridge_slave_0 entered promiscuous mode
[  133.939760][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.987705][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.025758][ T6343] device bridge_slave_1 entered promiscuous mode
[  134.139760][ T4177] XFS (loop3): Unmounting Filesystem
[  134.336543][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.435481][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.444513][ T5231] Bluetooth: hci1: command 0x0419 tx timeout
[  134.597883][ T6343] team0: Port device team_slave_0 added
[  134.600919][ T6423] loop2: detected capacity change from 0 to 32768
[  134.615345][ T6343] team0: Port device team_slave_1 added
[  134.651236][ T6423] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.770 (6423)
[  134.752823][ T6423] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  134.788828][ T6423] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  134.802597][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.814562][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.864088][ T6423] BTRFS info (device loop2): use lzo compression, level 0
[  134.871423][ T6423] BTRFS info (device loop2): using free space tree
[  134.889660][ T6423] BTRFS info (device loop2): has skinny extents
[  134.917063][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.963332][ T6460] loop3: detected capacity change from 0 to 256
[  134.975902][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.982889][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.059179][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.220373][ T6423] BTRFS info (device loop2): enabling ssd optimizations
[  135.283475][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  135.283493][   T26] audit: type=1804 audit(1750197039.546:13): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.770" name="/newroot/144/file0/file1" dev="loop2" ino=260 res=1 errno=0
[  135.369714][ T6343] device hsr_slave_0 entered promiscuous mode
[  135.412646][ T6343] device hsr_slave_1 entered promiscuous mode
[  135.440105][ T6343] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.464323][ T6343] Cannot create hsr debugfs directory
[  135.598705][ T4214] Bluetooth: hci2: command 0x041b tx timeout
[  135.624175][ T4216] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  135.882737][ T6491] loop1: detected capacity change from 0 to 1024
[  136.110981][ T4499] device hsr_slave_0 left promiscuous mode
[  136.142465][ T4499] device hsr_slave_1 left promiscuous mode
[  136.164222][ T4216] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  136.177455][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.190314][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.215773][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.228019][ T4216] usb 4-1: Product: syz
[  136.250085][ T4216] usb 4-1: Manufacturer: syz
[  136.254343][ T4499] device bridge_slave_1 left promiscuous mode
[  136.264124][ T4216] usb 4-1: SerialNumber: syz
[  136.283299][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.288371][ T4216] r8152-cfgselector 4-1: config 0 descriptor??
[  136.324301][ T4238] hfsplus: b-tree write err: -5, ino 8
[  136.359190][ T4499] device bridge_slave_0 left promiscuous mode
[  136.391200][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.518412][ T4499] device veth1_macvtap left promiscuous mode
[  136.537865][ T4499] device veth0_macvtap left promiscuous mode
[  136.543976][ T4499] device veth1_vlan left promiscuous mode
[  136.593328][ T4499] device veth0_vlan left promiscuous mode
[  136.675548][ T6513] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  136.794272][ T4216] r8152-cfgselector 4-1: Unknown version 0x0000
[  136.803732][ T4216] r8152-cfgselector 4-1: bad CDC descriptors
[  136.854427][ T4216] r8152-cfgselector 4-1: Unknown version 0x0000
[  136.883695][ T4216] r8152-cfgselector 4-1: USB disconnect, device number 7
[  137.001765][ T6505] loop2: detected capacity change from 0 to 32768
[  137.079646][ T6505] XFS (loop2): Mounting V5 Filesystem
[  137.220678][ T6505] XFS (loop2): Ending clean mount
[  137.481391][ T4499] team0 (unregistering): Port device team_slave_1 removed
[  137.519054][ T4182] XFS (loop2): Unmounting Filesystem
[  137.533870][ T4499] team0 (unregistering): Port device team_slave_0 removed
[  137.644264][ T4214] Bluetooth: hci2: command 0x040f tx timeout
[  137.675363][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.764400][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.948039][ T6530] loop5: detected capacity change from 0 to 40427
[  138.042010][ T4499] bond0 (unregistering): Released all slaves
[  138.134734][ T6530] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  138.175872][ T6530] F2FS-fs (loop5): invalid crc value
[  138.202291][ T6530] F2FS-fs (loop5): Found nat_bits in checkpoint
[  138.268343][ T6530] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  138.624864][ T6264] attempt to access beyond end of device
[  138.624864][ T6264] loop5: rw=2049, want=45104, limit=40427
[  138.845905][ T6556] loop1: detected capacity change from 0 to 8
[  138.924258][ T6556] unable to read xattr id index table
[  139.004343][ T6117] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  139.294496][ T6117] usb 4-1: Using ep0 maxpacket: 8
[  139.440859][ T6117] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  139.483089][ T6117] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  139.493653][ T6117] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  139.504105][ T6117] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.517750][ T6117] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  139.527176][ T6117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.668864][ T6574] device team_slave_1 entered promiscuous mode
[  139.734574][ T6116] Bluetooth: hci2: command 0x0419 tx timeout
[  139.816647][ T6556] loop1: detected capacity change from 0 to 32768
[  139.851395][ T6117] usb 4-1: GET_CAPABILITIES returned 0
[  139.858294][ T6117] usbtmc 4-1:16.0: can't read capabilities
[  139.916049][ T6556] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.797 (6556)
[  139.978824][   T26] audit: type=1326 audit(1750197044.246:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a504f3929 code=0x0
[  140.015240][ T6343] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  140.063096][ T6556] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  140.075535][ T6343] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  140.100319][ T6343] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  140.107345][ T6556] BTRFS info (device loop1): force zlib compression, level 3
[  140.117473][ T6556] BTRFS info (device loop1): force clearing of disk cache
[  140.127334][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  140.134099][ T6556] BTRFS info (device loop1): setting nodatasum
[  140.151791][ T6117] usb 4-1: USB disconnect, device number 8
[  140.159405][ T6343] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  140.192178][ T6556] BTRFS info (device loop1): allowing degraded mounts
[  140.231510][ T6556] BTRFS info (device loop1): enabling disk space caching
[  140.254881][ T6556] BTRFS info (device loop1): disk space caching is enabled
[  140.288802][ T6556] BTRFS info (device loop1): has skinny extents
[  140.421924][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.505024][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.542362][ T6117] kernel write not supported for file /media2 (pid: 6117 comm: kworker/0:12)
[  140.560991][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.572902][ T6556] BTRFS info (device loop1): clearing free space tree
[  140.594545][ T6556] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  140.614655][ T6556] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  140.628521][ T6343] 8021q: adding VLAN 0 to HW filter on device team0
[  140.641501][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.697674][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.744210][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.751321][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.806841][ T6556] BTRFS warning (device loop1): can't set the compress_zstd feature bit while mounted
[  140.817734][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.864404][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  140.921014][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.977298][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.984483][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.033113][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.088189][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.131005][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.189080][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.227802][ T6636] loop2: detected capacity change from 0 to 1024
[  141.254445][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.305587][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.363935][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.429720][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.463301][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.521864][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.560945][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.607225][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.311143][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.334642][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.354133][   T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  142.378783][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.466270][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  142.479485][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  142.512726][ T6674] vivid-002: disconnect
[  142.535869][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.547233][ T6673] vivid-002: reconnect
[  142.547827][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.578263][ T6343] device veth0_vlan entered promiscuous mode
[  142.593519][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.606546][   T13] usb 4-1: Using ep0 maxpacket: 8
[  142.617176][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.659486][ T6343] device veth1_vlan entered promiscuous mode
[  142.688288][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  142.745466][   T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  142.775963][   T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  142.797588][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.815019][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.820641][   T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  142.855397][ T6343] device veth0_macvtap entered promiscuous mode
[  142.857116][   T13] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  142.879509][ T6343] device veth1_macvtap entered promiscuous mode
[  142.905810][   T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  142.931485][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.941127][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.973567][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.004602][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.039736][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.060276][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.081325][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.101933][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.144277][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.174723][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.195492][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.217150][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.235091][   T13] usb 4-1: GET_CAPABILITIES returned 0
[  143.243533][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  143.247536][   T13] usbtmc 4-1:16.0: can't read capabilities
[  143.283473][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  143.310615][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.357443][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.387214][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.414403][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.449397][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.460343][ T6643] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  143.468210][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.488514][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.513113][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.517268][ T4218] usb 4-1: USB disconnect, device number 9
[  143.545080][ T6343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.591341][ T6343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.625225][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.643458][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.671317][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.692163][ T6343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.704211][ T6343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.713146][ T6343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.722850][ T6343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.848996][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.871132][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.879168][ T6643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.898102][ T6643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.920216][ T6643] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  143.927721][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  143.933280][ T6643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.969406][ T6643] usb 3-1: config 0 descriptor??
[  143.978076][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.994480][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.022366][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.440146][ T6643] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[  144.456457][ T6643] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[  144.501199][ T6643] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[  144.518537][ T6643] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[  144.554067][ T6643] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[  144.573464][ T6643] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[  144.610959][ T6643] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[  144.651919][ T6643] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  144.739813][ T6740] loop3: detected capacity change from 0 to 512
[  144.794576][ T6117] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  144.879939][ T6740] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.833: casefold flag without casefold feature
[  144.904332][ T6740] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.833: couldn't read orphan inode 15 (err -117)
[  144.937761][ T6740] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,abort,block_validity,,errors=continue. Quota mode: writeback.
[  144.945490][ T6643] usb 3-1: USB disconnect, device number 13
[  145.068582][ T6117] usb 6-1: Using ep0 maxpacket: 32
[  145.206078][ T6117] usb 6-1: config 0 has no interfaces?
[  145.344595][ T6763] input: syz0 as /devices/virtual/input/input10
[  145.354371][ T6117] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  145.374115][ T6117] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  145.404911][ T6117] usb 6-1: Product: syz
[  145.409489][ T6117] usb 6-1: Manufacturer: syz
[  145.435877][ T6117] usb 6-1: config 0 descriptor??
[  145.670691][ T6378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.833197][ T6643] usb 6-1: USB disconnect, device number 2
[  145.847161][ T6775] loop2: detected capacity change from 0 to 8192
[  145.951604][ T6786] loop1: detected capacity change from 0 to 1024
[  146.023605][ T6786] EXT4-fs (loop1): Ignoring removed nobh option
[  146.051028][ T6786] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  146.136255][ T6786] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,nodelalloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[  146.988469][ T6378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.024290][ T6788] loop3: detected capacity change from 0 to 40427
[  147.066913][ T6802] chnl_net:caif_netlink_parms(): no params data found
[  147.292134][ T6378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.314137][ T5227] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  147.462354][ T6378] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.492793][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.500161][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.509420][ T6802] device bridge_slave_0 entered promiscuous mode
[  147.545523][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.554259][ T5227] usb 3-1: Using ep0 maxpacket: 32
[  147.566253][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.598933][ T6802] device bridge_slave_1 entered promiscuous mode
[  147.693555][ T6802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.708488][ T6802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.744340][ T5227] usb 3-1: unable to get BOS descriptor or descriptor too short
[  147.801405][ T6802] team0: Port device team_slave_0 added
[  147.814150][ T5227] usb 3-1: unable to read config index 0 descriptor/start: -71
[  147.821804][ T5227] usb 3-1: can't read configurations, error -71
[  147.837394][ T6802] team0: Port device team_slave_1 added
[  147.912217][ T6852] loop5: detected capacity change from 0 to 4096
[  148.021543][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.025117][ T6854] loop3: detected capacity change from 0 to 32768
[  148.078533][ T6857] loop1: detected capacity change from 0 to 512
[  148.083513][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.195136][ T6802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.211483][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.219275][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.222370][ T6852] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  148.246210][ T6802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.267325][ T6857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  148.318441][ T6857] EXT4-fs (loop1): 1 truncate cleaned up
[  148.342588][ T6854] XFS (loop3): Mounting V5 Filesystem
[  148.345981][ T6857] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  148.368331][ T6852] ntfs3: loop5: Failed to load $Extend.
[  148.464936][ T6857] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes
[  148.525251][ T6802] device hsr_slave_0 entered promiscuous mode
[  148.534497][ T6117] Bluetooth: hci2: command 0x0409 tx timeout
[  148.544499][ T6854] XFS (loop3): Ending clean mount
[  148.580472][ T6854] XFS (loop3): Quotacheck needed: Please wait.
[  148.634648][ T6802] device hsr_slave_1 entered promiscuous mode
[  148.807331][ T6854] XFS (loop3): Quotacheck: Done.
[  148.943043][ T4177] XFS (loop3): Unmounting Filesystem
[  148.979100][ T6890] loop1: detected capacity change from 0 to 512
[  149.100367][ T6890] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  149.122333][ T6890] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  149.163261][ T6890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  149.188972][ T6890] System zones: 1-12
[  149.198927][ T6890] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.872: corrupted in-inode xattr
[  149.215567][ T6887] loop2: detected capacity change from 0 to 4096
[  149.276547][ T6887] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  149.316962][ T6890] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.872: couldn't read orphan inode 15 (err -117)
[  149.334652][ T6890] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none.
[  149.998913][ T6917] loop2: detected capacity change from 0 to 64
[  150.070756][ T6917] Trying to free block not in datazone
[  150.247231][ T6378] device hsr_slave_0 left promiscuous mode
[  150.269312][ T6378] device hsr_slave_1 left promiscuous mode
[  150.300977][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.317709][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.332578][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.348100][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.362123][ T6378] device bridge_slave_1 left promiscuous mode
[  150.371545][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.381880][ T6378] device bridge_slave_0 left promiscuous mode
[  150.398037][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.430900][ T6378] device veth1_macvtap left promiscuous mode
[  150.447423][ T6378] device veth0_macvtap left promiscuous mode
[  150.454507][ T6378] device veth1_vlan left promiscuous mode
[  150.469930][ T6378] device veth0_vlan left promiscuous mode
[  150.594396][ T4218] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  150.618952][ T6125] Bluetooth: hci2: command 0x041b tx timeout
[  150.925127][ T6949] loop5: detected capacity change from 0 to 4096
[  150.974519][ T4218] usb 3-1: config 0 has an invalid interface number: 241 but max is 0
[  150.982819][ T4218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.005535][ T6378] team0 (unregistering): Port device team_slave_1 removed
[  151.023853][ T6951] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.024647][ T4218] usb 3-1: config 0 has no interface number 0
[  151.062813][ T4218] usb 3-1: config 0 interface 241 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  151.102925][ T6378] team0 (unregistering): Port device team_slave_0 removed
[  151.124639][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.141381][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.244331][ T4218] usb 3-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60
[  151.273042][ T4218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.277149][ T6950] loop3: detected capacity change from 0 to 32768
[  151.291415][ T6953] loop5: detected capacity change from 0 to 2048
[  151.291568][ T4218] usb 3-1: Product: syz
[  151.318805][ T4218] usb 3-1: Manufacturer: syz
[  151.323513][ T4218] usb 3-1: SerialNumber: syz
[  151.331204][ T4218] usb 3-1: config 0 descriptor??
[  151.344509][ T6378] bond0 (unregistering): Released all slaves
[  151.353768][ T6953] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  151.376892][ T4218] usb 3-1: bad CDC descriptors
[  151.382885][ T4218] usb 3-1: bad CDC descriptors
[  151.417057][ T6950] XFS (loop3): Mounting V5 Filesystem
[  151.432844][ T6802] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  151.443434][ T6960] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.476712][ T6802] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  151.528961][ T6802] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  151.588581][ T6125] usb 3-1: USB disconnect, device number 16
[  151.603659][ T6950] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  151.619106][ T6802] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  151.731392][ T6950] XFS (loop3): Starting recovery (logdev: internal)
[  151.833582][ T6950] XFS (loop3): Ending recovery (logdev: internal)
[  151.857470][ T6976] loop5: detected capacity change from 0 to 64
[  151.874197][ T6975] loop1: detected capacity change from 0 to 2048
[  151.927618][ T6975] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.932249][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.970488][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  151.984777][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  152.021976][ T6802] 8021q: adding VLAN 0 to HW filter on device team0
[  152.049339][ T4177] XFS (loop3): Unmounting Filesystem
[  152.062087][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  152.099206][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  152.128722][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.135911][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.233010][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  152.248234][ T6983] block nbd2: shutting down sockets
[  152.269881][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  152.300998][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  152.365177][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.372330][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.420031][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  152.514769][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  152.523625][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  152.563516][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  152.582707][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  152.615549][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  152.669191][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  152.685750][ T6117] Bluetooth: hci2: command 0x040f tx timeout
[  152.729728][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  152.816244][ T6802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  152.863328][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  152.898970][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  152.949259][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  152.986029][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.507467][ T7028] loop5: detected capacity change from 0 to 512
[  153.549389][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  153.561376][ T7028] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  153.580367][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  153.609722][ T7028] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.909: corrupted in-inode xattr
[  153.631429][ T7028] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.909: couldn't read orphan inode 15 (err -117)
[  153.634633][ T6802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.644246][ T7028] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,prjquota,auto_da_alloc,nobarrier,noblock_validity,sb=0x000000000000066d,,errors=continue. Quota mode: writeback.
[  153.680739][ T7028] EXT4-fs (loop5): shut down requested (1)
[  153.865402][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  153.883262][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  153.967359][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  153.987268][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  154.034409][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  154.104916][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  154.122835][ T6802] device veth0_vlan entered promiscuous mode
[  154.166713][ T6802] device veth1_vlan entered promiscuous mode
[  154.263251][ T6802] device veth0_macvtap entered promiscuous mode
[  154.264094][ T4246] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  154.330318][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  154.353057][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  154.410194][ T7059] syz.2.918 sent an empty control message without MSG_MORE.
[  154.412453][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  154.468200][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  154.513914][ T6802] device veth1_macvtap entered promiscuous mode
[  154.518449][ T7051] loop3: detected capacity change from 0 to 8192
[  154.544174][ T4246] usb 2-1: Using ep0 maxpacket: 32
[  154.563132][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  154.578394][ T7064] loop2: detected capacity change from 0 to 512
[  154.594717][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  154.646794][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.664602][ T4246] usb 2-1: config 1 has an invalid interface number: 185 but max is 0
[  154.672923][ T4246] usb 2-1: config 1 has no interface number 0
[  154.720144][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.753163][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.769424][ T6117] Bluetooth: hci2: command 0x0419 tx timeout
[  154.795109][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.834059][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.854244][ T4246] usb 2-1: New USB device found, idVendor=9445, idProduct=26f1, bcdDevice=ba.76
[  154.863448][ T4246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.871951][ T4246] usb 2-1: Product: syz
[  154.872217][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.891019][ T4246] usb 2-1: Manufacturer: syz
[  154.900123][ T4246] usb 2-1: SerialNumber: syz
[  154.913439][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.937558][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.951329][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.982940][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.057540][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.137046][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.179868][ T7064] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,data_err=abort,,errors=continue. Quota mode: writeback.
[  155.207572][ T7064] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.212489][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.229834][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.240930][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.253396][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.264472][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.274746][ T6802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.295373][ T6802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.312633][ T7064] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.920: corrupted inode contents
[  155.336740][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.358313][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  155.361850][ T7064] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.920: mark_inode_dirty error
[  155.386348][ T7064] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.920: corrupted inode contents
[  155.404420][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  155.409362][ T7064] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.920: mark_inode_dirty error
[  155.445126][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  155.492116][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  155.542551][ T6802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.567900][ T6802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.602326][ T6802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.623216][ T6802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.909221][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.942009][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.009973][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  156.011377][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.097763][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.152650][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  156.633107][ T7087] loop3: detected capacity change from 0 to 32768
[  156.867111][ T7087] XFS (loop3): Mounting V5 Filesystem
[  157.009804][ T4246] usb 2-1: USB disconnect, device number 10
[  157.144173][ T7087] XFS (loop3): Ending clean mount
[  157.420531][ T4177] XFS (loop3): Unmounting Filesystem
[  158.032936][ T7106] loop5: detected capacity change from 0 to 262144
[  158.117093][ T7106] F2FS-fs (loop5): invalid crc value
[  158.141804][ T7106] F2FS-fs (loop5): Found nat_bits in checkpoint
[  158.191124][ T7106] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  158.674693][ T7152] loop2: detected capacity change from 0 to 512
[  158.691026][ T7151] netlink: 136 bytes leftover after parsing attributes in process `syz.5.937'.
[  158.716615][ T7152] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  158.734378][ T7151] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  158.794764][ T7152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  158.847807][ T7152] System zones: 1-12
[  158.880008][ T7152] EXT4-fs (loop2): 1 truncate cleaned up
[  158.954171][ T7152] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none.
[  159.026260][ T7164] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  159.043609][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.944'.
[  160.601939][ T7179] chnl_net:caif_netlink_parms(): no params data found
[  161.028388][ T7171] loop3: detected capacity change from 0 to 262144
[  161.150647][ T7171] F2FS-fs (loop3): invalid crc value
[  161.185839][ T7171] F2FS-fs (loop3): Found nat_bits in checkpoint
[  161.227783][ T4216] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  161.284234][ T7171] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  161.409309][ T7199] loop1: detected capacity change from 0 to 512
[  161.462314][ T7179] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.470483][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.482348][ T4216] usb 6-1: Using ep0 maxpacket: 16
[  161.509697][ T7199] EXT4-fs (loop1): Ignoring removed nobh option
[  161.536862][ T7179] device bridge_slave_0 entered promiscuous mode
[  161.579365][ T7199] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  161.614447][ T4216] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  161.631222][ T7199] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  161.640929][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.661561][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.684342][ T4216] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  161.708381][ T7179] device bridge_slave_1 entered promiscuous mode
[  161.715463][ T7199] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #13: comm syz.1.956: casefold flag without casefold feature
[  161.741321][ T4216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.759785][ T7199] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.956: couldn't read orphan inode 13 (err -117)
[  161.773521][ T4216] usb 6-1: config 0 descriptor??
[  161.780561][ T7199] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback.
[  161.817372][ T4216] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11
[  161.829150][ T7207] loop3: detected capacity change from 0 to 8
[  161.886281][ T7179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.945739][ T7207] unable to read xattr id index table
[  161.988089][ T7179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.044577][ T3532] bcm5974 6-1:0.0: could not read from device
[  162.071918][ T6125] Bluetooth: hci2: command 0x0409 tx timeout
[  162.074286][ T4216] bcm5974 6-1:0.0: could not read from device
[  162.174304][ T3532] bcm5974 6-1:0.0: could not read from device
[  162.199255][ T4216] input: failed to attach handler mousedev to device input11, error: -5
[  162.234402][ T4216] usb 6-1: USB disconnect, device number 3
[  162.244289][ T3532] bcm5974 6-1:0.0: could not read from device
[  162.310772][ T7179] team0: Port device team_slave_0 added
[  162.329463][ T7179] team0: Port device team_slave_1 added
[  162.443243][ T7179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.474983][ T7179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.554074][ T7179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.596379][ T7179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.614346][ T7179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.682352][ T7179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.809826][ T7207] loop3: detected capacity change from 0 to 32768
[  162.834599][ T7218] loop1: detected capacity change from 0 to 64
[  162.869850][ T7207] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.959 (7207)
[  162.905754][ T7218] Trying to free block not in datazone
[  162.919076][ T7179] device hsr_slave_0 entered promiscuous mode
[  162.976382][ T7179] device hsr_slave_1 entered promiscuous mode
[  162.987568][ T7207] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  163.005795][ T7207] BTRFS info (device loop3): force zlib compression, level 3
[  163.013405][ T7207] BTRFS info (device loop3): force clearing of disk cache
[  163.023444][ T7179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.044502][ T7179] Cannot create hsr debugfs directory
[  163.061692][ T7207] BTRFS info (device loop3): setting nodatasum
[  163.096504][ T7207] BTRFS info (device loop3): allowing degraded mounts
[  163.142338][ T7207] BTRFS info (device loop3): enabling disk space caching
[  163.196033][ T7207] BTRFS info (device loop3): disk space caching is enabled
[  163.222550][ T7207] BTRFS info (device loop3): has skinny extents
[  163.482349][ T7207] BTRFS info (device loop3): clearing free space tree
[  163.495749][ T7207] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.507496][ T7207] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  163.517574][ T7179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.652814][ T7207] BTRFS warning (device loop3): can't set the compress_zstd feature bit while mounted
[  163.711961][ T7179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.009607][ T4184] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop3 scanned by udevd (4184)
[  164.071041][ T7260] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  164.134163][ T6117] Bluetooth: hci2: command 0x041b tx timeout
[  164.239205][ T7262] loop1: detected capacity change from 0 to 4096
[  164.362738][ T7262] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  164.430171][ T7179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.546939][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'.
[  164.670762][ T7179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.729072][ T7269] loop1: detected capacity change from 0 to 1024
[  164.774116][   T21] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  164.800287][ T7269] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  164.843175][ T7269] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  164.853361][ T7256] loop5: detected capacity change from 0 to 32768
[  164.883464][ T7256] XFS: attr2 mount option is deprecated.
[  164.911121][ T7269] JBD2: no valid journal superblock found
[  164.938419][ T7269] EXT4-fs (loop1): error loading journal
[  164.970590][ T7256] XFS (loop5): Mounting V5 Filesystem
[  165.093802][ T7179] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  165.129242][ T7279] loop3: detected capacity change from 0 to 512
[  165.154306][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  165.159091][ T7256] XFS (loop5): Ending clean mount
[  165.174083][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.194067][   T21] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  165.197184][ T7179] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  165.213627][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.228774][ T7256] XFS (loop5): Quotacheck needed: Please wait.
[  165.248264][   T21] usb 3-1: config 0 descriptor??
[  165.320543][ T7279] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  165.341712][ T7179] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  165.349947][ T7279] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.397973][ T7256] XFS (loop5): Quotacheck: Done.
[  165.469342][ T7179] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  165.611837][ T6264] XFS (loop5): Unmounting Filesystem
[  165.752319][   T21] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  165.842892][ T7179] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.899432][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  165.909892][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  165.940281][ T7179] 8021q: adding VLAN 0 to HW filter on device team0
[  165.989162][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.018674][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.067369][ T4247] usb 3-1: USB disconnect, device number 17
[  166.095806][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.103548][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.141901][ T7290] fido_id[7290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  166.196786][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.214328][ T6123] Bluetooth: hci2: command 0x040f tx timeout
[  166.229986][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.273596][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.315480][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.322637][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.369012][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  166.405434][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  166.450367][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.484843][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.511211][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  166.526950][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.549761][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  166.579268][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  166.594057][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.618383][ T7179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.678905][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  166.700949][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  166.723083][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  166.850480][ T7301] loop5: detected capacity change from 0 to 8
[  166.944100][ T7301] unable to read xattr id index table
[  167.051392][ T7179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.096648][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  167.115634][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  167.172040][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  167.187397][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  167.245552][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  167.260697][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  167.282226][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  167.296248][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  167.313384][ T7179] device veth0_vlan entered promiscuous mode
[  167.347937][ T7308] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  167.354117][ T4247] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  167.362209][ T7179] device veth1_vlan entered promiscuous mode
[  167.440727][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  167.452832][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  167.467990][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  167.482623][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  167.511122][ T7179] device veth0_macvtap entered promiscuous mode
[  167.541090][ T7179] device veth1_macvtap entered promiscuous mode
[  167.588612][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.614274][ T4247] usb 2-1: Using ep0 maxpacket: 32
[  167.628086][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.668824][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.705216][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.710219][ T7301] loop5: detected capacity change from 0 to 32768
[  167.728006][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.731832][ T7310] loop2: detected capacity change from 0 to 4096
[  167.745313][ T4247] usb 2-1: config 0 has no interfaces?
[  167.748005][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.761766][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.772877][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.783032][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.795272][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.805739][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.816479][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.835633][ T7179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.854312][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.865560][ T4247] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  167.883177][ T7310] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  167.904100][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.914902][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  167.923012][ T4247] usb 2-1: Product: syz
[  167.928608][ T7310] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  167.933901][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.962521][ T4247] usb 2-1: Manufacturer: syz
[  167.978136][ T4247] usb 2-1: config 0 descriptor??
[  167.985237][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.997098][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.009567][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.028985][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.046835][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.058749][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.070020][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.080712][  T155] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  168.081848][ T7179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.097254][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  168.105818][  T155] ntfs3: loop2: ino=1e, Internal error
[  168.116704][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  168.136172][  T155] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22.
[  168.143302][ T4182] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  168.145461][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  168.159728][ T6117] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  168.162895][ T4182] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  168.185250][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  168.195036][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.216929][ T4182] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  168.221195][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.253332][ T7179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.284531][    C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  168.285346][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[  168.322012][ T7179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.331892][ T7179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.342496][ T7179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.342684][ T4499] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  168.384643][ T4247] usb 2-1: USB disconnect, device number 11
[  168.403827][ T4182] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22.
[  168.449733][ T6117] usb 4-1: Using ep0 maxpacket: 16
[  168.532697][ T7320] binder: 7319:7320 ioctl 40046205 0 returned -22
[  168.549605][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.592220][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.663657][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  168.694564][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.716647][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.737385][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.777684][ T6117] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  168.792283][ T6117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.811172][ T6117] usb 4-1: Product: syz
[  168.822262][ T6117] usb 4-1: Manufacturer: syz
[  168.827935][ T6117] usb 4-1: SerialNumber: syz
[  168.864634][ T6117] usb 4-1: config 0 descriptor??
[  168.917137][ T6117] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  168.942151][ T6117] usb 4-1: Detected FT-X
[  169.004575][   T13] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  170.079353][ T6117] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  170.301024][ T7337] loop1: detected capacity change from 0 to 262144
[  170.351791][ T7337] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  170.361224][ T7337] BTRFS info (device loop1): using free space tree
[  170.369300][ T7337] BTRFS info (device loop1): has skinny extents
[  170.375764][ T7337] BTRFS info (device loop1): flagging fs with big metadata feature
[  170.383827][   T13] usb 3-1: Using ep0 maxpacket: 32
[  170.389493][ T6114] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  170.410448][ T6117] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  170.477417][ T7337] BTRFS info (device loop1): enabling ssd optimizations
[  170.534182][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.546148][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.560900][   T13] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  170.571537][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.591763][ T6117] usb 4-1: USB disconnect, device number 10
[  170.602087][   T13] usb 3-1: config 0 descriptor??
[  170.632395][ T6117] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  170.646034][ T6117] ftdi_sio 4-1:0.0: device disconnected
[  170.656560][ T6114] usb 6-1: Using ep0 maxpacket: 16
[  170.786000][ T6114] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.804157][ T6114] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.822684][ T6114] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  170.834038][ T6114] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  170.954454][ T6114] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.984077][ T6114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  170.994272][ T6114] usb 6-1: SerialNumber: syz
[  171.084357][ T6114] hub 6-1:1.0: bad descriptor, ignoring hub
[  171.090334][ T6114] hub: probe of 6-1:1.0 failed with error -5
[  171.107201][   T13] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  171.119631][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'.
[  171.134608][ T6114] cdc_ether: probe of 6-1:1.0 failed with error -22
[  171.432000][ T6378] device hsr_slave_0 left promiscuous mode
[  171.441871][ T6378] device hsr_slave_1 left promiscuous mode
[  171.468413][ T4246] usb 3-1: USB disconnect, device number 18
[  171.559368][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.584686][ T7368] loop3: detected capacity change from 0 to 32768
[  171.595185][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.629061][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.650240][ T7368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1006 (7368)
[  171.691879][ T7368] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  171.691905][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.701651][ T7368] BTRFS info (device loop3): max_inline at 0
[  171.714590][ T7368] BTRFS info (device loop3): enabling disk space caching
[  171.721821][ T7368] BTRFS info (device loop3): setting nodatasum
[  171.728173][ T7368] BTRFS info (device loop3): enabling auto defrag
[  171.734840][ T7368] BTRFS info (device loop3): turning on flush-on-commit
[  171.741815][ T7368] BTRFS info (device loop3): force clearing of disk cache
[  171.749131][ T7368] BTRFS info (device loop3): enabling ssd optimizations
[  171.756255][ T7368] BTRFS info (device loop3): disabling tree log
[  171.762640][ T7368] BTRFS info (device loop3): disk space caching is enabled
[  171.770051][ T7368] BTRFS info (device loop3): has skinny extents
[  171.793090][ T7374] loop1: detected capacity change from 0 to 1024
[  171.802165][ T7368] BTRFS info (device loop3): clearing free space tree
[  171.809317][ T7368] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  171.819191][ T7368] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  171.833042][ T6378] device bridge_slave_1 left promiscuous mode
[  171.874231][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.900475][ T6378] device bridge_slave_0 left promiscuous mode
[  171.930312][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.951150][ T7374] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[  172.032747][ T6378] device veth1_macvtap left promiscuous mode
[  172.034288][ T7374] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.114531][ T6378] device veth0_macvtap left promiscuous mode
[  172.154304][ T6378] device veth1_vlan left promiscuous mode
[  172.180961][ T7398] loop2: detected capacity change from 0 to 512
[  172.189570][ T6378] device veth0_vlan left promiscuous mode
[  172.211165][ T7374] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 1: comm syz.1.1008: lblock 1 mapped to illegal pblock 1 (length 15)
[  172.338146][ T7374] EXT4-fs error (device loop1): ext4_ext_remove_space:2927: inode #15: comm syz.1.1008: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  172.378193][ T7398] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  172.428258][ T7398] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  172.481175][ T7398] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  172.542468][ T7398] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  172.579895][ T7395] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  172.583796][ T7398] EXT4-fs (loop2): 1 truncate cleaned up
[  172.626313][ T4184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop3 scanned by udevd (4184)
[  172.629628][ T7398] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.seclabel,,errors=continue. Quota mode: writeback.
[  172.837529][ T7401] usb 6-1: USB disconnect, device number 4
[  172.903480][ T7398] EXT4-fs (loop2): shut down requested (1)
[  173.099897][ T7412] loop2: detected capacity change from 0 to 64
[  173.214267][ T5797] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  173.464087][ T5797] usb 2-1: Using ep0 maxpacket: 32
[  173.503555][ T6378] team0 (unregistering): Port device team_slave_1 removed
[  173.543393][ T6378] team0 (unregistering): Port device team_slave_0 removed
[  173.584562][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.646019][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.744678][ T5797] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88
[  173.774606][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.782686][ T5797] usb 2-1: Product: syz
[  173.803748][ T5797] usb 2-1: Manufacturer: syz
[  173.809761][ T5797] usb 2-1: SerialNumber: syz
[  173.817102][ T5797] usb 2-1: config 0 descriptor??
[  173.831106][ T6378] bond0 (unregistering): Released all slaves
[  173.858016][ T5797] as10x_usb: device has been detected
[  173.864438][ T5797] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  173.881597][ T5797] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  173.899181][ T5797] as10x_usb: error during firmware upload part1
[  173.906666][ T5797] Registered device Abilis Systems DVB-Titan
[  174.098866][ T6643] usb 2-1: USB disconnect, device number 12
[  174.160092][ T6643] Unregistered device Abilis Systems DVB-Titan
[  174.202764][ T6643] as10x_usb: device has been disconnected
[  174.349508][ T7430] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.361962][ T7422] loop2: detected capacity change from 0 to 32768
[  174.372712][ T7434] device veth1_macvtap left promiscuous mode
[  174.380586][ T7430] FAT-fs (loop11): unable to read boot sector
[  174.387039][ T7434] device macsec0 entered promiscuous mode
[  174.434868][ T7434] device veth1_macvtap entered promiscuous mode
[  174.471437][ T7434] device macsec0 left promiscuous mode
[  174.488489][ T7422] (syz.2.1018,7422,0):ocfs2_verify_volume:2351 ERROR: found superblock with incorrect block size bits: found 521, should be 9, 10, 11, or 12
[  174.523733][ T7422] (syz.2.1018,7422,0):ocfs2_verify_volume:2392 ERROR: status = -22
[  174.559705][ T7422] (syz.2.1018,7422,0):ocfs2_fill_super:991 ERROR: superblock probe failed!
[  174.573568][ T7422] (syz.2.1018,7422,0):ocfs2_fill_super:1177 ERROR: status = -22
[  175.203751][ T7443] loop5: detected capacity change from 0 to 32768
[  175.266427][ T7440] loop1: detected capacity change from 0 to 40427
[  175.357263][ T7440] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  175.365139][ T7440] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  175.384252][ T6643] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  175.385343][ T7440] F2FS-fs (loop1): invalid crc value
[  175.436504][ T7440] F2FS-fs (loop1): Found nat_bits in checkpoint
[  175.484327][ T6114] Bluetooth: hci3: command 0x0406 tx timeout
[  175.500580][ T7440] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  175.508081][ T7440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  175.532909][ T6114] Bluetooth: hci0: command 0x0406 tx timeout
[  175.644853][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1030'.
[  175.670633][ T7451] loop2: detected capacity change from 0 to 2048
[  175.737163][ T4238] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  175.769742][ T4238] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  175.806601][ T6643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.820678][ T6643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.833903][ T6643] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  175.843408][ T6643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.866789][ T6643] usb 4-1: config 0 descriptor??
[  175.917697][ T7459] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.016957][ T7460] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  176.062853][ T7460] Remounting filesystem read-only
[  176.227803][ T7451] NILFS (loop2): error -2 truncating bmap (ino=16)
[  176.336182][ T6643] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  176.373938][ T6643] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  176.410075][ T7454] chnl_net:caif_netlink_parms(): no params data found
[  176.423829][ T4182] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  176.544624][ T6643] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE
[  176.754318][ T6643] cp2112 0003:10C4:EA90.0009: error requesting SMBus config
[  176.774767][ T6643] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71
[  176.789561][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.809743][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.834249][ T7401] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  176.834496][ T6643] usb 4-1: USB disconnect, device number 11
[  176.868162][ T7454] device bridge_slave_0 entered promiscuous mode
[  176.890390][ T7485] loop5: detected capacity change from 0 to 1024
[  176.906258][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.913470][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.988575][ T7454] device bridge_slave_1 entered promiscuous mode
[  177.010283][ T7486] fido_id[7486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  177.055349][ T7482] device syzkaller1 entered promiscuous mode
[  177.084487][ T7401] usb 3-1: Using ep0 maxpacket: 32
[  177.121813][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.135738][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.233511][ T7401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.273534][ T7454] team0: Port device team_slave_0 added
[  177.275003][ T7401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.293451][ T7492] loop1: detected capacity change from 0 to 128
[  177.309281][ T7454] team0: Port device team_slave_1 added
[  177.331880][ T7401] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  177.351413][ T7401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.360662][ T7492] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  177.422105][ T7492] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  177.434470][ T7492] ext2 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.434536][ T7401] usb 3-1: config 0 descriptor??
[  177.536675][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.560503][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.593269][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.628115][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.642233][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.656602][ T7502] loop1: detected capacity change from 0 to 128
[  177.677906][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.694063][ T6114] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  177.761449][ T7454] device hsr_slave_0 entered promiscuous mode
[  177.769402][ T7454] device hsr_slave_1 entered promiscuous mode
[  177.793294][ T7502] EXT4-fs (loop1): Ignoring removed nobh option
[  177.805443][ T6643] Bluetooth: hci2: command 0x0409 tx timeout
[  177.835411][ T7502] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,nojournal_checksum,,errors=continue. Quota mode: none.
[  177.857047][ T7502] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  177.971158][ T6114] usb 6-1: Using ep0 maxpacket: 32
[  177.995460][ T7401] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  178.099270][ T6114] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  178.130172][ T6114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.177717][ T6114] usb 6-1: config 0 descriptor??
[  178.249612][ T7454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.345000][ T7454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.361783][ T6125] usb 3-1: USB disconnect, device number 19
[  178.486058][ T7454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.497451][ T6114] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  178.523174][ T6114] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  178.574620][ T6114] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  178.625888][ T6114] usb 6-1: media controller created
[  178.650092][ T6114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  178.653952][ T7525] loop3: detected capacity change from 0 to 256
[  178.661614][ T7522] loop1: detected capacity change from 0 to 512
[  178.689512][ T7454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.717809][ T6114] az6027: usb out operation failed. (-71)
[  178.754222][ T6114] az6027: usb out operation failed. (-71)
[  178.769375][ T6114] stb0899_attach: Driver disabled by Kconfig
[  178.780581][ T7522] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1053: casefold flag without casefold feature
[  178.804374][ T6114] az6027: no front-end attached
[  178.804374][ T6114] 
[  178.834646][ T7522] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1053: couldn't read orphan inode 15 (err -117)
[  178.864259][ T6114] az6027: usb out operation failed. (-71)
[  178.874633][ T6114] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  178.901101][ T7522] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  178.943579][ T6114] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12
[  179.004041][ T6114] dvb-usb: schedule remote query interval to 400 msecs.
[  179.011426][ T6114] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  179.047815][ T7530] loop2: detected capacity change from 0 to 256
[  179.065374][ T6114] usb 6-1: USB disconnect, device number 5
[  179.312090][ T7537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1057'.
[  179.324251][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'.
[  179.339203][ T6114] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  179.374958][ T7537] device gretap0 entered promiscuous mode
[  179.380291][ T7541] loop2: detected capacity change from 0 to 128
[  179.390130][ T7537] device batadv_slave_1 entered promiscuous mode
[  179.400023][ T7537] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  179.423575][ T7537] Cannot create hsr debugfs directory
[  179.433927][ T7454] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  179.526377][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  179.543939][ T7454] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  179.572040][ T7541] EXT4-fs (loop2): Ignoring removed nobh option
[  179.651072][ T7454] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  179.664698][ T7541] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none.
[  179.702969][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1063'.
[  179.711733][ T7541] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.861773][ T7454] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  179.939581][ T7401] Bluetooth: hci2: command 0x041b tx timeout
[  180.089638][ T7560] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1068'.
[  180.173004][ T7566] loop1: detected capacity change from 0 to 256
[  180.280191][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.296092][ T7566] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  180.354753][ T7570] loop5: detected capacity change from 0 to 4096
[  180.411424][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.431468][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.463360][ T7454] 8021q: adding VLAN 0 to HW filter on device team0
[  180.516559][ T7575] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.564712][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.624277][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.637283][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.644584][ T4499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.687658][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  180.721594][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.740232][ T4499] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.747407][ T4499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.772355][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.795731][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  180.824255][ T5231] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  180.872339][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  180.898874][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  180.911610][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  180.920565][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  180.929629][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  180.938777][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  180.947829][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.956880][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  180.968171][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  180.977228][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.998978][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  181.103518][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.112086][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.128232][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.134174][ T4246] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  181.162174][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  181.171206][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.184298][ T5231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.196169][ T5231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.207237][ T5231] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  181.218259][ T5231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.231700][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  181.234963][ T5231] usb 2-1: config 0 descriptor??
[  181.268907][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.285980][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.302650][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.315872][ T7454] device veth0_vlan entered promiscuous mode
[  181.375016][ T7454] device veth1_vlan entered promiscuous mode
[  181.410653][ T7454] device veth0_macvtap entered promiscuous mode
[  181.432032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.440480][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.465752][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.476521][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.494664][ T4246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  181.495381][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.534248][ T4246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.545033][ T4246] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  181.554602][ T4246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.570401][ T6378] device hsr_slave_0 left promiscuous mode
[  181.577964][ T4246] usb 6-1: config 0 descriptor??
[  181.583416][ T6378] device hsr_slave_1 left promiscuous mode
[  181.590674][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.599215][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.608544][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.627328][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.635964][ T6378] device bridge_slave_1 left promiscuous mode
[  181.642210][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.661614][ T6378] device bridge_slave_0 left promiscuous mode
[  181.668023][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.682330][ T7591] loop3: detected capacity change from 0 to 32768
[  181.690455][ T6378] device veth1_macvtap left promiscuous mode
[  181.703478][ T6378] device veth0_macvtap left promiscuous mode
[  181.713629][ T6378] device veth1_vlan left promiscuous mode
[  181.734642][ T6378] device veth0_vlan left promiscuous mode
[  181.761746][   T26] audit: type=1800 audit(1750197086.026:15): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1078" name="file1" dev="loop3" ino=4 res=0 errno=0
[  181.964522][ T7401] Bluetooth: hci2: command 0x040f tx timeout
[  182.086002][ T4246] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  182.145564][ T5231] hid-led 0003:27B8:01ED.000B: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0
[  182.204300][ T5231] hid-led 0003:27B8:01ED.000B: ThingM blink(1) v1 initialized
[  182.302887][ T6378] team0 (unregistering): Port device team_slave_1 removed
[  182.363790][ T6378] team0 (unregistering): Port device team_slave_0 removed
[  182.387049][ T6643] usb 6-1: USB disconnect, device number 6
[  182.414792][  T278] ==================================================================
[  182.422967][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.423603][  T278] BUG: KASAN: use-after-free in jfs_lazycommit+0x763/0xb20
[  182.435491][ T5231] usb 2-1: USB disconnect, device number 13
[  182.439570][  T278] Read of size 4 at addr ffff88802467f294 by task jfsCommit/278
[  182.453370][  T278] 
[  182.455721][  T278] CPU: 0 PID: 278 Comm: jfsCommit Not tainted 5.15.185-syzkaller #0
[  182.463717][  T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  182.473878][  T278] Call Trace:
[  182.477182][  T278]  <TASK>
[  182.480318][  T278]  dump_stack_lvl+0x168/0x230
[  182.485015][  T278]  ? show_regs_print_info+0x20/0x20
[  182.490251][  T278]  ? load_image+0x3b0/0x3b0
[  182.494974][  T278]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  182.500469][  T278]  ? _raw_spin_lock_irqsave+0x7f/0xf0
[  182.505878][  T278]  ? lockdep_hardirqs_off+0x70/0x100
[  182.511202][  T278]  print_address_description+0x60/0x2d0
[  182.516785][  T278]  ? jfs_lazycommit+0x763/0xb20
[  182.521683][  T278]  kasan_report+0xdf/0x130
[  182.526137][  T278]  ? jfs_lazycommit+0x763/0xb20
[  182.531205][  T278]  jfs_lazycommit+0x763/0xb20
[  182.535933][  T278]  ? txFreelock+0x5a0/0x5a0
[  182.540466][  T278]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  182.546478][  T278]  ? sched_dynamic_update+0x210/0x210
[  182.551887][  T278]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  182.557812][  T278]  ? __kthread_parkme+0x157/0x1b0
[  182.562874][  T278]  kthread+0x436/0x520
[  182.566959][  T278]  ? txFreelock+0x5a0/0x5a0
[  182.571486][  T278]  ? kthread_blkcg+0xd0/0xd0
[  182.576102][  T278]  ret_from_fork+0x1f/0x30
[  182.580535][  T278]  </TASK>
[  182.583555][  T278] 
[  182.585876][  T278] Allocated by task 7591:
[  182.590196][  T278]  __kasan_kmalloc+0xb5/0xf0
[  182.594885][  T278]  jfs_fill_super+0xd2/0xaf0
[  182.599484][  T278]  mount_bdev+0x287/0x3c0
[  182.603808][  T278]  legacy_get_tree+0xe6/0x180
[  182.608482][  T278]  vfs_get_tree+0x88/0x270
[  182.612961][  T278]  do_new_mount+0x24a/0xa40
[  182.617722][  T278]  __se_sys_mount+0x2d6/0x3c0
[  182.622409][  T278]  do_syscall_64+0x4c/0xa0
[  182.626833][  T278]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  182.632727][  T278] 
[  182.635046][  T278] Freed by task 4177:
[  182.639058][  T278]  kasan_set_track+0x4b/0x70
[  182.643684][  T278]  kasan_set_free_info+0x1f/0x40
[  182.648624][  T278]  ____kasan_slab_free+0xd5/0x110
[  182.653646][  T278]  slab_free_freelist_hook+0xea/0x170
[  182.659019][  T278]  kfree+0xef/0x2a0
[  182.662829][  T278]  generic_shutdown_super+0x130/0x300
[  182.668214][  T278]  kill_block_super+0x7c/0xe0
[  182.672910][  T278]  deactivate_locked_super+0x93/0xf0
[  182.678206][  T278]  cleanup_mnt+0x418/0x4d0
[  182.682667][  T278]  task_work_run+0x125/0x1a0
[  182.687295][  T278]  exit_to_user_mode_loop+0x10f/0x130
[  182.692842][  T278]  exit_to_user_mode_prepare+0xb1/0x140
[  182.698388][  T278]  syscall_exit_to_user_mode+0x16/0x40
[  182.704025][  T278]  do_syscall_64+0x58/0xa0
[  182.708960][  T278]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  182.714944][  T278] 
[  182.717271][  T278] Last potentially related work creation:
[  182.722976][  T278]  kasan_save_stack+0x35/0x60
[  182.727669][  T278]  kasan_record_aux_stack+0xb8/0x100
[  182.732950][  T278]  kvfree_call_rcu+0x10a/0x7c0
[  182.737796][  T278]  drop_sysctl_table+0x2fa/0x430
[  182.742999][  T278]  drop_sysctl_table+0x2e9/0x430
[  182.747937][  T278]  unregister_sysctl_table+0x87/0x130
[  182.753309][  T278]  neigh_sysctl_unregister+0x74/0x90
[  182.758701][  T278]  inetdev_event+0x74b/0x1360
[  182.763398][  T278]  raw_notifier_call_chain+0xcb/0x160
[  182.768877][  T278]  unregister_netdevice_many+0xf57/0x18f0
[  182.774662][  T278]  default_device_exit_batch+0x336/0x390
[  182.780339][  T278]  cleanup_net+0x77b/0xb80
[  182.784860][  T278]  process_one_work+0x863/0x1000
[  182.789808][  T278]  worker_thread+0xaa8/0x12a0
[  182.794489][  T278]  kthread+0x436/0x520
[  182.798573][  T278]  ret_from_fork+0x1f/0x30
[  182.802989][  T278] 
[  182.805311][  T278] The buggy address belongs to the object at ffff88802467f200
[  182.805311][  T278]  which belongs to the cache kmalloc-256 of size 256
[  182.819644][  T278] The buggy address is located 148 bytes inside of
[  182.819644][  T278]  256-byte region [ffff88802467f200, ffff88802467f300)
[  182.834728][  T278] The buggy address belongs to the page:
[  182.840541][  T278] page:ffffea0000919f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2467e
[  182.851027][  T278] head:ffffea0000919f80 order:1 compound_mapcount:0
[  182.857633][  T278] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  182.865743][  T278] raw: 00fff00000010200 ffffea0001720580 0000000f00000002 ffff888016841b40
[  182.874347][  T278] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  182.882932][  T278] page dumped because: kasan: bad access detected
[  182.889428][  T278] page_owner tracks the page as allocated
[  182.895147][  T278] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7134, ts 158032757289, free_ts 157877226459
[  182.915918][  T278]  get_page_from_freelist+0x1b77/0x1c60
[  182.921553][  T278]  __alloc_pages+0x1e1/0x470
[  182.926146][  T278]  new_slab+0xc0/0x4b0
[  182.930232][  T278]  ___slab_alloc+0x81e/0xdf0
[  182.934949][  T278]  __kmalloc_track_caller+0x1cb/0x330
[  182.940363][  T278]  kmemdup+0x22/0x50
[  182.944269][  T278]  nf_ct_net_init+0xec/0x2d0
[  182.948967][  T278]  ops_init+0x357/0x600
[  182.953124][  T278]  setup_net+0x38d/0x9f0
[  182.957471][  T278]  copy_net_ns+0x348/0x5b0
[  182.961898][  T278]  create_new_namespaces+0x3d3/0x6f0
[  182.967185][  T278]  copy_namespaces+0x37d/0x3e0
[  182.971946][  T278]  copy_process+0x180f/0x3e00
[  182.976627][  T278]  kernel_clone+0x219/0x930
[  182.981138][  T278]  __x64_sys_clone+0x170/0x1c0
[  182.985924][  T278]  do_syscall_64+0x4c/0xa0
[  182.990365][  T278] page last free stack trace:
[  182.995038][  T278]  free_unref_page_prepare+0x637/0x6c0
[  183.000529][  T278]  free_unref_page+0x94/0x280
[  183.005228][  T278]  qlist_free_all+0x35/0x90
[  183.009738][  T278]  kasan_quarantine_reduce+0x150/0x160
[  183.015295][  T278]  __kasan_slab_alloc+0x2f/0xd0
[  183.020148][  T278]  slab_post_alloc_hook+0x4c/0x380
[  183.025428][  T278]  kmem_cache_alloc+0x100/0x290
[  183.030315][  T278]  sock_alloc_inode+0x17/0xb0
[  183.034999][  T278]  new_inode_pseudo+0x5f/0x210
[  183.039782][  T278]  __sock_create+0x129/0x900
[  183.044469][  T278]  __sys_socket+0xe2/0x170
[  183.048893][  T278]  __x64_sys_socket+0x76/0x80
[  183.053602][  T278]  do_syscall_64+0x4c/0xa0
[  183.058014][  T278]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  183.064406][  T278] 
[  183.066753][  T278] Memory state around the buggy address:
[  183.072464][  T278]  ffff88802467f180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  183.080536][  T278]  ffff88802467f200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.088874][  T278] >ffff88802467f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.097040][  T278]                          ^
[  183.101643][  T278]  ffff88802467f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  183.109724][  T278]  ffff88802467f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  183.117775][  T278] ==================================================================
[  183.125825][  T278] Disabling lock debugging due to kernel taint
[  183.131963][  T278] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  183.139153][  T278] CPU: 0 PID: 278 Comm: jfsCommit Tainted: G    B             5.15.185-syzkaller #0
[  183.148520][  T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  183.158569][  T278] Call Trace:
[  183.161852][  T278]  <TASK>
[  183.164781][  T278]  dump_stack_lvl+0x168/0x230
[  183.169462][  T278]  ? show_regs_print_info+0x20/0x20
[  183.174661][  T278]  ? load_image+0x3b0/0x3b0
[  183.179176][  T278]  panic+0x2c9/0x7f0
[  183.183072][  T278]  ? bpf_jit_dump+0xd0/0xd0
[  183.187596][  T278]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  183.193683][  T278]  ? _raw_spin_unlock+0x40/0x40
[  183.198781][  T278]  ? jfs_lazycommit+0x763/0xb20
[  183.204463][  T278]  check_panic_on_warn+0x80/0xa0
[  183.210245][  T278]  ? jfs_lazycommit+0x763/0xb20
[  183.215122][  T278]  end_report+0x6d/0xf0
[  183.219295][  T278]  kasan_report+0x102/0x130
[  183.224151][  T278]  ? jfs_lazycommit+0x763/0xb20
[  183.229096][  T278]  jfs_lazycommit+0x763/0xb20
[  183.233892][  T278]  ? txFreelock+0x5a0/0x5a0
[  183.238851][  T278]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  183.244751][  T278]  ? sched_dynamic_update+0x210/0x210
[  183.250130][  T278]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  183.256227][  T278]  ? __kthread_parkme+0x157/0x1b0
[  183.261282][  T278]  kthread+0x436/0x520
[  183.265359][  T278]  ? txFreelock+0x5a0/0x5a0
[  183.269866][  T278]  ? kthread_blkcg+0xd0/0xd0
[  183.274457][  T278]  ret_from_fork+0x1f/0x30
[  183.278884][  T278]  </TASK>
[  183.282164][  T278] Kernel Offset: disabled
[  183.286481][  T278] Rebooting in 86400 seconds..