last executing test programs:

19.731759835s ago: executing program 3 (id=409):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2000)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180))
write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

16.123010335s ago: executing program 3 (id=419):
r0 = socket(0x15, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffe11, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc26e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x8, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x2, "5f12de27"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffec5, 0x20004055, 0x0, 0x0)
ioctl$SIOCAX25DELUID(r3, 0x89e2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000000200)=""/102396, &(0x7f0000000000)=0x18ffc)

14.219824905s ago: executing program 0 (id=425):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendmmsg$inet(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000800)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551087ed89e2312e678f38707c8f37e5c8fe3cb977b7035046ea60fc263c1f72c13c1c7be3f14407e96c832dd5b10a03966185a38402e2cf26722ddeb0e262b9354a7db169109b0adec288e14e03b42147a29ba7f26c6886c05bea9ef56a3bb171e67a92b838a19c3a646fbd5bc79dadd977983eb0587e61bbc7a2d3f3fc63e5704464ed8e57027a8dc835d5f71cf96a13d0a6440492610145b7f71a28bbc1834493d9c63412a741186a0d3a3d18e00f622045954020e1d4bf3c51439ec5ea6c35004bb016ec740a9c2bbccd7daec478949021a69ce9a14bcff85d518579526d616f3ed024cf414e6673b800dc8e6d690b48d3c7430cdd4f51fa4707cad5d91f17a4bd1d72839f8cc3e155239b30c9fca6ac331621f45ae30b730736915456dd4e252c41449f33b07009c3d66163e23d1cabd19c80603", 0x19c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

13.079555109s ago: executing program 0 (id=427):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x0, 0x65d, &(0x7f0000001780)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x841, 0x0)
listxattr(&(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0)

12.662373577s ago: executing program 0 (id=428):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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")
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="bb", 0x1}], 0x1}, 0x4040004)
shutdown(r2, 0x1)

12.539763996s ago: executing program 3 (id=429):
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x86)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x4010586e, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x84)

10.341160165s ago: executing program 1 (id=435):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$inet(r3, 0x0, 0x0, 0x0)
close(r4)

10.193843804s ago: executing program 3 (id=436):
syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0xa08801, &(0x7f00000004c0)={[{@nobarrier}, {@nossd_spread}, {@nossd_spread}, {@barrier}, {@barrier}, {@rescue={'rescue', 0x3d, 'all'}}, {@acl}, {@nodiscard}]}, 0xfb, 0x5175, &(0x7f000000a2c0)="$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")

9.121585208s ago: executing program 2 (id=437):
syz_open_dev$media(&(0x7f0000000080), 0xc, 0x400001)
sched_setscheduler(0x0, 0x7, &(0x7f0000000100)=0x8)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40000c0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

8.915784657s ago: executing program 4 (id=438):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendmmsg$inet(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000800)="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", 0x19c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

7.983864472s ago: executing program 4 (id=439):
r0 = socket(0x15, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffe11, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc26e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x8, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x2, "5f12de27"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffec5, 0x20004055, 0x0, 0x0)
ioctl$SIOCAX25DELUID(r3, 0x89e2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000000200)=""/102396, &(0x7f0000000000)=0x18ffc)

6.588427965s ago: executing program 3 (id=440):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(0xffffffffffffffff)

6.157749873s ago: executing program 1 (id=441):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x4, 0x4, 0x0, 0x0, 0xc07}}, 0x120)
readv(r0, &(0x7f0000000140), 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)

6.129209083s ago: executing program 0 (id=442):
r0 = socket$unix(0x1, 0x5, 0x0)
listen(r0, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

5.905773871s ago: executing program 2 (id=443):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1010020, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '{/.'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'fuse\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsdef={'smackfsdef', 0x3d, '{!&]:..&@@@%&'}}, {@appraise_type}, {@smackfsfloor}]}}, 0x0, 0x0, &(0x7f0000000280)="cc6f8d51c8e3628da13cf596b44e4f030d23fadc7bb59e0d6d2962485178167d029b9035fea270c00ef33a887b66137b66b05a0430b31e265b364707ea836ac47282a48bdc4fa968d136c90e83b9e30fd505c346136a2130")
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0)

5.346224539s ago: executing program 0 (id=444):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000840)={0x20, 0x1, 0x3, "9a9402"}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xfb}, 0x0, 0x0})

4.779958495s ago: executing program 1 (id=445):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

4.583562885s ago: executing program 2 (id=446):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)

4.524771664s ago: executing program 4 (id=447):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9}}}, 0x7)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f00002ae000/0x1000)=nil, r0, 0x9, 0x20010, r1, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
setrlimit(0x1, &(0x7f0000000100)={0x4, 0xfffffffffffffe00})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x105840, 0x0)
bind$isdn(r5, &(0x7f0000000040)={0x22, 0xfc, 0x8, 0x9, 0x5}, 0x6)
r6 = msgget$private(0x0, 0x221)
msgsnd(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0100e10000000000"], 0x8, 0x800)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r8 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0)
io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@dioread_lock}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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")

4.238165633s ago: executing program 1 (id=448):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x0, 0x31}, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0})

3.386017368s ago: executing program 4 (id=449):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
read(r2, &(0x7f0000000000)=""/111, 0x6f)

2.796292945s ago: executing program 2 (id=450):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1}}, 0x18)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)="ec0811d2dc7b4b6e", 0x8}], 0x1}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)

2.644124804s ago: executing program 4 (id=451):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)

2.442040633s ago: executing program 4 (id=452):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$inet(r3, 0x0, 0x0, 0x0)
close(r4)

2.302055112s ago: executing program 3 (id=453):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$eJzs3c9vI1cdAPDvOHZIdrN1Chygh1JoUXYFaycNbSMObREITpWAcl9C4kRRnDhKnHYTVTQRfwAXBEic4MIFif8AVeLCsUIqgjOIIhCCLRw4wA4ae5zNZu04G5w4JJ+PNDvvza/ve/bOjzfzMg7gynomIl6NiPtpmt6KiHI+vZAPsdcesuU+uPfWQjYkkaav/y2JJJ/W2VaSj6/nq41FxNe/EvGt5NG4Wzu7q/P1em0zz1ebaxvVrZ3d2ytr88u15dr67OzMi3Mvzb0wNz2Qet6IiJe/9Kfvf/enX375F5998w93/nLz21mxvpjPP1yPx1Q8bma76qXWZ3F4hc2IV04Z78IptmqYGz/ZOvtnWB4AAHrLrvE/HBGfiohbUY6R4y9nAQAAgP9D6SsT8e8kIu1utNvEsei5PAAAAHABFSJiIpJCJe8LMBGFQqXS7sP70biWvh3R/MxSY3t9MZsXMRmlwtJKvTad9xWejFKS5Wda6Qf559v5/fcjWvnZiHgyIr5XHm/lKwuN+uKwb34AAADAFXH9SPv/n+V2+x8AAAC4ZCaHXQAAAADgzGn/AwAAwOWn/Q8AAACX2ldfey0b0s7vXy++sbO92njj9mJta7Wytr1QWWhsblSWG43l1jv71vptr95obHwu1rfvVpu1rWZ1a2f3zlpje715Z+Whn8AGAAAAztGTn3jnd0lE7H1+vDVkRnssO3KuJQPOWvEgleTjLnv/759oj98/p0IB56LfOf035XMqCHDuisMuADA0pcdZ2N8JwKWU9Jnfs/POu/n4k4MtDwAAMHhTH+/9/L9w7Jp7x88GLjw7MVxdnef/TxzJA5df6/l/rw6/R7lYgEul5IwPV17f5/+9OgC8e9IIafp4JQIAAAZtojUkhUp+e28iCoVKJeJGq7t/KVlaqdem8+cDvy2XPpTlZ1prJn3bDAAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAACXWkThz8kv2+/ynyo/N3H0/sBo8q9y5D8R+uaPXv/B3flmc3Mmm/73g+nNH+bTnx/GHQwAAADgqE47vdOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB+uDeWwudoTMtLZ993L9+ISImu8UvxlhrPBaliLj2jySKh9ZLImJkAPH39iPiY93iJ1mxDkJ2iz9+9vFjMv8UusW/PoD4cJW9kx1/Xs32v9GIOLz/FeKZ1rj7/leMeCh/Wq3jX3aA63L87Rz/Rnrs/zeObGuyR4yn3vt5tWf8/Yinit2PP534SY/4z56wjt/8xu5ur3npjyOmup5/kodiVZtrG9Wtnd3bK2vzy7Xl2vrs7MyLcy/NvTA3XV1aqdfyfx/ZfqlP2bL6X+sRf7JP/Z87Yf3/897dex/pUZws/s1nu8T/1U/yJR6NX8jPfZ/O09n8qU56r50+7Omf/frp4+q/2KP+/b7/myes/62vfeePEXH/0FcKAAzR1s7u6ny9Xts8NpFdtvRb5qImslb6BSiGxOkSJ/0veqrE2wPdYJqmafxve0oSQ//AO4lhH5kAAIBBe3DRP+ySAAAAAAAAAAAAAAAAAAAAwNV1Hq8TOxpz7yCVDOIV2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HfAAAA///xwNLS")
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="bb", 0x1}], 0x1}, 0x4040004)
shutdown(r2, 0x1)

1.708989109s ago: executing program 2 (id=454):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8039, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x22, &(0x7f0000000a00), 0x6}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x12, 0x9, 0xd}})
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)="9bbb000000000009009b09d5af0b5679ec16310df4ac69bd7d88538d11b0fa", 0x1f}, {0x0}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000600)='z', 0x1}, {&(0x7f0000000540)="734443a12e60c0904f0c0b4ae9b751e43405a15cb73b25ee6e512d14d0b68235615fea7b78cc839cf7310587e3ff13c965123f71b5508792f4fe80cc53b83185a6007e6e6e473f41a3a1c9dcfbf9caece372019d43311896a71f8126060865c627a7f6a95d58b2026dfaee48c861b981744f41bcaf7e3a9c1af50e10baae0841b511c108e3a0df9ff7f5ebbad68a7fa8d499807218cbd5666bbb0f3e168c16b181e23e1a262d92", 0xa7}], 0x2, 0x0, 0x0, 0x4041}}], 0x3, 0xc000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000680)={0x1, 0x2, 0x1000, 0xfffffffffffffe1b, 0x0, 0x0, 0x0, 0x0})

399.894813ms ago: executing program 2 (id=455):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x4, 0x4, 0x0, 0x0, 0xc07}}, 0x120)
readv(r0, &(0x7f0000000140)=[{0x0}], 0x1)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)

338.093432ms ago: executing program 1 (id=456):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f00000000c0)={0x28, 0xcd1, 0xfffffffffffffffc})

335.738872ms ago: executing program 0 (id=457):
r0 = socket(0x15, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffe11, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc26e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x8, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x7}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffec5, 0x20004055, 0x0, 0x0)
ioctl$SIOCAX25DELUID(r3, 0x89e2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000000200)=""/102396, &(0x7f0000000000)=0x18ffc)

0s ago: executing program 1 (id=458):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x0, 0x65d, &(0x7f0000001780)="$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")
setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x841, 0x0)
listxattr(&(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts.
[   81.777441][ T4240] cgroup: Unknown subsys name 'net'
[   81.907092][ T4240] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.443870][ T4240] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   85.555009][ T4252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.571370][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.580440][ T4256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.590982][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.599413][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.607485][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.616168][ T4263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.624962][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.632104][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.633402][ T4263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.639809][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.648085][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.653742][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.661254][ T4263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.674166][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.677027][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.682551][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.689838][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.696024][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.703454][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.710476][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.717817][ T4263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.724618][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.751303][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   85.758730][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.765777][ T4263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.766504][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.781544][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.782004][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.816008][ T4254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.180503][ T4262] chnl_net:caif_netlink_parms(): no params data found
[   86.290207][ T4261] chnl_net:caif_netlink_parms(): no params data found
[   86.338306][ T4259] chnl_net:caif_netlink_parms(): no params data found
[   86.404152][ T4255] chnl_net:caif_netlink_parms(): no params data found
[   86.468763][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.476819][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.485989][ T4262] device bridge_slave_0 entered promiscuous mode
[   86.506658][ T4250] chnl_net:caif_netlink_parms(): no params data found
[   86.521708][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.528817][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.537426][ T4262] device bridge_slave_1 entered promiscuous mode
[   86.604297][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.611600][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.619590][ T4261] device bridge_slave_0 entered promiscuous mode
[   86.658648][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.666036][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.674289][ T4261] device bridge_slave_1 entered promiscuous mode
[   86.692101][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.707037][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.715482][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.724757][ T4255] device bridge_slave_0 entered promiscuous mode
[   86.740206][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.755874][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.763734][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.772602][ T4259] device bridge_slave_0 entered promiscuous mode
[   86.797868][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.808195][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.818115][ T4255] device bridge_slave_1 entered promiscuous mode
[   86.830385][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.837600][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.845797][ T4259] device bridge_slave_1 entered promiscuous mode
[   86.855945][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.909873][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.924285][ T4262] team0: Port device team_slave_0 added
[   86.940195][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.948890][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.960928][ T4250] device bridge_slave_0 entered promiscuous mode
[   86.995547][ T4262] team0: Port device team_slave_1 added
[   87.012063][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.021838][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.031157][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.039109][ T4250] device bridge_slave_1 entered promiscuous mode
[   87.049398][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.079792][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.101982][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.114046][ T4261] team0: Port device team_slave_0 added
[   87.120888][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.127866][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.155230][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.195157][ T4261] team0: Port device team_slave_1 added
[   87.203379][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.213118][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.240034][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.269873][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.306746][ T4255] team0: Port device team_slave_0 added
[   87.315215][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.326881][ T4259] team0: Port device team_slave_0 added
[   87.343258][ T4259] team0: Port device team_slave_1 added
[   87.358058][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.365709][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.391934][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.406239][ T4255] team0: Port device team_slave_1 added
[   87.439372][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.446501][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.472610][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.509376][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.516644][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.543109][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.569897][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.577010][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.603273][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.616982][ T4250] team0: Port device team_slave_0 added
[   87.631668][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.638660][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.664769][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.678128][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.685949][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.712533][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.725576][ T4250] team0: Port device team_slave_1 added
[   87.735450][ T4262] device hsr_slave_0 entered promiscuous mode
[   87.743269][ T4262] device hsr_slave_1 entered promiscuous mode
[   87.800002][ T4261] device hsr_slave_0 entered promiscuous mode
[   87.807016][ T4268] Bluetooth: hci2: command 0x0409 tx timeout
[   87.810820][ T4266] Bluetooth: hci0: command 0x0409 tx timeout
[   87.820744][ T4261] device hsr_slave_1 entered promiscuous mode
[   87.827530][ T4261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.835872][ T4261] Cannot create hsr debugfs directory
[   87.874068][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.880559][ T4268] Bluetooth: hci1: command 0x0409 tx timeout
[   87.881538][ T4266] Bluetooth: hci3: command 0x0409 tx timeout
[   87.887654][ T4268] Bluetooth: hci4: command 0x0409 tx timeout
[   87.902579][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.930437][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.970120][ T4255] device hsr_slave_0 entered promiscuous mode
[   87.977318][ T4255] device hsr_slave_1 entered promiscuous mode
[   87.984448][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.992401][ T4255] Cannot create hsr debugfs directory
[   87.998567][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.005948][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.032739][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.061283][ T4259] device hsr_slave_0 entered promiscuous mode
[   88.070090][ T4259] device hsr_slave_1 entered promiscuous mode
[   88.079212][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.086906][ T4259] Cannot create hsr debugfs directory
[   88.203931][ T4250] device hsr_slave_0 entered promiscuous mode
[   88.211342][ T4250] device hsr_slave_1 entered promiscuous mode
[   88.218113][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.226483][ T4250] Cannot create hsr debugfs directory
[   88.540462][ T4262] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.551703][ T4262] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.566184][ T4262] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.576139][ T4262] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.643908][ T4255] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.665059][ T4255] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.695225][ T4255] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.727585][ T4259] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.754848][ T4255] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.766853][ T4259] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.804244][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.814957][ T4259] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.839659][ T4259] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.860999][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.871693][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.895893][ T4262] 8021q: adding VLAN 0 to HW filter on device team0
[   88.930199][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.961323][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.984724][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.994974][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.005674][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.013087][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.024983][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.034523][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.043135][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.050227][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.058632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.079086][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.095261][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.107730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.150053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.164831][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.174109][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.222881][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.231698][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.241757][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.252671][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.262299][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.271747][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.281736][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.297734][ T4261] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.317088][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.344640][ T4261] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.373497][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.394471][ T4261] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.414415][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.434353][ T4261] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.476928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.486277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.495221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.504325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.519322][ T4255] 8021q: adding VLAN 0 to HW filter on device team0
[   89.531131][ T4259] 8021q: adding VLAN 0 to HW filter on device team0
[   89.561060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.569861][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.587403][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.594722][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.610879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.629094][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.638448][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.656394][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.663614][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.677388][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.699145][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.707846][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.725006][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.734993][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.742460][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.762311][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.770701][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.778590][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.788413][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.797243][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.804409][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.828196][ T4250] 8021q: adding VLAN 0 to HW filter on device team0
[   89.860542][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.873607][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.881741][ T4266] Bluetooth: hci2: command 0x041b tx timeout
[   89.889710][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.891098][ T4254] Bluetooth: hci0: command 0x041b tx timeout
[   89.902349][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.912567][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.924724][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.934054][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.943293][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.952476][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.960515][ T4254] Bluetooth: hci4: command 0x041b tx timeout
[   89.967450][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.971398][ T4266] Bluetooth: hci3: command 0x041b tx timeout
[   89.980927][ T4254] Bluetooth: hci1: command 0x041b tx timeout
[   90.012368][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.023865][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.033975][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.046778][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.056394][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.063549][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.076638][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.085536][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.094565][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.104084][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.113332][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.123211][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.132926][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.141671][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.148777][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.158253][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.166195][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.183534][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.203489][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.222016][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.233295][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.242516][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.252269][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.261426][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.276227][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.285813][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.315045][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.337181][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.373245][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   90.384958][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   90.396539][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.405220][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   90.415982][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.426752][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.439229][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.454183][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.475795][ T4261] 8021q: adding VLAN 0 to HW filter on device team0
[   90.486839][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.499175][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.537819][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.554540][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.563433][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.574056][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.583741][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.590963][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.602358][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.611715][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.622108][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.629258][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.637671][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.647797][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.662256][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.711390][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.727837][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.752239][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.784891][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   90.820670][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   90.843286][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.861919][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.885800][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.904119][ T4262] device veth0_vlan entered promiscuous mode
[   90.929392][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.939065][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.948241][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.958981][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.973725][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.984697][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.994818][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.028577][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.048082][ T4261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.061416][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.072922][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   91.082333][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   91.098241][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.106508][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.134246][ T4262] device veth1_vlan entered promiscuous mode
[   91.172663][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   91.190972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.198637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.213019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.224976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.252070][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.267590][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.302693][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   91.311660][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   91.324204][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.386887][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   91.399124][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.430908][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   91.439889][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.449460][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   91.461238][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   91.470164][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.478861][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.495014][ T4262] device veth0_macvtap entered promiscuous mode
[   91.505119][ T4255] device veth0_vlan entered promiscuous mode
[   91.514175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.527196][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.557914][ T4262] device veth1_macvtap entered promiscuous mode
[   91.572330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.583690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.615222][ T4255] device veth1_vlan entered promiscuous mode
[   91.631934][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.641854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.649388][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   91.659730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   91.668705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.677220][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.688420][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.697656][ T4250] device veth0_vlan entered promiscuous mode
[   91.719551][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.763812][ T4250] device veth1_vlan entered promiscuous mode
[   91.782459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   91.792225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.803436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.821520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   91.838163][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   91.852194][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.891551][ T4259] device veth0_vlan entered promiscuous mode
[   91.909790][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.919727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.930060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.941466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.962041][ T4268] Bluetooth: hci0: command 0x040f tx timeout
[   91.968120][ T4268] Bluetooth: hci2: command 0x040f tx timeout
[   91.968446][ T4262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.994291][ T4262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.006831][ T4262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.017428][ T4262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.040623][ T4268] Bluetooth: hci1: command 0x040f tx timeout
[   92.046795][ T4268] Bluetooth: hci3: command 0x040f tx timeout
[   92.053123][ T4254] Bluetooth: hci4: command 0x040f tx timeout
[   92.055433][ T4259] device veth1_vlan entered promiscuous mode
[   92.108717][ T4255] device veth0_macvtap entered promiscuous mode
[   92.132906][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   92.144912][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   92.153884][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   92.163001][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   92.172709][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.181858][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.224059][ T4250] device veth0_macvtap entered promiscuous mode
[   92.234915][ T4255] device veth1_macvtap entered promiscuous mode
[   92.261082][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.275446][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   92.288492][   T14] cfg80211: failed to load regulatory.db
[   92.304893][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.316656][ T4250] device veth1_macvtap entered promiscuous mode
[   92.389126][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.399505][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.408878][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   92.418734][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   92.430179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   92.439247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.454560][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.466513][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.480472][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.501062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.509831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.559034][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.583497][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.602895][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.619867][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.639277][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.654613][ T4259] device veth0_macvtap entered promiscuous mode
[   92.678075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.689091][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.704718][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.714586][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   92.724247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   92.735865][ T4261] device veth0_vlan entered promiscuous mode
[   92.745727][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.758191][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.771728][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.780079][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.791487][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.801995][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.818114][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.830737][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.840972][ T4259] device veth1_macvtap entered promiscuous mode
[   92.870457][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.878798][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.880503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.900704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   92.909457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   92.919190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.938290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.948305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.965770][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.978172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.996796][ T4261] device veth1_vlan entered promiscuous mode
[   93.009005][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.020213][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.030492][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.039524][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.057085][ T4255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.066533][ T4255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.076304][ T4255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.086911][ T4255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.124658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.153397][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.164518][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.180734][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.191583][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.201575][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.212187][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.223858][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.251742][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   93.266698][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.276267][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.302104][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.302219][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.313350][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.332090][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.346994][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.357984][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.368141][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.379013][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.390849][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.413075][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.422145][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.434625][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.444072][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.456883][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.476180][ T4261] device veth0_macvtap entered promiscuous mode
[   93.490249][ T4259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.499409][ T4259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.513416][ T4259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.522463][ T4259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.567042][ T4261] device veth1_macvtap entered promiscuous mode
[   93.663453][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.672264][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.682566][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.695134][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.721332][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.740669][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.761092][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.772064][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.787766][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.801664][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.814407][ T4296] hid-generic 0004:0004:0000.0001: unknown main item tag 0x0
[   93.816504][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.827887][ T4296] hid-generic 0004:0004:0000.0001: unknown main item tag 0x0
[   93.834898][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.854002][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.864396][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.869284][ T4296] hid-generic 0004:0004:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   93.875024][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.875041][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.912461][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.940529][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.951226][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.973207][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.990024][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.008815][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.021347][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.032040][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.040882][ T4268] Bluetooth: hci2: command 0x0419 tx timeout
[   94.040917][ T4266] Bluetooth: hci0: command 0x0419 tx timeout
[   94.048860][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.063273][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.076332][ T4261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.091664][ T4261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.104397][ T4261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.115520][ T4261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.124682][ T4268] Bluetooth: hci3: command 0x0419 tx timeout
[   94.124700][ T4266] Bluetooth: hci4: command 0x0419 tx timeout
[   94.131088][ T4254] Bluetooth: hci1: command 0x0419 tx timeout
[   94.195601][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.274527][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.292957][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.303635][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.320015][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.337300][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.370643][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.378942][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.418747][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.428161][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.437591][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.457881][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.521676][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.537838][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.575957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.641148][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.649220][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.711782][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.747351][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.823391][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.920607][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.991172][ T4341] loop0: detected capacity change from 0 to 512
[   95.006172][   T26] hid-generic 0004:0004:0000.0002: unknown main item tag 0x0
[   95.015168][   T26] hid-generic 0004:0004:0000.0002: unknown main item tag 0x0
[   95.113282][ T4337] loop1: detected capacity change from 0 to 32768
[   95.168268][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.180355][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   95.188698][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   95.197156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   95.205454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   95.213738][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   95.222076][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   95.230419][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   95.238812][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   95.247213][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   96.261228][   T26] hid-generic 0004:0004:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   96.556499][ T4355] loop4: detected capacity change from 0 to 512
[   96.604993][ T4337] ERROR: (device loop1): dbAlloc: the hint is outside the map
[   96.604993][ T4337] 
[   96.638817][ T4355] =======================================================
[   96.638817][ T4355] WARNING: The mand mount option has been deprecated and
[   96.638817][ T4355]          and is ignored by this kernel. Remove the mand
[   96.638817][ T4355]          option from the mount to silence this warning.
[   96.638817][ T4355] =======================================================
[   96.729464][ T4337] ERROR: (device loop1): remounting filesystem as read-only
[   97.060636][ T4337] ialloc: diAlloc returned -5!
[   97.172399][ T4355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[   97.219289][ T4355] System zones: 0-2, 18-18, 34-34
[   97.400195][ T4355] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5: bg 0: block 248: padding at end of block bitmap is not set
[   97.400760][   T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.503932][ T4355] Quota error (device loop4): write_blk: dquota write failed
[   97.564564][ T4355] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   97.610489][ T4355] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.5: Failed to acquire dquot type 1
[   97.734365][ T4355] EXT4-fs (loop4): 1 truncate cleaned up
[   97.771137][ T4355] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   97.833135][ T4355] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.664880][ T4355] syz.4.5 (4355) used greatest stack depth: 19808 bytes left
[   99.036909][ T4261] EXT4-fs (loop4): unmounting filesystem.
[   99.690782][ T4361] loop2: detected capacity change from 0 to 32768
[  100.606756][   T22] usb 3-1: unable to get BOS descriptor or descriptor too short
[  100.636014][   T22] usb 3-1: unable to read config index 0 descriptor/start: -71
[  100.683732][   T22] usb 3-1: can't read configurations, error -71
[  101.053350][ T4386] loop4: detected capacity change from 0 to 64
[  101.173382][ T4386] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.667542][ T4396] loop0: detected capacity change from 0 to 512
[  101.857162][ T4396] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  101.884923][ T4396] System zones: 0-2, 18-18, 34-34
[  101.916512][ T4396] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.16: bg 0: block 248: padding at end of block bitmap is not set
[  102.121144][ T4396] Quota error (device loop0): write_blk: dquota write failed
[  102.132630][ T4396] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  102.144567][ T4396] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.16: Failed to acquire dquot type 1
[  103.373939][ T4396] EXT4-fs (loop0): 1 truncate cleaned up
[  103.379668][ T4396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  103.501283][ T4396] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.055667][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  105.910449][ T4331] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  105.960395][ T4266] Bluetooth: hci1: command 0x0406 tx timeout
[  106.064901][ T4426] loop4: detected capacity change from 0 to 512
[  106.192178][ T4426] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  106.220566][ T4426] System zones: 0-2, 18-18, 34-34
[  106.261603][ T4426] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.24: bg 0: block 248: padding at end of block bitmap is not set
[  106.292468][ T4426] Quota error (device loop4): write_blk: dquota write failed
[  106.320888][ T4426] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  106.332040][ T4426] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.24: Failed to acquire dquot type 1
[  106.355018][ T4426] EXT4-fs (loop4): 1 truncate cleaned up
[  106.380454][ T4426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  106.410427][ T4426] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.221901][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  108.509879][ T4423] loop1: detected capacity change from 0 to 32768
[  108.620678][ T4423] (syz.1.23,4423,1):ocfs2_initialize_super:2283 ERROR: status = -12
[  108.664276][ T4443] loop2: detected capacity change from 0 to 512
[  108.693769][ T4423] (syz.1.23,4423,1):ocfs2_fill_super:1176 ERROR: status = -12
[  109.171956][ T4331] usb 2-1: unable to get BOS descriptor or descriptor too short
[  109.640786][ T4331] usb 2-1: unable to read config index 0 descriptor/start: -71
[  109.648541][ T4331] usb 2-1: can't read configurations, error -71
[  109.977463][ T4459] loop1: detected capacity change from 0 to 512
[  110.032788][ T4459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  110.048958][ T4459] System zones: 0-2, 18-18, 34-34
[  110.106114][ T4459] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.32: bg 0: block 248: padding at end of block bitmap is not set
[  110.205339][ T4459] Quota error (device loop1): write_blk: dquota write failed
[  110.250437][ T4459] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  110.270625][ T4459] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.32: Failed to acquire dquot type 1
[  110.308391][ T4459] EXT4-fs (loop1): 1 truncate cleaned up
[  110.460784][ T4459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  110.499399][ T4459] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.175950][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  112.360684][ T4256] Bluetooth: hci2: command 0x0406 tx timeout
[  112.423444][ T4476] loop2: detected capacity change from 0 to 512
[  112.477378][ T4476] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  112.505258][ T4476] System zones: 0-2, 18-18, 34-34
[  112.532674][ T4476] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.39: bg 0: block 248: padding at end of block bitmap is not set
[  112.704202][ T4476] Quota error (device loop2): write_blk: dquota write failed
[  112.720541][ T4476] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  113.630597][ T4476] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.39: Failed to acquire dquot type 1
[  113.676666][ T4476] EXT4-fs (loop2): 1 truncate cleaned up
[  113.705572][ T4476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  113.728359][ T4476] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.267227][ T4476] syz.2.39 (4476) used greatest stack depth: 19416 bytes left
[  114.571727][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  115.783515][ T4492] loop3: detected capacity change from 0 to 32768
[  116.079727][ T4492] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  118.126252][ T4501] overlayfs: upper fs does not support tmpfile.
[  118.159607][ T4501] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  118.219371][ T4501] overlayfs: upper fs missing required features.
[  118.236651][ T4511] loop1: detected capacity change from 0 to 512
[  118.340008][ T4513] loop4: detected capacity change from 0 to 512
[  118.380984][ T4511] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  118.421116][ T4511] System zones: 0-2, 18-18, 34-34
[  118.600792][ T4511] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.48: bg 0: block 248: padding at end of block bitmap is not set
[  118.832097][ T4511] Quota error (device loop1): write_blk: dquota write failed
[  118.841168][ T4511] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  118.891924][ T4511] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.48: Failed to acquire dquot type 1
[  119.193621][ T4511] EXT4-fs (loop1): 1 truncate cleaned up
[  119.244638][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  119.284332][ T4511] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.168382][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  122.239560][ T4535] loop2: detected capacity change from 0 to 512
[  122.257667][ T3583] hid-generic 0004:0004:0000.0003: unknown main item tag 0x0
[  122.309735][ T3583] hid-generic 0004:0004:0000.0003: unknown main item tag 0x0
[  122.381534][ T3583] hid-generic 0004:0004:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  122.438216][ T4535] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  122.476352][ T4535] System zones: 0-2, 18-18, 34-34
[  122.593567][ T4535] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.53: bg 0: block 248: padding at end of block bitmap is not set
[  122.707319][ T4535] Quota error (device loop2): write_blk: dquota write failed
[  122.764534][ T4535] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  122.842924][ T4535] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.53: Failed to acquire dquot type 1
[  122.931392][ T4535] EXT4-fs (loop2): 1 truncate cleaned up
[  123.020632][ T4535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  123.050007][ T4535] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.112242][ T4255] ocfs2: Unmounting device (7,3) on (node local)
[  123.560626][ T4266] Bluetooth: hci0: command 0x0406 tx timeout
[  123.910181][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  125.558467][ T4568] loop2: detected capacity change from 0 to 512
[  125.786869][ T4568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  125.821692][ T4568] System zones: 0-2, 18-18, 34-34
[  125.851694][ T4568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.59: bg 0: block 248: padding at end of block bitmap is not set
[  125.871651][ T4568] Quota error (device loop2): write_blk: dquota write failed
[  125.930474][ T4568] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  126.010504][ T4568] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.59: Failed to acquire dquot type 1
[  126.055449][ T4568] EXT4-fs (loop2): 1 truncate cleaned up
[  126.084982][ T4568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  126.122408][ T4568] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.003419][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  129.422165][ T3583] hid-generic 0004:0004:0000.0004: unknown main item tag 0x0
[  129.440043][ T3583] hid-generic 0004:0004:0000.0004: unknown main item tag 0x0
[  129.460679][ T3583] hid-generic 0004:0004:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  129.640577][ T4598] loop2: detected capacity change from 0 to 512
[  130.517040][ T4598] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  130.527747][ T4598] System zones: 0-2, 18-18, 34-34
[  132.720271][    C1] sched: RT throttling activated
[  132.774085][ T4598] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.69: bg 0: block 248: padding at end of block bitmap is not set
[  132.890690][ T4598] Quota error (device loop2): write_blk: dquota write failed
[  132.911617][ T4598] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  132.951372][ T4598] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.69: Failed to acquire dquot type 1
[  132.971013][ T4615] loop0: detected capacity change from 0 to 512
[  133.025235][ T4598] EXT4-fs (loop2): 1 truncate cleaned up
[  133.059128][ T4615] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  133.065020][ T4598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  133.076888][ T4598] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.090794][ T4615] System zones: 0-2, 18-18, 34-34
[  133.099706][ T4615] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.74: bg 0: block 248: padding at end of block bitmap is not set
[  133.298062][ T4615] Quota error (device loop0): write_blk: dquota write failed
[  133.298855][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  133.329527][ T4615] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  133.356499][ T4615] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.74: Failed to acquire dquot type 1
[  133.403709][ T4615] EXT4-fs (loop0): 1 truncate cleaned up
[  133.446909][ T4615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.505726][ T4615] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.352324][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  137.056918][   T27] audit: type=1326 audit(1738408152.979:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4649 comm="syz.0.84" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04bd98cda9 code=0x0
[  137.802421][ T4648] loop3: detected capacity change from 0 to 256
[  137.810297][ T4648] exfat: Bad value for 'gid'
[  137.889576][ T4364] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  138.391071][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  138.404438][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  139.628956][ T4660] loop0: detected capacity change from 0 to 512
[  139.681482][ T4660] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  139.689743][ T4660] System zones: 0-2, 18-18, 34-34
[  139.738985][ T4660] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.86: bg 0: block 248: padding at end of block bitmap is not set
[  139.830382][ T4660] Quota error (device loop0): write_blk: dquota write failed
[  139.837883][ T4660] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  139.971863][ T4660] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.86: Failed to acquire dquot type 1
[  140.314020][ T4660] EXT4-fs (loop0): 1 truncate cleaned up
[  140.409346][ T4660] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  140.560401][ T4660] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.893689][ T4266] Bluetooth: hci4: link tx timeout
[  140.899886][ T4266] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.322574][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  141.574972][ T4266] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[  141.731938][ T4675] loop1: detected capacity change from 0 to 512
[  141.895657][ T4675] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  141.910425][ T4675] System zones: 0-2, 18-18, 34-34
[  141.950129][ T4675] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.90: bg 0: block 248: padding at end of block bitmap is not set
[  142.823067][ T4675] Quota error (device loop1): write_blk: dquota write failed
[  142.887673][ T4675] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  142.920727][ T4266] Bluetooth: hci4: command 0x0406 tx timeout
[  142.947212][ T4675] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.90: Failed to acquire dquot type 1
[  143.123279][ T4675] EXT4-fs (loop1): 1 truncate cleaned up
[  143.129020][ T4675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  143.928186][ T4266] Bluetooth: hci0: command 0x2016 tx timeout
[  143.940537][ T4675] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.035051][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  145.133546][ T4331] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  145.381819][ T4331] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  145.411542][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.450228][ T4331] usb 3-1: Product: syz
[  145.455496][ T4331] usb 3-1: Manufacturer: syz
[  145.496062][ T4331] usb 3-1: SerialNumber: syz
[  145.538729][ T4331] r8152-cfgselector 3-1: config 0 descriptor??
[  145.990330][ T4256] Bluetooth: hci0: command 0x0406 tx timeout
[  146.000379][ T4331] r8152-cfgselector 3-1: Unknown version 0x0000
[  146.026291][ T4331] r8152-cfgselector 3-1: bad CDC descriptors
[  146.073167][ T4331] r8152-cfgselector 3-1: Unknown version 0x0000
[  146.123992][ T4331] r8152-cfgselector 3-1: USB disconnect, device number 4
[  146.204878][ T4695] loop3: detected capacity change from 0 to 32768
[  146.255236][ T4695] XFS: ikeep mount option is deprecated.
[  146.378440][ T4695] XFS (loop3): Mounting V5 Filesystem
[  146.506026][ T4695] XFS (loop3): Ending clean mount
[  146.545164][ T4695] XFS (loop3): Quotacheck needed: Please wait.
[  146.658692][ T4695] XFS (loop3): Quotacheck: Done.
[  146.988538][ T4695] xfs: Unknown parameter 'ÿÿ01777777777777777777777¤	Z*¬ð¿Ë m˜.Dc�8�'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá'
[  148.568225][ T4255] XFS (loop3): Unmounting Filesystem
[  150.214850][ T4738] loop4: detected capacity change from 0 to 512
[  150.356865][ T4738] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  150.375974][ T4738] System zones: 0-2, 18-18, 34-34
[  150.440136][ T4738] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.107: bg 0: block 248: padding at end of block bitmap is not set
[  150.464931][ T4738] Quota error (device loop4): write_blk: dquota write failed
[  150.504860][ T4738] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  150.515522][ T4738] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.107: Failed to acquire dquot type 1
[  150.543676][ T4738] EXT4-fs (loop4): 1 truncate cleaned up
[  150.549382][ T4738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  150.560583][ T4332] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  150.568982][ T4738] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.786473][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.853730][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.444053][ T4332] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  151.455586][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.456838][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  151.477814][ T4332] usb 1-1: config 0 descriptor??
[  152.180826][ T4332] wacom 0003:056A:0063.0005: Unknown device_type for 'HID 056a:0063'. Assuming pen.
[  152.557276][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  152.567001][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  152.574736][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  153.160717][ T4332] wacom 0003:056A:0063.0005: hidraw0: USB HID v0.00 Device [HID 056a:0063] on usb-dummy_hcd.0-1/input0
[  153.489422][ T4332] input: Wacom Volito2 2x3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0063.0005/input/input5
[  153.644834][ T4332] usb 1-1: USB disconnect, device number 2
[  154.130585][ T3583] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  155.690358][ T4256] Bluetooth: hci4: command 0x2016 tx timeout
[  156.079586][ T3583] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  156.098875][ T3583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.130556][ T3583] usb 4-1: Product: syz
[  156.138310][ T3583] usb 4-1: Manufacturer: syz
[  156.148682][ T3583] usb 4-1: SerialNumber: syz
[  156.181901][ T3583] r8152-cfgselector 4-1: config 0 descriptor??
[  157.295937][ T4794] loop1: detected capacity change from 0 to 512
[  157.457332][ T4794] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  157.469212][ T3583] r8152-cfgselector 4-1: Unknown version 0x0000
[  157.471811][ T4794] System zones: 0-2, 18-18, 34-34
[  157.483633][ T3583] r8152-cfgselector 4-1: Unknown version 0x0000
[  157.505977][ T3583] r8152-cfgselector 4-1: bad CDC descriptors
[  157.524006][ T4794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.121: bg 0: block 248: padding at end of block bitmap is not set
[  157.558647][ T3583] r8152-cfgselector 4-1: Unknown version 0x0000
[  157.589373][ T3583] r8152-cfgselector 4-1: USB disconnect, device number 2
[  157.622998][ T4794] Quota error (device loop1): write_blk: dquota write failed
[  157.643101][ T4794] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  157.662220][ T4794] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.121: Failed to acquire dquot type 1
[  157.727432][ T4794] EXT4-fs (loop1): 1 truncate cleaned up
[  157.774276][ T4794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  157.839465][ T4794] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.740578][ T4806] loop0: detected capacity change from 0 to 8
[  159.260209][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  159.310350][    T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  160.380676][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.391732][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.402940][    T7] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  160.412580][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.429715][    T7] usb 5-1: config 0 descriptor??
[  161.515442][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  161.525020][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  161.532610][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.854342][ T4266] Bluetooth: hci2: command 0x2016 tx timeout
[  163.723963][    T7] usbhid 5-1:0.0: can't add hid device: -71
[  163.730003][    T7] usbhid: probe of 5-1:0.0 failed with error -71
[  163.757090][    T7] usb 5-1: USB disconnect, device number 2
[  165.122516][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  165.324878][    T7] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  165.356024][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.374371][    T7] usb 5-1: Product: syz
[  165.378616][    T7] usb 5-1: Manufacturer: syz
[  165.400316][    T7] usb 5-1: SerialNumber: syz
[  165.418142][    T7] r8152-cfgselector 5-1: config 0 descriptor??
[  165.505933][ T4840] loop1: detected capacity change from 0 to 32768
[  165.524571][ T4840] XFS: ikeep mount option is deprecated.
[  165.602505][ T4840] XFS (loop1): Mounting V5 Filesystem
[  165.696268][ T4840] XFS (loop1): Ending clean mount
[  165.717092][ T4840] XFS (loop1): Quotacheck needed: Please wait.
[  165.775295][ T4840] XFS (loop1): Quotacheck: Done.
[  165.839110][    T7] r8152-cfgselector 5-1: Unknown version 0x0000
[  165.856611][    T7] r8152-cfgselector 5-1: bad CDC descriptors
[  165.877861][    T7] r8152-cfgselector 5-1: Unknown version 0x0000
[  165.895765][    T7] r8152-cfgselector 5-1: USB disconnect, device number 3
[  165.986187][ T4840] xfs: Unknown parameter 'ÿÿ01777777777777777777777¤	Z*¬ð¿Ë m˜.Dc�8�'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá'
[  166.219847][   T27] audit: type=1804 audit(1738408182.139:3): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.133" name="/newroot/27/file0/bus" dev="loop1" ino=9290 res=1 errno=0
[  167.678650][ T4262] XFS (loop1): Unmounting Filesystem
[  167.900633][ T4300] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  168.102203][ T4300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.120707][ T4300] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  168.166452][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.336678][ T4300] usb 3-1: config 0 descriptor??
[  168.358325][ T4300] pwc: Askey VC010 type 2 USB webcam detected.
[  169.337869][ T4884] loop4: detected capacity change from 0 to 8
[  169.640499][ T4256] Bluetooth: hci3: command 0x2016 tx timeout
[  170.615284][ T4873] loop3: detected capacity change from 0 to 32768
[  170.642405][ T4300] pwc: recv_control_msg error -32 req 02 val 2b00
[  170.760499][ T4873] XFS (loop3): Mounting V5 Filesystem
[  170.779052][ T4300] pwc: recv_control_msg error -71 req 02 val 2700
[  170.790356][ T4300] pwc: recv_control_msg error -71 req 02 val 2c00
[  170.807400][ T4300] pwc: recv_control_msg error -71 req 04 val 1000
[  170.817220][ T4300] pwc: recv_control_msg error -71 req 04 val 1300
[  170.832051][ T4300] pwc: recv_control_msg error -71 req 04 val 1400
[  170.840446][ T4300] pwc: recv_control_msg error -71 req 02 val 2000
[  170.848839][ T4300] pwc: recv_control_msg error -71 req 02 val 2100
[  170.865364][ T4300] pwc: recv_control_msg error -71 req 04 val 1500
[  170.872258][ T4873] XFS (loop3): Ending clean mount
[  170.890683][ T4300] pwc: recv_control_msg error -71 req 02 val 2500
[  170.907372][ T4300] pwc: recv_control_msg error -71 req 02 val 2400
[  170.927881][ T4300] pwc: recv_control_msg error -71 req 02 val 2600
[  170.937702][ T4300] pwc: recv_control_msg error -71 req 02 val 2900
[  170.956102][ T4300] pwc: recv_control_msg error -71 req 02 val 2800
[  170.990389][ T4300] pwc: recv_control_msg error -71 req 04 val 1100
[  170.998698][ T4300] pwc: recv_control_msg error -71 req 04 val 1200
[  171.030680][ T4300] pwc: Registered as video103.
[  171.050040][ T4300] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  171.079020][ T4886] loop1: detected capacity change from 0 to 32768
[  171.130860][ T4300] usb 3-1: USB disconnect, device number 5
[  171.388004][ T4909] loop2: detected capacity change from 0 to 8
[  171.502255][ T4255] XFS (loop3): Unmounting Filesystem
[  171.621900][ T4909] SQUASHFS error: Failed to read block 0x4e8: -5
[  171.682623][   T27] audit: type=1800 audit(1738408187.609:4): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.149" name="file1" dev="overlay" ino=5 res=0 errno=0
[  172.014789][ T4256] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  172.041053][ T4256] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  174.700357][ T4331] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  176.200963][ T4256] Bluetooth: hci4: command 0x0406 tx timeout
[  176.284967][ T4954] loop0: detected capacity change from 0 to 512
[  176.328631][ T4331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.345529][ T4954] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  176.359877][ T4331] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  176.376687][ T4954] System zones: 0-2, 18-18, 34-34
[  176.387327][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.405001][ T4954] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.162: bg 0: block 248: padding at end of block bitmap is not set
[  176.436786][ T4331] usb 4-1: config 0 descriptor??
[  176.448511][ T4954] Quota error (device loop0): write_blk: dquota write failed
[  176.477302][ T4331] pwc: Askey VC010 type 2 USB webcam detected.
[  176.490454][ T4954] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  176.504245][ T4954] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.162: Failed to acquire dquot type 1
[  176.527971][ T4954] EXT4-fs (loop0): 1 truncate cleaned up
[  176.568261][ T4954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  176.580654][ T4954] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.679723][ T4256] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  176.693597][ T4256] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3
[  177.041978][ T4331] pwc: recv_control_msg error -32 req 02 val 2b00
[  177.076064][ T4331] pwc: recv_control_msg error -32 req 02 val 2700
[  177.092556][ T4331] pwc: recv_control_msg error -32 req 02 val 2c00
[  177.194365][ T4331] pwc: recv_control_msg error -32 req 04 val 1000
[  177.217089][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  177.660351][ T4331] pwc: recv_control_msg error -71 req 04 val 1400
[  177.751328][ T4331] pwc: recv_control_msg error -71 req 02 val 2000
[  177.810635][ T4331] pwc: recv_control_msg error -71 req 02 val 2100
[  177.824247][ T4331] pwc: recv_control_msg error -71 req 04 val 1500
[  177.833733][ T4331] pwc: recv_control_msg error -71 req 02 val 2500
[  177.852992][ T4331] pwc: recv_control_msg error -71 req 02 val 2400
[  177.866023][ T4331] pwc: recv_control_msg error -71 req 02 val 2600
[  177.883055][ T4331] pwc: recv_control_msg error -71 req 02 val 2900
[  177.890048][ T4331] pwc: recv_control_msg error -71 req 02 val 2800
[  177.905321][ T4331] pwc: recv_control_msg error -71 req 04 val 1100
[  177.916258][ T4331] pwc: recv_control_msg error -71 req 04 val 1200
[  177.938176][ T4331] pwc: Registered as video103.
[  177.955593][ T4331] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9
[  178.036283][ T4299] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  178.770592][ T4331] usb 4-1: USB disconnect, device number 3
[  179.233691][ T4995] loop1: detected capacity change from 0 to 512
[  179.331732][ T4995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  179.387978][ T4995] System zones: 0-2, 18-18, 34-34
[  179.448921][ T4995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.176: bg 0: block 248: padding at end of block bitmap is not set
[  179.500899][ T4995] Quota error (device loop1): write_blk: dquota write failed
[  179.525840][ T4995] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  179.628518][ T4995] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.176: Failed to acquire dquot type 1
[  179.744928][ T4995] EXT4-fs (loop1): 1 truncate cleaned up
[  179.770414][ T4995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  179.789851][ T4995] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.826047][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  180.840372][ T4256] Bluetooth: hci3: command 0x0406 tx timeout
[  180.928129][ T5015] loop3: detected capacity change from 0 to 512
[  180.964500][ T5015] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  180.981568][ T5015] System zones: 0-2, 18-18, 34-34
[  181.019224][ T5015] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.182: bg 0: block 248: padding at end of block bitmap is not set
[  181.092430][ T5015] Quota error (device loop3): write_blk: dquota write failed
[  181.100917][ T4299] usb 3-1: unable to get BOS descriptor or descriptor too short
[  181.110438][ T5015] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  181.128103][ T4299] usb 3-1: unable to read config index 0 descriptor/start: -71
[  181.136478][ T5015] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.182: Failed to acquire dquot type 1
[  181.147878][ T4299] usb 3-1: can't read configurations, error -71
[  181.187539][ T5015] EXT4-fs (loop3): 1 truncate cleaned up
[  181.203546][ T5015] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  181.240956][ T5015] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.730860][ T5015] syz.3.182 (5015) used greatest stack depth: 19352 bytes left
[  182.894333][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  183.309908][ T5046] loop3: detected capacity change from 0 to 512
[  184.140356][ T5046] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  184.198259][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  184.208701][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  184.214940][ T5046] System zones: 0-2, 18-18, 34-34
[  184.218629][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  184.287399][ T5046] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.193: bg 0: block 248: padding at end of block bitmap is not set
[  184.305416][ T4256] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  184.315965][ T4256] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3
[  184.345746][ T5046] Quota error (device loop3): write_blk: dquota write failed
[  184.401161][ T5046] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  184.420348][ T5046] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.193: Failed to acquire dquot type 1
[  184.450663][ T4300] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  184.477310][ T5046] EXT4-fs (loop3): 1 truncate cleaned up
[  184.487055][ T5046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  184.498789][ T5035] loop4: detected capacity change from 0 to 32768
[  184.505532][ T5046] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.748934][ T5062] loop0: detected capacity change from 0 to 2048
[  184.810497][ T5062] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  184.897640][ T4364] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  185.121421][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  185.278073][ T5070] loop4: detected capacity change from 0 to 512
[  185.447446][ T5070] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  185.472160][ T5070] System zones: 0-2, 18-18, 34-34
[  186.595544][ T5070] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.201: bg 0: block 248: padding at end of block bitmap is not set
[  186.703401][ T5070] Quota error (device loop4): write_blk: dquota write failed
[  186.737860][ T4266] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  186.751269][ T5070] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  186.835963][ T5070] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.201: Failed to acquire dquot type 1
[  186.849426][ T4266] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3
[  187.407950][ T5070] EXT4-fs (loop4): 1 truncate cleaned up
[  187.455623][ T5070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  187.485178][ T5070] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.825473][ T4300] usb 2-1: unable to get BOS descriptor or descriptor too short
[  187.880301][ T4300] usb 2-1: unable to read config index 0 descriptor/start: -71
[  187.919218][ T4300] usb 2-1: can't read configurations, error -71
[  188.188782][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  188.600560][ T4256] Bluetooth: hci2: command 0x0406 tx timeout
[  189.300411][ T5103] loop0: detected capacity change from 0 to 512
[  189.349074][ T5103] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  189.360451][ T5103] System zones: 0-2, 18-18, 34-34
[  189.396591][ T5103] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.213: bg 0: block 248: padding at end of block bitmap is not set
[  189.440414][ T5103] Quota error (device loop0): write_blk: dquota write failed
[  189.450958][ T5103] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  189.495271][ T5103] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.213: Failed to acquire dquot type 1
[  189.577440][ T5103] EXT4-fs (loop0): 1 truncate cleaned up
[  189.587092][ T5103] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  189.599578][ T5103] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.626340][ T5117] netlink: 'syz.4.214': attribute type 13 has an invalid length.
[  189.661653][ T5117] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.214'.
[  190.664890][ T4256] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  190.673900][ T4256] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  192.189019][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  193.500822][ T5141] loop1: detected capacity change from 0 to 512
[  193.571377][ T5141] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  193.605057][ T5141] System zones: 0-2, 18-18, 34-34
[  194.412813][ T5141] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.224: bg 0: block 248: padding at end of block bitmap is not set
[  194.488418][ T5141] Quota error (device loop1): write_blk: dquota write failed
[  194.537091][ T5141] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  194.615660][ T5141] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.224: Failed to acquire dquot type 1
[  194.649048][ T5141] EXT4-fs (loop1): 1 truncate cleaned up
[  194.866961][ T5141] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  194.878859][ T5141] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.685078][ T4256] Bluetooth: hci3: command 0x0406 tx timeout
[  196.707447][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  196.876997][ T5164] loop3: detected capacity change from 0 to 512
[  196.945424][ T4256] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  197.791190][ T5164] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  197.812287][ T5164] System zones: 0-2, 18-18, 34-34
[  197.861980][ T5164] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.232: bg 0: block 248: padding at end of block bitmap is not set
[  197.885183][ T5164] Quota error (device loop3): write_blk: dquota write failed
[  197.896209][ T5164] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  197.909935][ T5164] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.232: Failed to acquire dquot type 1
[  197.928516][ T5164] EXT4-fs (loop3): 1 truncate cleaned up
[  198.042967][ T5164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  198.069094][ T5164] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.950845][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  199.827447][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  199.833875][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  200.580606][ T5204] loop2: detected capacity change from 0 to 512
[  200.669216][ T5204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  200.700563][ T5204] System zones: 0-2, 18-18, 34-34
[  200.874628][ T5204] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.240: bg 0: block 248: padding at end of block bitmap is not set
[  200.921329][ T5204] Quota error (device loop2): write_blk: dquota write failed
[  200.942742][ T5204] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  201.270671][ T5204] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.240: Failed to acquire dquot type 1
[  201.767879][ T5204] EXT4-fs (loop2): 1 truncate cleaned up
[  201.773701][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  201.790856][ T5204] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.373918][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  205.820145][ T5259] loop0: detected capacity change from 0 to 512
[  205.949413][ T5259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  205.969203][ T5259] System zones: 0-2, 18-18, 34-34
[  206.052289][ T5259] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.255: bg 0: block 248: padding at end of block bitmap is not set
[  206.068800][ T5266] loop3: detected capacity change from 0 to 1024
[  206.189816][ T5259] Quota error (device loop0): write_blk: dquota write failed
[  206.200753][ T5259] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  206.211207][ T5259] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.255: Failed to acquire dquot type 1
[  206.241402][ T5259] EXT4-fs (loop0): 1 truncate cleaned up
[  206.290934][ T5259] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  206.299930][ T5259] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.967816][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  208.192351][ T5263] loop2: detected capacity change from 0 to 32768
[  208.487049][ T4300] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  208.974622][ T4300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.002580][ T4300] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  209.027966][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.084636][ T4300] usb 5-1: config 0 descriptor??
[  209.126914][ T4300] pwc: Askey VC010 type 2 USB webcam detected.
[  209.518413][ T4300] pwc: recv_control_msg error -32 req 02 val 2b00
[  209.532593][ T4300] pwc: recv_control_msg error -32 req 02 val 2700
[  209.558886][ T4300] pwc: recv_control_msg error -32 req 02 val 2c00
[  209.585635][ T4300] pwc: recv_control_msg error -32 req 04 val 1000
[  209.603440][ T4300] pwc: recv_control_msg error -71 req 04 val 1300
[  209.624783][ T4300] pwc: recv_control_msg error -71 req 04 val 1400
[  209.643097][ T4300] pwc: recv_control_msg error -71 req 02 val 2000
[  209.668851][ T4300] pwc: recv_control_msg error -71 req 02 val 2100
[  209.685042][ T4300] pwc: recv_control_msg error -71 req 04 val 1500
[  209.694911][ T4300] pwc: recv_control_msg error -71 req 02 val 2500
[  209.706229][ T4300] pwc: recv_control_msg error -71 req 02 val 2400
[  209.716306][ T4300] pwc: recv_control_msg error -71 req 02 val 2600
[  209.728360][ T4300] pwc: recv_control_msg error -71 req 02 val 2900
[  209.909491][ T4300] pwc: recv_control_msg error -71 req 02 val 2800
[  209.928727][ T4300] pwc: recv_control_msg error -71 req 04 val 1100
[  209.956422][ T4300] pwc: recv_control_msg error -71 req 04 val 1200
[  210.751226][ T4300] pwc: Registered as video103.
[  210.757200][ T4300] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[  210.834737][ T4300] usb 5-1: USB disconnect, device number 4
[  210.876310][ T4268] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  210.887641][ T4268] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3
[  211.025126][ T5318] loop0: detected capacity change from 0 to 512
[  211.155094][ T5318] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  211.187387][ T5318] System zones: 0-2, 18-18, 34-34
[  211.214795][ T5318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.272: bg 0: block 248: padding at end of block bitmap is not set
[  211.248654][ T5318] Quota error (device loop0): write_blk: dquota write failed
[  211.316876][ T5318] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  211.360432][ T5318] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.272: Failed to acquire dquot type 1
[  211.385870][ T5318] EXT4-fs (loop0): 1 truncate cleaned up
[  211.427403][ T5318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  211.479730][ T5318] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.120530][ T4268] Bluetooth: hci1: command 0x0406 tx timeout
[  212.121496][ T4256] Bluetooth: hci3: command 0x0406 tx timeout
[  212.134485][ T4266] Bluetooth: hci2: command 0x0406 tx timeout
[  212.141470][ T4254] Bluetooth: hci0: command 0x0406 tx timeout
[  212.672561][ T5336] loop3: detected capacity change from 0 to 256
[  213.309725][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  214.380539][   T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  214.572159][   T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.591625][   T22] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  214.615447][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.641150][   T22] usb 4-1: config 0 descriptor??
[  214.673386][   T22] pwc: Askey VC010 type 2 USB webcam detected.
[  215.110774][   T22] pwc: recv_control_msg error -32 req 02 val 2b00
[  215.123249][   T22] pwc: recv_control_msg error -32 req 02 val 2700
[  215.974825][   T22] pwc: recv_control_msg error -32 req 02 val 2c00
[  216.205912][   T22] pwc: recv_control_msg error -71 req 04 val 1300
[  216.225033][   T22] pwc: recv_control_msg error -71 req 04 val 1400
[  216.280552][   T22] pwc: recv_control_msg error -71 req 02 val 2000
[  216.320394][   T22] pwc: recv_control_msg error -71 req 02 val 2100
[  216.380672][   T22] pwc: recv_control_msg error -71 req 04 val 1500
[  216.406141][   T22] pwc: recv_control_msg error -71 req 02 val 2500
[  216.474861][   T22] pwc: recv_control_msg error -71 req 02 val 2400
[  216.500688][   T22] pwc: recv_control_msg error -71 req 02 val 2600
[  216.705165][   T22] pwc: recv_control_msg error -71 req 02 val 2900
[  216.789100][   T22] pwc: recv_control_msg error -71 req 02 val 2800
[  216.850794][   T22] pwc: recv_control_msg error -71 req 04 val 1100
[  217.380333][   T22] pwc: recv_control_msg error -71 req 04 val 1200
[  217.401417][   T22] pwc: Registered as video103.
[  217.417425][   T22] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[  217.457197][   T22] usb 4-1: USB disconnect, device number 4
[  220.329229][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  220.358316][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  220.375605][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  220.413588][ T5400] device bridge_slave_0 left promiscuous mode
[  220.430514][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.647793][ T5400] device bridge_slave_1 left promiscuous mode
[  220.660664][ T5400] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.780757][ T5400] bond0: (slave bond_slave_0): Releasing backup interface
[  220.799131][ T5387] loop1: detected capacity change from 0 to 40427
[  220.862328][ T5387] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[  220.886479][ T5400] bond0: (slave bond_slave_1): Releasing backup interface
[  221.030421][ T5387] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2
[  221.060304][ T5387] F2FS-fs (loop1): invalid crc value
[  221.075177][ T5387] F2FS-fs (loop1): Found nat_bits in checkpoint
[  221.085208][ T5400] team0: Port device team_slave_0 removed
[  221.909041][ T5400] team0: Port device team_slave_1 removed
[  221.951391][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.958856][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.037225][ T4268] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  222.042644][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.124896][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.244773][ T5401] team0: Mode changed to "loadbalance"
[  222.272469][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[  225.481248][ T5429] loop1: detected capacity change from 0 to 32768
[  225.529191][ T5429] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.308 (5429)
[  225.616429][ T5429] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.660486][ T5429] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  225.694828][ T5429] BTRFS info (device loop1): using free space tree
[  225.828001][ T4268] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  225.905262][ T5442] loop2: detected capacity change from 0 to 32768
[  226.018450][ T5429] BTRFS info (device loop1): enabling ssd optimizations
[  226.049358][ T5442] XFS (loop2): Mounting V5 Filesystem
[  226.116234][ T4262] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.471996][ T5442] XFS (loop2): Ending clean mount
[  227.779761][ T4259] XFS (loop2): Unmounting Filesystem
[  227.993351][ T5486] loop0: detected capacity change from 0 to 32768
[  228.484768][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  228.502784][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  228.511250][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  231.001543][ T4268] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3
[  233.343037][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  233.379957][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  233.390329][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.313959][ T5120] hid-generic 0004:0004:0000.0006: unknown main item tag 0x0
[  236.334957][ T5120] hid-generic 0004:0004:0000.0006: unknown main item tag 0x0
[  236.365952][ T5120] hid-generic 0004:0004:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  237.818589][ T4254] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  239.165468][ T5582] loop0: detected capacity change from 0 to 2048
[  239.567739][ T5587] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.314988][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  240.331276][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.339461][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  241.423297][  T129] hid-generic 0004:0004:0000.0007: unknown main item tag 0x0
[  241.444109][  T129] hid-generic 0004:0004:0000.0007: unknown main item tag 0x0
[  241.481643][  T129] hid-generic 0004:0004:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  241.880579][ T4331] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  242.742133][ T4331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  242.782921][ T4331] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  242.823381][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.840891][ T4268] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[  242.857535][ T4331] usb 3-1: config 0 descriptor??
[  242.891173][ T4331] pwc: Askey VC010 type 2 USB webcam detected.
[  243.829532][ T4331] pwc: recv_control_msg error -32 req 02 val 2b00
[  243.870919][ T4331] pwc: recv_control_msg error -32 req 02 val 2700
[  243.885942][ T4331] pwc: recv_control_msg error -32 req 02 val 2c00
[  244.098913][ T4331] pwc: recv_control_msg error -71 req 04 val 1300
[  244.120623][ T4331] pwc: recv_control_msg error -71 req 04 val 1400
[  244.574243][ T4331] pwc: recv_control_msg error -71 req 02 val 2000
[  244.600536][ T4331] pwc: recv_control_msg error -71 req 02 val 2100
[  244.619154][ T4331] pwc: recv_control_msg error -71 req 04 val 1500
[  244.651971][ T4331] pwc: recv_control_msg error -71 req 02 val 2500
[  244.900294][ T4331] pwc: recv_control_msg error -71 req 02 val 2400
[  244.927138][ T4331] pwc: recv_control_msg error -71 req 02 val 2600
[  244.949295][ T4331] pwc: recv_control_msg error -71 req 02 val 2900
[  244.986555][ T4331] pwc: recv_control_msg error -71 req 02 val 2800
[  245.009981][ T4331] pwc: recv_control_msg error -71 req 04 val 1100
[  245.037378][ T4331] pwc: recv_control_msg error -71 req 04 val 1200
[  245.057790][ T4331] pwc: Registered as video103.
[  245.087928][ T4331] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12
[  245.178717][ T4331] usb 3-1: USB disconnect, device number 8
[  245.989371][ T5651] loop2: detected capacity change from 0 to 512
[  246.057318][ T5651] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  246.075638][ T5651] System zones: 0-2, 18-18, 34-34
[  246.119546][ T5651] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.368: bg 0: block 248: padding at end of block bitmap is not set
[  246.176703][ T5651] Quota error (device loop2): write_blk: dquota write failed
[  246.214046][ T5651] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  246.260099][ T5651] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.368: Failed to acquire dquot type 1
[  246.323239][ T5651] EXT4-fs (loop2): 1 truncate cleaned up
[  246.374722][ T5651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  246.418265][ T5651] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.504601][ T4254] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  248.385879][    T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  248.604756][    T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.632513][    T7] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  248.672855][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.713610][ T5674] loop3: detected capacity change from 0 to 32768
[  248.716538][    T7] usb 2-1: config 0 descriptor??
[  248.767765][    T7] pwc: Askey VC010 type 2 USB webcam detected.
[  248.814419][ T5674] XFS (loop3): Mounting V5 Filesystem
[  249.038952][ T5674] XFS (loop3): Ending clean mount
[  249.062678][ T5686] loop0: detected capacity change from 0 to 128
[  249.287904][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  249.347995][    T7] pwc: recv_control_msg error -32 req 02 val 2b00
[  249.370355][    T7] pwc: recv_control_msg error -32 req 02 val 2700
[  249.379855][    T7] pwc: recv_control_msg error -32 req 02 val 2c00
[  249.387754][ T4255] XFS (loop3): Unmounting Filesystem
[  249.407873][ T5687] overlayfs: filesystem on './file1' not supported
[  249.498149][ T4331] libceph: connect (1)[c::]:6789 error -101
[  249.669110][ T4299] hid-generic 0004:0004:0000.0008: unknown main item tag 0x0
[  249.684719][ T4299] hid-generic 0004:0004:0000.0008: unknown main item tag 0x0
[  249.751010][ T4299] hid-generic 0004:0004:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  249.782469][    T7] pwc: recv_control_msg error -71 req 04 val 1300
[  249.889875][ T5693] process 'syz.0.375' launched './file2' with NULL argv: empty string added
[  249.902394][    T7] pwc: recv_control_msg error -71 req 04 val 1400
[  249.909276][ T4331] libceph: mon0 (1)[c::]:6789 connect error
[  249.916596][    T7] pwc: recv_control_msg error -71 req 02 val 2000
[  249.924578][    T7] pwc: recv_control_msg error -71 req 02 val 2100
[  249.932273][    T7] pwc: recv_control_msg error -71 req 04 val 1500
[  249.946317][    T7] pwc: recv_control_msg error -71 req 02 val 2500
[  249.960396][    T7] pwc: recv_control_msg error -71 req 02 val 2400
[  249.976250][    T7] pwc: recv_control_msg error -71 req 02 val 2600
[  249.985268][    T7] pwc: recv_control_msg error -71 req 02 val 2900
[  250.011265][ T5687] ceph: No mds server is up or the cluster is laggy
[  250.037519][    T7] pwc: recv_control_msg error -71 req 02 val 2800
[  250.066493][    T7] pwc: recv_control_msg error -71 req 04 val 1100
[  250.186120][    T7] pwc: recv_control_msg error -71 req 04 val 1200
[  250.202245][    T7] pwc: Registered as video103.
[  250.411059][    T7] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  250.434638][    T7] usb 2-1: USB disconnect, device number 6
[  251.230388][ T4254] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[  252.860896][ T5733] loop1: detected capacity change from 0 to 1024
[  252.877479][ T5737] loop3: detected capacity change from 0 to 512
[  253.031746][ T5737] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  253.098568][ T5737] System zones: 0-2, 18-18, 34-34
[  253.154485][ T4331] hid-generic 0004:0004:0000.0009: unknown main item tag 0x0
[  253.190638][ T4331] hid-generic 0004:0004:0000.0009: unknown main item tag 0x0
[  253.202853][ T5737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.387: bg 0: block 248: padding at end of block bitmap is not set
[  253.226202][ T4331] hid-generic 0004:0004:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  253.230671][ T5737] Quota error (device loop3): write_blk: dquota write failed
[  253.244058][ T5737] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  253.255691][ T5737] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.387: Failed to acquire dquot type 1
[  253.290176][ T5737] EXT4-fs (loop3): 1 truncate cleaned up
[  253.296151][ T5737] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  253.306018][ T5737] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.048540][ T4268] Bluetooth: hci4: link tx timeout
[  254.053786][ T4268] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  254.060413][ T4331] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  254.061576][ T4268] Bluetooth: hci4: link tx timeout
[  254.074175][ T4268] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  254.242213][ T4331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.274525][ T4331] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  254.289214][ T4268] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3
[  254.341205][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.456224][ T4331] usb 1-1: config 0 descriptor??
[  254.521470][ T4331] pwc: Askey VC010 type 2 USB webcam detected.
[  254.950830][ T4331] pwc: recv_control_msg error -32 req 02 val 2b00
[  254.999571][ T4331] pwc: recv_control_msg error -32 req 02 val 2700
[  255.100489][ T4331] pwc: recv_control_msg error -32 req 02 val 2c00
[  255.188559][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  255.325141][ T4331] pwc: recv_control_msg error -71 req 04 val 1300
[  255.345786][ T4331] pwc: recv_control_msg error -71 req 04 val 1400
[  255.358183][ T4331] pwc: recv_control_msg error -71 req 02 val 2000
[  255.375945][ T4331] pwc: recv_control_msg error -71 req 02 val 2100
[  255.383910][ T4331] pwc: recv_control_msg error -71 req 04 val 1500
[  255.452808][ T5765] loop4: detected capacity change from 0 to 2048
[  255.460934][ T4331] pwc: recv_control_msg error -71 req 02 val 2500
[  255.473420][ T4331] pwc: recv_control_msg error -71 req 02 val 2400
[  255.500705][ T4331] pwc: recv_control_msg error -71 req 02 val 2600
[  255.529809][ T4331] pwc: recv_control_msg error -71 req 02 val 2900
[  255.557194][ T4331] pwc: recv_control_msg error -71 req 02 val 2800
[  255.595312][ T4331] pwc: recv_control_msg error -71 req 04 val 1100
[  255.602443][ T5768] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.629099][ T4331] pwc: recv_control_msg error -71 req 04 val 1200
[  255.650418][ T4299] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  255.668579][ T4331] pwc: Registered as video103.
[  255.698751][ T4331] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14
[  255.759965][ T4331] usb 1-1: USB disconnect, device number 3
[  256.120534][ T4268] Bluetooth: hci4: command 0x0406 tx timeout
[  256.938344][ T5779] loop0: detected capacity change from 0 to 1024
[  257.049466][   T26] hid-generic 0004:0004:0000.000A: unknown main item tag 0x0
[  257.087892][   T26] hid-generic 0004:0004:0000.000A: unknown main item tag 0x0
[  257.119960][   T26] hid-generic 0004:0004:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  257.620556][   T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  258.120432][   T26] usb 5-1: Using ep0 maxpacket: 32
[  258.167313][ T5767] loop3: detected capacity change from 0 to 32768
[  258.212181][   T26] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  258.230327][   T26] usb 5-1: config 0 has no interface number 0
[  258.243738][   T26] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  258.287379][ T4254] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[  258.301991][   T26] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  258.330337][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.338707][   T26] usb 5-1: Product: syz
[  258.343753][   T26] usb 5-1: Manufacturer: syz
[  258.348421][   T26] usb 5-1: SerialNumber: syz
[  258.356341][   T26] usb 5-1: config 0 descriptor??
[  258.406147][   T26] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  258.416629][ T5767] JBD2: recovery failed
[  258.431967][   T26] em28xx 5-1:0.132: Video interface 132 found:
[  258.440290][ T5767] (syz.3.397,5767,0):ocfs2_journal_load:1112 ERROR: Failed to load journal!
[  258.491486][ T5767] (syz.3.397,5767,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -5
[  258.503620][ T5798] loop0: detected capacity change from 0 to 512
[  258.530539][ T5767] (syz.3.397,5767,0):ocfs2_check_volume:2486 ERROR: status = -5
[  258.581248][ T5798] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  258.589353][ T5798] System zones: 0-2, 18-18, 34-34
[  258.645221][ T5767] (syz.3.397,5767,0):ocfs2_mount_volume:1821 ERROR: status = -5
[  258.680120][ T5798] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.408: bg 0: block 248: padding at end of block bitmap is not set
[  258.731524][ T5767] (syz.3.397,5767,0):ocfs2_fill_super:1176 ERROR: status = -5
[  258.771116][ T5798] Quota error (device loop0): write_blk: dquota write failed
[  258.804312][   T26] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  258.811525][ T5798] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  258.822530][ T5798] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.408: Failed to acquire dquot type 1
[  258.844683][ T5798] EXT4-fs (loop0): 1 truncate cleaned up
[  258.854422][ T5798] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  258.942064][ T5798] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.978176][ T4299] usb 4-1: unable to get BOS descriptor or descriptor too short
[  259.001396][ T4299] usb 4-1: unable to read config index 0 descriptor/start: -71
[  259.009997][ T4299] usb 4-1: can't read configurations, error -71
[  259.050514][ T5498] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  259.262227][ T5498] usb 2-1: config 8 has an invalid interface number: 97 but max is 0
[  259.284740][ T5498] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  259.310536][ T5498] usb 2-1: config 8 has no interface number 0
[  259.320934][ T5498] usb 2-1: config 8 interface 97 altsetting 4 has an invalid endpoint with address 0x93, skipping
[  259.387423][ T5498] usb 2-1: config 8 interface 97 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  259.444768][ T5498] usb 2-1: config 8 interface 97 has no altsetting 0
[  259.460402][   T26] em28xx 5-1:0.132: failed to read eeprom (err=-110)
[  259.473118][   T26] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  259.487098][ T5498] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=5d.c5
[  259.509097][ T5498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.550821][ T5498] usb 2-1: Product: syz
[  259.566733][ T5498] usb 2-1: Manufacturer: syz
[  259.579531][ T5498] usb 2-1: SerialNumber: syz
[  259.607401][ T5799] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  259.702691][   T26] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  259.723448][   T26] em28xx 5-1:0.132: analog set to bulk mode.
[  259.761980][ T4298] em28xx 5-1:0.132: Registering V4L2 extension
[  259.820961][   T26] usb 5-1: USB disconnect, device number 5
[  259.840873][ T5498] pn533_usb 2-1:8.97: NFC: Could not find bulk-in or bulk-out endpoint
[  259.881183][ T5498] usb 2-1: USB disconnect, device number 7
[  259.887842][   T26] em28xx 5-1:0.132: Disconnecting em28xx
[  260.142256][ T4298] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  260.150119][ T4298] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  260.175933][ T4298] em28xx 5-1:0.132: No AC97 audio processor
[  260.221052][ T4298] usb 5-1: Decoder not found
[  260.225787][ T4298] em28xx 5-1:0.132: failed to create media graph
[  260.256372][ T4298] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  260.269764][ T4298] em28xx 5-1:0.132: Remote control support is not available for this card.
[  260.297849][   T26] em28xx 5-1:0.132: Closing input extension
[  260.405904][   T26] em28xx 5-1:0.132: Freeing device
[  260.422321][ T4331] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  260.575915][ T5825] loop1: detected capacity change from 0 to 1024
[  261.478138][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  261.484567][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  261.532007][ T4331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.557467][ T4331] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  261.587363][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.620581][ T4331] usb 3-1: config 0 descriptor??
[  261.638313][ T4331] pwc: Askey VC010 type 2 USB webcam detected.
[  261.735932][   T26] hid-generic 0004:0004:0000.000B: unknown main item tag 0x0
[  261.760403][   T26] hid-generic 0004:0004:0000.000B: unknown main item tag 0x0
[  261.788991][   T26] hid-generic 0004:0004:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  262.065639][ T4331] pwc: recv_control_msg error -32 req 02 val 2b00
[  262.083173][ T4331] pwc: recv_control_msg error -32 req 02 val 2700
[  262.097073][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  262.246794][ T4331] pwc: recv_control_msg error -32 req 02 val 2c00
[  262.500644][ T4331] pwc: recv_control_msg error -71 req 04 val 1300
[  262.528370][ T4331] pwc: recv_control_msg error -71 req 04 val 1400
[  262.558696][ T4331] pwc: recv_control_msg error -71 req 02 val 2000
[  262.625721][ T4331] pwc: recv_control_msg error -71 req 02 val 2100
[  262.659193][ T4331] pwc: recv_control_msg error -71 req 04 val 1500
[  262.698741][ T4331] pwc: recv_control_msg error -71 req 02 val 2500
[  262.735832][ T4331] pwc: recv_control_msg error -71 req 02 val 2400
[  262.778001][ T4331] pwc: recv_control_msg error -71 req 02 val 2600
[  262.807363][ T4331] pwc: recv_control_msg error -71 req 02 val 2900
[  262.855844][ T4331] pwc: recv_control_msg error -71 req 02 val 2800
[  262.897831][ T4331] pwc: recv_control_msg error -71 req 04 val 1100
[  262.948304][ T4331] pwc: recv_control_msg error -71 req 04 val 1200
[  262.993455][ T4331] pwc: Registered as video103.
[  263.033846][ T4331] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15
[  263.043760][ T4300] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  263.100285][ T4331] usb 3-1: USB disconnect, device number 9
[  263.681182][ T4268] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3
[  264.142303][ T5853] loop0: detected capacity change from 0 to 2048
[  264.248900][ T5856] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.734598][ T5843] loop3: detected capacity change from 0 to 32768
[  265.678392][ T5863] loop0: detected capacity change from 0 to 1024
[  265.750628][ T5843] JBD2: recovery failed
[  265.758827][ T5843] (syz.3.419,5843,0):ocfs2_journal_load:1112 ERROR: Failed to load journal!
[  265.795825][ T5843] (syz.3.419,5843,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -5
[  265.807153][ T5843] (syz.3.419,5843,0):ocfs2_check_volume:2486 ERROR: status = -5
[  265.860688][ T5843] (syz.3.419,5843,0):ocfs2_mount_volume:1821 ERROR: status = -5
[  265.930160][ T5843] (syz.3.419,5843,0):ocfs2_fill_super:1176 ERROR: status = -5
[  265.972447][ T3583] hid-generic 0004:0004:0000.000C: unknown main item tag 0x0
[  265.988798][ T3583] hid-generic 0004:0004:0000.000C: unknown main item tag 0x0
[  266.032060][ T3583] hid-generic 0004:0004:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  266.079009][ T4300] usb 4-1: unable to get BOS descriptor or descriptor too short
[  266.101029][ T4300] usb 4-1: unable to read config index 0 descriptor/start: -71
[  266.115245][ T4300] usb 4-1: can't read configurations, error -71
[  266.288985][ T5871] loop0: detected capacity change from 0 to 512
[  266.519177][ T5871] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  266.546714][ T5871] System zones: 0-2, 18-18, 34-34
[  266.574025][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  266.583557][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  266.591857][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  266.626010][ T5871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.428: bg 0: block 248: padding at end of block bitmap is not set
[  266.705692][ T5871] Quota error (device loop0): write_blk: dquota write failed
[  266.732453][ T5871] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  266.761187][ T5871] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.428: Failed to acquire dquot type 1
[  266.826546][ T5871] EXT4-fs (loop0): 1 truncate cleaned up
[  266.836623][ T5855] loop2: detected capacity change from 0 to 32768
[  266.871207][ T4364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4364)
[  266.883648][ T5871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  266.942073][ T5871] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.006773][ T5855] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  267.090516][ T5855] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  267.100063][ T5855] BTRFS info (device loop2): using free space tree
[  267.588912][ T5855] BTRFS error (device loop2): open_ctree failed
[  267.740583][ T4298] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  267.953328][ T4298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.000084][ T4298] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  268.029957][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.050439][ T4298] usb 5-1: config 0 descriptor??
[  268.114364][ T4254] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  268.118087][ T4298] pwc: Askey VC010 type 2 USB webcam detected.
[  268.469263][ T4298] pwc: recv_control_msg error -32 req 02 val 2b00
[  268.487242][ T4298] pwc: recv_control_msg error -32 req 02 val 2700
[  268.519639][ T4298] pwc: recv_control_msg error -32 req 02 val 2c00
[  268.749221][ T4298] pwc: recv_control_msg error -71 req 04 val 1300
[  268.772723][ T4298] pwc: recv_control_msg error -71 req 04 val 1400
[  268.786479][ T4298] pwc: recv_control_msg error -71 req 02 val 2000
[  269.545042][ T4298] pwc: recv_control_msg error -71 req 02 val 2100
[  269.673460][ T4298] pwc: recv_control_msg error -71 req 04 val 1500
[  269.717438][ T4298] pwc: recv_control_msg error -71 req 02 val 2500
[  269.760907][ T4298] pwc: recv_control_msg error -71 req 02 val 2400
[  269.791637][ T4298] pwc: recv_control_msg error -71 req 02 val 2600
[  270.679403][ T4298] pwc: recv_control_msg error -71 req 02 val 2900
[  270.720473][ T4298] pwc: recv_control_msg error -71 req 02 val 2800
[  270.760764][ T4298] pwc: recv_control_msg error -71 req 04 val 1100
[  270.770642][ T4298] pwc: recv_control_msg error -71 req 04 val 1200
[  270.820565][ T4298] pwc: Registered as video103.
[  270.826922][ T4298] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16
[  270.910013][ T4298] usb 5-1: USB disconnect, device number 6
[  272.340327][ T4298] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  272.903079][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  272.955283][ T5498] hid-generic 0004:0004:0000.000D: unknown main item tag 0x0
[  273.038123][ T5498] hid-generic 0004:0004:0000.000D: unknown main item tag 0x0
[  273.079038][ T5498] hid-generic 0004:0004:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  273.484547][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  273.494621][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  273.502306][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  273.810310][ T5498] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  274.010377][ T5498] usb 1-1: Using ep0 maxpacket: 32
[  274.057512][ T5498] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  274.122084][ T5498] usb 1-1: config 0 has no interface number 0
[  274.128287][ T5498] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  274.139824][ T4298] usb 5-1: unable to get BOS descriptor or descriptor too short
[  274.190498][ T4298] usb 5-1: unable to read config index 0 descriptor/start: -71
[  274.198118][ T4298] usb 5-1: can't read configurations, error -71
[  274.246888][ T5498] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  274.414169][ T5498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.464646][ T5498] usb 1-1: Product: syz
[  274.469001][ T5498] usb 1-1: Manufacturer: syz
[  274.484712][ T5498] usb 1-1: SerialNumber: syz
[  274.514770][ T5498] usb 1-1: config 0 descriptor??
[  275.302829][ T5498] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  275.320389][ T5498] em28xx 1-1:0.132: Video interface 132 found:
[  276.000500][ T5494] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  276.081225][ T5498] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  276.213148][ T5494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.237995][ T5494] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  276.310461][ T5494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.342932][ T5494] usb 2-1: config 0 descriptor??
[  276.386487][ T5494] pwc: Askey VC010 type 2 USB webcam detected.
[  276.677565][ T5965] loop3: detected capacity change from 0 to 512
[  276.740848][ T5965] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  276.753841][ T5965] System zones: 0-2, 18-18, 34-34
[  276.770284][ T5498] em28xx 1-1:0.132: failed to read eeprom (err=-110)
[  276.777661][ T5494] pwc: recv_control_msg error -32 req 02 val 2b00
[  276.796205][ T5498] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  276.809749][ T5494] pwc: recv_control_msg error -32 req 02 val 2700
[  276.818104][ T5965] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.453: bg 0: block 248: padding at end of block bitmap is not set
[  276.854591][ T5494] pwc: recv_control_msg error -32 req 02 val 2c00
[  276.876873][ T5965] Quota error (device loop3): write_blk: dquota write failed
[  276.940428][ T5965] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  277.030659][ T5498] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  277.039137][ T5498] em28xx 1-1:0.132: analog set to bulk mode.
[  277.067760][ T5494] pwc: recv_control_msg error -71 req 04 val 1300
[  277.099402][ T5494] pwc: recv_control_msg error -71 req 04 val 1400
[  277.106876][ T5965] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.453: Failed to acquire dquot type 1
[  277.121901][ T5965] EXT4-fs (loop3): 1 truncate cleaned up
[  277.127635][ T5965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  277.149122][ T5494] pwc: recv_control_msg error -71 req 02 val 2000
[  277.159418][ T5498] usb 1-1: USB disconnect, device number 4
[  277.179226][ T5494] pwc: recv_control_msg error -71 req 02 val 2100
[  277.205088][ T5498] em28xx 1-1:0.132: Disconnecting em28xx
[  277.238739][ T5965] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.242019][ T5494] pwc: recv_control_msg error -71 req 04 val 1500
[  277.277560][ T4298] em28xx 1-1:0.132: Registering V4L2 extension
[  277.294502][ T5494] pwc: recv_control_msg error -71 req 02 val 2500
[  277.310556][ T5494] pwc: recv_control_msg error -71 req 02 val 2400
[  277.330776][ T5494] pwc: recv_control_msg error -71 req 02 val 2600
[  277.500366][ T5494] pwc: recv_control_msg error -71 req 02 val 2900
[  277.544131][ T5494] pwc: recv_control_msg error -71 req 02 val 2800
[  277.695731][ T5494] pwc: recv_control_msg error -71 req 04 val 1100
[  277.806010][ T5494] pwc: recv_control_msg error -71 req 04 val 1200
[  278.010046][ T5494] pwc: Registered as video103.
[  278.139389][ T5494] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17
[  278.336606][ T5494] usb 2-1: USB disconnect, device number 8
[  278.724692][ T3583] hid-generic 0004:0004:0000.000E: unknown main item tag 0x0
[  278.748238][ T4298] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  278.756652][ T4298] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  278.762972][ T3583] hid-generic 0004:0004:0000.000E: unknown main item tag 0x0
[  278.795250][ T4298] em28xx 1-1:0.132: No AC97 audio processor
[  278.802753][ T3583] hid-generic 0004:0004:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  278.833600][ T4298] usb 1-1: Decoder not found
[  278.868080][ T4298] em28xx 1-1:0.132: failed to create media graph
[  278.891267][ T4298] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  278.904379][ T5990] loop1: detected capacity change from 0 to 1024
[  278.913207][ T4298] em28xx 1-1:0.132: Remote control support is not available for this card.
[  278.913476][ T5982] ==================================================================
[  278.929859][ T5982] BUG: KASAN: use-after-free in v4l2_fh_open+0xc7/0x430
[  278.936805][ T5982] Read of size 8 at addr ffff8880273ec738 by task v4l_id/5982
[  278.944266][ T5982] 
[  278.946597][ T5982] CPU: 0 PID: 5982 Comm: v4l_id Not tainted 6.1.127-syzkaller #0
[  278.954316][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  278.964509][ T5982] Call Trace:
[  278.967786][ T5982]  <TASK>
[  278.970718][ T5982]  dump_stack_lvl+0x1e3/0x2cb
[  278.975481][ T5982]  ? nf_tcp_handle_invalid+0x642/0x642
[  278.981038][ T5982]  ? panic+0x764/0x764
[  278.985108][ T5982]  ? _printk+0xd1/0x111
[  278.989297][ T5982]  ? __virt_addr_valid+0x17f/0x530
[  278.994411][ T5982]  ? __virt_addr_valid+0x17f/0x530
[  278.999559][ T5982]  print_report+0x15f/0x4f0
[  279.004058][ T5982]  ? __virt_addr_valid+0x17f/0x530
[  279.009172][ T5982]  ? __virt_addr_valid+0x17f/0x530
[  279.014339][ T5982]  ? __virt_addr_valid+0x45b/0x530
[  279.019446][ T5982]  ? __phys_addr+0xb6/0x170
[  279.023950][ T5982]  ? v4l2_fh_open+0xc7/0x430
[  279.028554][ T5982]  kasan_report+0x136/0x160
[  279.033075][ T5982]  ? v4l2_fh_open+0xc7/0x430
[  279.037665][ T5982]  v4l2_fh_open+0xc7/0x430
[  279.042095][ T5982]  em28xx_v4l2_open+0x15d/0xa10
[  279.046945][ T5982]  v4l2_open+0x228/0x360
[  279.051183][ T5982]  chrdev_open+0x54a/0x630
[  279.055604][ T5982]  ? cd_forget+0x160/0x160
[  279.060024][ T5982]  ? do_raw_spin_unlock+0x137/0x8a0
[  279.065262][ T5982]  ? fsnotify_perm+0x472/0x590
[  279.070047][ T5982]  ? cd_forget+0x160/0x160
[  279.074473][ T5982]  do_dentry_open+0x7f9/0x10f0
[  279.079254][ T5982]  path_openat+0x2644/0x2e60
[  279.083855][ T5982]  ? mark_lock+0x9a/0x340
[  279.088202][ T5982]  ? do_filp_open+0x480/0x480
[  279.092902][ T5982]  do_filp_open+0x230/0x480
[  279.097408][ T5982]  ? vfs_tmpfile+0x4a0/0x4a0
[  279.102029][ T5982]  ? _raw_spin_unlock+0x24/0x40
[  279.106878][ T5982]  ? alloc_fd+0x5a0/0x640
[  279.111210][ T5982]  do_sys_openat2+0x13b/0x4f0
[  279.115891][ T5982]  ? do_sys_open+0x220/0x220
[  279.120479][ T5982]  __x64_sys_openat+0x243/0x290
[  279.125331][ T5982]  ? __ia32_sys_open+0x270/0x270
[  279.130302][ T5982]  ? syscall_enter_from_user_mode+0x2e/0x230
[  279.136327][ T5982]  ? lockdep_hardirqs_on+0x94/0x130
[  279.141607][ T5982]  ? syscall_enter_from_user_mode+0x2e/0x230
[  279.147584][ T5982]  do_syscall_64+0x3b/0xb0
[  279.152027][ T5982]  ? clear_bhb_loop+0x45/0xa0
[  279.156717][ T5982]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  279.162628][ T5982] RIP: 0033:0x7fb4e4b169a4
[  279.167062][ T5982] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  279.186708][ T5982] RSP: 002b:00007fff965d1f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  279.195301][ T5982] RAX: ffffffffffffffda RBX: 00007fff965d2158 RCX: 00007fb4e4b169a4
[  279.203269][ T5982] RDX: 0000000000000000 RSI: 00007fff965d3f1d RDI: 00000000ffffff9c
[  279.211228][ T5982] RBP: 00007fff965d3f1d R08: 0000000000000000 R09: 0000000000000000
[  279.219204][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.227162][ T5982] R13: 00007fff965d2170 R14: 0000555a1ca57670 R15: 00007fb4e4f8ca80
[  279.235131][ T5982]  </TASK>
[  279.238141][ T5982] 
[  279.240481][ T5982] Allocated by task 4298:
[  279.244797][ T5982]  kasan_set_track+0x4b/0x70
[  279.249385][ T5982]  __kasan_kmalloc+0x97/0xb0
[  279.253959][ T5982]  em28xx_v4l2_init+0x103/0x2db0
[  279.258888][ T5982]  em28xx_init_extension+0x11b/0x1c0
[  279.264171][ T5982]  process_one_work+0x8a9/0x11d0
[  279.269109][ T5982]  worker_thread+0xcb2/0x1200
[  279.273798][ T5982]  kthread+0x28d/0x320
[  279.277874][ T5982]  ret_from_fork+0x1f/0x30
[  279.282317][ T5982] 
[  279.284667][ T5982] Freed by task 4298:
[  279.288649][ T5982]  kasan_set_track+0x4b/0x70
[  279.293256][ T5982]  kasan_save_free_info+0x27/0x40
[  279.298328][ T5982]  ____kasan_slab_free+0xd6/0x120
[  279.303365][ T5982]  __kmem_cache_free+0x25c/0x3c0
[  279.308307][ T5982]  em28xx_v4l2_init+0x1604/0x2db0
[  279.313328][ T5982]  em28xx_init_extension+0x11b/0x1c0
[  279.318619][ T5982]  process_one_work+0x8a9/0x11d0
[  279.323574][ T5982]  worker_thread+0xcb2/0x1200
[  279.328245][ T5982]  kthread+0x28d/0x320
[  279.332309][ T5982]  ret_from_fork+0x1f/0x30
[  279.336717][ T5982] 
[  279.339024][ T5982] The buggy address belongs to the object at ffff8880273ec000
[  279.339024][ T5982]  which belongs to the cache kmalloc-8k of size 8192
[  279.353068][ T5982] The buggy address is located 1848 bytes inside of
[  279.353068][ T5982]  8192-byte region [ffff8880273ec000, ffff8880273ee000)
[  279.366505][ T5982] 
[  279.368816][ T5982] The buggy address belongs to the physical page:
[  279.375220][ T5982] page:ffffea00009cfa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x273e8
[  279.385371][ T5982] head:ffffea00009cfa00 order:3 compound_mapcount:0 compound_pincount:0
[  279.393694][ T5982] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  279.401679][ T5982] raw: 00fff00000010200 ffffea0001f91c00 dead000000000004 ffff888017c42280
[  279.410301][ T5982] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  279.418881][ T5982] page dumped because: kasan: bad access detected
[  279.425286][ T5982] page_owner tracks the page as allocated
[  279.430988][ T5982] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4560, tgid 4559 (syz.2.58), ts 124356457799, free_ts 122593843263
[  279.453644][ T5982]  post_alloc_hook+0x18d/0x1b0
[  279.458429][ T5982]  get_page_from_freelist+0x3731/0x38d0
[  279.463980][ T5982]  __alloc_pages+0x28d/0x770
[  279.468556][ T5982]  alloc_slab_page+0x6a/0x150
[  279.473245][ T5982]  new_slab+0x84/0x2d0
[  279.477330][ T5982]  ___slab_alloc+0xc20/0x1270
[  279.482005][ T5982]  __kmem_cache_alloc_node+0x19f/0x260
[  279.487460][ T5982]  __kmalloc_node_track_caller+0xa0/0x220
[  279.493247][ T5982]  krealloc+0x71/0x110
[  279.497331][ T5982]  copy_verifier_state+0x7af/0xc70
[  279.502445][ T5982]  push_stack+0x19d/0x4f0
[  279.506776][ T5982]  check_cond_jmp_op+0x9eb/0x2000
[  279.511803][ T5982]  do_check_common+0x7770/0xca90
[  279.516740][ T5982]  bpf_check+0x657f/0x16120
[  279.521269][ T5982]  bpf_prog_load+0x12df/0x1bb0
[  279.526034][ T5982]  __sys_bpf+0x382/0x6c0
[  279.530283][ T5982] page last free stack trace:
[  279.534955][ T5982]  free_unref_page_prepare+0x12a6/0x15b0
[  279.540581][ T5982]  free_unref_page+0x33/0x3e0
[  279.545278][ T5982]  __unfreeze_partials+0x1b7/0x210
[  279.550387][ T5982]  put_cpu_partial+0x17b/0x250
[  279.555151][ T5982]  qlist_free_all+0x76/0xe0
[  279.559646][ T5982]  kasan_quarantine_reduce+0x156/0x170
[  279.565095][ T5982]  __kasan_slab_alloc+0x1f/0x70
[  279.569944][ T5982]  slab_post_alloc_hook+0x52/0x3a0
[  279.575051][ T5982]  kmem_cache_alloc_node+0x136/0x310
[  279.580338][ T5982]  __alloc_skb+0xde/0x670
[  279.584666][ T5982]  alloc_skb_with_frags+0xa4/0x740
[  279.589781][ T5982]  sock_alloc_send_pskb+0x915/0xa50
[  279.594998][ T5982]  unix_dgram_sendmsg+0x5b1/0x2050
[  279.600104][ T5982]  sock_write_iter+0x394/0x4e0
[  279.604877][ T5982]  vfs_write+0x857/0xbc0
[  279.609110][ T5982]  ksys_write+0x19c/0x2c0
[  279.613432][ T5982] 
[  279.615743][ T5982] Memory state around the buggy address:
[  279.621447][ T5982]  ffff8880273ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.629519][ T5982]  ffff8880273ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.637572][ T5982] >ffff8880273ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.645645][ T5982]                                         ^
[  279.651524][ T5982]  ffff8880273ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.659579][ T5982]  ffff8880273ec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.667629][ T5982] ==================================================================
[  279.712104][ T5498] em28xx 1-1:0.132: Closing input extension
[  280.635042][ T5982] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  280.642285][ T5982] CPU: 1 PID: 5982 Comm: v4l_id Not tainted 6.1.127-syzkaller #0
[  280.650029][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  280.660099][ T5982] Call Trace:
[  280.663387][ T5982]  <TASK>
[  280.666327][ T5982]  dump_stack_lvl+0x1e3/0x2cb
[  280.671036][ T5982]  ? nf_tcp_handle_invalid+0x642/0x642
[  280.676538][ T5982]  ? panic+0x764/0x764
[  280.680622][ T5982]  ? preempt_schedule_common+0xa6/0xd0
[  280.686102][ T5982]  ? vscnprintf+0x59/0x80
[  280.690449][ T5982]  panic+0x318/0x764
[  280.694362][ T5982]  ? check_panic_on_warn+0x1d/0xa0
[  280.699491][ T5982]  ? memcpy_page_flushcache+0xfc/0xfc
[  280.704883][ T5982]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  280.710886][ T5982]  ? _raw_spin_unlock+0x40/0x40
[  280.715756][ T5982]  ? print_report+0x4a3/0x4f0
[  280.720451][ T5982]  check_panic_on_warn+0x7e/0xa0
[  280.725412][ T5982]  ? v4l2_fh_open+0xc7/0x430
[  280.730032][ T5982]  end_report+0x66/0x110
[  280.734291][ T5982]  kasan_report+0x143/0x160
[  280.738813][ T5982]  ? v4l2_fh_open+0xc7/0x430
[  280.743432][ T5982]  v4l2_fh_open+0xc7/0x430
[  280.747895][ T5982]  em28xx_v4l2_open+0x15d/0xa10
[  280.752770][ T5982]  v4l2_open+0x228/0x360
[  280.757036][ T5982]  chrdev_open+0x54a/0x630
[  280.761481][ T5982]  ? cd_forget+0x160/0x160
[  280.765894][ T5982]  ? do_raw_spin_unlock+0x137/0x8a0
[  280.771081][ T5982]  ? fsnotify_perm+0x472/0x590
[  280.775835][ T5982]  ? cd_forget+0x160/0x160
[  280.780248][ T5982]  do_dentry_open+0x7f9/0x10f0
[  280.785011][ T5982]  path_openat+0x2644/0x2e60
[  280.789600][ T5982]  ? mark_lock+0x9a/0x340
[  280.793949][ T5982]  ? do_filp_open+0x480/0x480
[  280.798655][ T5982]  do_filp_open+0x230/0x480
[  280.803193][ T5982]  ? vfs_tmpfile+0x4a0/0x4a0
[  280.807795][ T5982]  ? _raw_spin_unlock+0x24/0x40
[  280.812641][ T5982]  ? alloc_fd+0x5a0/0x640
[  280.816987][ T5982]  do_sys_openat2+0x13b/0x4f0
[  280.821701][ T5982]  ? do_sys_open+0x220/0x220
[  280.826298][ T5982]  __x64_sys_openat+0x243/0x290
[  280.831151][ T5982]  ? __ia32_sys_open+0x270/0x270
[  280.836086][ T5982]  ? syscall_enter_from_user_mode+0x2e/0x230
[  280.842060][ T5982]  ? lockdep_hardirqs_on+0x94/0x130
[  280.847250][ T5982]  ? syscall_enter_from_user_mode+0x2e/0x230
[  280.853220][ T5982]  do_syscall_64+0x3b/0xb0
[  280.857628][ T5982]  ? clear_bhb_loop+0x45/0xa0
[  280.862299][ T5982]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  280.868209][ T5982] RIP: 0033:0x7fb4e4b169a4
[  280.872610][ T5982] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  280.892224][ T5982] RSP: 002b:00007fff965d1f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  280.900628][ T5982] RAX: ffffffffffffffda RBX: 00007fff965d2158 RCX: 00007fb4e4b169a4
[  280.908670][ T5982] RDX: 0000000000000000 RSI: 00007fff965d3f1d RDI: 00000000ffffff9c
[  280.916628][ T5982] RBP: 00007fff965d3f1d R08: 0000000000000000 R09: 0000000000000000
[  280.924592][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.932559][ T5982] R13: 00007fff965d2170 R14: 0000555a1ca57670 R15: 00007fb4e4f8ca80
[  280.940528][ T5982]  </TASK>
[  280.943968][ T5982] Kernel Offset: disabled
[  280.948293][ T5982] Rebooting in 86400 seconds..