last executing test programs:

14.644273118s ago: executing program 2 (id=1016):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340))
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x580ac, &(0x7f0000000100)=ANY=[@ANYRES32])

14.528301922s ago: executing program 2 (id=1020):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

14.372051427s ago: executing program 2 (id=1024):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000400)='>G', 0x2, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0))
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0)

14.250559581s ago: executing program 2 (id=1029):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x2400, 0x0)

13.560253474s ago: executing program 2 (id=1038):
r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZH\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84\x0e\xa7U\xc7}\xea.U`\x1b*\xcep\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q~@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xff14\x87I\xc7\\vK<m2\x16\x03\xcd\xc1\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0x10012, r0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)='\a', 0x1)
read(r0, &(0x7f0000000000)=""/269, 0xfffffdef)

12.252394727s ago: executing program 2 (id=1057):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000180)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r2, &(0x7f0000000700), 0x0}, 0x20)

12.096628972s ago: executing program 32 (id=1057):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000180)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r2, &(0x7f0000000700), 0x0}, 0x20)

8.234113979s ago: executing program 1 (id=1090):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0xfffff000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)

8.109466023s ago: executing program 1 (id=1094):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@cruft}, {@map_off}, {@hide}, {@map_acorn}, {@map_off}, {@session={'session', 0x3d, 0x41}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@mode={'mode', 0x3d, 0x1ff}}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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")
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r0, &(0x7f0000003cc0)=""/4128, 0x1020)

6.967036981s ago: executing program 1 (id=1098):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x12ac1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x2}, @IFLA_BRPORT_PRIORITY={0x6}, @IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)

6.120571498s ago: executing program 1 (id=1103):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x2400, 0x0)

5.628341474s ago: executing program 1 (id=1105):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$eJzs3M1rHOcZAPBnRp+25a5cSql7sUopNpSuZReZ2hRqF5deeii014CFvDJC6w8kBUeyIKvkHwhJzoFcAklMgg/x2ZcEcs0lca4xOQRMUKwEQkgUZj8kWdqVLGtXo8i/H7ya92Nm3ufRSDvzwu4G8Mwayn6kEUcj4lISUaj3pxHRW631R1Rq+y0tzo99tzg/lsTy8v++TiKJiEeL82ONcyX17aF6oz8iPvlnEr9+eeO807Nzk6Plcmmq3j45c/XGyenZub9MXB29UrpSunbqzN9GTo+cGT470rZcv//i/N1v//DvLys/vPPj7W9eeyuJ8zFQH1ubRz3rHRuKoZXfyVrdETHahvPvBV31fNbmmXRvcVDa4aAAAGgpXfMM99soRFesPrwV4sNPcw0OAAAAaIvlrohlAAAAYJ9LrP8BAABgn2u8D+DR4vxYo+T7joTd9fBCRAzW8l+ql9pId1Sq2/7oiYiDj5JY+7HWpHbYjg1FxIPPz76flWjyOeROqyxExO+aXf+kmv9g/ZPQ6/NPI2K4DfMPrWv/kvI/34b5884fgGfTvQu1G9nG+1+68vwTTe5/3U3uXU8j7/tf4/lvacPz32r+XS2e//77hHPcevuNm63Gsvz/fvdf7zVKNn+23VFS2/BwIeL33c3yT1byT1rkf2mLcydRO0Xhp5ulVvvknf/ymxHHo3n+Dcnm3090cnyiXBqu/Ww6x8LHI++2mj/v/LPrf7BF/ptc//6s78ZjZ2r9pT7PXbx4Z0Nnffet80+/6k3+X6311nteGJ2ZmToV0Zv8Z2P/6c3zbezTOEeW/4k/bv7/3+zvP3tNqNT/NrJUFurbrP3Sujn/cfvWB63iaaz/8rz+l7d//at9rzzhHH/66NUT6/sa36+1dv2blWz+B0ltLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWlEDESSFiMiqdbTtFiMOBQRv4mDafn69Myfx68/f+1yNhYxGD3p+ES5NBwRhVo7ydqnqvXV9ul17b9GxJGIeL1woNoujl0vX847eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFYcioiBSNJiRKQRsVRI02Ix76gAAACAthvMOwAAAACg46z/AQAAYP+z/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjhy7dz+JiMq5A9WS6a2P9eQaGdBpad4BALnpyjsAIDfdeQcA5Gaba3yPC7APJVuM9zftzV49+joSDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB70/Gj9+4nEVE5d6BaMr31sZ6mRxzbxeiATkrzDgDITddmg927Fwew+576X/xwe+MAdl/zNT7wLEm2GO9f3afy+Ehfx2ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYO8ZqJYkLUZEWq2nabEYcTgiBqMnGZ8ol4Yj4lcR8Vmhpy9r9+UdNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG03PTs3OVoul6aeppLs7HAVlVaVF/dGGLtbSfZGGLVK3q9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYXp2bnK0XC5NTecdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC36dm5ydFyuTT1BJU729l5TSXvHAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM/PAQAA///E/w3d")
setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [{}], {0x4, 0x4}, [], {0x10, 0x2}, {0x20, 0x1}}, 0x2c, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
flistxattr(r0, 0x0, 0x0)

3.601178792s ago: executing program 4 (id=1114):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010027bd7000000000000a002040000000070000000014000200fe88000000000000000000000000010108000a000500000008000e"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

3.147184046s ago: executing program 1 (id=1118):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0)

2.884015185s ago: executing program 33 (id=1118):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0)

2.868857276s ago: executing program 4 (id=1121):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.573627045s ago: executing program 3 (id=1124):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, &(0x7f0000000000)=0x2, 0x3d, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

2.404120791s ago: executing program 3 (id=1126):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)

2.403933221s ago: executing program 4 (id=1127):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,iocharset=cp864,discard,uid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x1548, &(0x7f0000000640)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

1.983401965s ago: executing program 3 (id=1131):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)=0x81)

1.903262037s ago: executing program 4 (id=1132):
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020600)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0205648, &(0x7f0000000080)={0xf010000, 0x0, 0x4, 0x4, 0x0, {0x77359400}, {0x5, 0x8, 0x0, 0x0, 0x0, 0xd, "3acfa8ee"}})

1.675063005s ago: executing program 5 (id=1135):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.480876841s ago: executing program 4 (id=1137):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.445818192s ago: executing program 3 (id=1138):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)

1.387702374s ago: executing program 5 (id=1139):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)

1.365463115s ago: executing program 4 (id=1140):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r0, 0x1)
close(0x3)

1.142488442s ago: executing program 3 (id=1143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0)

981.413318ms ago: executing program 0 (id=1144):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0)

981.011648ms ago: executing program 3 (id=1145):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,noquota,nointegrity,errors=continue,iocharset=cp863,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,uid=', @ANYRESHEX=0xee01, @ANYBLOB="0000bbaa213ca1750a73593e8b6b51ec762e74cada46036fb2cd30b777e4a35afadbbd049c95b9880c70e694709bce9011b4c0460c95d9e0cc473d9f4f1841cdaff7b2a25ff3baddc86b3ab69e93b6beea217b6ff816e2f122cb63010bce65149c059d20b376f3696de010eb1b9ca12fc97b85d273e059e8c625da1575d7ac7d39571c4447ebadc4da39b8bcdf520b21994c5b02d448852f9765d56ffcedca0ad05a7fd150d8028a6997510bf1bf9871f25c4ab5966143ab5fbf218f99d125b00c5ebf68a5ad9dd56d7a"], 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
getdents64(r0, 0x0, 0x22)

812.026893ms ago: executing program 5 (id=1146):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000001040)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@numtail}, {@uni_xlate}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x80}}, {@rodir}], [{@smackfsroot={'smackfsroot', 0x3d, 'iocharset'}}]}, 0x2, 0x28a, &(0x7f00000011c0)="$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")
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

764.831544ms ago: executing program 0 (id=1147):
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)

476.259994ms ago: executing program 0 (id=1148):
r0 = socket(0x28, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2)

474.414504ms ago: executing program 5 (id=1149):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

360.569618ms ago: executing program 0 (id=1150):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

293.82119ms ago: executing program 5 (id=1151):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r2}, 0x14)

185.758704ms ago: executing program 0 (id=1152):
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x0, 0x1, 0x4000005, 0x200000]}}, 0x5c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x7, 0x0, &(0x7f0000000000))

251.91µs ago: executing program 5 (id=1153):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

0s ago: executing program 0 (id=1154):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xb4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

kernel console output (not intermixed with test programs):

ng interface: batadv_slave_1
[   78.602005][  T144] device bridge_slave_1 left promiscuous mode
[   78.618512][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.664543][  T144] device bridge_slave_0 left promiscuous mode
[   78.671077][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.702185][  T144] device veth1_macvtap left promiscuous mode
[   78.719826][  T144] device veth0_macvtap left promiscuous mode
[   78.744640][  T144] device veth1_vlan left promiscuous mode
[   78.750669][  T144] device veth0_vlan left promiscuous mode
[   78.776459][ T4228] usb 1-1: 0:2 : does not exist
[   78.871090][ T4228] usb 1-1: USB disconnect, device number 2
[   78.991967][ T4326] udevd[4326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.276743][  T144] team0 (unregistering): Port device team_slave_1 removed
[   79.294457][  T144] team0 (unregistering): Port device team_slave_0 removed
[   79.316344][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.341283][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.498920][  T144] bond0 (unregistering): Released all slaves
[   79.611850][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.619565][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.707053][ T4347] device hsr_slave_0 entered promiscuous mode
[   79.752847][ T4347] device hsr_slave_1 entered promiscuous mode
[   79.773174][ T4347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.791862][ T4347] Cannot create hsr debugfs directory
[   79.857035][ T4483] loop2: detected capacity change from 0 to 8192
[   79.954305][ T4483] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   80.023728][ T4483] REISERFS (device loop2): using ordered data mode
[   80.075503][ T4481] loop0: detected capacity change from 0 to 32768
[   80.076106][ T4483] reiserfs: using flush barriers
[   80.115678][ T4481] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.73 (4481)
[   80.133790][ T1108] Bluetooth: hci1: command 0x041b tx timeout
[   80.142066][ T4483] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   80.191896][ T4483] REISERFS (device loop2): checking transaction log (loop2)
[   80.258734][ T4481] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   80.334056][ T4481] BTRFS info (device loop0): ignoring bad roots
[   80.365966][ T4481] BTRFS info (device loop0): force clearing of disk cache
[   80.405282][ T4481] BTRFS info (device loop0): force zlib compression, level 3
[   80.437318][ T4481] BTRFS info (device loop0): turning on async discard
[   80.466169][ T4481] BTRFS info (device loop0): turning on sync discard
[   80.498082][ T4481] BTRFS info (device loop0): turning off discard
[   80.510316][   T26] audit: type=1326 audit(1780491672.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.1.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb44163e59 code=0x7fc00000
[   80.564956][ T4481] BTRFS info (device loop0): using free space tree
[   80.572817][ T4481] BTRFS info (device loop0): has skinny extents
[   80.603815][ T4483] REISERFS (device loop2): Using tea hash to sort names
[   80.640959][ T4483] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   80.740913][ T4507] loop1: detected capacity change from 0 to 512
[   80.947070][ T4507] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[   81.013691][ T4507] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.275378][ T4507] EXT4-fs error (device loop1): ext4_get_first_dir_block:3608: inode #12: comm syz.1.78: directory missing '.'
[   81.375970][ T4507] EXT4-fs (loop1): Remounting filesystem read-only
[   81.797171][ T4347] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.898037][ T4347] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.963089][ T4554] netlink: 'syz.4.86': attribute type 1 has an invalid length.
[   81.972488][ T4347] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.055134][ T4347] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.234073][ T4567] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[   82.249400][   T13] Bluetooth: hci1: command 0x040f tx timeout
[   82.494672][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.579738][ T4347] 8021q: adding VLAN 0 to HW filter on device team0
[   82.634625][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.660903][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.733816][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.762958][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.819217][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.826371][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.930950][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.989900][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.028957][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.036127][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.137856][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.174319][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.183164][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.294464][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.335967][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.394410][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.403221][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.504584][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.578524][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.604133][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.640117][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.672722][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.709569][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.737021][ T4610] syzkaller1: tun_chr_ioctl cmd 1074025677
[   83.765062][ T4610] syzkaller1: linktype set to 773
[   83.875564][ T4570] loop1: detected capacity change from 0 to 32768
[   83.995072][ T4622] loop4: detected capacity change from 0 to 512
[   84.113824][ T4570] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[   84.113824][ T4570] 
[   84.159729][ T4570] ERROR: (device loop1): remounting filesystem as read-only
[   84.168414][ T4570] jfs_lookup: dtSearch returned -5
[   84.176008][ T4622] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   84.196888][ T4632] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt
[   84.196888][ T4632] 
[   84.293478][ T1108] Bluetooth: hci1: command 0x0419 tx timeout
[   84.311298][ T4640] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   84.413641][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.421163][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.510306][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.671509][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.709312][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.726611][ T4653] loop1: detected capacity change from 0 to 256
[   84.834927][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.874789][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.963999][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.972004][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.020252][ T4347] device veth0_vlan entered promiscuous mode
[   85.038713][ T4662] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[   85.091749][ T4347] device veth1_vlan entered promiscuous mode
[   85.217180][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.242372][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.264258][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.274302][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.285005][ T4347] device veth0_macvtap entered promiscuous mode
[   85.300686][ T4347] device veth1_macvtap entered promiscuous mode
[   85.374628][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.441729][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.483767][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.553505][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.599677][ T4677] loop0: detected capacity change from 0 to 512
[   85.606033][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.606053][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.606065][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.606079][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.610214][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.680979][ T4680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'.
[   85.748290][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.765619][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.779868][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.792251][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.812864][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.846891][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.857006][ T4677] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   85.895612][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.938201][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.947835][ T4677] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   85.977404][ T4677] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.124: bg 0: block 248: padding at end of block bitmap is not set
[   86.010117][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.037471][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.052614][ T4677] Quota error (device loop0): write_blk: dquota write failed
[   86.083153][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.102952][ T4677] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   86.128884][ T4677] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.124: Failed to acquire dquot type 1
[   86.140548][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.188409][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.218774][ T4677] EXT4-fs (loop0): 1 truncate cleaned up
[   86.237602][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'.
[   86.237699][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.258031][ T4659] loop2: detected capacity change from 0 to 40427
[   86.263757][ T4677] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[   86.386276][ T4659] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   86.395129][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.452785][ T4347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.481345][ T4659] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   86.491638][ T4347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.533880][ T4347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.542632][ T4347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.560546][ T4659] F2FS-fs (loop2): invalid crc value
[   86.619665][ T4702] loop4: detected capacity change from 0 to 1024
[   86.630860][ T1324] cfg80211: failed to load regulatory.db
[   86.680022][ T4659] F2FS-fs (loop2): Found nat_bits in checkpoint
[   86.771679][ T4702] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.969306][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.980932][ T4659] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   86.992965][ T4659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   87.005357][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.040891][ T1618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.049953][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.098002][ T1618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.150439][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.261342][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'.
[   87.503609][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.651029][ T4743] loop3: detected capacity change from 0 to 512
[   87.789209][ T4743] FAT-fs (loop3): Directory bread(block 199916) failed
[   87.834416][ T4743] FAT-fs (loop3): Directory bread(block 199917) failed
[   87.874910][ T4743] FAT-fs (loop3): Directory bread(block 199918) failed
[   87.881866][ T4743] FAT-fs (loop3): Directory bread(block 199919) failed
[   87.899584][ T4743] FAT-fs (loop3): Directory bread(block 199920) failed
[   87.923469][ T4743] FAT-fs (loop3): Directory bread(block 199921) failed
[   87.942441][ T4743] FAT-fs (loop3): Directory bread(block 199922) failed
[   87.985160][ T4743] FAT-fs (loop3): Directory bread(block 199923) failed
[   88.038384][ T1108] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   88.077751][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.104312][ T1108] usb 2-1: Product: syz
[   88.108525][ T1108] usb 2-1: Manufacturer: syz
[   88.113148][ T1108] usb 2-1: SerialNumber: syz
[   88.156037][ T4743] FAT-fs (loop3): FAT read failed (blocknr 128)
[   88.175394][ T1108] usb 2-1: config 0 descriptor??
[   88.202344][ T4753] loop0: detected capacity change from 0 to 1764
[   88.215356][ T1108] ch341 2-1:0.0: ch341-uart converter detected
[   88.451225][ T4762] netlink: 2044 bytes leftover after parsing attributes in process `syz.3.146'.
[   88.484561][ T4762] netlink: 73 bytes leftover after parsing attributes in process `syz.3.146'.
[   88.866629][ T1108] usb 2-1: failed to send control message: -71
[   88.880977][ T1108] ch341-uart: probe of ttyUSB0 failed with error -71
[   88.921487][ T1108] usb 2-1: USB disconnect, device number 2
[   88.966835][ T1108] ch341 2-1:0.0: device disconnected
[   89.212777][   T21] kernel write not supported for file /snd/seq (pid: 21 comm: kworker/1:0)
[   89.228665][ T4791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.159'.
[   89.521519][ T4774] loop3: detected capacity change from 0 to 32768
[   89.710960][ T4774] XFS (loop3): Mounting V5 Filesystem
[   89.929521][ T4800] loop4: detected capacity change from 0 to 32768
[   89.940387][ T4774] XFS (loop3): Ending clean mount
[   89.958414][ T4826] Attempt to restore checkpoint with obsolete wellknown handles
[   90.100283][ T4829] loop1: detected capacity change from 0 to 1024
[   90.116398][ T4800] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   90.171928][ T4347] XFS (loop3): Unmounting Filesystem
[   90.198725][ T4829] EXT4-fs (loop1): filesystem is read-only
[   90.245857][ T4829] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   90.264750][ T4829] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869)
[   90.275356][ T4829] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: comm syz.1.183: inode #1: comm syz.1.183: iget: illegal inode #
[   90.290160][ T4829] EXT4-fs (loop1): no journal found
[   90.297106][ T4829] EXT4-fs (loop1): can't get journal size
[   90.311070][ T4829] EXT4-fs error (device loop1): ext4_fill_super:4872: inode #2: comm syz.1.183: iget: bad extra_isize 65535 (inode size 1024)
[   90.331231][ T4829] EXT4-fs (loop1): get root inode failed
[   90.344568][ T4829] EXT4-fs (loop1): mount failed
[   90.626547][ T4195] ocfs2: Unmounting device (7,4) on (node local)
[   91.045901][ T4845] loop0: detected capacity change from 0 to 256
[   91.243881][ T4850] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   91.284751][ T4852] Zero length message leads to an empty skb
[   91.521176][ T4860] loop4: detected capacity change from 0 to 2048
[   91.601339][ T4835] loop2: detected capacity change from 0 to 32768
[   91.692027][ T4835] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   91.754284][ T4860] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   91.773796][ T4835] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   91.934914][ T4835] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   91.995213][ T4873] loop0: detected capacity change from 0 to 512
[   92.041631][ T4539] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   92.059179][ T4539] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   92.168326][ T4846] loop1: detected capacity change from 0 to 32768
[   92.211703][ T4876] bond0: (slave bond_slave_0): Releasing backup interface
[   92.226863][ T4539] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 167ms
[   92.271552][ T4846] jfs_strtoUCS: char2uni returned -22.
[   92.281148][ T4539] gfs2: fsid=syz:syz.0: jid=0: Done
[   92.300693][ T4835] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   92.312836][ T4846] charset = cp949, char = 0xd4
[   92.465435][ T4873] EXT4-fs (loop0): Test dummy encryption mode enabled
[   92.493735][ T4873] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   92.635030][ T4873] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[   92.646735][ T4873] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   93.254433][ T4912] capability: warning: `syz.0.203' uses deprecated v2 capabilities in a way that may be insecure
[   93.401587][ T4917] loop4: detected capacity change from 0 to 256
[   93.625179][ T4917] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   93.728378][ T4917] attempt to access beyond end of device
[   93.728378][ T4917] loop4: rw=524288, want=4281, limit=256
[   93.847170][ T4928] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5)
[   93.939585][ T4928] exFAT-fs (loop4): Filesystem has been set read-only
[   93.955172][ T4917] attempt to access beyond end of device
[   93.955172][ T4917] loop4: rw=0, want=4281, limit=256
[   94.040983][   T26] audit: type=1800 audit(1780491685.820:3): pid=4917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.208" name="file1" dev="loop4" ino=1048592 res=0 errno=0
[   94.222090][ T4942] device bond_slave_0 entered promiscuous mode
[   94.228724][ T4942] device bond_slave_1 entered promiscuous mode
[   94.271199][ T4942] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   94.322509][ T4942] device bond_slave_0 left promiscuous mode
[   94.328564][ T4942] device bond_slave_1 left promiscuous mode
[   95.072710][ T4976] loop0: detected capacity change from 0 to 65
[   95.129911][ T4976] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[   95.381159][ T4983] program syz.0.235 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   95.705983][ T4967] loop1: detected capacity change from 0 to 32768
[   95.739533][ T4967] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   95.776711][ T4967] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   95.802477][ T4967] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   95.824141][ T4979] loop3: detected capacity change from 0 to 32768
[   95.832100][ T4539] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   95.849872][ T4539] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   95.864981][ T4979] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.233 (4979)
[   95.943465][ T4537] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   95.956394][ T4539] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms
[   95.967785][ T4539] gfs2: fsid=syz:syz.0: jid=0: Done
[   95.973057][ T4967] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   95.996695][ T4979] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   96.016274][ T4979] BTRFS info (device loop3): using free space tree
[   96.042122][ T4979] BTRFS info (device loop3): has skinny extents
[   96.067846][ T4995] vivid-001: disconnect
[   96.096339][ T4994] vivid-001: reconnect
[   96.103075][ T4999] netlink: 'syz.2.242': attribute type 25 has an invalid length.
[   96.119452][ T4999] netlink: 'syz.2.242': attribute type 7 has an invalid length.
[   96.128733][ T4999] netlink: 164 bytes leftover after parsing attributes in process `syz.2.242'.
[   96.214304][ T4537] usb 5-1: Using ep0 maxpacket: 16
[   96.292670][ T4979] BTRFS info (device loop3): enabling ssd optimizations
[   96.353728][ T4537] usb 5-1: too many endpoints for config 0 interface 0 altsetting 48: 120, using maximum allowed: 30
[   96.367898][ T4537] usb 5-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120
[   96.393423][ T4537] usb 5-1: config 0 interface 0 has no altsetting 0
[   96.564281][ T4537] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   96.589921][ T4537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.633480][ T4537] usb 5-1: Product: syz
[   96.637706][ T4537] usb 5-1: Manufacturer: syz
[   96.642360][ T4537] usb 5-1: SerialNumber: syz
[   96.705417][ T4537] usb 5-1: config 0 descriptor??
[   97.059739][ T4537] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -71
[   97.100284][ T4537] usb 5-1: USB disconnect, device number 2
[   97.446140][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'.
[   97.596885][ T5035] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.627410][ T5073] loop0: detected capacity change from 0 to 4096
[   97.719973][ T5078] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.723732][ T5036] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.863491][ T5035] usb 4-1: Using ep0 maxpacket: 32
[   97.983581][ T5036] usb 2-1: Using ep0 maxpacket: 32
[   98.023629][ T5035] usb 4-1: unable to get BOS descriptor or descriptor too short
[   98.104625][ T5036] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[   98.112891][ T5036] usb 2-1: config 0 has no interface number 0
[   98.119412][ T5035] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[   98.127823][ T5035] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[   98.142207][ T5036] usb 2-1: config 0 interface 83 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   98.153002][ T5035] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[   98.162103][ T5035] usb 4-1: config 128 has no interface number 0
[   98.168675][ T5035] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[   98.180006][ T5035] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[   98.190811][ T5035] usb 4-1: config 128 interface 127 has no altsetting 0
[   98.303659][ T5036] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[   98.312764][ T5036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.322091][ T5036] usb 2-1: Product: syz
[   98.326353][ T5036] usb 2-1: Manufacturer: syz
[   98.330967][ T5036] usb 2-1: SerialNumber: syz
[   98.337701][ T5036] usb 2-1: config 0 descriptor??
[   98.353706][ T5035] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[   98.356990][ T5069] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   98.362773][ T5035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.378244][ T5035] usb 4-1: Product: syz
[   98.382429][ T5035] usb 4-1: Manufacturer: syz
[   98.387106][ T5035] usb 4-1: SerialNumber: syz
[   98.395645][ T5036] redrat3 2-1:0.83: Couldn't find all endpoints
[   98.599147][   T21] usb 2-1: USB disconnect, device number 3
[   98.821680][ T5035] usb 4-1: USB disconnect, device number 2
[   99.036328][ T4326] udevd[4326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.342762][ T5094] loop4: detected capacity change from 0 to 64
[   99.502146][   T26] audit: type=1800 audit(1780491691.280:4): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.273" name="file1" dev="loop4" ino=21 res=0 errno=0
[   99.537937][ T5094] hfs: keylen 1794 too large
[   99.564383][ T5094] hfs: keylen 1794 too large
[   99.646878][ T5035] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   99.903611][ T5035] usb 1-1: Using ep0 maxpacket: 16
[  100.107005][ T5099] loop3: detected capacity change from 0 to 32768
[  100.183623][ T5035] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  100.213843][ T5035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.241933][ T5035] usb 1-1: Product: syz
[  100.254883][ T5035] usb 1-1: Manufacturer: syz
[  100.259963][ T5035] usb 1-1: SerialNumber: syz
[  100.351341][ T5128] loop2: detected capacity change from 0 to 64
[  100.408217][ T5130] netlink: 452 bytes leftover after parsing attributes in process `syz.1.293'.
[  100.883514][ T5035] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[  100.909329][ T5035] usb 1-1: USB disconnect, device number 3
[  101.597756][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  101.773030][ T5170] loop3: detected capacity change from 0 to 32768
[  101.800994][ T4539] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  101.879888][ T5170] XFS (loop3): Mounting V5 Filesystem
[  102.059012][ T5170] XFS (loop3): Ending clean mount
[  102.079244][ T5170] XFS (loop3): Quotacheck needed: Please wait.
[  102.097588][ T4539] usb 5-1: Using ep0 maxpacket: 32
[  102.212420][ T5170] XFS (loop3): Quotacheck: Done.
[  102.243699][ T4539] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  102.268597][ T4539] usb 5-1: config 0 has no interface number 0
[  102.278713][ T4539] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  102.366101][ T5189] loop2: detected capacity change from 0 to 32768
[  102.442259][ T5189] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  102.442259][ T5189] 
[  102.462863][ T4347] XFS (loop3): Unmounting Filesystem
[  102.503834][ T4539] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  102.504684][ T5189] ERROR: (device loop2): remounting filesystem as read-only
[  102.512939][ T4539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.512967][ T4539] usb 5-1: Product: syz
[  102.512985][ T4539] usb 5-1: Manufacturer: syz
[  102.513003][ T4539] usb 5-1: SerialNumber: syz
[  102.542719][ T5216] capability: warning: `syz.1.326' uses 32-bit capabilities (legacy support in use)
[  102.553476][ T5213] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  102.553476][ T5213] 
[  102.577172][ T5216] program syz.1.326 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.730951][ T4539] usb 5-1: config 0 descriptor??
[  102.759767][ T5180] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  102.801437][ T5224] loop2: detected capacity change from 0 to 4096
[  102.852205][ T5224] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  102.990654][ T5180] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  103.043939][  T154] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22.
[  103.092716][ T4194] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22.
[  103.113456][ T4194] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  103.239198][ T5232] netem: change failed
[  103.323579][ T5236] loop2: detected capacity change from 0 to 128
[  103.396217][ T5236] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  103.418831][ T5236] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  103.493797][ T4539] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  103.514408][ T4539] asix: probe of 5-1:0.188 failed with error -71
[  103.548757][ T4539] usb 5-1: USB disconnect, device number 3
[  103.727396][ T5250] netlink: 'syz.2.338': attribute type 5 has an invalid length.
[  103.980549][ T5263] netlink: 14 bytes leftover after parsing attributes in process `syz.2.346'.
[  104.480066][ T5275] loop2: detected capacity change from 0 to 32768
[  104.530868][ T5275] XFS (loop2): Mounting V5 Filesystem
[  104.627957][ T5275] XFS (loop2): Ending clean mount
[  104.669273][ T4539] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 
[  104.688989][ T4539] XFS (loop2): Unmount and run xfs_repair
[  104.695891][ T4539] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  104.703565][ T4539] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  104.712662][ T4539] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  104.721818][ T4539] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  104.731064][ T4539] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  104.740202][ T4539] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  104.749872][ T4539] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  104.758952][ T4539] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  104.768104][ T4539] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  104.777664][ T5275] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1d3/0x360" at daddr 0x3 len 1 error 74
[  104.880701][ T5275] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  104.905079][ T5275] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  104.953500][ T4537] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  105.003792][ T5296] netlink: 22 bytes leftover after parsing attributes in process `syz.1.358'.
[  105.030382][ T4194] XFS (loop2): Unmounting Filesystem
[  105.373601][ T4537] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  105.390043][ T4537] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  105.430986][ T4537] usb 1-1: config 220 has no interface number 2
[  105.443566][ T4537] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  105.476001][ T4537] usb 1-1: config 220 interface 0 has no altsetting 0
[  105.489578][ T4537] usb 1-1: config 220 interface 76 has no altsetting 0
[  105.508362][ T4537] usb 1-1: config 220 interface 1 has no altsetting 0
[  105.552324][ T5312] program syz.2.360 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.741521][ T4537] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  105.767501][ T4537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.793513][ T4537] usb 1-1: Product: syz
[  105.797738][ T4537] usb 1-1: Manufacturer: syz
[  105.802353][ T4537] usb 1-1: SerialNumber: syz
[  105.838857][ T5304] loop3: detected capacity change from 0 to 32768
[  105.851203][ T5319] netlink: 64 bytes leftover after parsing attributes in process `syz.4.368'.
[  105.929282][ T5304] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  105.929282][ T5304] 
[  105.988887][ T5304] read_mapping_page failed!
[  106.023380][ T5304] ERROR: (device loop3): txCommit: 
[  106.023380][ T5304] 
[  106.228662][ T4537] uvcvideo 1-1:220.1: Unknown video format 448b07f5-fe05-ffff-ffff-030000ffffff
[  106.264634][ T4537] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  106.285799][ T4537] usb 1-1: No valid video chain found.
[  106.291469][ T4537] usb 1-1: selecting invalid altsetting 0
[  106.402420][ T5333] loop3: detected capacity change from 0 to 64
[  106.410423][ T4537] usb 1-1: selecting invalid altsetting 0
[  106.435753][ T4537] usbtest: probe of 1-1:220.1 failed with error -22
[  106.487667][ T4537] usb 1-1: USB disconnect, device number 4
[  106.733904][ T5340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.378'.
[  106.788454][ T5323] loop2: detected capacity change from 0 to 32768
[  107.104204][ T4539] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  107.315862][ T5367] loop4: detected capacity change from 0 to 2048
[  107.353132][ T5367] EXT4-fs (loop4): Ignoring removed nobh option
[  107.396187][ T5367] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,usrjquota=,nobh,resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[  107.432681][ T5367] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.495259][ T4539] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  107.515696][   T26] audit: type=1800 audit(1780491699.300:5): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.391" name="file0" dev="loop4" ino=13 res=0 errno=0
[  107.519433][ T4539] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  107.553739][ T5367] fs-verity (loop4, inode 13): Unknown hash algorithm number: 3
[  107.601045][ T4539] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  107.633100][ T4539] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  107.650772][ T4539] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  107.818298][ T4539] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  107.837996][ T4539] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  107.860964][ T4539] usb 2-1: Product: syz
[  107.872912][ T5386] netlink: 'syz.3.399': attribute type 5 has an invalid length.
[  107.880888][ T4539] usb 2-1: Manufacturer: syz
[  107.887319][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'.
[  107.937062][ T4539] cdc_wdm 2-1:1.0: skipping garbage
[  107.949016][ T4539] cdc_wdm 2-1:1.0: skipping garbage
[  107.980020][ T4539] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  107.998872][ T4539] cdc_wdm 2-1:1.0: Unknown control protocol
[  108.210964][   T21] usb 2-1: USB disconnect, device number 4
[  108.351731][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'.
[  108.580452][ T5411] loop2: detected capacity change from 0 to 4096
[  108.605977][ T5411] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  108.668522][ T5411] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  108.682663][ T5413] loop0: detected capacity change from 0 to 8192
[  108.720581][ T5411] ntfs3: loop2: Failed to load $Extend.
[  108.748304][ T5413] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  108.761436][ T5413] REISERFS (device loop0): using ordered data mode
[  108.768801][ T5413] reiserfs: using flush barriers
[  108.784398][ T5413] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  108.801230][ T5413] REISERFS (device loop0): checking transaction log (loop0)
[  108.814247][ T5413] REISERFS (device loop0): Using r5 hash to sort names
[  108.822361][ T5413] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  108.936461][ T5425] syzkaller0: tun_chr_ioctl cmd 1074025692
[  108.993124][ T5427] program syz.1.418 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  109.240587][ T4537] kernel write not supported for file /181/attr/fscreate (pid: 4537 comm: kworker/1:10)
[  109.632548][ T5447] option changes via remount are deprecated (pid=5445 comm=syz.2.426)
[  109.803617][ T5042] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  110.174378][ T5042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.209021][ T5042] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.231643][ T5042] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00
[  110.251801][ T5042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.266093][ T5042] usb 4-1: config 0 descriptor??
[  110.293952][ T5458] misc userio: Can't change port type on an already running userio instance
[  110.308294][ T5042] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  110.513635][ T3546] bcm5974 4-1:0.0: could not read from device
[  110.542930][ T5042] usb 4-1: USB disconnect, device number 3
[  110.699701][ T5483] program syz.1.443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.999686][ T5499] loop4: detected capacity change from 0 to 1764
[  111.052446][ T5499] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  111.090113][ T5499] iso9660: Corrupted directory entry in block 2 of inode 1920
[  111.303488][ T5036] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  111.494410][ T5522] Invalid ELF header len 1
[  111.553570][ T5036] usb 3-1: Using ep0 maxpacket: 8
[  111.603007][ T5526] loop3: detected capacity change from 0 to 256
[  111.717775][ T5530] 9pnet: Insufficient options for proto=fd
[  111.736039][ T5526] exfat: Deprecated parameter 'utf8'
[  111.744848][ T5530] devpts: called with bogus options
[  111.750710][ T5526] exfat: Deprecated parameter 'utf8'
[  111.834054][ T5036] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  111.845723][ T5526] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdc00, utbl_chksum : 0xe619d30d)
[  111.858275][ T5036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.878295][ T5036] usb 3-1: Product: syz
[  111.882537][ T5036] usb 3-1: Manufacturer: syz
[  111.902372][ T5536] pim6reg1: tun_chr_ioctl cmd 1074025677
[  111.908253][ T5036] usb 3-1: SerialNumber: syz
[  111.930200][ T5036] usb 3-1: config 0 descriptor??
[  111.948936][ T5536] pim6reg1: linktype set to 768
[  112.221242][ T5036] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  112.238066][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'.
[  112.247951][   T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  112.636792][ T5505] udc-core: couldn't find an available UDC or it's busy
[  112.650720][ T5505] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  112.663792][   T21] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  112.685484][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.693839][ T5036] usb write operation failed. (-71)
[  112.716039][   T21] usb 5-1: config 0 descriptor??
[  112.734379][ T5036] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  112.745414][ T5036] dvbdev: DVB: registering new adapter (Terratec H7)
[  112.753949][ T5036] usb 3-1: media controller created
[  112.773578][ T5036] usb read operation failed. (-71)
[  112.779367][   T21] gspca_main: cpia1-2.14.0 probing 0813:0001
[  112.803464][ T5036] usb write operation failed. (-71)
[  112.822072][ T5036] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5
[  112.849375][ T5036] usb 3-1: USB disconnect, device number 2
[  113.209707][   T21] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  113.285019][ T5583] loop0: detected capacity change from 0 to 32768
[  113.567224][   T26] audit: type=1326 audit(1780491705.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.2.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47070fae59 code=0x0
[  113.611677][ T5599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  113.643475][   T21] gspca_cpia1: usb_control_msg 02, error -71
[  113.663546][   T21] gspca_cpia1: usb_control_msg 05, error -71
[  113.669605][   T21] cpia1 5-1:0.0: unexpected systemstate: 00
[  113.725520][   T21] usb 5-1: USB disconnect, device number 4
[  114.071076][ T4537] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  114.249574][ T5625] loop3: detected capacity change from 0 to 128
[  114.298917][ T5625] FAT-fs (loop3): bogus number of reserved sectors
[  114.328056][ T5625] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  114.356284][ T5625] FAT-fs (loop3): Can't find a valid FAT filesystem
[  114.474400][ T4537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.498935][ T4537] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  114.532318][ T4537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.561942][ T4537] usb 2-1: config 0 descriptor??
[  114.762266][ T5647] program syz.4.520 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.993472][ T5641] loop0: detected capacity change from 0 to 32768
[  115.062548][ T5641] JBD2: Ignoring recovery information on journal
[  115.071264][ T4537] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  115.109620][ T4537] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input9
[  115.139647][ T5641] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  115.237452][ T5641] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature 
[  115.259777][ T5641] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  115.271418][ T5641] OCFS2: File system is now read-only.
[  115.283729][ T5641] (syz.0.517,5641,0):ocfs2_search_chain:1785 ERROR: status = -30
[  115.298379][ T5641] (syz.0.517,5641,0):ocfs2_search_chain:1871 ERROR: status = -30
[  115.319669][ T4537] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  115.327435][ T5641] (syz.0.517,5641,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  115.359992][ T5641] (syz.0.517,5641,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  115.368950][ T5641] (syz.0.517,5641,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  115.377522][ T5641] (syz.0.517,5641,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  115.386993][ T5641] (syz.0.517,5641,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  115.400466][ T5641] (syz.0.517,5641,0):ocfs2_mknod:385 ERROR: status = -30
[  115.443004][ T5641] (syz.0.517,5641,0):ocfs2_mknod:502 ERROR: status = -30
[  115.553355][ T5641] (syz.0.517,5641,0):ocfs2_create:676 ERROR: status = -30
[  115.772514][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  115.869523][   T26] audit: type=1326 audit(1780491707.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5673 comm="syz.4.531" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb307c8e59 code=0x0
[  116.015260][ T4537] usb 2-1: USB disconnect, device number 5
[  116.268556][ T5688] loop3: detected capacity change from 0 to 512
[  116.329279][ T5688] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  116.369942][ T5688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  116.383917][ T5688] System zones: 1-12
[  116.388999][ T5688] EXT4-fs (loop3): orphan cleanup on readonly fs
[  116.424638][ T5688] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.536: invalid indirect mapped block 12 (level 1)
[  116.445260][ T5688] EXT4-fs (loop3): Remounting filesystem read-only
[  116.452105][ T5688] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.536: invalid indirect mapped block 2 (level 2)
[  116.487980][ T5688] EXT4-fs (loop3): Remounting filesystem read-only
[  116.495613][ T5688] EXT4-fs (loop3): 1 truncate cleaned up
[  116.501392][ T5688] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none.
[  116.757960][   T26] audit: type=1326 audit(1780491708.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb44163e59 code=0x0
[  116.797796][ T5705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  117.177152][ T5699] loop0: detected capacity change from 0 to 32768
[  117.253331][ T5699] JBD2: Ignoring recovery information on journal
[  117.342133][ T5699] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  117.365024][ T1324] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  117.426465][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  117.564707][ T5722] loop2: detected capacity change from 0 to 32768
[  117.606868][ T1324] usb 4-1: Using ep0 maxpacket: 8
[  117.890262][ T5736] loop1: detected capacity change from 0 to 128
[  117.923810][ T1324] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  117.933457][ T5036] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  117.951458][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.961864][ T5736] FAT-fs (loop1): bogus number of reserved sectors
[  117.974481][ T5736] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  117.990480][ T1324] usb 4-1: Product: syz
[  117.998417][ T1324] usb 4-1: Manufacturer: syz
[  118.003053][ T1324] usb 4-1: SerialNumber: syz
[  118.013403][ T5736] FAT-fs (loop1): Can't find a valid FAT filesystem
[  118.025757][ T1324] usb 4-1: config 0 descriptor??
[  118.232846][ T5745] sctp: [Deprecated]: syz.1.562 (pid 5745) Use of int in max_burst socket option.
[  118.232846][ T5745] Use struct sctp_assoc_value instead
[  118.303817][ T1324] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  118.304135][ T5036] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  118.328427][ T5036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.340036][ T5036] usb 1-1: config 0 descriptor??
[  118.385599][ T5036] gspca_main: cpia1-2.14.0 probing 0813:0001
[  118.724516][ T5720] udc-core: couldn't find an available UDC or it's busy
[  118.731563][ T5720] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  118.793758][ T1324] usb write operation failed. (-71)
[  118.813762][ T5036] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  118.821907][ T5758] loop2: detected capacity change from 0 to 256
[  118.822078][ T1324] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  118.868525][ T1324] dvbdev: DVB: registering new adapter (Terratec H7)
[  118.879715][ T1324] usb 4-1: media controller created
[  118.896798][ T5763] loop4: detected capacity change from 0 to 64
[  118.904045][ T1324] usb read operation failed. (-71)
[  118.944094][ T1324] usb write operation failed. (-71)
[  118.951566][ T1324] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  118.983972][ T5763] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  118.999939][ T1324] usb 4-1: USB disconnect, device number 4
[  119.258053][ T5036] gspca_cpia1: usb_control_msg 02, error -71
[  119.288407][ T5775] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.294348][ T5036] gspca_cpia1: usb_control_msg 05, error -71
[  119.298027][ T5775] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.312029][ T5775] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.314443][ T5036] cpia1 1-1:0.0: unexpected systemstate: 00
[  119.321100][ T5775] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.342196][ T5036] usb 1-1: USB disconnect, device number 5
[  119.438478][ T5775] device vxlan0 entered promiscuous mode
[  119.497420][ T5780] tap0: tun_chr_ioctl cmd 2147767517
[  119.500027][ T5783] input: syz1 as /devices/virtual/input/input10
[  119.652879][ T5787] loop4: detected capacity change from 0 to 2048
[  119.682759][ T5792] cgroup: fork rejected by pids controller in /syz2
[  119.713060][ T5795] loop3: detected capacity change from 0 to 256
[  119.761436][ T5796] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.788340][ T5798] loop1: detected capacity change from 0 to 64
[  119.858527][ T5798] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  120.143846][ T5804] netlink: 80 bytes leftover after parsing attributes in process `syz.0.591'.
[  120.194447][ T5810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.590'.
[  120.319543][ T5817] input: syz1 as /devices/virtual/input/input11
[  120.337845][ T5813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.590'.
[  120.385612][ T1618] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.427930][ T5821] tap0: tun_chr_ioctl cmd 2147767517
[  120.499457][ T1618] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.595684][ T5827] loop0: detected capacity change from 0 to 128
[  120.616878][ T1618] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.673483][ T5827] FAT-fs (loop0): bogus number of reserved sectors
[  120.680087][ T5827] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  120.710253][ T1618] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.728256][ T5827] FAT-fs (loop0): Can't find a valid FAT filesystem
[  120.744492][ T5042] hid-generic 0000:FFFFFFFE:0800.0003: unknown main item tag 0x0
[  120.752275][ T5042] hid-generic 0000:FFFFFFFE:0800.0003: unknown main item tag 0x0
[  120.777140][ T5042] hid-generic 0000:FFFFFFFE:0800.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  120.823757][ T5835] program syz.1.600 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.012107][ T5840] loop0: detected capacity change from 0 to 2048
[  121.057781][ T5838] fido_id[5838]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  121.113682][ T4539] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  121.191248][ T5849] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.473974][ T5037] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  121.509081][ T4539] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  121.551908][ T4539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.570148][ T4539] usb 4-1: config 0 descriptor??
[  121.646423][ T4539] gspca_main: cpia1-2.14.0 probing 0813:0001
[  121.686307][ T5850] chnl_net:caif_netlink_parms(): no params data found
[  121.857927][ T5037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.899923][ T5037] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  121.917237][ T5037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.931529][ T5037] usb 5-1: config 0 descriptor??
[  122.040656][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.068491][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.077757][ T5850] device bridge_slave_0 entered promiscuous mode
[  122.087518][ T4539] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  122.102655][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.115256][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.141788][ T5850] device bridge_slave_1 entered promiscuous mode
[  122.230722][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.249612][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.301642][ T1618] device hsr_slave_0 left promiscuous mode
[  122.309636][ T1618] device hsr_slave_1 left promiscuous mode
[  122.325593][ T1618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.333046][ T1618] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.349362][ T1618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.360770][ T1618] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.376973][ T1618] device bridge_slave_1 left promiscuous mode
[  122.383244][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.399374][ T1618] device bridge_slave_0 left promiscuous mode
[  122.407852][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.424721][ T5037] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  122.439228][ T5037] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input12
[  122.465083][ T1618] device veth1_macvtap left promiscuous mode
[  122.471167][ T1618] device veth0_macvtap left promiscuous mode
[  122.485860][ T1618] device veth1_vlan left promiscuous mode
[  122.491701][ T1618] device veth0_vlan left promiscuous mode
[  122.535742][ T5037] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  122.543989][ T4539] gspca_cpia1: usb_control_msg 02, error -71
[  122.583535][ T4539] gspca_cpia1: usb_control_msg 05, error -71
[  122.589573][ T4539] cpia1 4-1:0.0: unexpected systemstate: 00
[  122.634532][ T4539] usb 4-1: USB disconnect, device number 5
[  123.039711][ T1618] team0 (unregistering): Port device team_slave_1 removed
[  123.059824][ T1618] team0 (unregistering): Port device team_slave_0 removed
[  123.081655][ T1618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.124587][ T1618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.214368][ T1618] bond0 (unregistering): Released all slaves
[  123.330210][ T5037] usb 5-1: USB disconnect, device number 5
[  123.339253][ T5850] team0: Port device team_slave_0 added
[  123.347522][ T5036] Bluetooth: hci4: command 0x0409 tx timeout
[  123.388734][ T5850] team0: Port device team_slave_1 added
[  123.417539][   T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  123.458784][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.493509][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.530207][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.553126][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.567748][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.625622][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.725161][ T5850] device hsr_slave_0 entered promiscuous mode
[  123.754039][ T5850] device hsr_slave_1 entered promiscuous mode
[  123.773394][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.781007][ T5850] Cannot create hsr debugfs directory
[  123.833685][   T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.883643][   T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.033628][   T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  124.060507][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  124.092798][   T21] usb 4-1: SerialNumber: syz
[  124.127927][   T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  124.158553][   T23] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  124.396466][   T21] usb 4-1: 0:2 : does not exist
[  124.397415][ T5934] fido_id[5934]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  124.502990][   T21] usb 4-1: USB disconnect, device number 6
[  124.584483][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.628955][ T5947] loop1: detected capacity change from 0 to 512
[  124.679322][ T5947] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  124.720298][ T5947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  124.741179][ T5947] System zones: 1-12
[  124.746748][ T5947] EXT4-fs (loop1): orphan cleanup on readonly fs
[  124.774660][ T5947] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.626: invalid indirect mapped block 12 (level 1)
[  124.805609][ T5947] EXT4-fs (loop1): Remounting filesystem read-only
[  124.826038][ T5947] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.626: invalid indirect mapped block 2 (level 2)
[  124.908734][ T5947] EXT4-fs (loop1): Remounting filesystem read-only
[  124.989373][ T5947] EXT4-fs (loop1): 1 truncate cleaned up
[  125.026874][ T5947] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none.
[  125.190236][   T23] hid-generic 0000:FFFFFFFE:0800.0006: unknown main item tag 0x0
[  125.196755][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  125.215273][   T23] hid-generic 0000:FFFFFFFE:0800.0006: unknown main item tag 0x0
[  125.236761][   T23] hid-generic 0000:FFFFFFFE:0800.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  125.266267][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  125.306495][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.413506][ T5035] Bluetooth: hci4: command 0x041b tx timeout
[  125.427452][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  125.552435][ T5963] fido_id[5963]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  125.694343][ T5977] loop0: detected capacity change from 0 to 512
[  125.750648][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.859090][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  125.874895][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  125.885209][ T5977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  125.929312][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[  125.986628][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.996544][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  126.013911][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.021002][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.045969][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.074454][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.103164][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.164400][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.171523][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.224285][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  126.302981][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'.
[  126.317217][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  126.369449][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.376624][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.493146][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  126.549760][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  126.619807][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  126.683841][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.724549][ T6022] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  126.742566][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  126.760714][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  126.812793][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  126.834887][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  126.887283][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  126.894429][ T6028] loop4: detected capacity change from 0 to 256
[  126.927357][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  126.957542][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  126.991597][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  127.026131][ T6032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13
[  127.044528][ T6027] netlink: 'syz.3.651': attribute type 1 has an invalid length.
[  127.300017][ T6047] loop1: detected capacity change from 0 to 512
[  127.337455][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'.
[  127.462578][ T6047] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.498040][ T5036] Bluetooth: hci4: command 0x040f tx timeout
[  127.532280][ T6047] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  127.590874][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  127.633733][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  127.665354][ T6047] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.659: bg 0: block 248: padding at end of block bitmap is not set
[  127.700030][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.765644][ T6047] Quota error (device loop1): write_blk: dquota write failed
[  127.787493][ T6047] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  127.823773][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  127.832683][ T6047] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.659: Failed to acquire dquot type 1
[  127.854270][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.897920][ T6047] EXT4-fs (loop1): 1 truncate cleaned up
[  127.922641][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  127.929448][ T6047] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  127.956553][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  128.011867][ T5850] device veth0_vlan entered promiscuous mode
[  128.024815][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  128.043179][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  128.116418][ T5850] device veth1_vlan entered promiscuous mode
[  128.260409][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  128.281978][  T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  128.342728][ T5850] device veth0_macvtap entered promiscuous mode
[  128.384801][ T5850] device veth1_macvtap entered promiscuous mode
[  128.477441][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.508517][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.544134][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.589000][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.626210][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.673426][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.733506][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.755375][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.777418][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.839640][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.873396][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.925389][ T6064] loop3: detected capacity change from 0 to 40427
[  128.932171][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.952886][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.964547][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.976640][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.991844][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.032812][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.055040][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.068263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  129.097293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  129.124135][ T6064] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  129.131930][ T6064] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  129.140868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  129.184488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.224553][ T6064] F2FS-fs (loop3): invalid crc value
[  129.230761][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  129.279147][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  129.299085][ T6064] F2FS-fs (loop3): Found nat_bits in checkpoint
[  129.316615][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.353633][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.380613][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.392317][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.578081][ T5036] Bluetooth: hci4: command 0x0419 tx timeout
[  129.660006][ T6064] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  129.691110][ T6064] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  129.704118][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.732179][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.791029][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  129.805007][ T6133] loop0: detected capacity change from 0 to 256
[  129.871642][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.881103][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.948202][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.115218][ T6145] loop4: detected capacity change from 0 to 512
[  130.242408][ T6145] FAT-fs (loop4): Directory bread(block 199916) failed
[  130.294031][ T6145] FAT-fs (loop4): Directory bread(block 199917) failed
[  130.300961][ T6145] FAT-fs (loop4): Directory bread(block 199918) failed
[  130.360852][ T6145] FAT-fs (loop4): Directory bread(block 199919) failed
[  130.368470][ T6145] FAT-fs (loop4): Directory bread(block 199920) failed
[  130.384796][ T6145] FAT-fs (loop4): Directory bread(block 199921) failed
[  130.398550][ T6145] FAT-fs (loop4): Directory bread(block 199922) failed
[  130.418139][ T6145] FAT-fs (loop4): Directory bread(block 199923) failed
[  130.522408][ T6158] netlink: 2044 bytes leftover after parsing attributes in process `syz.0.701'.
[  130.561682][ T6158] netlink: 73 bytes leftover after parsing attributes in process `syz.0.701'.
[  130.585787][ T6145] FAT-fs (loop4): FAT read failed (blocknr 128)
[  130.875855][ T6169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  130.920307][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'.
[  131.089503][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.688'.
[  131.425393][ T6201] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  131.447977][ T6204] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  131.764892][ T6218] loop3: detected capacity change from 0 to 256
[  131.922361][   T26] audit: type=1326 audit(1780491723.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.4.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb307c8e59 code=0x7fc00000
[  132.193964][ T6234] netlink: 'syz.1.722': attribute type 1 has an invalid length.
[  132.503874][ T6245] loop2: detected capacity change from 0 to 2048
[  132.522175][ T6216] loop0: detected capacity change from 0 to 32768
[  132.601115][ T6245] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  132.609637][ T6216] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt
[  132.609637][ T6216] 
[  132.698502][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.704868][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.749379][ T6216] ERROR: (device loop0): remounting filesystem as read-only
[  132.771243][ T6216] jfs_lookup: dtSearch returned -5
[  132.823692][ T6253] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  132.854082][ T6251] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt
[  132.854082][ T6251] 
[  132.914869][ T5042] hid-generic 0000:FFFFFFFE:0800.0007: unknown main item tag 0x0
[  132.932100][ T5042] hid-generic 0000:FFFFFFFE:0800.0007: unknown main item tag 0x0
[  132.956448][ T5042] hid-generic 0000:FFFFFFFE:0800.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  132.983144][ T6247] loop1: detected capacity change from 0 to 32768
[  133.152489][ T6258] fido_id[6258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  133.161941][ T6262] loop4: detected capacity change from 0 to 512
[  133.222026][ T6247] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  133.279114][ T6237] loop3: detected capacity change from 0 to 32768
[  133.318979][ T6262] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  133.380519][ T4192] ocfs2: Unmounting device (7,1) on (node local)
[  133.389999][ T6237] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.735 (6237)
[  133.449725][ T6262] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  133.518104][ T6237] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  133.597544][ T6262] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.734: bg 0: block 248: padding at end of block bitmap is not set
[  133.613860][ T6237] BTRFS info (device loop3): ignoring bad roots
[  133.620216][ T6237] BTRFS info (device loop3): force clearing of disk cache
[  133.643888][ T6237] BTRFS info (device loop3): force zlib compression, level 3
[  133.651365][ T6237] BTRFS info (device loop3): turning on async discard
[  133.658743][ T6237] BTRFS info (device loop3): turning on sync discard
[  133.667526][ T6237] BTRFS info (device loop3): turning off discard
[  133.674536][ T6237] BTRFS info (device loop3): using free space tree
[  133.681081][ T6237] BTRFS info (device loop3): has skinny extents
[  133.690555][ T6262] Quota error (device loop4): write_blk: dquota write failed
[  133.698349][ T6262] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  133.708746][ T6262] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.734: Failed to acquire dquot type 1
[  133.721599][ T6262] EXT4-fs (loop4): 1 truncate cleaned up
[  133.731952][ T6262] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  133.996607][ T6299] loop1: detected capacity change from 0 to 1764
[  134.243401][ T5036] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  134.266697][ T4326] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4326)
[  134.783639][ T5036] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  134.812861][ T5036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.863379][ T5036] usb 5-1: Product: syz
[  134.867618][ T5036] usb 5-1: Manufacturer: syz
[  134.872248][ T5036] usb 5-1: SerialNumber: syz
[  134.951194][ T5036] usb 5-1: config 0 descriptor??
[  135.024821][ T5036] ch341 5-1:0.0: ch341-uart converter detected
[  135.079716][ T6344] netlink: 2044 bytes leftover after parsing attributes in process `syz.2.758'.
[  135.113574][ T6344] netlink: 73 bytes leftover after parsing attributes in process `syz.2.758'.
[  135.456503][ T6334] loop3: detected capacity change from 0 to 32768
[  135.529930][ T6342] loop1: detected capacity change from 0 to 40427
[  135.546615][ T6334] jfs_strtoUCS: char2uni returned -22.
[  135.556071][ T6342] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  135.562722][ T6334] charset = cp949, char = 0xd4
[  135.580487][ T6342] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  135.617911][ T6342] F2FS-fs (loop1): invalid crc value
[  135.664868][ T6342] F2FS-fs (loop1): Found nat_bits in checkpoint
[  135.683647][ T5036] usb 5-1: failed to send control message: -71
[  135.699162][ T5036] ch341-uart: probe of ttyUSB0 failed with error -71
[  135.745070][ T5036] usb 5-1: USB disconnect, device number 6
[  135.764535][ T6342] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  135.771645][ T6342] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  135.784481][ T5036] ch341 5-1:0.0: device disconnected
[  136.025332][ T6363] loop2: detected capacity change from 0 to 256
[  136.358037][ T6374] device bond_slave_0 entered promiscuous mode
[  136.364338][ T6374] device bond_slave_1 entered promiscuous mode
[  136.390142][ T6367] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  136.413197][ T6374] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  136.438390][ T6374] device bond_slave_0 left promiscuous mode
[  136.444606][ T6374] device bond_slave_1 left promiscuous mode
[  136.891687][ T6386] program syz.4.779 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  137.073674][ T6397] vivid-001: disconnect
[  137.112540][ T6396] vivid-001: reconnect
[  137.376078][ T6395] set_capacity_and_notify: 1 callbacks suppressed
[  137.376094][ T6395] loop4: detected capacity change from 0 to 40427
[  137.404329][ T6395] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  137.414106][ T6395] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  137.425695][ T6395] F2FS-fs (loop4): invalid crc value
[  137.439598][ T6395] F2FS-fs (loop4): Found nat_bits in checkpoint
[  137.479595][ T6395] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  137.487295][ T6395] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  137.950047][ T6423] bond0: (slave bond_slave_0): Releasing backup interface
[  138.283508][   T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  138.521362][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'.
[  138.563453][   T21] usb 3-1: Using ep0 maxpacket: 16
[  138.693894][   T21] usb 3-1: too many endpoints for config 0 interface 0 altsetting 48: 120, using maximum allowed: 30
[  138.730430][   T21] usb 3-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120
[  138.768334][   T21] usb 3-1: config 0 interface 0 has no altsetting 0
[  138.993705][   T21] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  139.017351][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.043856][   T21] usb 3-1: Product: syz
[  139.055937][   T21] usb 3-1: Manufacturer: syz
[  139.075026][   T21] usb 3-1: SerialNumber: syz
[  139.086927][   T21] usb 3-1: config 0 descriptor??
[  139.106132][ T6465] device bond_slave_0 entered promiscuous mode
[  139.112401][ T6465] device bond_slave_1 entered promiscuous mode
[  139.175004][ T6465] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  139.195665][ T6465] device bond_slave_0 left promiscuous mode
[  139.201698][ T6465] device bond_slave_1 left promiscuous mode
[  139.464836][   T21] dvb_usb_dtv5100: probe of 3-1:0.0 failed with error -71
[  139.500545][   T21] usb 3-1: USB disconnect, device number 3
[  139.689737][ T6492] program syz.1.836 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  139.929074][ T6506] loop3: detected capacity change from 0 to 256
[  140.023280][ T6506] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  140.104060][ T6506] attempt to access beyond end of device
[  140.104060][ T6506] loop3: rw=524288, want=4281, limit=256
[  140.124816][ T6506] attempt to access beyond end of device
[  140.124816][ T6506] loop3: rw=0, want=4281, limit=256
[  140.174962][ T6513] exFAT-fs (loop3): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5)
[  140.218314][   T26] audit: type=1800 audit(1780491732.000:10): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.831" name="file1" dev="loop3" ino=1048596 res=0 errno=0
[  140.224559][ T6513] exFAT-fs (loop3): Filesystem has been set read-only
[  140.343229][ T6522] vivid-001: disconnect
[  140.360628][ T6518] vivid-001: reconnect
[  141.163503][ T5036] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  141.405102][ T6570] loop3: detected capacity change from 0 to 4096
[  141.413385][ T5036] usb 1-1: Using ep0 maxpacket: 32
[  141.453395][ T6570] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  141.480760][ T6555] loop4: detected capacity change from 0 to 32768
[  141.533872][ T5036] usb 1-1: config 0 has an invalid interface number: 83 but max is 0
[  141.543738][ T5036] usb 1-1: config 0 has no interface number 0
[  141.565207][ T5036] usb 1-1: config 0 interface 83 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  141.596467][ T6555] XFS (loop4): Mounting V5 Filesystem
[  141.633524][ T6564] loop1: detected capacity change from 0 to 32768
[  141.675186][ T6564] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  141.675186][ T6564] 
[  141.687203][ T6564] ERROR: (device loop1): remounting filesystem as read-only
[  141.698971][ T1618] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22.
[  141.717591][ T6564] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  141.717591][ T6564] 
[  141.743641][ T5036] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  141.763256][ T5036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.772399][ T5036] usb 1-1: Product: syz
[  141.777276][ T5036] usb 1-1: Manufacturer: syz
[  141.781918][ T5036] usb 1-1: SerialNumber: syz
[  141.802519][ T5036] usb 1-1: config 0 descriptor??
[  141.821151][ T4347] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22.
[  141.833783][ T6553] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  141.848080][ T6555] XFS (loop4): Ending clean mount
[  141.848830][ T4347] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  141.858740][ T5036] redrat3 1-1:0.83: Couldn't find all endpoints
[  141.897381][ T6555] XFS (loop4): Quotacheck needed: Please wait.
[  142.015619][ T6555] XFS (loop4): Quotacheck: Done.
[  142.116284][ T5036] usb 1-1: USB disconnect, device number 6
[  142.157708][ T4195] XFS (loop4): Unmounting Filesystem
[  142.242025][ T6586] netem: change failed
[  142.448010][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  142.523551][ T5036] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  142.781799][ T6593] loop4: detected capacity change from 0 to 4096
[  142.788501][ T5036] usb 3-1: Using ep0 maxpacket: 32
[  142.913664][ T5036] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  142.921912][ T5036] usb 3-1: config 0 has no interface number 0
[  142.944895][ T5036] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  142.954318][ T6601] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.992948][ T6600] netlink: 452 bytes leftover after parsing attributes in process `syz.3.872'.
[  143.059751][ T6604] loop1: detected capacity change from 0 to 128
[  143.123937][ T5036] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  143.153454][ T5036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.174340][ T6604] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  143.193447][ T6604] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  143.261572][ T5036] usb 3-1: Product: syz
[  143.283771][ T5036] usb 3-1: Manufacturer: syz
[  143.288435][ T5036] usb 3-1: SerialNumber: syz
[  143.363911][ T5036] usb 3-1: config 0 descriptor??
[  143.383909][ T6585] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.482024][ T6622] netlink: 14 bytes leftover after parsing attributes in process `syz.3.879'.
[  143.620093][ T6585] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.743427][ T5037] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  143.983490][ T5037] usb 1-1: Using ep0 maxpacket: 16
[  144.101375][ T5036] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  144.112278][ T5037] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  144.123463][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.132305][ T5036] asix: probe of 3-1:0.188 failed with error -71
[  144.152196][ T5037] usb 1-1: config 0 descriptor??
[  144.168047][ T5036] usb 3-1: USB disconnect, device number 4
[  144.225725][ T5037] gspca_main: sonixj-2.14.0 probing 0471:0327
[  144.692466][ T6649] loop3: detected capacity change from 0 to 32768
[  144.815211][ T6649] XFS (loop3): Mounting V5 Filesystem
[  144.905369][ T6653] loop4: detected capacity change from 0 to 32768
[  144.941424][ T6649] XFS (loop3): Ending clean mount
[  144.975462][ T6653] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  144.975462][ T6653] 
[  144.986565][ T6653] read_mapping_page failed!
[  144.991701][ T6653] ERROR: (device loop4): txCommit: 
[  144.991701][ T6653] 
[  145.062455][ T5043] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 
[  145.092580][ T5043] XFS (loop3): Unmount and run xfs_repair
[  145.099067][ T5037] gspca_sonixj: reg_r err -71
[  145.107889][ T5037] sonixj: probe of 1-1:0.0 failed with error -71
[  145.144774][ T5043] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  145.152599][ T5037] usb 1-1: USB disconnect, device number 7
[  145.170393][ T5043] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  145.202832][ T5043] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  145.212700][ T5043] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  145.233135][ T5043] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  145.243532][   T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  145.253956][ T5043] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  145.264535][ T5043] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  145.283600][ T5043] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  145.312850][ T5043] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  145.333171][ T6649] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x1d3/0x360" at daddr 0x3 len 1 error 74
[  145.366202][ T6649] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  145.397275][ T6649] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  145.458824][ T6680] loop4: detected capacity change from 0 to 1024
[  145.471005][ T4347] XFS (loop3): Unmounting Filesystem
[  145.602568][ T6684] netlink: 'syz.1.907': attribute type 1 has an invalid length.
[  145.715087][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.908'.
[  145.833815][   T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  145.842922][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.873759][   T21] usb 3-1: Product: syz
[  145.878021][   T21] usb 3-1: Manufacturer: syz
[  145.882651][   T21] usb 3-1: SerialNumber: syz
[  145.927955][ T6690] loop1: detected capacity change from 0 to 256
[  145.985198][   T21] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  145.996118][ T6690] exfat: Deprecated parameter 'utf8'
[  146.044528][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.088990][ T6690] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  146.117797][ T6696] loop0: detected capacity change from 0 to 256
[  146.663934][ T1324] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  146.906751][ T6738] netlink: 'syz.1.940': attribute type 5 has an invalid length.
[  146.924408][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'.
[  146.936325][ T6732] loop0: detected capacity change from 0 to 4096
[  147.008526][ T6732] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  147.056275][ T6732] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  147.081686][ T6732] ntfs3: loop0: Failed to load $Extend.
[  147.203531][   T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  147.264771][ T6751] program syz.4.947 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.327657][ T4539] usb 3-1: USB disconnect, device number 5
[  147.370202][ T4233] kernel write not supported for file /440/attr/fscreate (pid: 4233 comm: kworker/1:6)
[  147.442157][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'.
[  147.663932][   T21] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  147.700153][   T21] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  147.720813][   T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  147.741055][   T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  147.775307][ T6773] loop0: detected capacity change from 0 to 2048
[  147.781778][   T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  147.855014][ T6774] loop1: detected capacity change from 0 to 8192
[  147.872541][ T6773] EXT4-fs (loop0): Ignoring removed nobh option
[  147.893800][ T1324] usb 3-1: Service connection timeout for: 256
[  147.900050][ T1324] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  147.916579][ T1324] ath9k_htc: Failed to initialize the device
[  147.925454][ T4539] usb 3-1: ath9k_htc: USB layer deinitialized
[  147.933786][   T21] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  147.942993][   T21] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  147.954543][   T21] usb 4-1: Product: syz
[  147.959234][   T21] usb 4-1: Manufacturer: syz
[  147.965313][ T6773] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,usrjquota=,nobh,resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[  147.984737][ T6774] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  148.004703][   T21] cdc_wdm 4-1:1.0: skipping garbage
[  148.013545][   T21] cdc_wdm 4-1:1.0: skipping garbage
[  148.022377][ T6774] REISERFS (device loop1): using ordered data mode
[  148.036255][   T21] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  148.043475][ T6774] reiserfs: using flush barriers
[  148.048566][   T21] cdc_wdm 4-1:1.0: Unknown control protocol
[  148.057186][ T6773] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.080884][ T6774] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  148.099700][ T6774] REISERFS (device loop1): checking transaction log (loop1)
[  148.119238][ T6774] REISERFS (device loop1): Using r5 hash to sort names
[  148.126967][   T26] audit: type=1800 audit(1780491739.910:11): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.948" name="file0" dev="loop0" ino=13 res=0 errno=0
[  148.153664][ T6773] fs-verity (loop0, inode 13): Unknown hash algorithm number: 3
[  148.184211][ T6774] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  148.264058][ T4539] usb 4-1: USB disconnect, device number 7
[  148.283695][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  148.291159][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  148.297290][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  148.393537][ T5037] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  148.658563][ T5037] usb 5-1: Using ep0 maxpacket: 16
[  148.783646][ T5037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.807320][ T5037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.843365][ T5037] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  148.876865][ T5037] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  148.907513][ T5037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.951797][ T5037] usb 5-1: config 0 descriptor??
[  149.445619][ T5037] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  149.486560][ T5037] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input14
[  149.625714][ T5037] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  149.660864][ T5037] usb 5-1: USB disconnect, device number 7
[  149.799966][ T6818] fido_id[6818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  149.847371][ T5043] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  150.171218][ T6834] loop2: detected capacity change from 0 to 1764
[  150.219951][ T6834] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  150.233790][ T5043] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.249030][ T5043] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  150.283371][ T5043] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00
[  150.302722][ T5043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.311442][ T6834] iso9660: Corrupted directory entry in block 2 of inode 1920
[  150.352595][ T5043] usb 1-1: config 0 descriptor??
[  150.407990][ T5043] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15
[  150.474656][ T6844] misc userio: Can't change port type on an already running userio instance
[  150.528990][ T6846] program syz.2.976 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  150.624181][ T3546] bcm5974 1-1:0.0: could not read from device
[  150.640818][ T5043] usb 1-1: USB disconnect, device number 8
[  150.642169][ T3546] bcm5974 1-1:0.0: could not read from device
[  150.657538][ T3546] bcm5974 1-1:0.0: could not read from device
[  150.694466][ T6858] loop4: detected capacity change from 0 to 64
[  150.948289][ T6868] program syz.1.989 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  150.965057][ T6866] 9pnet: Insufficient options for proto=fd
[  150.980636][ T6866] devpts: called with bogus options
[  151.067866][ T6872] pim6reg1: tun_chr_ioctl cmd 1074025677
[  151.076283][ T6872] pim6reg1: linktype set to 768
[  151.259665][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.993'.
[  151.549806][ T6894] loop1: detected capacity change from 0 to 2048
[  151.580450][ T6897] loop2: detected capacity change from 0 to 1024
[  151.710642][ T6894] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.802433][ T1618] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  151.825270][ T1618] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  151.842993][ T1618] EXT4-fs (loop1): This should not happen!! Data will be lost
[  151.842993][ T1618] 
[  151.843055][ T1618] EXT4-fs (loop1): Total free blocks count 0
[  151.843072][ T1618] EXT4-fs (loop1): Free/Dirty block details
[  151.843138][ T1618] EXT4-fs (loop1): free_blocks=66060288
[  151.843202][ T1618] EXT4-fs (loop1): dirty_blocks=32
[  151.843217][ T1618] EXT4-fs (loop1): Block reservation details
[  151.843954][ T1618] EXT4-fs (loop1): i_reserved_data_blocks=2
[  151.860822][  T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  151.860856][  T154] EXT4-fs (loop1): This should not happen!! Data will be lost
[  151.860856][  T154] 
[  152.046803][ T6911] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1007'.
[  152.246387][ T6918] ubi0: attaching mtd0
[  152.311470][ T6922] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82
[  152.417589][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1015'.
[  152.541746][ T6928] 9pnet: Insufficient options for proto=fd
[  152.549394][ T6928] devpts: called with bogus options
[  152.894849][ T6948] loop0: detected capacity change from 0 to 128
[  152.989721][ T6948] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  153.020896][ T6959] loop2: detected capacity change from 0 to 512
[  153.039130][ T6948] hpfs: filesystem error: improperly stopped
[  153.052742][ T6948] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  153.071655][ T6948] hpfs: You really don't want any checks? You are crazy...
[  153.099616][ T6948] hpfs: hpfs_map_sector(): read error
[  153.117704][ T6959] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  153.139053][ T6948] hpfs: code page support is disabled
[  153.159912][ T6948] hpfs: hpfs_map_4sectors(): unaligned read
[  153.168519][ T6959] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  153.189150][ T6948] hpfs: hpfs_map_4sectors(): unaligned read
[  153.203389][ T6948] hpfs: filesystem error: unable to find root dir
[  153.331735][ T6959] EXT4-fs (loop2): 1 truncate cleaned up
[  153.379782][ T6959] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000003,debug_want_extra_isize=0x0000000000000068,lazytime,discard,lazytime,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none.
[  153.496398][ T6973] loop4: detected capacity change from 0 to 2048
[  153.581987][ T5850] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  153.668697][ T5850] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  153.672374][ T6973] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  153.704631][ T5850] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  153.788122][  T157] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  153.824385][  T157] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  153.844088][  T157] EXT4-fs (loop4): This should not happen!! Data will be lost
[  153.844088][  T157] 
[  153.855560][  T157] EXT4-fs (loop4): Total free blocks count 0
[  153.861588][  T157] EXT4-fs (loop4): Free/Dirty block details
[  153.868027][  T157] EXT4-fs (loop4): free_blocks=66060288
[  153.873868][  T157] EXT4-fs (loop4): dirty_blocks=32
[  153.883966][ T5850] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  153.908023][  T157] EXT4-fs (loop4): Block reservation details
[  153.914506][  T157] EXT4-fs (loop4): i_reserved_data_blocks=2
[  153.921516][  T157] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  153.934683][  T157] EXT4-fs (loop4): This should not happen!! Data will be lost
[  153.934683][  T157] 
[  153.950763][ T5850] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  153.994485][ T5850] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  154.020789][ T5850] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  154.050183][ T5850] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  154.071276][ T5850] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  154.096815][ T5850] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  154.487911][ T7004] loop0: detected capacity change from 0 to 64
[  154.559711][ T7004] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  154.780547][ T7015] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1052'.
[  154.862543][  T157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.982266][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1058'.
[  155.033857][  T157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.076292][ T4539] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  155.131315][  T157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.237382][  T157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.324491][ T4539] usb 4-1: Using ep0 maxpacket: 16
[  155.473678][ T4539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.485215][ T4539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.500907][ T4539] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  155.523763][ T4539] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  155.544275][ T4539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.583484][ T4539] usb 4-1: config 0 descriptor??
[  155.825277][ T7031] chnl_net:caif_netlink_parms(): no params data found
[  155.912953][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.920920][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.929573][ T7031] device bridge_slave_0 entered promiscuous mode
[  155.947643][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.955288][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.964126][ T7031] device bridge_slave_1 entered promiscuous mode
[  155.991022][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.004156][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.063098][ T7031] team0: Port device team_slave_0 added
[  156.072973][ T7031] team0: Port device team_slave_1 added
[  156.085530][ T4539] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  156.099124][ T4539] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input17
[  156.129691][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.144697][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.176728][ T4539] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  156.243432][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.409826][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.444071][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.483897][ T5043] usb 4-1: USB disconnect, device number 8
[  156.576453][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.708084][ T7031] device hsr_slave_0 entered promiscuous mode
[  156.734303][ T7031] device hsr_slave_1 entered promiscuous mode
[  156.744359][ T7031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.762636][ T7031] Cannot create hsr debugfs directory
[  157.210990][ T7031] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  157.246803][ T7031] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  157.311921][  T157] device hsr_slave_0 left promiscuous mode
[  157.321690][  T157] device hsr_slave_1 left promiscuous mode
[  157.353688][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.381958][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.412707][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.420817][ T5037] Bluetooth: hci4: command 0x0409 tx timeout
[  157.438192][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.467629][  T157] device bridge_slave_1 left promiscuous mode
[  157.498462][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.542027][  T157] device bridge_slave_0 left promiscuous mode
[  157.594431][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.631832][  T157] device veth1_macvtap left promiscuous mode
[  157.666101][  T157] device veth0_macvtap left promiscuous mode
[  157.699416][  T157] device veth1_vlan left promiscuous mode
[  157.722092][  T157] device veth0_vlan left promiscuous mode
[  158.119753][ T7125] loop3: detected capacity change from 0 to 2048
[  158.228779][ T7125] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.341225][ T1618] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  158.364343][ T1618] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  158.377153][ T1618] EXT4-fs (loop3): This should not happen!! Data will be lost
[  158.377153][ T1618] 
[  158.387204][ T1618] EXT4-fs (loop3): Total free blocks count 0
[  158.393553][ T1618] EXT4-fs (loop3): Free/Dirty block details
[  158.399595][ T1618] EXT4-fs (loop3): free_blocks=66060288
[  158.405841][ T1618] EXT4-fs (loop3): dirty_blocks=32
[  158.411124][ T1618] EXT4-fs (loop3): Block reservation details
[  158.417442][ T1618] EXT4-fs (loop3): i_reserved_data_blocks=2
[  158.431736][    T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  158.473100][    T9] EXT4-fs (loop3): This should not happen!! Data will be lost
[  158.473100][    T9] 
[  158.646813][  T157] team0 (unregistering): Port device team_slave_1 removed
[  158.674005][  T157] team0 (unregistering): Port device team_slave_0 removed
[  158.691822][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.712046][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.798327][  T157] bond0 (unregistering): Released all slaves
[  158.850329][ T7031] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  158.914388][ T7031] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  159.075001][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1091'.
[  159.291340][ T7160] loop1: detected capacity change from 0 to 1764
[  159.310762][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.368786][ T7160] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  159.410135][ T7031] 8021q: adding VLAN 0 to HW filter on device team0
[  159.461066][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.479930][ T7160] iso9660: Corrupted directory entry in block 2 of inode 1920
[  159.480987][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.497327][ T4539] Bluetooth: hci4: command 0x041b tx timeout
[  159.565816][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  159.603881][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.634679][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.641806][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.667006][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  159.684187][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  159.692840][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.700003][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.715948][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  159.731644][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  159.770263][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  159.779110][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  159.799887][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  159.828032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  159.841737][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  159.856836][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  159.868541][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  159.890118][ T7031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  159.927759][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  159.941427][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  159.954856][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  159.974067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  160.012660][ T7158] loop0: detected capacity change from 0 to 32768
[  160.241346][ T7181] loop3: detected capacity change from 0 to 128
[  160.275199][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.348931][ T7181] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  160.391683][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  160.405220][ T7181] hpfs: filesystem error: improperly stopped
[  160.411267][ T7181] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  160.452518][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  160.460997][ T7181] hpfs: You really don't want any checks? You are crazy...
[  160.533972][ T7181] hpfs: hpfs_map_sector(): read error
[  160.550731][ T7181] hpfs: code page support is disabled
[  160.573787][ T7181] hpfs: hpfs_map_4sectors(): unaligned read
[  160.579779][ T7181] hpfs: hpfs_map_4sectors(): unaligned read
[  160.580765][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.608199][ T7181] hpfs: filesystem error: unable to find root dir
[  160.707782][ T7191] loop0: detected capacity change from 0 to 2048
[  160.769230][   T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  160.884424][ T7191] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.069547][ T7204] loop1: detected capacity change from 0 to 512
[  161.089844][ T6140] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  161.134359][ T6140] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  161.161617][ T7204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  161.183691][   T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  161.191743][   T21] usb 5-1: config 0 has no interface number 0
[  161.216166][ T7204] EXT4-fs (loop1): 1 truncate cleaned up
[  161.221877][ T7204] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000003,debug_want_extra_isize=0x0000000000000068,lazytime,discard,lazytime,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none.
[  161.333499][ T6140] EXT4-fs (loop0): This should not happen!! Data will be lost
[  161.333499][ T6140] 
[  161.394948][   T21] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  161.414185][ T6140] EXT4-fs (loop0): Total free blocks count 0
[  161.420226][ T6140] EXT4-fs (loop0): Free/Dirty block details
[  161.426265][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.426290][   T21] usb 5-1: Product: syz
[  161.426306][   T21] usb 5-1: Manufacturer: syz
[  161.426321][   T21] usb 5-1: SerialNumber: syz
[  161.438122][   T21] usb 5-1: config 0 descriptor??
[  161.456643][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  161.484266][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  161.517172][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  161.526266][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  161.540943][ T6140] EXT4-fs (loop0): free_blocks=66060288
[  161.549236][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  161.557164][ T6140] EXT4-fs (loop0): dirty_blocks=32
[  161.562338][ T6140] EXT4-fs (loop0): Block reservation details
[  161.569858][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  161.583589][ T4233] Bluetooth: hci4: command 0x040f tx timeout
[  161.589959][ T6140] EXT4-fs (loop0): i_reserved_data_blocks=2
[  161.599989][ T4192] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /232/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  161.610508][ T6140] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  161.636315][ T7031] device veth0_vlan entered promiscuous mode
[  161.658603][ T7031] device veth1_vlan entered promiscuous mode
[  161.675043][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  161.724022][ T6140] EXT4-fs (loop0): This should not happen!! Data will be lost
[  161.724022][ T6140] 
[  161.755414][ T4192] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /232/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  161.783999][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  161.796489][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  161.813515][   T21] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  161.839467][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  161.847908][   T21] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  161.859222][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  161.874271][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  161.879217][   T21] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  161.937352][ T7031] device veth0_macvtap entered promiscuous mode
[  161.961263][ T7031] device veth1_macvtap entered promiscuous mode
[  161.981399][   T21] usb 5-1: media controller created
[  161.994518][ T4192] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /232/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.030383][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  162.054200][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  162.098842][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.107320][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  162.132266][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  162.162641][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.206490][ T4192] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /232/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.233745][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.260022][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.298821][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.312416][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  162.338200][   T21] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  162.343667][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.364373][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.376427][ T4192] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /232/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  162.409525][ T7206] loop3: detected capacity change from 0 to 32768
[  162.416209][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.427916][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.436246][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  162.481569][ T7206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1104 (7206)
[  162.497139][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  162.554240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  162.569742][   T21] usb 5-1: USB disconnect, device number 8
[  162.600092][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.633971][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.653842][ T7206] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  162.662540][ T7206] BTRFS info (device loop3): using free space tree
[  162.682025][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.703391][ T7206] BTRFS info (device loop3): has skinny extents
[  162.719723][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.773804][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.784712][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.795022][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.806504][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.831594][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.855535][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.884706][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  163.002864][ T7031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.023845][ T7031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.032697][ T7031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.042874][ T7031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.225296][ T7206] BTRFS info (device loop3): enabling ssd optimizations
[  163.324279][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.372733][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.468658][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  163.707204][ T4326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4326)
[  163.739505][ T7261] Bluetooth: hci4: command 0x0419 tx timeout
[  163.930920][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'.
[  164.000507][ T6140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.024672][ T6140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.032245][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  164.808913][ T7299] loop4: detected capacity change from 0 to 256
[  164.865395][  T157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.913399][  T157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.936449][ T7302] sctp: [Deprecated]: syz.5.1128 (pid 7302) Use of int in max_burst socket option.
[  164.936449][ T7302] Use struct sctp_assoc_value instead
[  165.039703][ T7299] exfat: Deprecated parameter 'utf8'
[  165.064906][ T7270] loop0: detected capacity change from 0 to 32768
[  165.085164][  T157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.128056][  T157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.171630][ T7299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  165.200990][ T7270] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  165.200990][ T7270] 
[  165.255505][ T7270] read_mapping_page failed!
[  165.290445][ T7270] ERROR: (device loop0): txCommit: 
[  165.290445][ T7270] 
[  165.363757][  T157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.422638][  T157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.595471][  T157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.611542][  T157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.180612][ T7306] chnl_net:caif_netlink_parms(): no params data found
[  166.453261][ T7362] loop5: detected capacity change from 0 to 256
[  166.497716][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.570791][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.623498][ T7306] device bridge_slave_0 entered promiscuous mode
[  166.647147][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.676951][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.702911][ T7306] device bridge_slave_1 entered promiscuous mode
[  166.830340][ T7306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.931055][ T7306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.964128][ T7375] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  167.013411][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[  167.055807][ T7356] loop3: detected capacity change from 0 to 32768
[  167.066071][ T7306] team0: Port device team_slave_0 added
[  167.078319][ T7346] loop4: detected capacity change from 0 to 32768
[  167.117656][ T7306] team0: Port device team_slave_1 added
[  167.220721][ T4347] general protection fault, probably for non-canonical address 0xdffffc00000000bb: 0000 [#1] PREEMPT SMP KASAN
[  167.232503][ T4347] KASAN: null-ptr-deref in range [0x00000000000005d8-0x00000000000005df]
[  167.240953][ T4347] CPU: 0 PID: 4347 Comm: syz-executor Not tainted syzkaller #0
[  167.241585][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.248518][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  167.248539][ T4347] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0
[  167.272149][ T4347] Code: ff df 80 3c 08 00 74 08 48 89 df e8 8f 09 ec fd 41 be d8 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 67 09 ec fd bb 90 00 00 00 49 03 1e
[  167.291785][ T4347] RSP: 0018:ffffc90004027a80 EFLAGS: 00010206
[  167.297890][ T4347] RAX: 00000000000000bb RBX: ffff888065b51508 RCX: dffffc0000000000
[  167.305901][ T4347] RDX: 0000000000000000 RSI: ffffffff8a7a09a0 RDI: ffffffff8a7a0960
[  167.313902][ T4347] RBP: 1ffff1100cb6a2a9 R08: dffffc0000000000 R09: 1ffffffff203b018
[  167.321911][ T4347] R10: dffffc0000000000 R11: fffffbfff203b019 R12: ffff888142785110
[  167.329908][ T4347] R13: ffff888065b51548 R14: 00000000000005d8 R15: ffff88807a233bac
[  167.337905][ T4347] FS:  0000555588757500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  167.339508][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.346859][ T4347] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.346877][ T4347] CR2: 0000555588772a38 CR3: 000000007cce5000 CR4: 00000000003506f0
[  167.346895][ T4347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  167.395303][ T4347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  167.403300][ T4347] Call Trace:
[  167.406604][ T4347]  <TASK>
[  167.409561][ T4347]  bio_associate_blkg+0x23a/0x340
[  167.412996][ T7306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.414615][ T4347]  lbmStartIO+0x204/0x4c0
[  167.414648][ T4347]  lbmWrite+0x361/0x480
[  167.414673][ T4347]  jfs_flush_journal+0x537/0xec0
[  167.414700][ T4347]  ? lmLogShutdown+0x850/0x850
[  167.414725][ T4347]  ? dqput+0x460/0x460
[  167.414746][ T4347]  ? writeback_inodes_sb_nr+0x30/0x30
[  167.414775][ T4347]  jfs_sync_fs+0x79/0xa0
[  167.414795][ T4347]  sync_filesystem+0xe6/0x220
[  167.414818][ T4347]  generic_shutdown_super+0x6b/0x300
[  167.414843][ T4347]  kill_block_super+0x7c/0xe0
[  167.414865][ T4347]  deactivate_locked_super+0x93/0xf0
[  167.414888][ T4347]  cleanup_mnt+0x42d/0x4e0
[  167.414910][ T4347]  ? lockdep_hardirqs_on+0x94/0x140
[  167.414936][ T4347]  task_work_run+0x125/0x1a0
[  167.414962][ T4347]  exit_to_user_mode_loop+0x10f/0x130
[  167.414982][ T4347]  exit_to_user_mode_prepare+0xee/0x180
[  167.415003][ T4347]  syscall_exit_to_user_mode+0x16/0x40
[  167.446608][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.447772][ T4347]  do_syscall_64+0x58/0xa0
[  167.447800][ T4347]  ? clear_bhb_loop+0x30/0x80
[  167.455419][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.457417][ T4347]  ? clear_bhb_loop+0x30/0x80
[  167.464600][ T7306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.467395][ T4347]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  167.570895][ T4347] RIP: 0033:0x7f60247e1097
[  167.575346][ T4347] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  167.594978][ T4347] RSP: 002b:00007ffd6b459848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  167.603422][ T4347] RAX: 0000000000000000 RBX: 00007f60248751ca RCX: 00007f60247e1097
[  167.611416][ T4347] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6b459900
[  167.619412][ T4347] RBP: 00007ffd6b459900 R08: 00007ffd6b45a900 R09: 00000000ffffffff
[  167.627410][ T4347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6b45a990
[  167.635410][ T4347] R13: 00007f60248751ca R14: 0000000000028caa R15: 00007ffd6b45a9d0
[  167.643422][ T4347]  </TASK>
[  167.646474][ T4347] Modules linked in:
[  167.663941][ T4347] ---[ end trace 916be49c23964905 ]---
[  167.669471][ T4347] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0
[  167.676275][ T4347] Code: ff df 80 3c 08 00 74 08 48 89 df e8 8f 09 ec fd 41 be d8 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 67 09 ec fd bb 90 00 00 00 49 03 1e
[  167.686740][ T7346] JBD2: Ignoring recovery information on journal
[  167.696020][ T4347] RSP: 0018:ffffc90004027a80 EFLAGS: 00010206
[  167.708545][ T4347] RAX: 00000000000000bb RBX: ffff888065b51508 RCX: dffffc0000000000
[  167.716628][ T4347] RDX: 0000000000000000 RSI: ffffffff8a7a09a0 RDI: ffffffff8a7a0960
[  167.725426][ T4347] RBP: 1ffff1100cb6a2a9 R08: dffffc0000000000 R09: 1ffffffff203b018
[  167.733802][ T4347] R10: dffffc0000000000 R11: fffffbfff203b019 R12: ffff888142785110
[  167.741870][ T4347] R13: ffff888065b51548 R14: 00000000000005d8 R15: ffff88807a233bac
[  167.749914][ T4347] FS:  0000555588757500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  167.759508][ T4347] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.767184][ T4347] CR2: 00005637b6ea8950 CR3: 000000007cce5000 CR4: 00000000003506f0
[  167.775305][ T4347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  167.783330][ T4347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  167.791402][ T4347] Kernel panic - not syncing: Fatal exception
[  167.797589][ T4347] Kernel Offset: disabled
[  167.801922][ T4347] Rebooting in 86400 seconds..