last executing test programs:

3m37.745621224s ago: executing program 1 (id=115):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x19c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_EMATCHES={0x168, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x5}, "ed75e2fae0"}}]}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0x80000001, 0x8b3, 0xb, 0x6, 0x4, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x400}, {0xcd6, 0x2, 0x3, 0x4, 0x0, 0x2}}}, @TCF_EM_META={0x9c, 0x2, 0x0, 0x0, {{0x7ff, 0x4, 0xfffa}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x1}, {0x1, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="65052412405911baec"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5}, {0xf6, 0x9e, 0x1}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ba3420ca3074da62", @TCF_META_TYPE_VAR="a04e4195", @TCF_META_TYPE_VAR="21895a91", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="1c"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a254c51d8981fa3a41", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c70c58d9459dafcbdc54", @TCF_META_TYPE_VAR="f0aa"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8, 0x1}, {0xe8d}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0xe, 0x2, 0x2, 0x2, 0x7, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc8c1, 0x8, 0x3}, {0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x800, 0x4, 0x958b}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0xc8, 0x2}, {0xfffe, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="8c8cc90eddb6598da1", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="10859d79", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0x3, 0x7fffffff, 0x1, 0x0, 0x3, 0x1, 0x2}}}]}]}]}}]}, 0x19c}}, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)

3m35.76604s ago: executing program 1 (id=125):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3m35.070439522s ago: executing program 1 (id=130):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000001c0)="0b036800e0ff6400020047540064dec888a8", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14)

3m34.17774005s ago: executing program 1 (id=134):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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")
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x4, 0x5, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0xbf, 0x10, 0xca, 0x1}})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40186e8d, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}})

3m33.144042589s ago: executing program 1 (id=139):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'memory'}]}, 0x8)

3m31.986159806s ago: executing program 1 (id=145):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x0, 0x3, 0x2, "0fb2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x24, &(0x7f0000000580)={0x0, 0xd, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

3m30.823465238s ago: executing program 3 (id=152):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1})
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f00000000c0)=[0x2]})

3m30.196890297s ago: executing program 3 (id=156):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x508d2, &(0x7f00000001c0)={[{@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
ioctl$BLKRRPART(r1, 0x125f, 0x0)

3m29.358546475s ago: executing program 3 (id=160):
unshare(0x22020600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0)

3m28.900655139s ago: executing program 3 (id=161):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x101, 0x6})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r2=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1})

3m27.954842418s ago: executing program 3 (id=164):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

3m26.192844416s ago: executing program 3 (id=170):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0xf0ffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1)

3m16.196804165s ago: executing program 32 (id=145):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x0, 0x3, 0x2, "0fb2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x24, &(0x7f0000000580)={0x0, 0xd, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

3m9.966284912s ago: executing program 33 (id=170):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0xf0ffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1)

2m5.084220486s ago: executing program 6 (id=399):
r0 = epoll_create(0x208000)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0)
readv(r1, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000180)=""/39, 0x27}], 0x2)

2m4.935767994s ago: executing program 6 (id=400):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/21, 0x15}, {0x0}], 0x2}, 0x9}], 0x1, 0x2002, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

2m4.618758929s ago: executing program 6 (id=403):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e2100fdffffff020000000000000000000000000001270a0000200002000a0000000000000000000000000000000000ffffe000e301040000000d0001007564703a73"], 0x6c}}, 0x0)

2m4.019043862s ago: executing program 6 (id=407):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'})

2m3.0735986s ago: executing program 6 (id=413):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x1f, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)

2m2.534023051s ago: executing program 6 (id=416):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m1.754881965s ago: executing program 34 (id=416):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m15.606826544s ago: executing program 7 (id=634):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0)

1m13.666255888s ago: executing program 7 (id=644):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)={r2}, &(0x7f0000000480)=0x8)

1m13.023396778s ago: executing program 7 (id=648):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000900, 0x0, 0x0)

1m12.695879174s ago: executing program 7 (id=651):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)

1m11.000865132s ago: executing program 7 (id=663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80014}, 0x4000000)

1m10.264304941s ago: executing program 7 (id=668):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x90, 0x6}, {0xc, 0x90, 0x8000000000000001}}]}, 0x54}}, 0x0)

1m9.687960097s ago: executing program 35 (id=668):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x90, 0x6}, {0xc, 0x90, 0x8000000000000001}}]}, 0x54}}, 0x0)

13.434035698s ago: executing program 2 (id=918):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffffffa, 0x1, 0x2, 0x1, 0x3a, 0x400}, 0x20)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x80000000001})
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000180))
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

13.243540556s ago: executing program 2 (id=920):
r0 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0)

12.858274624s ago: executing program 2 (id=923):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b})

12.304680897s ago: executing program 2 (id=926):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10)

11.866493077s ago: executing program 2 (id=928):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x200, 0xfffc}, 'syz0\x00', 0xd})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xe000, 0x104, {0xfff, 0x2}, {0x7, 0x5}, @ramp={0xdc3, 0xf7, {0xfffd, 0x8001, 0x6, 0x2}}})

11.266175247s ago: executing program 2 (id=932):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x11dc0, &(0x7f0000001800)=ANY=[], 0x0)

5.273622624s ago: executing program 8 (id=956):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)={'team0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x28, r2, 0x6a98047402e98331, 0x0, 0x80000, {0x15}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x4880)

5.147932316s ago: executing program 5 (id=957):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_ignore}, {@nomblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@noblock_validity}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46b5ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e2957260d0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acd3062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b424906d5501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5bac724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e1f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908b064e8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x4, '\x00', @auto="e332205404f8489bb70e5a14d6c2ab39"})

4.816788471s ago: executing program 4 (id=958):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c)
sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x3, 0x10, 0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x18)

4.578343555s ago: executing program 0 (id=959):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = syz_io_uring_setup(0xa6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x0, 0x335}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x4, 0x4004, @fd=r0, 0x3, &(0x7f0000000240)=[{&(0x7f00000000c0)='j', 0x1}], 0x1, 0x0, 0x0, {0x3}})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

4.404863137s ago: executing program 4 (id=960):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000021000080"])

4.217737012s ago: executing program 8 (id=961):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x10, 0x18, 0x15}, 0x10}], 0x1}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

3.905652664s ago: executing program 5 (id=962):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe)
ioctl$UI_DEV_CREATE(r0, 0x5501)

3.729930502s ago: executing program 8 (id=963):
socket(0x10, 0x803, 0x0)
r0 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0)
r1 = dup2(r0, r0)
mq_notify(r1, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

3.716129306s ago: executing program 0 (id=964):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0)
read$hidraw(r1, 0x0, 0x49)

3.570471727s ago: executing program 4 (id=965):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r2, r3, 0xffff, 0x9, 0x2bd5, 0x4, {0x2, 0x800, 0xada, 0x7, 0xa4ee, 0x1ff, 0x13, 0x5, 0x4, 0xff7b, 0x4, 0x4, 0xdb, 0x400, "be6e478cbf8c3b54b63536a266eb493e432e83f51685ab4d74383af0623588ae"}})

3.29607332s ago: executing program 8 (id=966):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080)={r2, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc)

3.147342745s ago: executing program 5 (id=967):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x336, &(0x7f0000000340)="$eJzs3M1rI2UcwPFfJi9NUtrkIIqC9EEvehna6FkM0oIYsLSN2ArCtJ1oyJiUTKhExLYnr+Ldk+Ch9NhbQf0HevGmFy/eehH2sD3s7izz1rw3aTYl3fb7gWWePM/zy87zkvCboZOLz3/6plKy9ZLREC2pJCIicimSFU1CkeCoeeWEtDuUd2cf/f3m+ubWJ/lCYXlNqZX8xns5pdT8wu/ffp8Kup3NyHn2y4v/c/+dv3r++sWzja/LtirbqlprKENt1/5tGNuWqXbLdkVXatUyDdtU5apt1v32mt9esmp7e01lVHfn0nt107aVUW2qitlUjZpq1JvK+MooV5Wu62ouLRimeLy2ZuTHDN6Z8MngltTreSMqIqmeluLxVE4IAABMVXf+r7kp/Vj5v8x7+b/buZX/n7z1Z2P2s9P5IP8/S/TL/9//x3+vjvw/KSLj5P+/yA3y/96M6GF5ofwfd8NCoqcq0vHKzf/TwefXc/TFyaJXIP8HAAAAAAAAAAAAAAAAAAAAAOBlcOk4GcdxMuEx/Nd6hCB4jXtp0PrPiEjSXX2H9b/P1je3JOk9uOeusfXjfnG/6B/d1qeOT0xZlIw88fZDWCeOEz55pFxZ+cM6COIP9otRryVfkrJYYsqSZCTbHe84Kx8XlpeUL4i/ekwp3R6fk4y80j8+1xkf/P8JeefttnhdMvLXjtTEkl1vX7fif1hS6qNPC13xKa8fAAAAAAD3ga6u9L1+1/VB7f6vjORL3m2iAfcH/Ovrxb7X57HMG7Fpjx4AAAAAgIfBbn5XMSzLrF9TSMnwPuMXYqN1TnTVxK/rHG0b4ajnk/BuZIgM6hMdccZ+HXFWOwrhH1J0NCWDyvGmNxz/kM7ayIt72F6jyQhRse6TX3Ar1A2HcxQM5KomvG2UGDDPstr7PlrHTuic1fjE9vNrP//2eHIfkA9Owx0wvPNRW0185D1vWWaye9d5hfjgbwxtEl87AAAAAKaglfSHNR+2N0emclIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwt/KTfl2FaY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCueBwAA//8Itfeq")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

2.982767954s ago: executing program 4 (id=968):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)={0x28, r2, 0x111, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000044)

2.738235901s ago: executing program 8 (id=969):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reconstruct_alloc,no_data_io,hash,\x00'], 0x1, 0x5903, &(0x7f0000010b40)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJJBIKAEF1wowEJLS1E/oIXUotGiClaJlMjLJqyiFKtLbSG1uot+8CnkISWQh7J8nKdm+p5Oz52+c3t6ekICv18lc/ucvv0/5957+vb9n+6ZDgAAALwm7Ll+275zjvrAr744/NI1H/7ZpmtDb3m8vhpX6EuXV7xSPeRA6q4sGV9mx8WbrvrBnwcuft8v7+75/su71x27/vfvP+zi+z9z5q7bvv3Qi/Pv/eczRXHjeDpxfzl5Lgmh+vO9X//S7seOHKtLQgjlpG9HCIuSxQ8tSjIhBv8eQliXFpZk7rznpVPWjy2vval7Qv3CzHrG+2tbNR1n2/ddflL4w3vXXPebpT/+UdfOZ3fsXyWpNoynEBZc2Pj4rhDC3PT/mDja4niMg3Z1CKGn4XFnFPTruBb7vyKnfHS6nJMuewvixPuXZcqlzHrZctSVWfYUtDdTef1od70i8zLl7MlopvL6GesXpcufpssTpxm/HP8noZSESr37G5P9YyQ0HLckJOPHslovl+rHNqTbnyknmXIpUy53ZbZrvN10oJWTZGJ9XC9TH0/HlbT+2MZzdRPn5tS/Pl1W0yfqy7EcsjdqeifdqG/XuNivvVP05UAoNZyDmtXXD3x6MHrTut5k8aTHjDYR79u95ubl5bUP7+nL6Udyd5LGT9qKv/3Xi+Z96oc3XpZ9Xa/Hv7CUxi+1Ff+PZz3+/Pk3fu9bufFvjfHLbcU/+YGe58565Ppluftnb9w/lbbiDz3z6C1LD79oZ27/b4/xq23FX7Xr8e75+x54MLf/g3H/zG0r/tPv/OCf7nryvmdz44cYv6et+Gt3bflyd/++E3LjPxj3T2974+eFnac/1d//l4G8+E/E+PPbin/njtveccfCm87MPb6r4/7payv+2cfff928ffcdk3fuTG7v1CsnwGvTYek11g1pud08c6Ya8oVvDlRq13zz0v/zO9lQ5uJzrJ0FnYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGEI076nx/6/x/ve66SlrvTG0+XastYPyeEZG4IYdvI0NaRDZsvGfjMpZdt3Ty0cWBoZGB488jWKwdOfcvA1uEtG4euHLt38K2n1B63OCS1ZXLMpLa7R0dHS30T62J7/+n4nX9Yfsa//DWEwSN+11/J7f+K2zbdcXiTnxnJqtH3bLrsnN+d9t10u/rSfvU16dfo6OhoyOnXv573jzu+uvfPJ4Qw+Lqp+vXo0+/+xYQOjVfsj5MqdYdah7qTnqb9qPc67U/cX5X1GzYOD069f8ceX87Zjv981bN/X3/FV/5R27/V3O1ocf/OXTW6sfSNNWf/+zeurlUU9euVOu5F+ztuRexf3H/VdH8vSLdrQc52VXK26/rfPPjkz4+68cUdYbDywtLJbRdtV1c6ALqS17fUbmyhJ1k0ob6arh+PeHzcipFNW1Zsu3L7WzdsGrpk+JLhzW9feerK0wdPO/20FeNbvqLD2x/bf2OL239gxtPCz+34afzZ2ngq6lfR/hjrV/H+aOxR3vOv59wvfe3ttz1yTq2iaJzHtevnk3TZM3acV4aG8TZ5XzXbrqL9EEIYaLYfnn/xzHDk/9lwXdF5qPHINP7MSFaNPrbsb9894ztL3lWrOCDn+cYOtXmer/d6f3/G91c1PR6jB+n+7Q7ldLt6m/Zr5WOPdN2856+fr/dvzpxwxdDIyNaVtZ/z0p7OS45u2q9sbdyupeM/yyHdLaE+TJuM1zFdoda/7Pkzrp7dq73pfb3J4qbblRXv273m5uXltQ/vydvTyd21FueG+bVl8oacNTdmHliud7hZ+wfr869ofPR/6Dv3fvzen5w6aXycXPtZtF1Jznb9+Mk7v/b9r/zXn3Ruuz707sf7/vZ/P728VnGonFfqvU77kzSeV04Ooej5tzQ0347c51+p+fYUPf+y7exfv3m8gUy5N5Tber6e/EDPc2c9cv2y3Ofr3lafr1dPKJULnq8Hy/jJPr+SysR+zN7za8JASVaN/vKGw3Y8dM3qo2oVReO6vnazcX1KC/lHznb94vyn+i8d+C//u3PnjR+85Z4Lfj+06gu1ivaPe+xLZ457Nd2/1Zz9W+91zDsb9+/bLr5047pa/cF7/ZsuC/KfeCrZduX2zw5t3Di8dVtr29Xq62lsJ7uX2309jWe3xQXbVZq0XbN3o5X91erzLfZ/Xdv7a+LzrTckbb0ubP/1onmf+uGNl/VNelTa0IWlNH6prfh/POvx58+/8Xvfyo1/a4xfaSv+0DOP3rL08It25sa/PUnjV9uKv2rX493z9z3wYG78wdj/uW3Ff/qdH/zTXU/e92xu/BDj97a3/1/YefpT/f1/yY3/RJK2M3aNFMI9L52yvlZOQlf6fIv96JrQr5AtJ5lyKVMuN5ZLtbnWegPlJJlYH9dL649t6Eszn8ipj1dh1SW15cuxHLI3pq4/2JQazv3N6ouuUwEAXu3i+//xGjS+/z+cXijlzzTAfjPNw5bkxI152P75nDkT7l+Sxo+Pj/OA/W8Lg2PLawdqF/rTfR8hPh+y85yxnROOmxij3XnOovn3ZZly7FdtvrzSkIemJuc1ldDC/Pvkdqaef89sfvH8+MANk7o10DBvlT1+XemMWbPPO2T6WxmLkDc+svNi8fMc/QvC6vH2Whwf2c/RxOOQ/RxNbOeozImz3c/RzHR8xG5PMT7Gu1z8/sbk4xem2L/7j1/zaNnjN43jXR1bf7bfn+3AvGHTU9qBmzec3ffDzEvmxE+fYAf7vGGsj9tRaXE+8eM59Z2aT4yni9ivvVP05UAwnwi8WsX8P75GjOX/Yxfg/5ZZr+g6NHvVGOPlfk6o3Lw/RXnH5M/p9bT1Or5215Yvd/fvOyH3OufBVj/3s2VCqafgcz9F+3F5ply4H3MmaIryvWw7Rfs9+7mM3jC/rf1+547b3nHHwpvOzN3vq2svpMX7/WsTSvML9vshkC80jy9feE3kC7M9f/aK5SPpB59mKx/5WE79dPORnkk36ts17pDLR7oObL8AgENHzP/r75+l+f//iyuk1xFFeeuJmXKMl5u35lyf5OWtH0mXV2TW701/o2K6181nH3//dfP23XdMbt5ye6t56H+bUOorzENnljfn5hGrO/N58dw8op5nzSxPzO1/PU+cWZ6eG7+ep88sj87dP/U8embzALnx6/MAh3qeWzBfl2ksFludr3vV5tHpr8/OVh59bk79dPPo3kk36ts1Th4NAPDKivl/vIyL+f8jmfVm+j57bl7Qoev27N8Dqcd/4kDllbOd98123jrbef1sz0sc6nnxbM8Lze482Ws+L04blRcDAHAwi/n/3LScn//PLD9plr91TchP5OdN48vPD5L8/FCf/5L/e1+8mPwfAODVLeb/8dce49//+x9pOft36+XpOfHl6fL0qcZPy3l65+fZgs8BvLLzAHP3r28eAACAV0LXeKY0+ffsP5kus79nn/d7+efnrN+qSnp5fNHI1uHhCy7bsm5oZPiCzZeuG952weVbN4yMDG+urTfTvDE3b0nzxq5QSfdH8/WyedvC9O8hLMz5ewjZ9WPYo8dvTP57CNlm5xb8HYH9x6+1/uYdv9IU6zcbH3nHOy/+J3LWj+rH/+JPn3zB+m0XbNi8YWTD0MYN24cnrjeWtfZM43sz426Z1velZn5MUpr+93d2ph+lSf3oSvdH3vezJ5l+LEp7sijv+w9y+v2r//XVzx0/+o+7Qhg8ovyGGe2/ZNXofz9v+CMje363Zaz/pSn7X18z7VfR95Vm14/bU9l46baRk9Zfetnm7DdKtifOZ5Tq5Vmaz0if/uUW5yfW5tRP93MK5Uk3Dk4tz08AADBBfP8/Xs/G9w+/kl5AxfrW8/SZvX+cm6cPtpanZ7+XrChPz64ft7fVPL06wzw9235Rnt5s/WZ5el7enRf/YznrT1fr42Rmn/PIHScXtjZOst9nUDROsutPd5wkMxwn2faLxkmz9ZuNk7zjnhf/oznr52l9PMzsczm54+HW1sbDmzPlovGQXX+646E0w/GQbb9oPDRbv9l4yDu+efHPyVm/VRPHx9jAGB8XwxdcfunWzzasN9vffzHz/s3u93+0q/X+z+7nvma//7P7ubLZ7//MPleW2/8nZjYT1nr/Z/f7Xdp1wOZr0w+bFX3+rGged01O/XTncedMunFwMo8Lr5yY/8e3e2L+f1O67PTbQIf+96T5HrOm8Tv0PWZF1zFez6do7CDg9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNd2VJePLPddv23fOUR/41ReHX7rmwz/bdO2brvrBnwcuft8v7+75/su71x27/vfvP+zi+z9z5q7bvv3Qi/Pv/eczhYH7xn9WTkyL1RCS55IQqj/f+/Uv7X7syLG6JIRQTvp2hLAoWfzQoiQTYfDvIYR19X5OvPOel05ZP7a89qbuCfULM0Gy2xV6y7E/jf0M4YrCLeIQVE3H2fZ9l58U/vDeNdf9ZumPf9S189kd+1dJqg3jKYQFFzY+viuEMDf9PyaOtiXxwelydQihp+FxZxT067gW+78ip3x0upyTLnsL4sT7l2XKpcx62XLUlVn2FLQ3U3n9aHe9IvMy5ezJaKby+hnrF6XLn6bLE6cZvxz/J6GUhEq9+xuT/WMkNBy3JCTjx7JaL5fqxzak258pJ5lyKVMud2W2a7zddKCVk2RifVwvUx9Px5W0/tjGc3UT5+bUvz5dVtMn6suxHLI3anon3ahv17jYr71T9OVAKDWcg5rV1w98ejB607reZPGkx4w2Ee/bvebm5eW1D+/py+lHcneSxk/air/914vmfeqHN162JC/+haU0fqmt+H886/Hnz7/xe9/KjX9rjF9uK/7JD/Q8d9Yj1y/L3T974/6ptBV/6JlHb1l6+EU7c/t/e4xfbSv+ql2Pd8/f98CDuf0fjPtnblvxn37nB/9015P3PZsbP8T4PW3FX7try5e7+/edkBv/wbh/etsbPy/sPP2p/v6/DOTFfyLGn99W/Dt33PaOOxbedGbu8V0d909fW/HPPv7+6+btu++YvHNncnunXjkBXpsOS6+xbkjL7eaZM9WQL3xzoFK75puX/p/fyYYyxtpZMIvxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dfrt1ad+8rz3fHRNJQkhyVlntIl4X3nOqlUDbbQ79Myjtyw9/KKdjXVL2ogDAAAAFIt5eKleUw1LwuXJ3HB00/XjHMHRsZRMrM/OIcQ42TmCduOUOhSn3KE4lQ7F6epQnDkditPdoTjVgjjV0FqcuVPEqYyNihb70zNlf1qP09uhOPM6FGd+h+Is6FCchR2K0zdlnNbH4aIOxVncoTiHdSjO4R2Kc0SH4ryuQ3GO7FCc7JzydMfh/HTNo/LijN8oF8apJOX6Hc3m049M2zlmhu30FrQzv+j1uMV25rbYznGZx5Wm2U61xXbeOMN2khbbefMM2ykVtBPH7RXZ/sV2YqnF8X9lh+Js71CcqzoU5+oOxfl8h+J8oUNxrplhHIBWxfx/f77XF7or7wo96RknOwsQ892l4z8nv97lnZBivDdk6ucUxcsm6pl4S6fbv+wEQibeskx914R4lXo+MkW8amO85Zk7C7c3O6GQ6d+JmfruonjZiQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmEW/vfrUT573no+uCUkY+9fUaBPxvvKcVasG2mh395qbl5fXPrynsa670kYgAAAAoFDMw7vqNdXQXVkZupM5E9arpvMA1bRc7qst+xeE1WPLZKA0Xu5JFk35uEr6uBUjm7as2Hbl9rdu2DR0yfAlw5vfvvLUlacPnnb6aSvWb9g4PFj7GUJ3QbwQwvj0w7Yrt392aOPG4a3bapXZ/i9JH7ckLSfp4/rfFgbHltem/V9c0F5pUnuzd6P46AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/Brt2FyHnVfwA/z8zszHTb/LN/+jYNzWbIS4laNIlbSbV0HxAstEnIUpDZ6lqCTbC4aUKblFjHNmBbExShJRAiuTASi63Fm77YIvaFQKRGA24M0hbthV4orVbSkgtJGcnunNmZ2ZnMOpamjZ/PxTwz5/zO+T1nLha+zw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDBmqqOTFRGx8YHkxCSLjW1DuJcNp+m5T76fvn57d8vDJ9e2TxWyPWxEQAAANBTzOEDjZFiKOSyIRuumv60NDRNhNncDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/O+Zqo5MVEbHxi9OQki61NQ6iHPZfJqW++j7xjtPfubV4eG/No+V+tgHAAAA6C3m8ExjpBhKYVkYSK5qqYvPBha1rW+vi/ssnmdd+7ODbnXL5ll3zTzrPtajbkP9uisAAADAR1/M/7nGyFAo5BZ0zf+9cn2sW9JWl61f+/mtAAAAAPDfifm/0BgphUKu1Mjr8837S9vq4vpe/7eP61d0Wd/r//nr61f/pwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj46p6shEZXRsPJuEkHSpqXUQ57L5NC330XfNC4N/v+XIQ0ubxwq5PjYCAAAAeoo5fDZ6F0MhNxgGwsXTuX/4poNPf/HpZ0dCCDMxP58Puzbt2HH3mpnXWLf62JGB7x1961tz6lbPvJ63AwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+bqerIRGV0bPyiJISkS02tgziXzadpuY++r3/uC39+/ORzbzaPlfrYBwAAAOgt5vDZ7F8MpZAP+XDF9KfmrH9Wpm19t2cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIXjnm/c9/VNk5Ob7/bGG2+8abw533+ZAACA99uSkITaf+jKjef7rgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA+DqerIRGV0bLyYhJB0qal1EOey+TQt99E3ff54YcHpF15qHiv1sQ8AAADQW8zhs9m/GEphIAyEy6c/dXomMJ3/hz7AmwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+VKaqIxOV0bHxBUkISZeaWgdxLptP03IffR/bfeCzhxd+9+bmsUKuj40AAACAnmIOzzdGiqGQ+3gohKvrnydbFyTZ+rXzc4HZddtblg3Oe121ZV123uv2tJ0sVz/NzLpi3G9o5tpYV567rty0rhQa7cst68K+llULetxnAAAAgPMo5v9CY2QoFHKFppz7k5b6ITkXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhiqjoyURkdG0+SEJIuNbUO4lw2n6blPvre95v/v+QrP927s3ms1Mc+AAAAQG8xh89m/2IohcXh/8Li6dwfhlrrY90/KmcOP/rPv6wMYdUVJ4Zz7dv+ML751es3vtj+EkKmtToTwsJ6v6RLv1//7tF7l9fOPB7CqsuzV8/pF87dr3XLtPZMZfP6HUdPbO/x5QAAAMAFIub/gcbIUCjk7uqa/2Py7pH/G6YD+MJ7d//8svprPZG3rcgM1ftluvT7/PIn/7Ri7d/eOpv/z9XvUwe2Hr6speHMSJskrY1u3bnhxHWHMvHUM/2zbf3j9/Klb775ry27Hjkz078YivXxRblO/ee+trkorU1m9o+ve29/tbV/rsv5H/rtSyd/uWjvu2f7v7NksNH/mnOc/9z9B299eN/1B45saO0fQih36v/2uzeHK/9w54Pt5x9s27j5m29+bZOktWNLTx1ae7B0Q2v/pK1//P5/dvKxfT9+5DvPxv7xtyIrl823f6at/yt7Lt398gMbF7X2z3Q5/4u3vTq8rfzt37ef/46WXXNd72Lu+Z+49qnbX9uU3t8+BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGGZqo5MVEbHxjNJCEmXmloHcS6bT9NyH33fuOX427ft/dEPmsdKfewDAAAA9BZz+Gz2L4ZSyId8GJzO/c9UNq/fcfTE9jA0M5vUr7nJbffs+MSWbTvvuuM83TkAAAAwXzH/5xojQ6GQWx4G6vl/dOvODSeuO5SJ+T8T8/+WOyc3rwqNulf2XLr75Qc2Lmo8Jwhh+mcBxbN1n56tu+nG40On/vi1FR3r1szWHVt66tDag6UbYl1orlsdGs8nnrj2qdtf25Te37i/5rpPfnXbZP3xRNx38NaH911/4MiGxjnq18H6vrFuMrN/fN17+6uxLlu/FuvnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmmqqOTFRGx8ZDNoSkS02tgziXzadpuY++65b/4sFLTj+3uHmskOtjIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWF/foJjaPs4wD+PLvJm202aZP2BaNimlZFqQeLgoheVFSkFSl4qhSptvYgCoKIUg+m0oqlKl4Eq5ciKqhRCgo2FkurpOK/4sWDCgrVg1CKAe1SPKhk95ntZrrj6qQK6ucDw5PnmZnv/GaeZ2ezAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/KMM9I0128M77m/ccs4NHz1614lHbnrn3m0XPfzqdxObrvtw7+BLJ2c2r9jy5fXLNu2/e8307ucP/TT81i9HewY/1GpWpW4thHg8hlB7d/aZx2Y+PmtuLIYQqnFkMoTRuPTQaMwlrP45hLC5Xef8nW+euHzLXLtt18C88SW5kPx9hXo1q6dlZH69/LvU0jrb2njwkvD1teu3f7r8jdf7p45Nnjok1jrWUwiLN3ae3x9CWJS2OdlqG8tOTu26EMJgx3lX9qjr/D9Y/6UF/XNT+7/U1nvkZPtX5vqV3HH5fqY/1w72uN5CFdVR9rhehnL9/MtooYrqzMZHU/t2alf9yfxqtsVQiaGvXf498dQaCR3zFkNszmWt3a+05zak+8/1Y65fyfWr/bn7al43LbRqjPPHs+Ny49nruC+Nr+h8V3dxa8H42amtpQ/qyawf8n+01E/7o31fTVlds79Ty9+h0vEO6jbenvg0GfU0Vo9LTzvn1y6yfTPrn7iwuuG9wyMFdcS9MeXHUvlbPxkduv21nQ+MFeVvrKT8Sqn8b9Ye+eG2nS88V5j/dJZfLZV/2YHB42vf37Gy8PnMZs+nr1T+HUc/eHL5/++c6jbXzfw9WX6tVP4100cGhhsHDhbWvzp7PotK5X919Y3fvvL5vmOF+SHLHyyVv2H6vqcGxhsXF+YfbH0U6s0VWmL9/Dh1xRfj499PFOV/lj3/4S75sWf+y5O7r3pxya41hetzXfZ8RkrVf/MF+7cPNfadV/TujHvO1DcnwH/TsvQ/1uOpX/Z35kJ1/F54dqKv9Q00lLbhM3mhnLnrLP4L8wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5jBw5IAAAAAAT9f92OQAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//2BzKEU=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105042, 0x1ff)
fallocate(r0, 0x10, 0x2, 0x5)

2.606386288s ago: executing program 5 (id=970):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="01a1", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000080)='n^', 0x2}], 0x1}}], 0x2, 0x4000c000)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1}, {0x16, 0x0, 0x0, @broadcast}}}}}, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="7c16", 0x2, 0x0, 0x0, 0x0)

2.403528638s ago: executing program 4 (id=971):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.338973861s ago: executing program 0 (id=972):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8)

1.777253765s ago: executing program 5 (id=973):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x42)
r0 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

1.51657575s ago: executing program 4 (id=974):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@barrier}, {@autodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@rescan_uuid_tree}, {@noflushoncommit}, {@discard_async}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74, 0x25]}}, {@noenospc_debug}, {@clear_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x5}, [], {}, [], {0x10, 0x6}}, 0x24, 0x2)

1.426001229s ago: executing program 0 (id=975):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

799.484218ms ago: executing program 0 (id=976):
r0 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0)
ftruncate(r0, 0x51a9497)
r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)

521.696953ms ago: executing program 0 (id=977):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_S_MODE(r1, 0xc05c6104, &(0x7f00000000c0))

226.582477ms ago: executing program 5 (id=978):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)='\\', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffec9)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)

0s ago: executing program 8 (id=979):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00')
ppoll(&(0x7f0000000200)=[{r0, 0xc020}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

0: command 0x0405 tx timeout
[  309.124898][   T44] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected
[  309.806404][ T6656] loop2: detected capacity change from 0 to 512
[  310.017385][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  311.339836][ T6667] loop2: detected capacity change from 0 to 32768
[  311.345865][ T6454] veth0_vlan: entered promiscuous mode
[  311.496218][ T6496] veth0_vlan: entered promiscuous mode
[  311.560917][ T6667] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=crc64,background_compression=zstd,journal_flush_disabled,fsck,norecovery,reconstruct_alloc
[  311.582045][ T6667] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  311.591637][ T6667] bcachefs (loop2): Version upgrade required:
[  311.591637][ T6667] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  311.591637][ T6667] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  311.591637][ T6667]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  311.645287][ T6454] veth1_vlan: entered promiscuous mode
[  311.716421][ T6496] veth1_vlan: entered promiscuous mode
[  311.724301][ T6667] bcachefs (loop2): dropping and reconstructing all alloc info
[  311.840272][ T6667] bcachefs (loop2): check_topology... done
[  311.852416][ T6667] bcachefs (loop2): accounting_read... done
[  311.861163][ T6667] bcachefs (loop2): alloc_read... done
[  311.867065][ T6667] bcachefs (loop2): stripes_read... done
[  311.873318][ T6667] bcachefs (loop2): snapshots_read... done
[  311.879887][ T6667] bcachefs (loop2): check_allocations...
[  312.045010][ T6454] veth0_macvtap: entered promiscuous mode
[  312.123785][ T6667]  done
[  312.138421][ T6667] bcachefs (loop2): going read-write
[  312.184785][ T6454] veth1_macvtap: entered promiscuous mode
[  312.270343][ T6496] veth0_macvtap: entered promiscuous mode
[  312.287651][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.298496][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.308645][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.319530][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.329718][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.341043][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.351186][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.368625][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.385975][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.394696][ T6667] bcachefs (loop2): done starting filesystem
[  312.494901][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.505786][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.515932][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.526728][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.537077][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.547919][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.558085][ T6454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.575674][ T6454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.592919][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.611700][ T6454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.621013][ T6454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.630948][ T6454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.640123][ T6454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.702154][ T6496] veth1_macvtap: entered promiscuous mode
[  312.922002][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.932865][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.937751][   T29] audit: type=1800 audit(2000000068.519:3): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.236" name="file1" dev="loop2" ino=536870912 res=0 errno=0
[  312.944700][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.977171][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.987753][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.998584][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.009059][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.020088][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.030412][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.041229][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.056193][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.078238][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.089121][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.099640][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.110501][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.120715][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.131513][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.141692][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.152498][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.162685][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.173485][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.189303][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.211313][ T6496] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.220530][ T6496] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.229568][ T6496] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.238825][ T6496] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.355577][ T5785] bcachefs (loop2): shutting down
[  313.361082][ T5785] bcachefs (loop2): going read-only
[  313.366524][ T5785] bcachefs (loop2): finished waiting for writes to stop
[  313.538122][ T5785] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[  313.594515][ T5785] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10
[  313.668218][ T5785] bcachefs (loop2): unshutdown complete, journal seq 11
[  313.677513][ T5785] bcachefs (loop2): done going read-only, filesystem not clean
[  313.868783][ T5785] bcachefs (loop2): shutdown complete
[  315.133777][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'.
[  316.000677][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'.
[  316.009756][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.245'.
[  318.336080][ T6754] loop0: detected capacity change from 0 to 32768
[  318.355835][ T6754] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.248 (6754)
[  318.382383][ T6754] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  318.399857][ T6754] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  318.410314][ T6754] BTRFS info (device loop0): using free-space-tree
[  319.823579][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.837297][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.930866][ T5795] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  319.982884][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.991140][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.560929][ T4052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.568999][ T4052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.695925][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.704366][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.999170][ T6819] loop6: detected capacity change from 0 to 32768
[  323.015324][ T6819] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.260 (6819)
[  323.054889][ T6819] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  323.065864][ T6819] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  323.076122][ T6819] BTRFS info (device loop6): using free-space-tree
[  324.201726][ T6839] loop2: detected capacity change from 0 to 40427
[  324.355347][ T6839] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff
[  324.435419][ T6839] F2FS-fs (loop2): invalid crc value
[  324.516743][ T6839] F2FS-fs (loop2): Found nat_bits in checkpoint
[  324.815900][ T6844] loop4: detected capacity change from 0 to 32768
[  324.873078][ T6844] gfs2: can't find protocol dlm
[  325.082136][ T6839] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  325.312483][ T6496] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  325.410464][   T29] audit: type=1800 audit(2000000080.979:4): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.265" name="file1" dev="loop2" ino=10 res=0 errno=0
[  325.956760][ T5785] syz-executor: attempt to access beyond end of device
[  325.956760][ T5785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  325.971995][ T5785] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  326.149788][ T6866] loop5: detected capacity change from 0 to 1024
[  326.736844][ T5839] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  327.018424][ T6866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.041441][ T5839] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  327.051015][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.059284][ T5839] usb 5-1: Product: syz
[  327.063902][ T5839] usb 5-1: Manufacturer: syz
[  327.068755][ T5839] usb 5-1: SerialNumber: syz
[  327.196634][ T5839] usb 5-1: config 0 descriptor??
[  327.854340][ T6890] loop6: detected capacity change from 0 to 1024
[  327.893730][ T6454] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.372072][ T6896] loop5: detected capacity change from 0 to 32768
[  329.389271][ T5839] usb 5-1: Firmware version (0.0) predates our first public release.
[  329.397824][ T5839] usb 5-1: Please update to version 0.2 or newer
[  329.463875][ T6896] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.278 (6896)
[  329.510366][ T6896] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  329.521176][ T6896] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  329.531513][ T6896] BTRFS info (device loop5): using free-space-tree
[  329.550870][ T6890] hfsplus: keylen 65060 too large
[  329.556315][ T6890] hfsplus: xattr searching failed
[  329.607312][ T5839] usb 5-1: USB disconnect, device number 5
[  329.929728][ T1537] kernel write not supported for file bpf-prog (pid: 1537 comm: kworker/1:2)
[  330.692816][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.281'.
[  330.707654][ T6923] netlink: 16 bytes leftover after parsing attributes in process `syz.6.281'.
[  330.766665][ T6454] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  331.548490][ T6945] loop6: detected capacity change from 0 to 64
[  333.218193][ T6965] loop4: detected capacity change from 0 to 512
[  333.326090][ T6965] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  333.437032][ T6970] loop6: detected capacity change from 0 to 164
[  333.472696][ T6965] EXT4-fs (loop4): invalid journal inode
[  333.478667][ T6965] EXT4-fs (loop4): can't get journal size
[  333.576311][ T6970] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  333.604476][ T6970] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  333.857372][ T6974] loop0: detected capacity change from 0 to 1024
[  333.881229][ T6965] EXT4-fs (loop4): 1 truncate cleaned up
[  333.888888][ T6965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.139246][ T6974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.266139][ T6982] EXT4-fs (loop4): shut down requested (2)
[  334.533672][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.675865][ T6984] loop6: detected capacity change from 0 to 256
[  334.816296][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.398820][ T6996] loop4: detected capacity change from 0 to 8192
[  335.513469][ T7001] sg_write: data in/out 39330/17 bytes for SCSI command 0x8-- guessing data in;
[  335.513469][ T7001]    program syz.0.306 not setting count and/or reply_len properly
[  335.751538][ T6996] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  335.947557][ T5839] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  336.130354][ T5839] usb 6-1: Using ep0 maxpacket: 8
[  336.448021][ T5839] usb 6-1: config 150 has an invalid interface number: 204 but max is 1
[  336.460248][ T5839] usb 6-1: config 150 has no interface number 0
[  336.466782][ T5839] usb 6-1: config 150 interface 204 has no altsetting 0
[  336.475319][ T5839] usb 6-1: config 150 interface 1 has no altsetting 0
[  336.632247][ T5839] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  336.641814][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.650786][ T5839] usb 6-1: Product: syz
[  336.658284][ T5839] usb 6-1: Manufacturer: syz
[  336.664374][ T5839] usb 6-1: SerialNumber: syz
[  337.006510][ T5839] xr_serial 6-1:150.204: xr_serial converter detected
[  338.152737][ T7018] loop2: detected capacity change from 0 to 40427
[  338.248260][ T5839] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  338.255278][ T5839] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  338.280360][ T5839] usb 6-1: USB disconnect, device number 2
[  338.288526][ T5839] xr_serial 6-1:150.204: device disconnected
[  338.312860][ T7018] F2FS-fs (loop2): invalid crc value
[  338.362625][ T7018] F2FS-fs (loop2): Found nat_bits in checkpoint
[  338.707780][ T7018] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  340.988944][ T5831] hid-generic 0005:0B57:FFF9.0004: item fetching failed at offset 0/1
[  341.003318][ T5831] hid-generic 0005:0B57:FFF9.0004: probe with driver hid-generic failed with error -22
[  342.097243][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  342.104236][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  342.985066][ T7101] loop4: detected capacity change from 0 to 512
[  343.036158][ T7101] EXT4-fs: Ignoring removed i_version option
[  343.239800][ T7101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.253766][ T7101] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.346226][ T7109] input: syz1 as /devices/virtual/input/input9
[  343.372185][ T7101] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  343.526778][ T7112] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #4: comm syz.4.343: corrupted inode contents
[  343.610831][ T7112] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #4: comm syz.4.343: mark_inode_dirty error
[  343.628702][ T7112] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #4: comm syz.4.343: corrupted inode contents
[  343.717361][ T7112] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.343: mark_inode_dirty error
[  344.054208][ T7112] Quota error (device loop4): write_blk: dquota write failed
[  344.063083][ T7112] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  344.073004][ T7112] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  344.083389][ T7112] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.343: Failed to acquire dquot type 1
[  344.378761][ T5831] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  344.419122][ T7112] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  344.626645][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.699377][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.714258][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.724808][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.738284][ T5831] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.747796][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.879502][ T5831] usb 6-1: config 0 descriptor??
[  345.118591][ T7128] loop2: detected capacity change from 0 to 2048
[  345.263400][ T7128] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  345.339443][ T7128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.357368][ T5831] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  345.434738][ T5831] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  345.627561][ T5831] usb 6-1: USB disconnect, device number 3
[  346.858702][ T7151] loop4: detected capacity change from 0 to 512
[  346.918076][ T7154] loop6: detected capacity change from 0 to 1024
[  347.031079][ T7151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.044408][ T7151] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.297738][ T7154] hfsplus: xattr searching failed
[  347.601799][ T7154] hfsplus: b-tree write err: -5, ino 3
[  347.801201][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.910580][ T7172] bridge0: entered allmulticast mode
[  348.019546][ T4052] hfsplus: b-tree write err: -5, ino 3
[  348.313594][ T7174] loop2: detected capacity change from 0 to 512
[  348.376119][ T7174] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  348.390256][ T7174] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  348.499932][ T7179] can0: slcan on ttyS3.
[  348.553759][ T7174] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  348.659174][ T7174] EXT4-fs (loop2): 1 truncate cleaned up
[  348.667103][ T7174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.730358][ T7182] loop6: detected capacity change from 0 to 764
[  348.761256][ T7179] can0 (unregistered): slcan off ttyS3.
[  348.768177][ T7179] Falling back ldisc for ttyS3.
[  348.902809][ T7186] loop4: detected capacity change from 0 to 256
[  349.054010][ T7186] exfat: Deprecated parameter 'utf8'
[  349.345537][ T7186] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  349.515392][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.359707][ T7200] Zero length message leads to an empty skb
[  350.880648][ T5839] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  351.049415][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  351.081847][ T7208] loop6: detected capacity change from 0 to 4096
[  351.089895][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.101489][ T7206] sctp: [Deprecated]: syz.5.374 (pid 7206) Use of int in max_burst socket option.
[  351.101489][ T7206] Use struct sctp_assoc_value instead
[  351.120480][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.130824][ T5839] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  351.140260][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.332360][ T5839] usb 3-1: config 0 descriptor??
[  351.835393][ T5839] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  351.910343][ T1537] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  352.101162][ T5839] usb 3-1: USB disconnect, device number 3
[  352.132513][ T1537] usb 5-1: Using ep0 maxpacket: 16
[  352.286747][ T1537] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  352.301141][ T1537] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  352.309608][ T1537] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  352.337859][ T1537] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  352.354064][ T1537] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  352.364477][ T1537] usb 5-1: config 0 has no interface number 0
[  352.370979][ T1537] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  352.382602][ T1537] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  352.397514][ T1537] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  352.409462][ T1537] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  352.422972][ T1537] usb 5-1: config 0 interface 125 has no altsetting 0
[  352.433190][ T1537] usb 5-1: config 0 interface 125 has no altsetting 2
[  352.470987][ T1537] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  352.482970][ T1537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.493514][ T1537] usb 5-1: Product: syz
[  352.503434][ T1537] usb 5-1: Manufacturer: syz
[  352.508315][ T1537] usb 5-1: SerialNumber: syz
[  352.550758][ T1537] usb 5-1: config 0 descriptor??
[  352.573029][ T1537] usb 5-1: selecting invalid altsetting 2
[  353.655780][ T5831] usb 5-1: USB disconnect, device number 6
[  353.706281][ T7232] loop0: detected capacity change from 0 to 256
[  353.716851][ T7229] loop6: detected capacity change from 0 to 256
[  353.957033][ T7234] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  354.084274][ T7229] FAT-fs (loop6): Directory bread(block 64) failed
[  354.091365][ T7229] FAT-fs (loop6): Directory bread(block 65) failed
[  354.098478][ T7229] FAT-fs (loop6): Directory bread(block 66) failed
[  354.105530][ T7229] FAT-fs (loop6): Directory bread(block 67) failed
[  354.112630][ T7229] FAT-fs (loop6): Directory bread(block 68) failed
[  354.119417][ T7229] FAT-fs (loop6): Directory bread(block 69) failed
[  354.126734][ T7229] FAT-fs (loop6): Directory bread(block 70) failed
[  354.133925][ T7229] FAT-fs (loop6): Directory bread(block 71) failed
[  354.141901][ T7229] FAT-fs (loop6): Directory bread(block 72) failed
[  354.148680][ T7229] FAT-fs (loop6): Directory bread(block 73) failed
[  354.869386][ T7245] loop4: detected capacity change from 0 to 1024
[  355.183667][ T7247] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  358.477430][ T7292] loop4: detected capacity change from 0 to 2048
[  358.545942][ T7292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  358.694957][ T3814] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.882352][ T3814] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.104251][ T3814] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.415446][ T3814] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.994426][ T3814] bridge_slave_1: left allmulticast mode
[  360.000604][ T3814] bridge_slave_1: left promiscuous mode
[  360.007241][ T3814] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.021566][ T3814] bridge_slave_0: left allmulticast mode
[  360.027481][ T3814] bridge_slave_0: left promiscuous mode
[  360.034348][ T3814] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.047582][ T7279] loop5: detected capacity change from 0 to 32768
[  360.081928][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.183633][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.321743][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.329836][ T7279] JBD2: journal reset failed
[  360.335036][ T7279] (syz.5.405,7279,1):ocfs2_journal_load:1145 ERROR: Failed to load journal!
[  360.344332][ T7279] (syz.5.405,7279,1):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4
[  360.362802][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.374014][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  360.390370][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.593403][ T3814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  360.647963][ T3814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  360.684966][ T5839] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  360.731392][ T3814] bond0 (unregistering): Released all slaves
[  361.014327][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  361.072234][ T5839] usb 3-1: config 1 interface 0 has no altsetting 0
[  361.178386][ T7318] binder: 7315:7318 ioctl c0306201 20000080 returned -14
[  361.482743][ T5839] usb 3-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40
[  361.492325][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.500895][ T5839] usb 3-1: Product: syz
[  361.505303][ T5839] usb 3-1: Manufacturer: syz
[  361.515536][ T5839] usb 3-1: SerialNumber: syz
[  361.590851][ T5833] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  361.706481][   T51] Bluetooth: hci5: unexpected event 0x31 length: 83 > 6
[  361.764701][ T5833] usb 5-1: Using ep0 maxpacket: 32
[  361.788263][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short
[  361.828847][ T5833] usb 5-1: config 127 has an invalid interface number: 25 but max is 0
[  361.837876][ T5833] usb 5-1: config 127 has no interface number 0
[  361.845460][ T5833] usb 5-1: config 127 interface 25 has no altsetting 0
[  362.086243][ T5833] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11
[  362.096004][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.104539][ T5833] usb 5-1: Product: syz
[  362.108968][ T5833] usb 5-1: Manufacturer: syz
[  362.113975][ T5833] usb 5-1: SerialNumber: syz
[  362.259934][ T5839] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10
[  362.288942][ T5127] bcm5974 3-1:1.0: could not read from device
[  362.368865][ T5839] usb 3-1: USB disconnect, device number 4
[  362.376067][ T5833] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930
[  362.390293][ T5127] bcm5974 3-1:1.0: could not read from device
[  362.416661][ T5127] bcm5974 3-1:1.0: could not read from device
[  362.460742][ T5127] bcm5974 3-1:1.0: could not read from device
[  362.471847][   T51] Bluetooth: hci0: command tx timeout
[  362.651326][ T3814] hsr_slave_0: left promiscuous mode
[  362.683279][ T3814] hsr_slave_1: left promiscuous mode
[  362.693283][ T3814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.701828][ T3814] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.718197][ T3814] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.726653][ T3814] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.759597][ T3814] veth1_macvtap: left promiscuous mode
[  362.768253][ T3814] veth0_macvtap: left promiscuous mode
[  362.774455][ T3814] veth1_vlan: left promiscuous mode
[  362.780293][ T3814] veth0_vlan: left promiscuous mode
[  362.861633][ T5833] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[  363.100364][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short
[  363.597130][ T3814] team0 (unregistering): Port device team_slave_1 removed
[  363.642113][ T5833] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19!
[  363.669854][ T3814] team0 (unregistering): Port device team_slave_0 removed
[  363.927979][ T5833] usb 5-1: USB disconnect, device number 7
[  364.620896][   T51] Bluetooth: hci0: command tx timeout
[  364.779798][ T7304] chnl_net:caif_netlink_parms(): no params data found
[  365.519197][ T7352] delete_channel: no stack
[  365.812990][ T7360] netlink: 57923 bytes leftover after parsing attributes in process `syz.5.437'.
[  366.396560][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.405288][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.413288][ T7304] bridge_slave_0: entered allmulticast mode
[  366.424303][ T7304] bridge_slave_0: entered promiscuous mode
[  366.462682][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.471437][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.479255][ T7304] bridge_slave_1: entered allmulticast mode
[  366.488650][ T7304] bridge_slave_1: entered promiscuous mode
[  366.506958][ T5839] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  366.638963][   T51] Bluetooth: hci0: command tx timeout
[  366.693227][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.716749][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.726786][ T5839] usb 5-1: Using ep0 maxpacket: 32
[  366.755787][ T5839] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  366.767039][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.776056][ T5839] usb 5-1: Product: syz
[  366.780627][ T5839] usb 5-1: Manufacturer: syz
[  366.785482][ T5839] usb 5-1: SerialNumber: syz
[  366.912627][ T5839] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  367.254299][ T7304] team0: Port device team_slave_0 added
[  367.475306][ T7304] team0: Port device team_slave_1 added
[  367.480661][ T7376] loop5: detected capacity change from 0 to 32768
[  367.592852][ T7376] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  367.725003][   T29] audit: type=1800 audit(2000000123.259:5): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.442" name="bus" dev="loop5" ino=17058 res=0 errno=0
[  367.751490][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.764226][ T7380] loop2: detected capacity change from 0 to 1024
[  367.773741][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.802139][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.964807][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.972162][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.998855][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.022076][ T5839] gspca_stk1135: reg_w 0x7 err -71
[  368.028537][ T5839] gspca_stk1135: serial bus timeout: status=0x00
[  368.035267][ T5839] gspca_stk1135: Sensor write failed
[  368.041466][ T5839] gspca_stk1135: serial bus timeout: status=0x00
[  368.048013][ T5839] gspca_stk1135: Sensor write failed
[  368.053705][ T5839] gspca_stk1135: serial bus timeout: status=0x00
[  368.069032][ T5839] gspca_stk1135: Sensor read failed
[  368.077254][ T5839] gspca_stk1135: serial bus timeout: status=0x00
[  368.083891][ T5839] gspca_stk1135: Sensor read failed
[  368.089277][ T5839] gspca_stk1135: Detected sensor type unknown (0x0)
[  368.098704][ T5839] gspca_stk1135: serial bus timeout: status=0x00
[  368.106115][ T5839] gspca_stk1135: Sensor read failed
[  368.111685][ T5839] gspca_stk1135: serial bus timeout: status=0x00
[  368.118232][ T5839] gspca_stk1135: Sensor read failed
[  368.123983][ T5839] gspca_stk1135: serial bus timeout: status=0x00
[  368.130670][ T5839] gspca_stk1135: Sensor write failed
[  368.136230][ T5839] gspca_stk1135: serial bus timeout: status=0x00
[  368.142855][ T5839] gspca_stk1135: Sensor write failed
[  368.148575][ T5839] stk1135 5-1:64.0: probe with driver stk1135 failed with error -71
[  368.176550][ T5839] usb 5-1: USB disconnect, device number 8
[  368.302814][ T6454] ocfs2: Unmounting device (7,5) on (node local)
[  368.432499][ T7304] hsr_slave_0: entered promiscuous mode
[  368.528791][ T7304] hsr_slave_1: entered promiscuous mode
[  368.735081][   T51] Bluetooth: hci0: command tx timeout
[  369.437748][ T5831] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  369.475960][ T7304] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  369.552446][ T7304] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  369.606650][ T7304] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  369.644769][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.656230][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.661149][ T7304] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  369.666449][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  369.686609][ T5831] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  369.696173][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.748832][ T5831] usb 1-1: config 0 descriptor??
[  370.058434][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.453'.
[  370.270692][ T7407] netlink: 'syz.2.454': attribute type 11 has an invalid length.
[  370.278879][ T7407] netlink: 204 bytes leftover after parsing attributes in process `syz.2.454'.
[  370.324454][ T5831] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  370.346126][ T5831] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  370.541187][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.589819][ T7304] 8021q: adding VLAN 0 to HW filter on device team0
[  370.683614][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.691460][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.707756][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.715608][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.890681][ T5831] usb 1-1: USB disconnect, device number 4
[  371.619923][ T7423] netlink: 'syz.2.459': attribute type 33 has an invalid length.
[  371.628100][ T7423] netlink: 152 bytes leftover after parsing attributes in process `syz.2.459'.
[  371.918764][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.425655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  372.443158][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  373.562608][ T7438] sctp: failed to load transform for md5: -2
[  373.594358][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  374.292284][ T7304] veth0_vlan: entered promiscuous mode
[  374.319173][ T7460] loop0: detected capacity change from 0 to 512
[  374.362753][ T7460] EXT4-fs: inline encryption not supported
[  374.393870][ T7304] veth1_vlan: entered promiscuous mode
[  374.529377][ T7460] EXT4-fs error (device loop0): ext4_orphan_get:1389: comm syz.0.469: inode #13: comm syz.0.469: iget: illegal inode #
[  374.580293][ T7460] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.469: couldn't read orphan inode 13 (err -117)
[  374.595202][ T7460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.671263][ T7460] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.469: resize_inode disabled but reserved GDT blocks non-zero
[  374.739754][ T7304] veth0_macvtap: entered promiscuous mode
[  374.855983][ T7304] veth1_macvtap: entered promiscuous mode
[  374.931693][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.943394][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.956506][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.969094][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.980259][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.991886][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.002119][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.010859][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.012836][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.040476][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.053203][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.070735][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.096698][ T7468] netlink: 'syz.2.472': attribute type 1 has an invalid length.
[  375.104776][ T7468] netlink: 'syz.2.472': attribute type 2 has an invalid length.
[  375.122102][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.140218][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.153746][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.166559][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.177270][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.188173][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.198368][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.209245][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.219459][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.236987][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.253769][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.349186][ T7304] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.358555][ T7304] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.369927][ T7304] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.379717][ T7304] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.707636][ T7479] loop2: detected capacity change from 0 to 128
[  376.408733][ T7489] loop2: detected capacity change from 0 to 4096
[  377.329279][ T7500] loop0: detected capacity change from 0 to 1024
[  377.537067][ T7500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.741449][ T7500] EXT4-fs: Ignoring removed orlov option
[  377.770468][ T7500] EXT4-fs (loop0): can't enable nombcache during remount
[  378.211597][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.776183][ T7522] loop4: detected capacity change from 0 to 256
[  378.933690][ T7522] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  379.383887][ T3686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.392243][ T3686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.470143][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.478564][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.815172][ T7538] syz_tun: entered promiscuous mode
[  379.856572][ T7538] syz_tun: left promiscuous mode
[  380.005163][ T7544] mmap: syz.0.493 (7544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  382.364561][ T7586] loop7: detected capacity change from 0 to 2048
[  382.968118][ T7596] loop0: detected capacity change from 0 to 128
[  383.021146][ T7596] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  383.303393][ T7605] loop7: detected capacity change from 0 to 512
[  383.342659][ T7605] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  383.367381][ T7596] FAT-fs (loop0): FAT read failed (blocknr 128)
[  383.617842][ T7605] EXT4-fs (loop7): 1 orphan inode deleted
[  383.623983][ T7605] EXT4-fs (loop7): 1 truncate cleaned up
[  383.637732][ T7605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.954928][ T7605] EXT4-fs error (device loop7): ext4_lookup:1813: inode #16: comm syz.7.512: iget: bad extra_isize 46 (inode size 256)
[  384.098253][ T7605] EXT4-fs (loop7): Remounting filesystem read-only
[  384.401554][ T7617] vlan2: entered promiscuous mode
[  384.406926][ T7617] vlan2: entered allmulticast mode
[  384.465562][ T7611] loop5: detected capacity change from 0 to 40427
[  384.528960][ T7611] F2FS-fs (loop5): Image doesn't support compression
[  384.536460][ T7611] F2FS-fs (loop5): Image doesn't support compression
[  384.537954][ T7304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.569762][ T7611] F2FS-fs (loop5): invalid crc value
[  384.667950][ T7611] F2FS-fs (loop5): Found nat_bits in checkpoint
[  384.937164][ T7611] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  385.254595][ T7628] loop7: detected capacity change from 0 to 128
[  385.321245][ T5839] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  385.561039][ T5839] usb 5-1: Using ep0 maxpacket: 8
[  385.580647][ T5839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  385.637000][ T5839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  385.647298][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.655739][ T5839] usb 5-1: Product: syz
[  385.660271][ T5839] usb 5-1: Manufacturer: syz
[  385.665118][ T5839] usb 5-1: SerialNumber: syz
[  385.767822][ T7633] loop0: detected capacity change from 0 to 1024
[  385.778514][ T7633] EXT4-fs: Ignoring removed orlov option
[  385.784687][ T7633] EXT4-fs: Ignoring removed nomblk_io_submit option
[  386.489593][ T7633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002]
[  386.535129][ T7633] System zones: 0-1, 3-36
[  386.547714][ T7633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.641541][ T5831] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  386.821686][ T5831] usb 6-1: Using ep0 maxpacket: 32
[  386.839576][ T5839] cdc_ncm 5-1:1.0: bind() failure
[  386.873127][ T5839] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  386.938499][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.948897][ T5839] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  386.979239][ T7645] netlink: 830 bytes leftover after parsing attributes in process `syz.2.530'.
[  386.981579][ T5839] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  387.060123][ T5839] usb 5-1: USB disconnect, device number 9
[  387.155432][ T5831] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  387.165058][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.199154][ T5831] usb 6-1: config 0 descriptor??
[  387.233922][ T5831] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  387.517929][ T7650] loop0: detected capacity change from 0 to 1024
[  387.539890][ T7650] EXT4-fs: Ignoring removed nobh option
[  387.546472][ T7650] EXT4-fs: Ignoring removed bh option
[  387.602817][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'.
[  387.640918][ T7650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.039813][ T7663] loop7: detected capacity change from 0 to 256
[  388.190595][ T7663] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[  388.241782][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.284378][ T7668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.538'.
[  388.296320][ T7668] netlink: 'syz.2.538': attribute type 10 has an invalid length.
[  388.318152][ T5831] gspca_vc032x: reg_w err -71
[  388.323353][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.328846][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.335474][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.342281][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.347781][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.348205][ T7668] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  388.353649][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.369091][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.375133][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.380720][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.386205][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.391892][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.397366][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.402983][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.408458][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.414096][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.422298][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.427782][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.434021][ T5831] gspca_vc032x: I2c Bus Busy Wait 00
[  388.440784][ T5831] gspca_vc032x: Unknown sensor...
[  388.446243][ T5831] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  388.474817][ T5831] usb 6-1: USB disconnect, device number 4
[  388.805257][ T7670] loop2: detected capacity change from 0 to 512
[  388.888404][ T7670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  388.889142][ T7677] Bluetooth: MGMT ver 1.23
[  389.142809][ T7670] EXT4-fs (loop2): 1 truncate cleaned up
[  389.150562][ T7670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  389.211815][ T7683] use of bytesused == 0 is deprecated and will be removed in the future,
[  389.220573][ T7683] use the actual size instead.
[  389.453930][   T29] audit: type=1800 audit(2000000144.959:6): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.539" name="file0" dev="loop2" ino=13 res=0 errno=0
[  389.554828][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.573265][ T7687] netlink: 'syz.4.546': attribute type 3 has an invalid length.
[  389.573352][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'.
[  389.772886][ T7691] loop5: detected capacity change from 0 to 128
[  389.868987][   T29] audit: type=1800 audit(2000000145.459:7): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.545" name="bus" dev="loop5" ino=1048633 res=0 errno=0
[  391.466103][ T7720] loop4: detected capacity change from 0 to 64
[  391.807336][ T5839] kernel read not supported for file /video7 (pid: 5839 comm: kworker/1:4)
[  392.701682][ T7738] loop0: detected capacity change from 0 to 512
[  392.717373][ T7738] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  392.787785][ T7738] EXT4-fs (loop0): 1 truncate cleaned up
[  392.795676][ T7738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.552211][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.131378][ T7747] loop4: detected capacity change from 0 to 32768
[  394.166157][ T7747] jfs_mount: dbMount failed w/rc = -22
[  394.181588][ T7747] Mount JFS Failure: -22
[  394.186048][ T7747] jfs_mount failed w/return code = -22
[  395.973899][ T7759] loop4: detected capacity change from 0 to 256
[  396.027079][ T7759] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  396.084208][ T5831] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  396.135754][   T29] audit: type=1804 audit(2000000151.729:8): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.573" name="/newroot/131/file1/file1" dev="loop4" ino=1048634 res=1 errno=0
[  396.222107][ T7759] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008)
[  396.255859][ T7764] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295)
[  396.255859][ T7764] 
[  396.268807][ T7764] exFAT-fs (loop4): error, failed to bmap (inode : ffff8881236280b0 iblock : 0, err : -5)
[  396.291237][ T5831] usb 6-1: Using ep0 maxpacket: 32
[  396.293761][ T7764] exFAT-fs (loop4): write: fail to zero from 0 to 3707(-5)
[  396.378423][ T5831] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  396.390507][ T5831] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  396.402186][ T5831] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  396.480531][ T5831] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  396.489907][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  396.498713][ T5831] usb 6-1: Product: syz
[  396.503252][ T5831] usb 6-1: Manufacturer: syz
[  396.508214][ T5831] usb 6-1: SerialNumber: syz
[  396.560340][ T5831] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input11
[  396.894216][ T7757] loop5: detected capacity change from 0 to 512
[  396.917198][ T7757] EXT4-fs: inline encryption not supported
[  396.989927][ T7757] EXT4-fs (loop5): failed to initialize system zone (-117)
[  397.086406][ T7757] EXT4-fs (loop5): mount failed
[  397.285634][ T7776] loop2: detected capacity change from 0 to 4096
[  397.460272][ T5839] usb 6-1: USB disconnect, device number 5
[  397.602941][ T5839] appletouch 6-1:1.0: input: appletouch disconnected
[  398.394074][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.585'.
[  398.785664][ T7790] loop7: detected capacity change from 0 to 32768
[  398.808272][ T7790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.584 (7790)
[  398.832734][ T7790] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  398.843651][ T7790] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm
[  398.853459][ T7790] BTRFS info (device loop7): using free-space-tree
[  399.328353][ T7304] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  400.894562][ T7838] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  401.209555][ T7842] pimreg: entered allmulticast mode
[  401.221490][ T7842] pimreg: left allmulticast mode
[  401.359953][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'.
[  401.792707][ T7855] loop2: detected capacity change from 0 to 256
[  401.877673][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[  401.890887][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'.
[  402.150663][ T7863] loop7: detected capacity change from 0 to 47
[  402.193076][ T7853] loop4: detected capacity change from 0 to 2048
[  402.384936][ T7853] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  402.393033][ T7853] UDF-fs: Scanning with blocksize 512 failed
[  402.441127][ T7853] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  402.484851][ T7853] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  402.581870][ T7869] loop0: detected capacity change from 0 to 2048
[  402.590925][ T7869] EXT4-fs: Ignoring removed i_version option
[  402.658979][ T7853] loop4: detected capacity change from 0 to 512
[  402.793266][ T7876] loop7: detected capacity change from 0 to 2048
[  402.809389][ T7869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.849711][ T7853] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.605: invalid block
[  402.912138][ T7853] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.605: invalid indirect mapped block 4294967295 (level 1)
[  402.939370][ T7876] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  402.947508][ T7876] UDF-fs: Scanning with blocksize 512 failed
[  402.961373][ T7853] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.605: invalid indirect mapped block 4294967295 (level 1)
[  402.994936][ T7853] EXT4-fs (loop4): 2 truncates cleaned up
[  403.003043][ T7853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.047630][ T7876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  403.141949][ T7879] loop2: detected capacity change from 0 to 1024
[  403.278808][ T7879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.370725][   T29] audit: type=1804 audit(2000000158.939:9): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.615" name="/newroot/145/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  403.455889][ T4520] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  403.482063][ T4520] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  403.500291][ T4520] EXT4-fs (loop0): This should not happen!! Data will be lost
[  403.500291][ T4520] 
[  403.540690][ T4520] EXT4-fs (loop0): Total free blocks count 0
[  403.546921][ T4520] EXT4-fs (loop0): Free/Dirty block details
[  403.557053][ T4520] EXT4-fs (loop0): free_blocks=2415919104
[  403.564084][ T4520] EXT4-fs (loop0): dirty_blocks=32
[  403.569425][ T4520] EXT4-fs (loop0): Block reservation details
[  403.575853][ T4520] EXT4-fs (loop0): i_reserved_data_blocks=2
[  403.585020][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.606411][ T4520] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  403.619379][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  403.619626][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  403.648903][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.883923][ T5839] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  405.201098][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  405.350971][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.362401][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.375288][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  405.389433][ T5839] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  405.398958][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.473029][ T5839] usb 3-1: config 0 descriptor??
[  405.525855][ T7920] loop0: detected capacity change from 0 to 512
[  405.570909][ T7920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  405.658961][ T7929] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  405.658961][ T7929] The task syz.5.633 (7929) triggered the difference, watch for misbehavior.
[  405.687897][ T7920] EXT4-fs (loop0): 1 truncate cleaned up
[  405.696203][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.944566][ T7933] loop4: detected capacity change from 0 to 256
[  406.038417][ T1537] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  406.091655][ T5839] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0008/input/input12
[  406.124556][ T5839] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0008/input/input13
[  406.160390][ T5795] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  406.199063][ T5839] kye 0003:0458:5011.0008: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  406.201888][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.275676][ T1537] usb 8-1: Using ep0 maxpacket: 16
[  406.310317][ T1537] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  406.319770][ T1537] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.328232][ T1537] usb 8-1: Product: syz
[  406.332760][ T1537] usb 8-1: Manufacturer: syz
[  406.337604][ T1537] usb 8-1: SerialNumber: syz
[  406.382778][ T1537] usb 8-1: config 0 descriptor??
[  406.400971][ T1537] ums-onetouch 8-1:0.0: USB Mass Storage device detected
[  406.532808][ T7937] loop0: detected capacity change from 0 to 512
[  406.543529][ T7937] ext4: Unknown parameter 'fowner>00000000000000000000'
[  406.557527][ T5833] usb 3-1: USB disconnect, device number 5
[  406.712527][ T5831] usb 8-1: USB disconnect, device number 2
[  406.783733][ T7941] gfs2: gfs2 mount does not exist
[  407.445991][ T7952] netlink: 128 bytes leftover after parsing attributes in process `syz.0.640'.
[  407.967688][ T7963] loop4: detected capacity change from 0 to 764
[  408.012935][ T7964] loop2: detected capacity change from 0 to 512
[  408.078819][ T7964] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  408.145785][ T7964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  408.155779][ T7964] System zones: 1-12
[  408.237036][ T7964] EXT4-fs (loop2): 1 truncate cleaned up
[  408.245265][ T7964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.708712][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.913458][ T7981] loop7: detected capacity change from 0 to 1024
[  409.065617][ T7985] pim6reg1: entered promiscuous mode
[  409.071619][ T7985] pim6reg1: entered allmulticast mode
[  409.456241][ T7981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.537610][ T5833] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  409.550420][ T5833] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  409.577074][ T7998] loop5: detected capacity change from 0 to 128
[  409.628200][ T7996] loop4: detected capacity change from 0 to 1024
[  409.643883][ T7996] EXT4-fs: Ignoring removed nomblk_io_submit option
[  409.702392][ T7996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  409.727096][ T7998] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  409.745798][ T7997] EXT4-fs error (device loop7): __ext4_remount:6749: comm syz.7.651: Abort forced by user
[  409.782389][ T7981] overlayfs: failed to create directory ./file1/work (errno: 5); mounting read-only
[  409.792652][ T7981] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null.
[  409.809029][ T7997] EXT4-fs (loop7): Remounting filesystem read-only
[  409.816074][ T7997] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  409.831646][ T7998] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  409.878444][ T7997] overlayfs: failed to get origin (-5)
[  409.938335][ T7996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.057662][ T5833] kernel write not supported for file /uhid (pid: 5833 comm: kworker/0:4)
[  410.060860][ T7998] netlink: 88 bytes leftover after parsing attributes in process `syz.5.658'.
[  410.078770][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'.
[  410.328596][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.496244][ T6454] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  410.636823][ T7304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.670193][ T3686] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.805676][ T5782] Bluetooth: hci5: command 0x0406 tx timeout
[  411.180606][ T3686] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.418610][ T3686] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.604406][ T3686] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.716563][ T8022] loop2: detected capacity change from 0 to 256
[  411.728320][ T8022] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  411.752063][ T8022] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  411.762386][ T8022] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  411.770512][ T8022] UDF-fs: Scanning with blocksize 512 failed
[  411.842414][ T8021] loop0: detected capacity change from 0 to 512
[  411.844991][ T8022] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  411.870387][ T8021] EXT4-fs (loop0): Test dummy encryption mode enabled
[  411.877438][ T8021] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  412.034019][ T8021] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002]
[  412.050885][ T8022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  412.069753][ T8021] System zones: 1-12
[  412.093931][ T8021] EXT4-fs (loop0): 1 truncate cleaned up
[  412.102018][ T8021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.154957][ T3686] bridge_slave_1: left allmulticast mode
[  412.161037][ T3686] bridge_slave_1: left promiscuous mode
[  412.167644][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.246847][ T3686] bridge_slave_0: left allmulticast mode
[  412.253433][ T3686] bridge_slave_0: left promiscuous mode
[  412.260156][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.303708][ T8021] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1835363691 (only 1 groups)
[  412.389022][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  412.408263][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  412.589138][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  412.601939][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.667052][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  412.678899][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  412.690343][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  412.904580][ T3686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  413.030928][ T3686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.077299][ T3686] bond0 (unregistering): Released all slaves
[  413.976086][ T8053] loop2: detected capacity change from 0 to 64
[  414.040745][ T5833] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  414.120241][   T29] audit: type=1800 audit(2000000170.713:10): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.680" name="bus" dev="loop2" ino=21 res=0 errno=0
[  414.226937][ T3686] hsr_slave_0: left promiscuous mode
[  414.237674][ T3686] hsr_slave_1: left promiscuous mode
[  414.261333][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  414.269340][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.289244][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  414.297250][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.321479][ T5833] usb 5-1: Using ep0 maxpacket: 16
[  414.321577][ T3686] veth1_macvtap: left promiscuous mode
[  414.332643][ T3686] veth0_macvtap: left promiscuous mode
[  414.338536][ T3686] veth1_vlan: left promiscuous mode
[  414.344253][ T3686] veth0_vlan: left promiscuous mode
[  414.344495][ T5833] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  414.360693][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  414.369042][ T5833] usb 5-1: Product: syz
[  414.376965][ T5833] usb 5-1: Manufacturer: syz
[  414.385004][ T5833] usb 5-1: SerialNumber: syz
[  414.427358][ T5785] hfs: request for non-existent node 131072 in B*Tree
[  414.593839][ T5833] usb 5-1: config 0 descriptor??
[  414.837399][ T5833] usb 5-1: USB disconnect, device number 10
[  414.975146][ T5782] Bluetooth: hci0: command tx timeout
[  415.149963][ T3686] team0 (unregistering): Port device team_slave_1 removed
[  415.189517][ T3686] team0 (unregistering): Port device team_slave_0 removed
[  416.329091][ T8075] loop2: detected capacity change from 0 to 128
[  416.336925][ T8029] chnl_net:caif_netlink_parms(): no params data found
[  416.933776][ T5833] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  417.034972][ T5782] Bluetooth: hci0: command tx timeout
[  417.162725][ T5833] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  417.174126][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  417.185748][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.196006][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  417.209640][ T5833] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[  417.219941][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.287641][ T8089] loop4: detected capacity change from 0 to 2048
[  417.305347][ T8089] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  417.370666][ T5833] usb 6-1: config 0 descriptor??
[  417.394307][ T8089] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  417.415704][ T8095] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  417.461679][ T8089] Remounting filesystem read-only
[  417.574990][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.584078][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.592555][ T8029] bridge_slave_0: entered allmulticast mode
[  417.601736][ T8029] bridge_slave_0: entered promiscuous mode
[  417.733832][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.741828][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.749618][ T8029] bridge_slave_1: entered allmulticast mode
[  417.761610][ T8029] bridge_slave_1: entered promiscuous mode
[  417.818760][ T8098] loop0: detected capacity change from 0 to 128
[  417.914871][ T5833] hid-rmi 0003:17EF:6085.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.5-1/input0
[  417.976939][ T8098] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  417.989935][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.012332][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.063283][ T8098] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.101507][ T1537] usb 6-1: USB disconnect, device number 6
[  418.213079][ T8029] team0: Port device team_slave_0 added
[  418.288227][ T8029] team0: Port device team_slave_1 added
[  418.398653][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.406681][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.433317][ T8029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.506786][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.514600][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.540818][    C1] vkms_vblank_simulate: vblank timer overrun
[  418.552852][ T8029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.631275][ T5795] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  418.912231][ T8029] hsr_slave_0: entered promiscuous mode
[  419.020314][ T8029] hsr_slave_1: entered promiscuous mode
[  419.129249][ T5833] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0
[  419.137339][ T5833] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0
[  419.165317][ T5782] Bluetooth: hci0: command tx timeout
[  419.174806][ T8113] loop5: detected capacity change from 0 to 128
[  419.203184][ T5833] hid-generic 0000:0003:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  419.463811][ T8113] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  419.510993][ T8113] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  419.543208][    C1] vkms_vblank_simulate: vblank timer overrun
[  419.604813][ T8113] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 27 (only 1 groups)
[  420.043781][ T6454] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  420.164313][ T8126] loop2: detected capacity change from 0 to 256
[  420.264475][ T8029] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  420.290945][ T8029] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  420.319889][ T8029] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  420.347432][ T8029] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  421.021298][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.2.709'.
[  421.067317][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.2.709'.
[  421.190369][ T5782] Bluetooth: hci0: command tx timeout
[  421.434888][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.495780][ T8144] loop5: detected capacity change from 0 to 256
[  421.500119][ T8029] 8021q: adding VLAN 0 to HW filter on device team0
[  421.511904][ T8144] exFAT-fs (loop5): invalid fs_name
[  421.518656][ T8144] exFAT-fs (loop5): failed to read boot sector
[  421.526052][ T8144] exFAT-fs (loop5): failed to recognize exfat type
[  421.662174][ T8144] netlink: 'syz.5.710': attribute type 3 has an invalid length.
[  421.670252][ T8144] netlink: 9814 bytes leftover after parsing attributes in process `syz.5.710'.
[  421.698949][ T3686] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.706750][ T3686] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.724612][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.732445][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.845177][ T1880] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  421.974210][ T5839] kernel write not supported for file /input/mice (pid: 5839 comm: kworker/1:4)
[  422.035890][ T1880] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  422.046551][ T1880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.091922][ T1880] usb 3-1: config 0 descriptor??
[  422.214814][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  422.345107][ T8147] loop2: detected capacity change from 0 to 64
[  422.549846][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.562227][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.573301][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  422.586855][    T8] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[  422.596762][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.709114][    T8] usb 5-1: config 0 descriptor??
[  422.965083][ T1880] [drm:udl_init] *ERROR* Selecting channel failed
[  423.177138][ T1880] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  423.185678][ T1880] [drm] Initialized udl on minor 2
[  423.227688][    T8] holtek_mouse 0003:04D9:A070.000C: item fetching failed at offset 1/5
[  423.405465][    T8] holtek_mouse 0003:04D9:A070.000C: hid parse failed: -22
[  423.413494][    T8] holtek_mouse 0003:04D9:A070.000C: probe with driver holtek_mouse failed with error -22
[  423.452291][ T1880] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  423.463063][ T1880] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  423.473901][ T8156] loop5: detected capacity change from 0 to 40427
[  423.499384][ T8156] F2FS-fs (loop5): Image doesn't support compression
[  423.501975][ T5833] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  423.506699][ T8156] F2FS-fs (loop5): Image doesn't support compression
[  423.568480][ T8156] F2FS-fs (loop5): invalid crc value
[  423.579222][ T5833] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  423.588329][ T5833] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  423.616437][ T1880] usb 3-1: USB disconnect, device number 6
[  423.624871][    T8] usb 5-1: USB disconnect, device number 11
[  423.629397][ T8156] F2FS-fs (loop5): Found nat_bits in checkpoint
[  423.917303][ T8156] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  424.189419][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.397049][ T8029] veth0_vlan: entered promiscuous mode
[  426.472408][ T8029] veth1_vlan: entered promiscuous mode
[  426.718527][ T8029] veth0_macvtap: entered promiscuous mode
[  426.752882][ T8029] veth1_macvtap: entered promiscuous mode
[  426.891150][ T1880] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  426.920445][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.931293][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.942503][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.954470][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.964676][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.978705][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.989127][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.000437][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.010668][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.021525][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.036397][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.184428][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.727'.
[  427.195322][ T8204] netlink: 172 bytes leftover after parsing attributes in process `syz.4.727'.
[  427.205419][ T8204] netlink: 132 bytes leftover after parsing attributes in process `syz.4.727'.
[  427.230317][ T1880] usb 6-1: Using ep0 maxpacket: 32
[  427.243650][ T1880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.256003][ T1880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.266691][ T1880] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  427.276449][ T1880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.373159][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.386011][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.396842][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.402464][ T1880] usb 6-1: config 0 descriptor??
[  427.407518][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.422792][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.433557][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.443851][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.460238][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.472063][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.478687][ T8202] loop2: detected capacity change from 0 to 4096
[  427.484587][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.505848][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.621317][ T8029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.630492][ T8029] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.639516][ T8029] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.648746][ T8029] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.711589][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  427.883784][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  427.895306][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  428.001116][    T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  428.011053][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  428.019343][    T8] usb 1-1: SerialNumber: syz
[  428.037677][ T1880] nintendo 0003:057E:200E.000D: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0
[  428.100971][ T1880] nintendo 0003:057E:200E.000D: Failed charging grip handshake
[  428.109103][ T1880] nintendo 0003:057E:200E.000D: Failed to initialize controller; ret=-110
[  428.127258][ T1880] nintendo 0003:057E:200E.000D: probe - fail = -110
[  428.135868][ T1880] nintendo 0003:057E:200E.000D: probe with driver nintendo failed with error -110
[  428.194126][ T1880] usb 6-1: USB disconnect, device number 7
[  428.296018][    T8] usb 1-1: 0:2 : does not exist
[  428.390221][    T8] usb 1-1: USB disconnect, device number 5
[  429.746530][ T8229] loop5: detected capacity change from 0 to 1024
[  429.762825][ T8229] EXT4-fs: Ignoring removed orlov option
[  429.768828][ T8229] EXT4-fs: Ignoring removed nomblk_io_submit option
[  429.920661][ T8232] program syz.2.735 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  429.934969][ T8234] loop0: detected capacity change from 0 to 128
[  430.013770][ T8229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.031139][ T8234] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  430.063640][ T8234] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  430.190272][ T1537] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  430.305953][ T8243] syz.2.738 (8243): attempted to duplicate a private mapping with mremap.  This is not supported.
[  430.403068][ T1537] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  430.412736][ T1537] usb 5-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3
[  430.421353][ T1537] usb 5-1: Product: syz
[  430.430298][ T1537] usb 5-1: Manufacturer: syz
[  430.435150][ T1537] usb 5-1: SerialNumber: syz
[  430.437144][ T6454] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.556435][ T1537] usb 5-1: config 0 descriptor??
[  430.604078][ T1537] ch341 5-1:0.0: ch341-uart converter detected
[  430.673567][ T5795] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  431.114853][ T8252] loop2: detected capacity change from 0 to 256
[  431.148121][ T8252] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  431.254007][ T8252] ¯®hْш»†ë3ú: renamed from lo (while UP)
[  431.604586][ T1537] usb 5-1: failed to send control message: -71
[  431.611398][ T1537] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  431.649913][ T1537] usb 5-1: USB disconnect, device number 12
[  431.662332][ T1537] ch341 5-1:0.0: device disconnected
[  431.862517][ T8262] program syz.5.745 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  431.879316][ T8263] loop2: detected capacity change from 0 to 8
[  431.942841][ T8263] SQUASHFS error: lzo decompression failed, data probably corrupt
[  431.952698][ T8263] SQUASHFS error: Failed to read block 0x91: -5
[  431.961187][ T8263] SQUASHFS error: Unable to read metadata cache entry [8f]
[  431.971237][ T8263] SQUASHFS error: Unable to read inode 0x11f
[  432.174271][ T8263] loop2: detected capacity change from 0 to 1024
[  432.709659][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.718028][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.887156][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.895552][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.435798][ T8284] loop8: detected capacity change from 0 to 512
[  433.561256][ T8284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.574505][ T8284] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  433.609284][ T8287] loop4: detected capacity change from 0 to 2048
[  433.712661][ T8287] EXT4-fs error (device loop4): __ext4_fill_super:5505: inode #2: comm syz.4.752: iget: bad extra_isize 6 (inode size 256)
[  433.769551][ T8287] EXT4-fs (loop4): get root inode failed
[  433.776030][ T8287] EXT4-fs (loop4): mount failed
[  433.795817][ T8284] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 3: comm syz.8.671: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  433.862116][ T8284] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 12: comm syz.8.671: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  433.895262][ T8284] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 13: comm syz.8.671: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  433.955488][ T8284] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 14: comm syz.8.671: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  433.975811][    C1] vkms_vblank_simulate: vblank timer overrun
[  434.128580][ T8284] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 15: comm syz.8.671: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  434.181974][ T8284] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 16: comm syz.8.671: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  434.532576][ T8029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.919585][ T8319] capability: warning: `syz.8.759' uses 32-bit capabilities (legacy support in use)
[  435.374515][ T8309] loop0: detected capacity change from 0 to 4096
[  435.456022][ T8315] loop2: detected capacity change from 0 to 4096
[  435.467834][ T8315] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff'
[  435.651956][    T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  436.093841][    T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  436.104439][    T8] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  436.155077][    T8] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  436.167368][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  436.171449][ T8325] loop2: detected capacity change from 0 to 128
[  436.176170][    T8] usb 9-1: SerialNumber: syz
[  436.473300][    T8] usb 9-1: 0:2 : does not exist
[  436.511375][ T8325] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  436.537199][ T8325] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  436.926859][ T8317] loop5: detected capacity change from 0 to 40427
[  437.001666][    T8] usb 9-1: USB disconnect, device number 2
[  437.011388][ T8317] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff
[  437.020718][ T8317] F2FS-fs (loop5): heap/no_heap options were deprecated
[  437.094958][ T8317] F2FS-fs (loop5): invalid crc value
[  437.108025][ T8317] F2FS-fs (loop5): Found nat_bits in checkpoint
[  437.412300][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  437.475862][ T8317] F2FS-fs (loop5): Start checkpoint disabled!
[  437.547756][ T8317] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  438.177929][ T4052] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0xad6/0x3da0
[  438.189847][ T4052] F2FS-fs (loop5): invalid blkaddr: 4614, type: 7, run fsck to fix.
[  438.240960][ T4052] kworker/u8:18: attempt to access beyond end of device
[  438.240960][ T4052] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  438.255942][ T4052] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  438.263266][ T4052] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  438.817587][ T8355] loop8: detected capacity change from 0 to 128
[  438.865278][ T8355] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  438.994375][ T8355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  439.135496][ T8355] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  439.923589][ T8371] sit0: entered promiscuous mode
[  439.929548][ T8371] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  439.937773][ T8371] netlink: 1 bytes leftover after parsing attributes in process `syz.2.783'.
[  445.245151][ T8420] loop2: detected capacity change from 0 to 1024
[  445.327549][ T8420] EXT4-fs: Ignoring removed orlov option
[  445.334045][ T8420] EXT4-fs: Ignoring removed nomblk_io_submit option
[  445.465493][ T8420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002]
[  445.652124][    T8] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  445.712348][ T8420] System zones: 0-1, 3-36
[  445.943280][ T8420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.020424][    T8] usb 9-1: Using ep0 maxpacket: 8
[  446.062540][    T8] usb 9-1: config index 0 descriptor too short (expected 6427, got 27)
[  446.071204][    T8] usb 9-1: config 0 has an invalid interface number: 21 but max is 0
[  446.079655][    T8] usb 9-1: config 0 has no interface number 0
[  446.086183][    T8] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  446.099077][    T8] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  446.111143][    T8] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  446.228790][    T8] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  446.238601][    T8] usb 9-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  446.247060][    T8] usb 9-1: Product: syz
[  446.305203][ T8383] Set syz1 is full, maxelem 65536 reached
[  446.574327][    T8] usb 9-1: config 0 descriptor??
[  446.598052][ T8424] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  446.754272][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.253498][    T8] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.21/input/input14
[  447.323973][ T1537] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  447.477352][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  447.491521][    T8] usb 9-1: USB disconnect, device number 3
[  447.491749][    C0] keyspan_remote 9-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  447.613805][ T8449] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0)
[  447.700984][ T1537] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.712309][ T1537] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  447.726698][ T1537] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  447.736822][ T1537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.769715][ T1537] usb 6-1: config 0 descriptor??
[  447.953961][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'.
[  447.965254][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'.
[  448.368149][ T1537] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  448.405668][ T1537] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  448.642341][ T8460] loop4: detected capacity change from 0 to 4096
[  448.696338][ T1537] usb 6-1: USB disconnect, device number 8
[  448.816689][ T8464] loop8: detected capacity change from 0 to 128
[  448.870071][ T8464] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  448.919215][ T8464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  450.520715][    T8] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  450.732097][    T8] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  450.741778][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.864444][    T8] usb 9-1: config 0 descriptor??
[  450.978688][    T8] cp210x 9-1:0.0: cp210x converter detected
[  451.385703][    T8] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[  451.651373][    T8] usb 9-1: cp210x converter now attached to ttyUSB0
[  451.813356][    T8] usb 9-1: USB disconnect, device number 4
[  451.896090][    T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  452.027675][    T8] cp210x 9-1:0.0: device disconnected
[  452.057179][ T8490] loop4: detected capacity change from 0 to 65536
[  452.247826][ T8490] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  452.403071][ T8509] loop2: detected capacity change from 0 to 1024
[  452.412660][ T8490] XFS (loop4): Ending clean mount
[  452.676571][ T5060] hfsplus: b-tree write err: -5, ino 4
[  452.887624][ T5783] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  453.500897][    T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  453.703103][    T8] usb 9-1: Using ep0 maxpacket: 32
[  453.825259][    T8] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  453.833897][    T8] usb 9-1: config 0 has no interface number 0
[  453.892221][    T8] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  453.902924][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.911617][    T8] usb 9-1: Product: syz
[  453.916070][    T8] usb 9-1: Manufacturer: syz
[  453.921023][    T8] usb 9-1: SerialNumber: syz
[  453.951886][    T8] usb 9-1: config 0 descriptor??
[  453.975048][    T8] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  454.142692][ T8535] loop2: detected capacity change from 0 to 64
[  454.181199][    T8] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  454.219901][    T8] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  454.424977][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.435214][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.616366][ T8540] loop4: detected capacity change from 0 to 8
[  454.929102][    C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[  454.940197][    T8] usb 9-1: USB disconnect, device number 5
[  454.954738][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  454.977775][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  454.991931][    T8] quatech2 9-1:0.51: device disconnected
[  455.381706][ T8550] loop2: detected capacity change from 0 to 512
[  455.608704][ T8550] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.849: casefold flag without casefold feature
[  455.660586][ T8550] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.849: couldn't read orphan inode 15 (err -117)
[  455.719205][ T8556] loop0: detected capacity change from 0 to 256
[  455.751738][ T8550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.809393][ T8556] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  456.579402][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.649139][ T8564] loop8: detected capacity change from 0 to 32768
[  456.686658][ T8566] loop0: detected capacity change from 0 to 16
[  456.858606][ T8564] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  456.882458][ T8564] bcachefs (loop8): recovering from clean shutdown, journal seq 10
[  456.892625][ T8564] bcachefs (loop8): Version upgrade required:
[  456.892625][ T8564] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  456.892625][ T8564] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  456.892625][ T8564]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  457.001313][ T8564] bcachefs (loop8): dropping and reconstructing all alloc info
[  457.181617][ T8564] bcachefs (loop8): check_topology... done
[  457.187869][ T8564] bcachefs (loop8): accounting_read... done
[  457.280309][ T8564] bcachefs (loop8): alloc_read... done
[  457.288500][ T8564] bcachefs (loop8): stripes_read... done
[  457.294781][ T8564] bcachefs (loop8): snapshots_read... done
[  457.301378][ T8564] bcachefs (loop8): check_allocations... done
[  457.470920][ T8564] bcachefs (loop8): going read-write
[  457.559611][ T8589] loop2: detected capacity change from 0 to 1024
[  457.612164][ T8589] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  457.641409][ T8564] bcachefs (loop8): done starting filesystem
[  457.778210][ T8589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.870507][ T8564] syz.8.853 (8564) used greatest stack depth: 4032 bytes left
[  457.939004][ T8029] bcachefs (loop8): shutting down
[  457.945691][ T8029] bcachefs (loop8): going read-only
[  457.953360][ T8029] bcachefs (loop8): finished waiting for writes to stop
[  457.969419][ T8598] 9pnet_fd: Insufficient options for proto=fd
[  458.041784][ T8029] bcachefs (loop8): flushing journal and stopping allocators, journal seq 11
[  458.112015][ T8029] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 12
[  458.158507][ T8029] bcachefs (loop8): unshutdown complete, journal seq 13
[  458.166372][ T8029] bcachefs (loop8): done going read-only, filesystem not clean
[  458.252430][ T8029] bcachefs (loop8): shutdown complete
[  458.368122][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.503122][ T8608] loop0: detected capacity change from 0 to 24
[  459.181855][ T8616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.319409][ T8616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.340326][ T8616] bond0 (unregistering): Released all slaves
[  460.702562][ T8636] loop4: detected capacity change from 0 to 1024
[  460.765436][ T8636] EXT4-fs: Ignoring removed orlov option
[  460.772381][ T8636] EXT4-fs: Ignoring removed oldalloc option
[  460.860462][ T8636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  460.924689][ T8636] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  460.936182][ T8636] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  461.024443][ T8636] EXT4-fs (loop4): invalid journal inode
[  461.030782][ T8636] EXT4-fs (loop4): can't get journal size
[  461.112665][ T8636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  461.134006][ T8641] loop0: detected capacity change from 0 to 1024
[  461.144673][ T8641] EXT4-fs: inline encryption not supported
[  461.151696][ T8641] EXT4-fs: Ignoring removed orlov option
[  461.163561][ T8641] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  461.256445][ T8641] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  461.350783][ T8641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.674928][ T8653] loop8: detected capacity change from 0 to 512
[  461.704101][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.977478][ T8653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.990661][ T8653] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.021649][ T8662] batadv_slave_1: entered promiscuous mode
[  462.024389][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.032267][ T8659] batadv_slave_1: left promiscuous mode
[  462.135566][ T8653] EXT4-fs error (device loop8): ext4_get_first_dir_block:3539: inode #12: comm syz.8.864: Directory hole found for htree leaf block 0
[  462.311914][ T8029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.679811][ T1880] kernel write not supported for file /502/attr/exec (pid: 1880 comm: kworker/0:2)
[  462.766610][ T8668] loop5: detected capacity change from 0 to 2048
[  462.818149][ T8668] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  462.858964][ T8676] loop4: detected capacity change from 0 to 512
[  462.867999][ T8676] ext4: Bad value for 'barrier'
[  462.901819][ T8676] loop4: detected capacity change from 0 to 512
[  462.916749][ T8676] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  462.918591][ T8677] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  462.955923][ T8676] EXT4-fs (loop4): orphan cleanup on readonly fs
[  462.977000][ T8676] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.890: bad orphan inode 15
[  463.011195][ T8676] ext4_test_bit(bit=14, block=18) = 1
[  463.017943][ T8676] is_bad_inode(inode)=0
[  463.022436][ T8676] NEXT_ORPHAN(inode)=1023
[  463.026960][ T8676] max_ino=32
[  463.030627][ T8676] i_nlink=0
[  463.047565][ T8676] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.890: corrupted inode contents
[  463.063358][ T8676] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #15: comm syz.4.890: mark_inode_dirty error
[  463.080292][ T8676] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.890: corrupted inode contents
[  463.101653][ T8676] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #15: comm syz.4.890: mark_inode_dirty error
[  463.125354][   T29] audit: type=1800 audit(2000000219.703:11): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.888" name="file2" dev="loop5" ino=16 res=0 errno=0
[  463.127834][ T8676] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #15: comm syz.4.890: mark inode dirty (error -117)
[  463.171961][ T8676] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117)
[  463.183023][ T8676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  463.249433][ T8668] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  463.261999][ T8668] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16)
[  463.325570][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.360884][ T8668] Remounting filesystem read-only
[  463.847491][ T8687] loop0: detected capacity change from 0 to 1764
[  463.877555][ T6454] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  465.002743][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  465.009445][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  465.690357][ T8710] loop8: detected capacity change from 0 to 40427
[  465.702798][ T8710] F2FS-fs (loop8): heap/no_heap options were deprecated
[  465.710861][ T8710] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff
[  465.719829][ T8710] F2FS-fs (loop8): heap/no_heap options were deprecated
[  465.727261][ T8710] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x3
[  465.735604][ T8710] F2FS-fs (loop8): Image doesn't support compression
[  465.742850][ T8710] F2FS-fs (loop8): Image doesn't support compression
[  465.755731][ T8710] F2FS-fs (loop8): invalid crc value
[  465.784232][ T8710] F2FS-fs (loop8): Found nat_bits in checkpoint
[  466.072381][ T8710] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  466.120625][ T8722] loop2: detected capacity change from 0 to 2048
[  466.146876][ T1537] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  466.321546][ T8727] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  466.400553][ T1537] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  466.412091][ T1537] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.425048][ T1537] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.435740][ T1537] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  466.459480][ T8029] syz-executor: attempt to access beyond end of device
[  466.459480][ T8029] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  466.479723][ T8029] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  466.489210][ T1537] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  466.500259][ T1537] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  466.505606][ T8725] loop4: detected capacity change from 0 to 8192
[  466.508519][ T1537] usb 6-1: Manufacturer: syz
[  466.595246][ T8727] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  466.607457][ T8727] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  466.625309][ T8727] Remounting filesystem read-only
[  466.720935][ T8722] NILFS (loop2): mounting fs with errors
[  466.759691][ T8722] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  466.769903][ T8722] Remounting filesystem read-only
[  466.776266][ T8722] NILFS (loop2): error -5 reading inode: ino=2
[  466.783384][ T8722] NILFS (loop2): cannot mark inode dirty (ino=2): error -5 loading inode block
[  466.818788][ T1537] usb 6-1: config 0 descriptor??
[  467.482691][ T5785] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  467.512259][ T5785] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  467.675682][ T1537] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  467.714243][ T1537] appleir 0003:05AC:8243.000F: No inputs registered, leaving
[  467.781451][ T1537] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  468.049855][ T1537] usb 6-1: USB disconnect, device number 9
[  468.680517][ T1880] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  468.864569][ T1880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.876278][ T1880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.886642][ T1880] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  468.899257][ T1880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.002723][ T8753] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x0)
[  469.023438][ T1880] usb 5-1: config 0 descriptor??
[  469.576077][ T1880] logitech-djreceiver 0003:046D:C534.0010: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.4-1/input0
[  469.798647][ T1880] usb 5-1: USB disconnect, device number 13
[  471.429493][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.439416][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.447830][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.455629][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.463502][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.471308][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.478988][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.492586][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.501956][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.509651][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.519370][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.528072][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.536012][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.545758][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.554171][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.561976][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.569678][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.577432][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.585216][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.598868][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.608291][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.616449][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.626222][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.634601][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.644510][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.652841][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.660683][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.668357][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.676135][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.683915][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.697405][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.706873][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.714671][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.724457][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.732774][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.740583][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.750286][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.758009][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.766450][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.774230][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.782054][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.789740][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.803493][ T1537] hid-generic 0000:000E:0009.0011: unknown main item tag 0x0
[  471.843843][ T8774] loop0: detected capacity change from 0 to 2048
[  472.009164][ T1537] hid-generic 0000:000E:0009.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  472.023110][ T8774] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  472.035089][ T8774] NILFS (loop0): mounting unchecked fs
[  472.041525][ T8774] NILFS (loop0): recovery required for readonly filesystem
[  472.048973][ T8774] NILFS (loop0): write access will be enabled during recovery
[  472.080707][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  472.081014][ T8774] NILFS (loop0): norecovery option specified, skipping roll-forward recovery
[  472.114990][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  472.123458][ T1880] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  472.159393][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  472.200542][ T8774] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state
[  472.241620][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  472.297811][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  472.313708][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  472.404165][ T1880] usb 9-1: config 0 has no interfaces?
[  472.411042][ T1880] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  472.421228][ T1880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.519925][ T1880] usb 9-1: config 0 descriptor??
[  472.720632][ T8791] loop4: detected capacity change from 0 to 1024
[  472.729935][ T8791] EXT4-fs: Ignoring removed orlov option
[  472.736111][ T8791] EXT4-fs: Ignoring removed nomblk_io_submit option
[  472.739366][ T1880] usb 9-1: USB disconnect, device number 6
[  473.102784][ T8791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.237962][ T8784] chnl_net:caif_netlink_parms(): no params data found
[  473.697724][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.432705][ T5782] Bluetooth: hci1: command tx timeout
[  474.476852][ T8799] loop0: detected capacity change from 0 to 32768
[  474.623126][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.631313][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.639159][ T8784] bridge_slave_0: entered allmulticast mode
[  474.648859][ T8784] bridge_slave_0: entered promiscuous mode
[  474.692936][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.706514][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.714748][ T8784] bridge_slave_1: entered allmulticast mode
[  474.723892][ T8784] bridge_slave_1: entered promiscuous mode
[  474.989893][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.014034][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.109954][   T29] audit: type=1326 audit(2000000231.703:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec1985d29 code=0x7ffc0000
[  475.135081][   T29] audit: type=1326 audit(2000000231.703:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f1ec1985d29 code=0x7ffc0000
[  475.158283][   T29] audit: type=1326 audit(2000000231.703:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec1985d29 code=0x7ffc0000
[  475.185063][   T29] audit: type=1326 audit(2000000231.703:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec1985d29 code=0x7ffc0000
[  475.372568][ T8820] loop8: detected capacity change from 0 to 512
[  475.414317][ T8784] team0: Port device team_slave_0 added
[  475.423618][ T8820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  475.529534][ T8820] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.544716][ T8820] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  475.574500][ T8784] team0: Port device team_slave_1 added
[  476.068728][ T8029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.119729][ T8832] loop5: detected capacity change from 0 to 512
[  476.129845][ T8832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  476.137182][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.137257][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.173118][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.208049][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.215347][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.243590][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.480766][ T5782] Bluetooth: hci1: command tx timeout
[  476.648263][ T8832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e02c, mo2=0002]
[  476.681603][ T8832] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.957: invalid indirect mapped block 2683928664 (level 1)
[  476.696852][ T8832] EXT4-fs (loop5): Remounting filesystem read-only
[  476.725478][ T8832] EXT4-fs (loop5): 1 truncate cleaned up
[  476.733322][ T8832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.819776][ T8784] hsr_slave_0: entered promiscuous mode
[  476.890519][ T8784] hsr_slave_1: entered promiscuous mode
[  476.910839][ T8784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.924351][ T8784] Cannot create hsr debugfs directory
[  477.289288][ T6454] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.667982][ T8850] input: syz0 as /devices/virtual/input/input15
[  477.674682][ T8850] input: failed to attach handler leds to device input15, error: -6
[  477.857993][ T8784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.985539][ T8784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.150179][ T8784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.188272][ T8860] loop5: detected capacity change from 0 to 128
[  478.254426][   T29] audit: type=1800 audit(2000000234.853:16): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.967" name="file1" dev="loop5" ino=1048644 res=0 errno=0
[  478.281616][ T8860] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512)
[  478.289580][ T8860] FAT-fs (loop5): Filesystem has been set read-only
[  478.338539][ T8784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.377475][ T8860] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512)
[  478.557665][ T5782] Bluetooth: hci1: command tx timeout
[  478.968715][ T8784] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  479.111962][ T8784] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  479.291615][ T8784] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  479.308382][   T29] audit: type=1326 audit(2000000235.873:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.0.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5385d29 code=0x7ffc0000
[  479.330765][    C1] vkms_vblank_simulate: vblank timer overrun
[  479.475693][ T8864] loop8: detected capacity change from 0 to 32768
[  479.487759][   T29] audit: type=1326 audit(2000000236.033:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.0.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4b5385d29 code=0x7ffc0000
[  479.511675][   T29] audit: type=1326 audit(2000000236.033:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.0.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5385d29 code=0x7ffc0000
[  479.512489][ T8784] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  479.534365][   T29] audit: type=1326 audit(2000000236.033:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.0.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5385d29 code=0x7ffc0000
[  479.534594][   T29] audit: type=1326 audit(2000000236.043:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.0.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd4b5385d29 code=0x7ffc0000
[  479.565611][    C1] vkms_vblank_simulate: vblank timer overrun
[  480.006016][ T8864] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  480.031179][ T8864] bcachefs (loop8): recovering from clean shutdown, journal seq 10
[  480.040947][ T8864] bcachefs (loop8): Version upgrade required:
[  480.040947][ T8864] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  480.040947][ T8864] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  480.040947][ T8864]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  480.165696][ T8864] bcachefs (loop8): dropping and reconstructing all alloc info
[  480.203677][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.452824][ T8864] bcachefs (loop8): check_topology... done
[  480.459246][ T8864] bcachefs (loop8): accounting_read... done
[  480.511899][ T8864] bcachefs (loop8): alloc_read... done
[  480.519750][ T8864] bcachefs (loop8): stripes_read... done
[  480.527336][ T8864] bcachefs (loop8): snapshots_read... done
[  480.534098][ T8864] bcachefs (loop8): check_allocations...
[  480.575008][ T8784] 8021q: adding VLAN 0 to HW filter on device team0
[  480.683673][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.691423][ T4052] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.708386][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.716129][ T4052] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.880984][ T8864]  done
[  480.885739][ T5782] Bluetooth: hci1: command tx timeout
[  480.950518][ T8864] bcachefs (loop8): going read-write
[  481.001254][ T8864] bcachefs (loop8): done starting filesystem
[  481.068455][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  481.068529][   T29] audit: type=1800 audit(2000000237.663:30): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.969" name="file0" dev="loop8" ino=4099 res=0 errno=0
[  481.284489][ T5060] =====================================================
[  481.292313][ T5060] BUG: KMSAN: uninit-value in bch2_alloc_sectors_start_trans+0x44a/0x32b0
[  481.301210][ T5060]  bch2_alloc_sectors_start_trans+0x44a/0x32b0
[  481.307572][ T5060]  __bch2_write+0x7f8/0x8540
[  481.312654][ T5060]  bch2_write+0xec0/0x1d10
[  481.318215][ T5060]  bch2_writepages+0x24a/0x3c0
[  481.323805][ T5060]  do_writepages+0x427/0xc30
[  481.328560][ T5060]  __writeback_single_inode+0x103/0x1290
[  481.334642][ T5060]  writeback_sb_inodes+0xa34/0x1c20
[  481.340254][ T5060]  wb_writeback+0x4df/0xcb0
[  481.346309][ T5060]  wb_workfn+0x40b/0x1940
[  481.351210][ T5060]  process_scheduled_works+0xae0/0x1c40
[  481.356989][ T5060]  worker_thread+0xea7/0x14f0
[  481.362045][ T5060]  kthread+0x3e2/0x540
[  481.366283][ T5060]  ret_from_fork+0x6d/0x90
[  481.371005][ T5060]  ret_from_fork_asm+0x1a/0x30
[  481.372205][ T8894] loop5: detected capacity change from 0 to 8192
[  481.375929][ T5060] 
[  481.375952][ T5060] Uninit was stored to memory at:
[  481.376138][ T5060]  __bch2_writepage+0x39d9/0x3f10
[  481.376284][ T5060]  write_cache_pages+0xc9/0x280
[  481.376375][ T5060]  bch2_writepages+0x11f/0x3c0
[  481.376510][ T5060]  do_writepages+0x427/0xc30
[  481.376597][ T5060]  __writeback_single_inode+0x103/0x1290
[  481.418717][ T5060]  writeback_sb_inodes+0xa34/0x1c20
[  481.424554][ T8784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  481.424675][ T8784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  481.435192][ T5060]  wb_writeback+0x4df/0xcb0
[  481.451412][ T5060]  wb_workfn+0x40b/0x1940
[  481.455916][ T5060]  process_scheduled_works+0xae0/0x1c40
[  481.462132][ T5060]  worker_thread+0xea7/0x14f0
[  481.467034][ T5060]  kthread+0x3e2/0x540
[  481.471389][ T5060]  ret_from_fork+0x6d/0x90
[  481.475992][ T5060]  ret_from_fork_asm+0x1a/0x30
[  481.481071][ T5060] 
[  481.483489][ T5060] Uninit was created at:
[  481.488012][ T5060]  kmem_cache_alloc_lru_noprof+0x91c/0xe20
[  481.494161][ T5060]  __bch2_new_inode+0x98/0x450
[  481.499150][ T5060]  bch2_inode_hash_init_insert+0x7d/0x3a0
[  481.505296][ T5060]  bch2_lookup+0x1605/0x2360
[  481.510181][ T5060]  path_openat+0x292f/0x6200
[  481.514970][ T5060]  do_filp_open+0x268/0x600
[  481.520714][ T5060]  do_sys_openat2+0x1bf/0x2f0
[  481.525569][ T5060]  __x64_sys_openat+0x2a1/0x310
[  481.531301][ T5060]  x64_sys_call+0x36f5/0x3c30
[  481.536197][ T5060]  do_syscall_64+0xcd/0x1e0
[  481.540961][ T5060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.547094][ T5060] 
[  481.549519][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: kworker/u8:27 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0
[  481.561720][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  481.572336][ T5060] Workqueue: writeback wb_workfn (flush-bcachefs-10)
[  481.579251][ T5060] =====================================================
[  481.586439][ T5060] Disabling lock debugging due to kernel taint
[  481.595447][ T5060] Kernel panic - not syncing: kmsan.panic set ...
[  481.602008][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: kworker/u8:27 Tainted: G    B              6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0
[  481.614647][ T5060] Tainted: [B]=BAD_PAGE
[  481.618910][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  481.629124][ T5060] Workqueue: writeback wb_workfn (flush-bcachefs-10)
[  481.636051][ T5060] Call Trace:
[  481.639442][ T5060]  <TASK>
[  481.642489][ T5060]  dump_stack_lvl+0x216/0x2d0
[  481.647380][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.653381][ T5060]  dump_stack+0x1e/0x24
[  481.657740][ T5060]  panic+0x4e2/0xcf0
[  481.661847][ T5060]  ? kmsan_get_metadata+0xd1/0x1c0
[  481.667166][ T5060]  kmsan_report+0x2c7/0x2d0
[  481.671854][ T5060]  ? __msan_warning+0x95/0x120
[  481.676838][ T5060]  ? bch2_alloc_sectors_start_trans+0x44a/0x32b0
[  481.683370][ T5060]  ? __bch2_write+0x7f8/0x8540
[  481.688312][ T5060]  ? bch2_write+0xec0/0x1d10
[  481.693079][ T5060]  ? bch2_writepages+0x24a/0x3c0
[  481.698238][ T5060]  ? do_writepages+0x427/0xc30
[  481.703176][ T5060]  ? __writeback_single_inode+0x103/0x1290
[  481.709201][ T5060]  ? writeback_sb_inodes+0xa34/0x1c20
[  481.714779][ T5060]  ? wb_writeback+0x4df/0xcb0
[  481.719649][ T5060]  ? wb_workfn+0x40b/0x1940
[  481.724328][ T5060]  ? process_scheduled_works+0xae0/0x1c40
[  481.730278][ T5060]  ? worker_thread+0xea7/0x14f0
[  481.735352][ T5060]  ? kthread+0x3e2/0x540
[  481.739771][ T5060]  ? ret_from_fork+0x6d/0x90
[  481.744558][ T5060]  ? ret_from_fork_asm+0x1a/0x30
[  481.749716][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.755111][ T5060]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  481.761728][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.767110][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.773117][ T5060]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  481.779178][ T5060]  ? stack_depot_save_flags+0x6db/0x750
[  481.784948][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.790330][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.795717][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.801729][ T5060]  __msan_warning+0x95/0x120
[  481.806567][ T5060]  bch2_alloc_sectors_start_trans+0x44a/0x32b0
[  481.812930][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.818350][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.823748][ T5060]  __bch2_write+0x7f8/0x8540
[  481.828554][ T5060]  ? __msan_chain_origin+0xc3/0x150
[  481.833981][ T5060]  ? __writeback_single_inode+0x103/0x1290
[  481.840011][ T5060]  ? ret_from_fork+0x6d/0x90
[  481.844807][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.850191][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.856195][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.861606][ T5060]  ? kmsan_get_metadata+0xd0/0x1c0
[  481.866909][ T5060]  bch2_write+0xec0/0x1d10
[  481.871508][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.877522][ T5060]  bch2_writepages+0x24a/0x3c0
[  481.882553][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.887935][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.893941][ T5060]  ? __pfx_bch2_writepages+0x10/0x10
[  481.899454][ T5060]  do_writepages+0x427/0xc30
[  481.904295][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.909683][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.915681][ T5060]  ? writeback_sb_inodes+0x58/0x1c20
[  481.921200][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.927210][ T5060]  __writeback_single_inode+0x103/0x1290
[  481.933061][ T5060]  ? _raw_spin_unlock+0x30/0x50
[  481.938134][ T5060]  writeback_sb_inodes+0xa34/0x1c20
[  481.943621][ T5060]  ? kmsan_get_metadata+0x13e/0x1c0
[  481.949010][ T5060]  wb_writeback+0x4df/0xcb0
[  481.953721][ T5060]  ? queue_io+0x481/0x780
[  481.958259][ T5060]  wb_workfn+0x40b/0x1940
[  481.962766][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.968786][ T5060]  ? __pfx_wb_workfn+0x10/0x10
[  481.973737][ T5060]  process_scheduled_works+0xae0/0x1c40
[  481.979553][ T5060]  worker_thread+0xea7/0x14f0
[  481.984469][ T5060]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  481.990486][ T5060]  kthread+0x3e2/0x540
[  481.994735][ T5060]  ? __pfx_worker_thread+0x10/0x10
[  482.000088][ T5060]  ? __pfx_kthread+0x10/0x10
[  482.004859][ T5060]  ret_from_fork+0x6d/0x90
[  482.009464][ T5060]  ? __pfx_kthread+0x10/0x10
[  482.014244][ T5060]  ret_from_fork_asm+0x1a/0x30
[  482.019252][ T5060]  </TASK>
[  482.022646][ T5060] Kernel Offset: disabled
[  482.027041][ T5060] Rebooting in 86400 seconds..