last executing test programs:

1m19.738735365s ago: executing program 0 (id=264):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_print_times', 0xc0402, 0x2bd)
write$tcp_mem(r0, &(0x7f000003eec0)={0x7fffffffffffffff, 0x20, 0x1}, 0x48)

1m19.659501066s ago: executing program 0 (id=265):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

1m19.613215433s ago: executing program 0 (id=267):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000180))

1m19.558613836s ago: executing program 0 (id=269):
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xd, 0xfffe}}}}, 0x11)

1m19.509149953s ago: executing program 0 (id=271):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
setpgid(0x0, r0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)

1m19.424783566s ago: executing program 0 (id=272):
r0 = epoll_create1(0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x804, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2})

1m4.359291796s ago: executing program 32 (id=272):
r0 = epoll_create1(0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x804, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2})

2.094541579s ago: executing program 1 (id=945):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0)

2.09166368s ago: executing program 1 (id=946):
r0 = epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x40000}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000004})

1.983168929s ago: executing program 1 (id=948):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257035bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xf, 0x0, &(0x7f0000000180)="a06ad87ed56a0064d082778c393848", 0x0, 0x0, 0x4000000, 0x0, 0x43, 0x0, &(0x7f00000001c0)="6ec764c3a04cc885a6f97dc77e4a1f536e37f8ac0e25d91c48d0e943b093fa1beafc2d501a08a4868ffd3dba79c9747ff05dc61256ca442f7f047bb92c0757596ae62f"}, 0x50)

1.93206317s ago: executing program 1 (id=949):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f00000004c0), 0x4)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

1.808281352s ago: executing program 1 (id=955):
syz_usb_connect(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x141, 0xfc, 0x47, 0x7b, 0x20, 0x1bc7, 0x1101, 0xc45c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x3, 0x7, 0x2, 0x2b, 0x1e, 0x57, 0x0, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x3, 0x2}}, {{0x9, 0x5, 0x6977d456ae480d95, 0x1, 0x400, 0x97, 0x1, 0x9}}]}}]}}]}}, 0x0)

518.896293ms ago: executing program 3 (id=974):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x5cfa, 0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r0, &(0x7f0000000480), 0x10)

453.344338ms ago: executing program 3 (id=976):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9)

452.954091ms ago: executing program 2 (id=977):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x400000000000})

371.819803ms ago: executing program 2 (id=978):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x1, &(0x7f0000000180)='z'})

367.428346ms ago: executing program 1 (id=979):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000080)={[], [{@dont_appraise}]}, 0x1, 0x594b, &(0x7f0000000100)="$eJzs3W2QXFXdIPBzu3synZm8TAI8RJDJEIgPDzyYCW+FL6XR9a0AqVhYStgoDGSC0SSkkiAQUIILLixgoaWlqB/QQmrRaFEFq0RK5GUTVlGK1aW2kFrZRT+4hSwpgUhZrvPUTN/T6bnTd25PT0/e+P0qmdvn9On/Offc07fvOd0zHQAAAHhD2H3Tlr3nH/P+X35h+LXrP/TTDTeE3vJYfjUW6Eu3Vx+oFrI/dVcWjW2z4+Kfr/3+Hwcue+8v7uv53uu71hy/9nfvO+Kyhz59zs47v/Xoq3Mf+McLRXHjeDp5Xzp5KQmh+rM9X/viriePHs1LQgjlpG97CAuShY8uSDIhBv8WQliTJhZl7rz/tdPXjm5vuLV7XP78TDnj/Y2tmo6zbXuvOiX8/j2rbvz14h/9sGvHi9v3FUmqDeMphHmXND6+K4QwO/0/Ko62OB7joF0ZQuhpeNzZBe06ocX2L8tJH5tuZ6Xb3oI48f4lmXQpUy6bjroy256C+qYrrx3tlisyJ5POnowmKCwwXl47Y/6CdPuTdHvy1MKHcvyfhFISKvXWrU/2jZHQcNySkIw9N6r1dKl+bGvp8NeR8ekkc38pky53ZfZrrN50oJWTZHx+LJfJj6fjSpp/fOO5uokLcvLflG6r6RP19ZgO2Rs1vRNu1PdrTGzXnknasj+c+p/2nYMaldJzU/3ApwejN83rTRZOeMxIE/G+XatuW1pe/djuvpx2JPclafykrfjbfrVgzid/cMuV2df1evxLSmn8Um0YTTH+8+c+9fJFt3z3m7nx74jxy221/7SHe1469/GbluT2z57YP5W24g+98MTti4+8dEdu+++K8attxV+x86nuuXsffiS3/YOxf2a3Ff+5d3zgD/c+8+CLufFDjN/TVvzVOzd9qbt/70m58R+J/dPbVvznX9lx1rP9/X8ayIv/dIw/t63492y/8+13z7/1nNzjuzL2T19b8c878aEb5+x98Li8c2dyV6deOQHemI5Ir7FuTtPtzjOnq2G+8I2BSu2ab076f24nK8pcfI7WM6/oMTd0sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvBEcdcp/++D/+VjfS5U03Z3eeK5U28b8WSEks0MIW7YObd66buPlA5++4srNG4fWDwxtHRjeuHXzNQNn/OvA5uFN64euGb138NTTa49bGJLaNjluQt3dIyMjpb7xebG+f3fijt8vPfv//jmEwaN+21/Jbf+yOzfcfWSTnxnJipF3b7jy/N+e+Z10v/rSdvU1adfIyMhIyGnX/7vw73d/Zc8fTwph8J8ma9cTz73r5+MaNJaxL06q1B1qDepOepq2o97qtD2xvypr160fHpy8f0cfX87Zj39/7Yt/W3v1l/9e699q7n602L+zV4ysL3191Xn//+vX1TKK2nWgjntRf8e9iO2L/VdN+3teul/zcvarkrNfN/36kWd+dswtr24Pg5VXFk+su2i/utIB0JW8qaV6Yw09yYJx+dW0fDzi8XHLtm7YtGzLNdtOXbdh6PLhy4c3vm35GcvPGjzzrDOXje35sg7vf6z/LS3u//4ZT/M/u/0n8Wdr46moXUX9Mdqu4v5obFHe86/ngi9+9W13Pn5+LaNonMfS9fNJuu0ZPc7LQ8N4m9hXzfarqB9CCAPN+uHlV88JR//PdTcWnYcaj0zjz4xkxciTS/7ynbO/veidtYz9cp5vbFCb5/l6q/e1Z6y/qunxGDlI+7c7lNP96m3aruVPPt512+4/f67evlmzwtVDW7duXl77OSdt6Zzk2KbtyubG/Vo89rMc0m4J9WHaZLyO6gq19mXPn7F4tld70/t6k4VN9ysr3rdr1W1Ly6sf253X08l9tRpnh7m1bfLmnJLrMw8s1xvcrP6D9flXND76P/jtBz72wI/PmDA+Tqv9LNqvJGe/fvTMPV/93pf/4487t18ffNdTfX/5X59aWss4VM4r9Van7UlC19h27LxyWghFz7/Fofl+5D7/Ss33p+j5l61nX/nm8QYy6d5Qbuv5etrDPS+d+/hNS3Kfr3tafb5eNy5VLni+HizjJ/v8Sirj2zFzz69xAyVZMfKLm4/Y/uj1K4+pZRSN63rp+rhueL08vYX5R85+/fyiZ/uvGPgP/6Nz543v/+v9F/9uaMXnaxntH/fYls4c92rav9Wc/q23Os47G/v3rZddsX5NLf/gvf5NtwXzn3gq2XLNts8MrV8/vHlLa/vV6utprCfby+2+nsaz28KC/SpN2K+Zu9FKf7X6fIvtX9N2f41/vvWGpK3XhW2/WjDnkz+45cq+CY9KK7qklMYvtRX/+XOfevmiW777zdz4d8T4lbbiD73wxO2Lj7x0R278u5I0frWt+Ct2PtU9d+/Dj+TGH4ztn91W/Ofe8YE/3PvMgy/mxg8xfm97/f/KjrOe7e//U278p5O0ntFrpBDuf+30tbV07Qqq2tCOrnHtCtl0kkmXMulyY7pUW2utV1BOkvH5sVyaf3xDW5r5eE5+vAqrLqptX4/pkL0xPlmZrLKDQKnh3N8sv+g6FQDgcBff/4/XoPH9/+H0Qil/pQH2me48bFFO3DgP27eeM2vc/YvS+PHxcR2w/61hcHR7w0DtQn+q7yPE50N2nTPWc9IJ42O0u85ZtP6+JJOO7aqtl1ca5qGp7LymPl+bfP19Yj2Tr79ndr94fXzg5kxGZazDqznHrytdMWv2eYdMeyujEfLGR3ZdLH6eo39eWDlWX4vjI/s5mngcsp+jifUckzlxtvs5mumOj9jsSea9Y00ufn9j4vELk/TvvuPXPFr2+E3heFdHy8/0+7MdWDdsekrbf+uGM/t+mHXJnPjpE+xgXzeM+XE/Ki2uJ34sJ7/d9cRsfjxdxHbtmaQt+4P1ROBwFef/8TVidP4/egH+10y5ouvQ7FVjjJf7OaFy8/YUzTsmfk6vp63X8dU7N32pu3/vSbnXOY+0+rmfTeNSPQWf+ynqx6WZdGE/5izQFH3eKltPQb9PqKU3zG2r3+/Zfufb755/6zm5/b6y9kJa3O9fHZeaW9Dvh8B8oXl884U3xHxhptfPDth8JP3g00zNRz6akz/V+UjPhBv1/RpzyM1HuvZvuwCAQ0ec/9ffP0vn//87FkivI4rmrSdn0jFe7rw15/okb9764XR7daZ8b/obFVO9bj7vxIdunLP3weNy5y13tToP/c/jUn2F89DpzZtz5xErO/N58dx5RH2eNb15Ym776/PE6c3Tc+PX5+nTm0fn9k99Hj29dYDc+PV1gEN9nluwXpepLCZbXa/b3/PokfJ+mkenvz47U/PoC3LypzqP7p1wo75fY8yjAQAOrDj/j5dxcf7/eKbcdN9nz50XdOi6Pfv3QOrxn95f88qZnvfN9Lx1puf101+XaPbRhMPn/d+ZXhea2XWyA/b+8sEyL04rNS8GAOBgFuf/s9N0/vx/evOTZvPPrnHzE/PzpvEPofl50/iHzfz8UF//Mv/3vngx838AgMNbnP/HX3uMf//vv6bp7N+tN0/PiW+ebp4+2fhpeZ7e+XW24HMAB3YdYPa+8tYBAAA4ELrGZkoTf8/+E+k2+3v2eb+Xf1FO+VZV0svjS7duHh6++MpNa4a2Dl+88Yo1w1suvmrzuq1bhzfWyk133pg7b0nnjV2hkvZH83LZedv89O8hzM/5ewjZ8jHssWM3Jv49hGy1swv+jsC+49dae/OOX2mS8s3GR97xzov/8ZzyUf34X/ap0y5eu+XidRvXbV03tH7dtuHx5UZnrT1T+N7M2C1T+r7UzI8JSlP//s7OtKM0oR1daX/kfT97kmnHgrQlC/K+/yCn3b/871/57Ikjf783hMGjym+eVv8lK0b+y4XDH966+7ebRttfmrT99ZJpu4q+rzRbPu5PZf0VW7aesvaKKzdmv1GyPXE9o1RPz9B6Rvr0L7e4PrE6J3+qn1MoT7hxcGp5fQIAgHHi+//xeja+f/jl9AIq5rc+T5/e+8e58/TB1ubp2e8lK5qnZ8vH/W11nl6d5jw9W3/RPL1Z+Wbz9Lx5d178j+aUn6rWx8n0PueRO04uaW2cvCWTLhon2fJTHSfJNMdJtv6icdKsfLNxknfc8+J/JKd8ntbHw/Q+l5M7Hu5obTz8SyZdNB6y5ac6HkrTHA/Z+ovGQ7PyzcZD3vHNi39+TvlWjR8fowNjbFwMX3zVFZs/01Bupr//Yvrtm9nv/2hX6+2f2c99zXz7Z/ZzZTPf/ul9riy3/U9PbyWs9fbP7Pe7tGu/rdemHzYr+vxZ0Truqpz8nHXcZHsskAk6a8KNg5N1XDhw4vw/vt0T5/+3pttOvw106H9Pmu8xaxq/Q99jVnQdc5i/nue+L+v1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODw0l1ZNLbdfdOWvecf8/5ffmH4tes/9NMNN/zztd//48Bl7/3FfT3fe33XmuPX/u59R1z20KfP2Xnntx59de4D/3ihMHDf2M/KyWmyGkLyUhJC9Wd7vvbFXU8ePZqXhBDKSd/2EBYkCx9dkGQiDP4thLCm3s7xd97/2ulrR7c33No9Ln9+Jkh2v0JvObansZ0hXF24RxyCquk427b3qlPC79+z6sZfL/7RD7t2vLh9X5Gk2jCeQph3SePju0IIs9P/o+JoWxQfnG5XhhB6Gh53dkG7Tmix/cty0sem21nptrcgTrx/SSZdypTLpqOuzLanoL7pymtHu+WKzMmksyej6cprZ8xfkG5/km5PnmL8cvyfhFISKvXmr0/2jZHQcNySkIwdy2o9Xaof25DufyadZNKlTLrcldmvsXrTgVZOkvH5sVwmP56OK2n+8Y3n6iYuyMl/U7qtpk/U12M6ZG/U9E64Ud+vMbFdeyZpy/5QajgHNcuvH/j0YPSmeb3JwgmPGWki3rdr1W1Ly6sf292X047kviSNn7QVf9uvFsz55A9uuXJRXvxLSmn8Ulvxnz/3qZcvuuW738yNf0eMX24r/mkP97x07uM3Lcntnz2xfyptxR964YnbFx956Y7c9t8V41fbir9i51Pdc/c+/Ehu+wdj/8xuK/5z7/jAH+595sEXc+OHGL+nrfird276Unf/3pNy4z8S+6e3vfHzyo6znu3v/9NAXvynY/y5bcW/Z/udb797/q3n5B7flbF/+tqKf96JD904Z++Dx+WdO5O7OvXKCfDGdER6jXVzmm53njldDfOFbwxUatd8c9L/cztZUcZoPfNmMD4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIen31x3xicufPdHVlWSEJKcMiNNxPvKs1asGGij3qEXnrh98ZGX7mjMW9RGHAAAAKBYnIeX6jnVsChclcwOxzYtH9cIjo2pZHx+dg0hxsmuEbQbp9ShOOUOxal0KE5XC3GebiHOrA61p7tDcaoFcaqhtTizJ4lTGR0VLbanZ9L2tB6nt0Nx5nQoztwOxZnXoTjzOxSnb9I4rY/DBR2Ks7BDcY7oUJwjOxTnqA7F+acOxTm6Q3Gya8pTHYdz05LH5MUZu1EujFNJyvU7mq2nH53Wc9w06+ktqGdu0etxi/XMbrGeEzKPK02xnmqL9bxlmvUkLdbzL9Osp1RQTxy3V2fbF+uJqRbH/zUdirOtQ3Gu7VCc6zoU53MdivP5DsW5fppxAFoV5//75nt9obvyztCTnnHSVYDt8d4431089nPi613eCSnGe3Mmf1ZRvOxEPRNvcSa/sH3ZBYRMvCWZ/K5x8Sr1+cgk8aqN8ZZm7izc3+yCQqZ9J2fyu4viZRcWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAG/ea6Mz5x4bs/siokYfRfUyNNhNCd3rtixUAb9e5addvS8urHdjfmdVfaCAQAAAAUivPwrnpONXRXlofuZNa4ctV0HaCapst9tW3/vLBydJsMlMbSPcmCSR9XSR+3bOuGTcu2XLPt1HUbhi4fvnx449uWn7H8rMEzzzpz2dp164cHaz9D6C6IF0IYW37Ycs22zwytXz+8eUstM9v+RenjFqXpJH1c/1vD4Oj2hrT9CwvqK02ob+ZuFB89AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6NXfsLdfOs4wD+vElOkp2uNrJ/WVlPQ/+MqkPbeiadjuUFwcHWlh4GkkyPo7gWh6dr2dpRZ9wKbrNFETYKpdILK3W4ObzZHzfE/aFQmdWCpxbZhu5CL5RNJ93ohXREek7enCQnaY6xtFv3+VzkTZ7n9zy/98nFge97AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD5NVkbHa+Ux6rDUQhRj5p6F8lcOhvHpQH6fvWFbT/MjZxa0TqWywywEQAAANBXksOHmiP5kMukQzpcPfVpSWiZCDO5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+OiZrI2OV8pj1XlRCFGPmnoXyVw6G8elAfq++e5Tn3ttZOTvrWPFAfYBAAAA+ktyeKo5kg/FsDQMRVe31SXPBhZ2rO+sS/ZZNMe6zmcHveqWzrHu2jnWfaJP3frGdWcAAACAD78k/2eaI4WQy8zvmf/75fqkbnFHXbpxHeS3AgAAAMD/J8n/ueZIMeQyxWZen2veX9JRl6zv93/7ZP3yHuv7/T9/XePq//QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OExWRsdr5THqukohKhHTb2LZC6djePSAH1Xvzj8z1sPP7ykdSyXGWAjAAAAoK8kh89E73zIZYbDUJg3lftHbj7wzJefeW40hDAd87PZsHPj9u33rJ5+TepWHT089IMjb39nVt2q6dcLdkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCcmayNjlfKY9VLohCiLvPzQgj1LpL5dDaOSwP0feMLX/rrEyeef6t1rDjQCQAAAIB+khw+k/3zoRiyIRuunPrUmvXPSHWs7/bMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi43Put+7+5cWJi0z3n9k3ITG9/7nf2xhtvzsObC/2XCQAAONcWhyjU/0dXbbjQdw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwQTNZGxyvlsWo+CiHqUVPvIplLZ+O4NEDf+IVjufmnXny5daw4wD4AAABAf0kOn8n++VAMQ2EoXDH1qdszgan8XziPNwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8oEzWRscr5bHq/CiEqEdNvYtkLp2N49IAfR/ftf/zhxZ8/5bWsVxmgI0AAACAvpIcnm2O5EMu88mQC9c0Pk+0L4jSjWv35wIz67a1LRue87pa27r0nNft7jhZpnGa6XX5ZL/C9LW5rjR7XallXTE025fa1oW9bavm97nPAAAAABdQkv9zzZFCyGVyLTn3Z231BTkXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhhsjY6XimPVaMohKhHTb2LZC6djePSAH3v/93HL/3az/fsaB0rDrAPAAAA0F+Sw2eyfz4Uw6LwsbBoKveHQnt9UvevyulDj/37bytCWHnl8ZFM57Y/Tt785o2bXup8CSHVXp0KYUGjX9Sj32//8Nh9y+qnnwhh5RXpa2b1C2fv175lXH+2smnd9iPHt/X5cgAAAOAikeT/oeZIIeQyd/fM/0ny7pP/m6YC+IL7dv3y8sZrI5F3rEgVGv1SPfp9cdlTf1m+5h9vn8n/Z+v3mf1bDl3e1nB6pEMU18tbdqw/fv3BVHLq6f7pjv7J9/KVb7/1n807Hz093T8f8o3xhZlu/We/drgkrk+k9lXXvr+v1t4/0+P8D//+5RO/XrjnvTP931083Ox/7VnOf/b+w7c9sveG/YfXt/cPIZS69X/nvVvCVX+666HO8w93bNz6zbe+doji+tElJw+uOVC8sb1/1NE/+f5/ceLxvT999HvPJf2T34qsWDrX/qmO/q/uvmzXKw9uWNjeP9Xj/C/d/trI1tJ3/9h5/jvbds30vIvZ53/yuqfveH1j/EDnFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMVlsjY6XimPVVNRCFGPmnoXyVw6G8elAfq+eeuxd27f85MftY4VB9gHAAAA6C/J4TPZPx+KIRuyYXgq9z9b2bRu+5Hj20JhejZqXDMTW+/d/qnNW3fcfecFunMAAABgrpL8n2mOFEIusywMNfJ/ecuO9cevP5hK8n8qyf+b75rYtDI0617dfdmuVx7csLD5nCCEqZ8F5M/UfXam7uabjhVO/vkby7vWrZ6pO7rk5ME1B4o3JnWhtW5VaD6fePK6p+94fWP8QPP+Wus+/fWtE43HE8m+w7c9sveG/YfXN8/RuA439k3qJlL7qmvf31dL6tKNa75xbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgtsna6HilPFYN6RCiHjX1LpK5dDaOSwP0XbvsVw9deur5Ra1jucwAGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCfv2FSFXFcQA/Z2a3HXd2dVeDtqJ1taKwh6Qgol4qKkIjhJ4MCUvzIQqCiMIeWkMjsaKXIOtFooJqC6EgN0m0WKN/0ksPFRRYD4FIC+UgPVTszLnjzHUvU3ctqD4fGM6eM/d+7++ec+bODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCvMtA31mwP73iwcdt5N33y+D0nHrvlvfu3XfLo6z9MbLrh472Dr5yc2bxiy9c3Ltu0/94107tfPPTL8Du/He0Z/EirWZW6tRDi8RhC7f3Z556Y+fScubEYQqjGkckQRuPSQ6Mxl7D61xDC5nad3W++feLKLXPttl0DXeNLciH5+wr1alZPy0h3vfy31NI+29p4+LLw7fXrt3++/K03+6eOTZ46JNY69lMIizd2nt8fQliUXnOy3TaWnZzadSGEwY7zru5R14V/sv7LC/rnp/as1NZ75GTvr8z1K7nj8v1Mf64d7HG9hSqqo+xxvQzl+vmH0UIV1ZmNj6b23dSu+ov51ewVQyWGvnb598VTeyR0rFsMsbmWtXa/0l7bkO4/14+5fiXXr/bn7qt53bTRqjF2j2fH5cazx3FfGl/R+axu6Xrg314wH+emtpY+qCezfsj/0VI/7Y/2fTVldc0WXO+fUslPQG68vfBpMepprB6XnnbO7/PI3ptZ/9TF1Q0fHB4pqCPujSk/lsrf+tno0J1v7HxorCh/YyXlV0rlf7f2yE937HzphcL8Z7P8aqn8Kw4MHl/74Y6VhfMzm81PX6n8u45+9PTys++emm+tm/l7svxaqfzrpo8MDDcOHCysf3U2P4tK5X9z7c3fv/blvmOF+SHLHyyVv2H6gWcGxhuXFuYfbH0U6s0dWmL//Dx11Vfj4z9OFOV/kc3/8Dz5sWf+q5O7r3l5ya41hftzXTY/I6Xqv/Wi/duHGvsuqBXl7zlT35wA/0/L0v9YT6Z+2d+ZC9Xxe+H5ib7WN9BQeg2fyQvlzF1n8d+YDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFMBAAD//1g3KqU=")

352.614794ms ago: executing program 3 (id=980):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000001a80)=0x18)

304.09542ms ago: executing program 2 (id=981):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x4, 0xfffffffffffffffd)
vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="df", 0x1}], 0x1, 0x0)

254.74376ms ago: executing program 3 (id=982):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="1baff41d", 0x4}], 0x1}}], 0x1, 0x24008094)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)

254.540982ms ago: executing program 2 (id=983):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5)
mount$9p_fd(0x0, &(0x7f0000000080)='./file7\x00', &(0x7f0000002540), 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYBLOB="2c736d61636b66736861743d2df7e9152c7472616e733d66"])

144.741229ms ago: executing program 3 (id=984):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000500)={[{@dots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@fat=@nfs}, {@dots}, {@dots}, {@dots}, {@fat=@flush}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$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")
mount$nfs(&(0x7f0000000000)='.\xec\xbf. ', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)

82.587973ms ago: executing program 2 (id=985):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440))

453.967µs ago: executing program 3 (id=986):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r1, 0x100000000)

0s ago: executing program 2 (id=987):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x44088}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

 Enslaving as an active interface with an up link
[   74.350585][ T5953] team0: Port device team_slave_1 added
[   74.366006][ T5956] team0: Port device team_slave_0 added
[   74.378014][ T5950] team0: Port device team_slave_0 added
[   74.392265][ T5956] team0: Port device team_slave_1 added
[   74.406654][ T5950] team0: Port device team_slave_1 added
[   74.409700][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.412191][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.421795][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.450919][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.454080][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.464535][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.469504][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.472149][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.481982][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.508016][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.510394][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.519680][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.525058][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.527422][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.536988][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.547440][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.549912][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.558689][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.614037][ T5950] hsr_slave_0: entered promiscuous mode
[   74.616913][ T5950] hsr_slave_1: entered promiscuous mode
[   74.667616][ T5953] hsr_slave_0: entered promiscuous mode
[   74.670787][ T5953] hsr_slave_1: entered promiscuous mode
[   74.674323][ T5953] debugfs: 'hsr0' already exists in 'hsr'
[   74.676456][ T5953] Cannot create hsr debugfs directory
[   74.690395][ T5956] hsr_slave_0: entered promiscuous mode
[   74.693871][ T5956] hsr_slave_1: entered promiscuous mode
[   74.696734][ T5956] debugfs: 'hsr0' already exists in 'hsr'
[   74.698996][ T5956] Cannot create hsr debugfs directory
[   74.965241][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.975998][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.996241][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.009759][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.042203][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.049954][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.065247][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.071734][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.115483][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.130217][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.138553][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.152330][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.256603][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.281729][ T5950] 8021q: adding VLAN 0 to HW filter on device team0
[   75.306092][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.309150][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.321979][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.324920][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.341574][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.370041][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.380089][ T5956] 8021q: adding VLAN 0 to HW filter on device team0
[   75.405508][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.408105][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.415637][ T5953] 8021q: adding VLAN 0 to HW filter on device team0
[   75.429159][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.431883][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.447455][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.450275][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.454099][   T55] Bluetooth: hci0: command tx timeout
[   75.468362][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.471008][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.533135][   T55] Bluetooth: hci1: command tx timeout
[   75.535076][ T5235] Bluetooth: hci2: command tx timeout
[   75.555114][ T5956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.662245][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.694480][ T5950] veth0_vlan: entered promiscuous mode
[   75.700588][ T5950] veth1_vlan: entered promiscuous mode
[   75.728954][ T5950] veth0_macvtap: entered promiscuous mode
[   75.735606][ T5950] veth1_macvtap: entered promiscuous mode
[   75.750000][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.765602][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.777716][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.790936][ T5980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.796814][ T5980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.809302][ T5980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.812361][ T5980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.840658][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.886363][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.889550][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.934322][ T5956] veth0_vlan: entered promiscuous mode
[   75.949193][ T5956] veth1_vlan: entered promiscuous mode
[   75.972231][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.979579][ T5953] veth0_vlan: entered promiscuous mode
[   75.981973][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.997298][ T5956] veth0_macvtap: entered promiscuous mode
[   76.000628][ T5953] veth1_vlan: entered promiscuous mode
[   76.015436][ T5956] veth1_macvtap: entered promiscuous mode
[   76.029807][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.036282][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.050444][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.082260][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.088712][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.092144][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.106590][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.126353][ T5953] veth0_macvtap: entered promiscuous mode
[   76.149507][ T5953] veth1_macvtap: entered promiscuous mode
[   76.217820][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.218107][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.220901][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.251718][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.282399][ T5980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.286576][ T5980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.297682][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.300515][ T5980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.301096][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.305254][ T5980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.423602][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.429077][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.454822][ T5981] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   76.489178][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.492255][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.633243][ T5981] usb 2-1: Using ep0 maxpacket: 8
[   76.636992][ T5981] usb 2-1: unable to get BOS descriptor or descriptor too short
[   76.655883][ T5981] usb 2-1: config 0 has no interfaces?
[   76.668730][ T5981] usb 2-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c
[   76.682491][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.685469][ T5981] usb 2-1: Product: syz
[   76.686770][ T5981] usb 2-1: Manufacturer: syz
[   76.688180][ T5981] usb 2-1: SerialNumber: syz
[   76.710578][ T5981] apple-mfi-fastcharge 2-1: config 0 descriptor??
[   76.927071][ T6019] apple-mfi-fastcharge 2-1: USB disconnect, device number 2
[   77.470428][ T6076] mmap: syz.0.103 (6076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   77.524212][ T5235] Bluetooth: hci0: command tx timeout
[   77.613147][   T55] Bluetooth: hci2: command tx timeout
[   77.616359][ T5235] Bluetooth: hci1: command tx timeout
[   77.954276][ T6093] Zero length message leads to an empty skb
[   77.979247][ T6093] loop2: detected capacity change from 0 to 8
[   78.067087][ T6093] unable to read id index table
[   78.231070][ T6105] sctp: [Deprecated]: syz.1.114 (pid 6105) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.231070][ T6105] Use struct sctp_sack_info instead
[   78.397967][ T6117] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.611686][ T6126] usb usb8: usbfs: process 6126 (syz.0.121) did not claim interface 0 before use
[   78.697323][ T6131] netlink: 830 bytes leftover after parsing attributes in process `syz.0.123'.
[   78.700896][ T6131] bond_slave_0: entered promiscuous mode
[   78.703337][ T6131] bond_slave_1: entered promiscuous mode
[   78.885236][ T5981] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   79.054579][ T5981] usb 3-1: Using ep0 maxpacket: 32
[   79.058428][ T5981] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[   79.065717][ T5981] usb 3-1: config 0 has no interface number 0
[   79.067924][ T5981] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   79.072355][ T5981] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[   79.079157][ T5981] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[   79.080498][ T6140] capability: warning: `syz.0.127' uses deprecated v2 capabilities in a way that may be insecure
[   79.084692][ T5981] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   79.091590][ T5981] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   79.096647][ T5981] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[   79.100280][ T5981] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   79.108122][ T5981] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[   79.124181][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.128783][ T5981] usb 3-1: Product: syz
[   79.130104][ T5981] usb 3-1: Manufacturer: syz
[   79.131588][ T5981] usb 3-1: SerialNumber: syz
[   79.141707][ T5981] usb 3-1: config 0 descriptor??
[   79.147106][ T6128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   79.152158][ T6019] IPVS: starting estimator thread 0...
[   79.263962][ T6143] IPVS: using max 64 ests per chain, 153600 per kthread
[   79.560650][ T5981] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz)
[   79.580669][ T5981] etas_es58x 3-1:0.219: could not parse product info: '424242424242'
[   79.602975][ T5235] Bluetooth: hci0: command tx timeout
[   79.684149][   T55] Bluetooth: hci2: command tx timeout
[   79.686626][ T5235] Bluetooth: hci1: command tx timeout
[   79.791232][ T5852] usb 3-1: USB disconnect, device number 2
[   79.804562][ T5852] etas_es58x 3-1:0.219: Disconnecting syz syz
[   80.291638][ T6180] binder: 6179:6180 unknown command 0
[   80.294076][ T6180] binder: 6179:6180 ioctl c0306201 200000000080 returned -22
[   80.640392][ T6204] loop0: detected capacity change from 0 to 512
[   80.674954][ T6204] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.146: bad orphan inode 11
[   80.682156][ T6204] ext4_test_bit(bit=10, block=4) = 1
[   80.714522][ T6204] is_bad_inode(inode)=0
[   80.716287][ T6204] NEXT_ORPHAN(inode)=2080374784
[   80.718303][ T6204] max_ino=32
[   80.719593][ T6204] i_nlink=0
[   80.721102][ T6204] EXT4-fs (loop0): 1 truncate cleaned up
[   80.735415][ T6204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.767310][ T6204] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.146: bg 0: block 393: padding at end of block bitmap is not set
[   80.792924][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   80.828207][ T5956] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.944716][   T24] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[   80.948508][   T24] usb 3-1: config 0 has no interface number 0
[   80.950978][   T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   80.958014][   T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   80.976337][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   80.980184][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.983709][   T24] usb 3-1: Product: syz
[   80.988508][   T24] usb 3-1: Manufacturer: syz
[   80.992427][   T24] usb 3-1: SerialNumber: syz
[   81.046592][   T24] usb 3-1: config 0 descriptor??
[   81.072510][   T24] yurex 3-1:0.50: Could not submitting URB
[   81.076464][   T24] yurex 3-1:0.50: probe with driver yurex failed with error -5
[   81.260126][   T24] usb 3-1: USB disconnect, device number 3
[   81.683593][ T5235] Bluetooth: hci0: command tx timeout
[   81.765769][   T55] Bluetooth: hci2: command tx timeout
[   81.768008][ T5235] Bluetooth: hci1: command tx timeout
[   82.236931][ T6239] tmpfs: Group quota inode hardlimit too large.
[   82.729170][ T6260] loop0: detected capacity change from 0 to 512
[   82.731896][ T6260] EXT4-fs: Ignoring removed nobh option
[   82.736073][ T6260] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   82.774193][ T6260] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.164: corrupted inode contents
[   82.779925][ T6260] EXT4-fs (loop0): Remounting filesystem read-only
[   82.784146][ T6260] EXT4-fs (loop0): 1 truncate cleaned up
[   82.787674][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.793349][ T6260] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.807513][ T3022] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   82.811734][ T3022] Quota error (device loop0): write_blk: dquota write failed
[   82.816332][ T3022] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[   82.821070][ T3022] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   82.832460][ T3022] Quota error (device loop0): write_blk: dquota write failed
[   82.837004][ T3022] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[   82.841365][ T3022] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   82.848015][ T3022] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   82.855239][ T3022] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   82.867507][ T5956] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.101886][ T6277] process 'syz.1.169' launched './file0' with NULL argv: empty string added
[   83.300082][ T6289] binder: 6288:6289 unknown command 0
[   83.311219][ T6289] binder: 6288:6289 ioctl c0306201 200000000080 returned -22
[   83.995589][ T5235] Bluetooth: hci1: Malformed LE Event: 0x1b
[   84.107533][ T5852] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   84.416309][ T5852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.420507][ T5852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   84.429541][ T5852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   84.434040][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.437080][ T5852] usb 1-1: Product: syz
[   84.438967][ T5852] usb 1-1: Manufacturer: syz
[   84.440964][ T5852] usb 1-1: SerialNumber: syz
[   84.660762][ T5852] usb 1-1: 0:2 : does not exist
[   84.667491][ T5852] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   84.687844][ T5852] usb 1-1: USB disconnect, device number 2
[   84.719301][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.410287][ T6319] loop0: detected capacity change from 0 to 64
[   85.496914][   T33] audit: type=1326 audit(1755335575.069:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   85.506206][   T33] audit: type=1326 audit(1755335575.079:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   85.519451][   T33] audit: type=1326 audit(1755335575.079:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   85.539057][   T33] audit: type=1326 audit(1755335575.079:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   85.683172][ T1270] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   85.705571][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'.
[   85.709505][ T6333] tc_dump_action: action bad kind
[   85.833178][ T1270] usb 2-1: Using ep0 maxpacket: 16
[   85.839920][ T1270] usb 2-1: config 1 interface 0 has no altsetting 0
[   85.845304][ T1270] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40
[   85.848677][ T1270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.851793][ T1270] usb 2-1: Product: syz
[   85.854116][ T1270] usb 2-1: Manufacturer: syz
[   85.855991][ T1270] usb 2-1: SerialNumber: syz
[   86.043034][   T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   86.077920][ T1270] usbhid 2-1:1.0: can't add hid device: -71
[   86.080499][ T1270] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   86.092462][ T1270] usb 2-1: USB disconnect, device number 3
[   86.205929][   T24] usb 1-1: config 0 has too many interfaces: 229, using maximum allowed: 32
[   86.209249][   T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 229
[   86.215282][   T24] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[   86.218755][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=31
[   86.221939][   T24] usb 1-1: SerialNumber: syz
[   86.227382][   T24] usb 1-1: config 0 descriptor??
[   86.415371][   T10] cfg80211: failed to load regulatory.db
[   86.437147][   T10] usb 1-1: USB disconnect, device number 3
[   86.727921][ T6344] loop1: detected capacity change from 0 to 1024
[   86.739967][ T6344] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   87.466438][ T6365] loop0: detected capacity change from 0 to 1024
[   87.572145][ T6369] sctp: [Deprecated]: syz.2.210 (pid 6369) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.572145][ T6369] Use struct sctp_sack_info instead
[   87.617430][ T6371] evm: overlay not supported
[   87.949722][ T6385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'.
[   87.954191][ T1270] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.103436][ T1270] usb 1-1: Using ep0 maxpacket: 32
[   88.107584][ T1270] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   88.114594][ T1270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.133088][ T1270] usb 1-1: config 0 descriptor??
[   88.140620][ T1270] gspca_main: nw80x-2.14.0 probing 055f:d001
[   88.718875][ T6407] bridge1: entered promiscuous mode
[   89.732687][ T6418] trusted_key: encrypted_key: keyword 'updat`fault' not recognized
[   90.092055][ T1270] gspca_nw80x: reg_w err -71
[   90.095653][ T1270] nw80x 1-1:0.0: probe with driver nw80x failed with error -71
[   90.109420][ T1270] usb 1-1: USB disconnect, device number 4
[   90.331198][ T6421] loop1: detected capacity change from 0 to 2048
[   90.340754][ T6421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.735428][ T6429] loop1: detected capacity change from 0 to 64
[   90.839405][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'.
[   90.927847][   T33] kauditd_printk_skb: 2 callbacks suppressed
[   90.927866][   T33] audit: type=1326 audit(1755335580.509:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   90.949750][   T33] audit: type=1326 audit(1755335580.519:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   90.962321][   T33] audit: type=1326 audit(1755335580.529:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.239" exe="/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   90.972613][   T33] audit: type=1326 audit(1755335580.529:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   90.982519][   T33] audit: type=1326 audit(1755335580.529:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94918ebe9 code=0x7ffc0000
[   91.107257][ T6445] loop1: detected capacity change from 0 to 4096
[   91.119575][ T6445] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   91.128549][ T6445] ntfs3(loop1): ino=2, mi_enum_attr
[   91.131999][ T6445] ntfs3(loop1): Failed to load $LogFile (-22).
[   91.523873][ T6016] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   91.547458][ T6471] loop0: detected capacity change from 0 to 4096
[   91.576963][ T6471] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   91.609644][ T6471] ntfs3(loop0): ino=3, mi_enum_attr
[   91.611799][ T6471] ntfs3(loop0): Failed to load $Volume (-22).
[   91.682698][ T6016] usb 2-1: Using ep0 maxpacket: 16
[   91.685251][ T6479] loop0: detected capacity change from 0 to 256
[   91.700096][ T6016] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf
[   91.718801][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.722069][ T6016] usb 2-1: Product: syz
[   91.732137][ T6016] usb 2-1: Manufacturer: syz
[   91.734268][ T6016] usb 2-1: SerialNumber: syz
[   91.737223][ T6016] usb 2-1: config 0 descriptor??
[   91.746130][ T6016] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached
[   91.951551][ T6016] usb 2-1: USB disconnect, device number 4
[   91.964050][ T6016] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected
[   92.111871][ T6501] loop2: detected capacity change from 0 to 4096
[   92.120683][ T6501] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   92.141450][ T6501] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   92.155097][ T6501] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update
[   92.178495][   T80] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update
[   92.703554][ T6520] team_slave_0: entered promiscuous mode
[   92.706111][ T6520] team_slave_1: entered promiscuous mode
[   92.710402][ T6520] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   92.716612][ T6520] team0: Device macvtap1 is already an upper device of the team interface
[   92.723202][ T6520] team_slave_0: left promiscuous mode
[   92.725502][ T6520] team_slave_1: left promiscuous mode
[   92.961510][ T6526] netlink: 'syz.1.281': attribute type 1 has an invalid length.
[   92.969583][ T6526] netlink: 88 bytes leftover after parsing attributes in process `syz.1.281'.
[   93.283066][  T791] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   93.434773][  T791] usb 2-1: Using ep0 maxpacket: 16
[   93.439533][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.444507][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.446919][ T6536] loop2: detected capacity change from 0 to 512
[   93.448217][  T791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   93.451159][ T6536] =======================================================
[   93.451159][ T6536] WARNING: The mand mount option has been deprecated and
[   93.451159][ T6536]          and is ignored by this kernel. Remove the mand
[   93.451159][ T6536]          option from the mount to silence this warning.
[   93.451159][ T6536] =======================================================
[   93.465746][  T791] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   93.482660][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.484089][ T6536] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.286: bg 0: block 5: invalid block bitmap
[   93.497753][ T6536] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   93.499275][  T791] usb 2-1: config 0 descriptor??
[   93.501543][ T6536] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.286: invalid indirect mapped block 3 (level 2)
[   93.508683][ T6536] EXT4-fs (loop2): 2 truncates cleaned up
[   93.512757][ T6536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.567215][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.753174][ T6540] loop2: detected capacity change from 0 to 32768
[   93.758598][ T6540] (syz.2.287,6540,1):ocfs2_verify_volume:2293 ERROR: found superblock with incorrect block size: found 4096, should be 512
[   93.762580][ T6540] (syz.2.287,6540,1):ocfs2_verify_volume:2331 ERROR: status = -22
[   93.765541][ T6540] (syz.2.287,6540,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   93.768368][ T6540] (syz.2.287,6540,1):ocfs2_fill_super:1177 ERROR: status = -22
[   93.960014][  T791] HID 045e:07da: Invalid code 65791 type 1
[   93.978568][  T791] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4
[   94.024124][  T791] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   94.189522][  T791] usb 2-1: USB disconnect, device number 5
[   95.142929][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   95.294598][ T5852] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.300673][ T5852] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   95.307246][ T5852] usb 3-1: config 1 has no interface number 0
[   95.309397][ T5852] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.314209][ T5852] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   95.317425][ T5852] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   95.325262][ T5852] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   95.328094][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.330505][ T5852] usb 3-1: Product: syz
[   95.331807][ T5852] usb 3-1: Manufacturer: syz
[   95.333769][ T5852] usb 3-1: SerialNumber: syz
[   96.156254][ T5852] cdc_ncm 3-1:1.1: bind() failure
[   96.357364][ T5852] usb 3-1: USB disconnect, device number 4
[   96.937081][   T33] audit: type=1800 audit(1755335586.509:13): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.298" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[   97.384958][ T6581] loop2: detected capacity change from 0 to 1024
[   97.442742][   T33] audit: type=1800 audit(1755335587.019:14): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.305" name="file1" dev="loop2" ino=20 res=0 errno=0
[   97.749381][ T5981] hid (null): global environment stack underflow
[   97.751952][ T5981] hid (null): unknown global tag 0xe
[   97.761012][ T5981] hid-generic 0005:0B57:000F.0002: reserved main item tag 0xe
[   97.775861][ T5981] hid-generic 0005:0B57:000F.0002: global environment stack underflow
[   97.779046][ T5981] hid-generic 0005:0B57:000F.0002: item 0 1 1 11 parsing failed
[   97.782684][ T5981] hid-generic 0005:0B57:000F.0002: probe with driver hid-generic failed with error -22
[   98.191745][ T6603] loop2: detected capacity change from 0 to 256
[   98.244262][ T6603] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[   98.670567][ T6607] loop2: detected capacity change from 0 to 4096
[   99.234164][ T6611] loop1: detected capacity change from 0 to 1024
[   99.285235][ T6611] hfsplus: xattr searching failed
[   99.291590][ T6611] hfsplus: xattr searching failed
[   99.295731][ T6611] hfsplus: xattr searching failed
[   99.776371][ T6627] loop1: detected capacity change from 0 to 32768
[   99.784341][ T6627] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.322 (6627)
[   99.809817][ T6627] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.814164][ T6627] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   99.817650][ T6627] BTRFS info (device loop1): using free-space-tree
[   99.932740][ T5980] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  100.045763][ T5950] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.377674][ T6654] loop1: detected capacity change from 0 to 4096
[  100.381829][ T6654] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  100.397087][ T6654] ntfs3(loop1): ino=b, mi_enum_attr
[  100.399324][ T6654] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  100.405067][ T6654] ntfs3(loop1): Failed to load $Extend (-22).
[  100.407755][ T6654] ntfs3(loop1): Failed to initialize $Extend.
[  100.493274][ T5852] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  100.518096][ T6658] loop1: detected capacity change from 0 to 16
[  100.526811][ T6658] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  100.531537][ T6658] erofs (device loop1): mounted with root inode @ nid 36.
[  100.570035][ T6660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.330'.
[  100.573314][ T6660] bond0: option min_links: invalid value (18446744072019614533)
[  100.575947][ T6660] bond0: option min_links: allowed values 0 - 2147483647
[  100.674632][ T5852] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  100.678073][ T5852] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  100.681871][ T5852] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.693671][ T5852] usb 3-1: string descriptor 0 read error: -22
[  100.696619][ T5852] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  100.705967][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.765808][ T5852] usb 3-1: 0:2 : does not exist
[  100.985174][ T5981] usb 3-1: USB disconnect, device number 5
[  101.756542][ T6669] Bluetooth: MGMT ver 1.23
[  101.841711][ T6671] loop1: detected capacity change from 0 to 4096
[  101.862709][ T6671] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  101.885379][ T6671] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  101.895843][ T6671] NILFS (loop1): mounting unchecked fs
[  101.902351][ T6671] NILFS (loop1): invalid segment: Checksum error in segment payload
[  101.912862][ T6671] NILFS (loop1): unable to fall back to spare super block
[  101.915615][ T6671] NILFS (loop1): error -22 while searching super root
[  101.939485][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[  102.058269][ T6685] loop2: detected capacity change from 0 to 256
[  102.068203][ T6685] exfat: Deprecated parameter 'namecase'
[  102.070207][ T6685] exfat: Deprecated parameter 'namecase'
[  102.095786][ T6685] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  102.220970][ T6695] loop1: detected capacity change from 0 to 512
[  102.245752][ T6695] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.347: casefold flag without casefold feature
[  102.254104][ T6695] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.347: couldn't read orphan inode 15 (err -117)
[  102.259127][ T6695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.268025][ T6699] loop2: detected capacity change from 0 to 2048
[  102.274187][ T6699] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=787, location=787
[  102.279416][ T6699] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  102.284568][ T6699] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=1043, location=1043
[  102.288818][ T6699] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=787, location=787
[  102.293333][ T6699] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  102.297716][ T6699] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=1043, location=1043
[  102.307221][ T6699] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  102.342466][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.382392][ T6703] program syz.1.349 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.531856][ T6714] @: renamed from bond_slave_0 (while UP)
[  104.984617][  T791] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  105.072964][ T5981] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  105.155504][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.160021][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.164639][  T791] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  105.168255][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.174385][  T791] usb 2-1: config 0 descriptor??
[  105.223425][ T5981] usb 3-1: Using ep0 maxpacket: 8
[  105.230865][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  105.235445][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.239263][ T5981] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.243296][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  105.247122][ T5981] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  105.250943][ T5981] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  105.254660][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.260304][ T5981] usb 3-1: config 0 descriptor??
[  105.277316][ T5235] Bluetooth: hci3: urb ffff888109333000 submission failed (90)
[  105.479406][ T5981] usb 3-1: USB disconnect, device number 6
[  105.587579][  T791] hkems 0003:2006:0118.0003: ignoring exceeding usage max
[  105.591445][  T791] hkems 0003:2006:0118.0003: item fetching failed at offset 5/7
[  105.595684][  T791] hkems 0003:2006:0118.0003: parse failed
[  105.598089][  T791] hkems 0003:2006:0118.0003: probe with driver hkems failed with error -22
[  105.789755][ T5981] usb 2-1: USB disconnect, device number 6
[  106.294249][  T791] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  106.456929][  T791] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  106.460197][  T791] usb 3-1: config 0 has no interface number 0
[  106.462613][  T791] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.467812][  T791] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.471617][  T791] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.478800][  T791] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  106.482456][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.500043][  T791] usb 3-1: config 0 descriptor??
[  106.910043][  T791] hid (null): report_id 35660 is invalid
[  107.122408][  T791] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0004/input/input5
[  107.171672][  T791] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1
[  107.234721][  T791] usb 3-1: USB disconnect, device number 7
[  107.505781][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  107.513450][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.517229][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.521153][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.539439][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  107.617307][ T6788] loop1: detected capacity change from 0 to 4096
[  107.627821][ T6788] EXT4-fs: Ignoring removed mblk_io_submit option
[  107.663791][ T6788] EXT4-fs (loop1): Test dummy encryption mode enabled
[  107.683637][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.883486][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.048228][ T6785] chnl_net:caif_netlink_parms(): no params data found
[  108.224432][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.227816][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.231314][ T6785] bridge_slave_0: entered allmulticast mode
[  108.237929][ T6785] bridge_slave_0: entered promiscuous mode
[  108.242672][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.248722][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.251584][ T6785] bridge_slave_1: entered allmulticast mode
[  108.258134][ T6785] bridge_slave_1: entered promiscuous mode
[  108.302673][ T6785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.311428][ T6785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.348541][ T6785] team0: Port device team_slave_0 added
[  108.354258][ T6785] team0: Port device team_slave_1 added
[  108.387414][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.391558][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.401768][ T6785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.411576][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.415313][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.427359][ T6785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.477775][ T6785] hsr_slave_0: entered promiscuous mode
[  108.480188][ T6785] hsr_slave_1: entered promiscuous mode
[  108.482603][ T6785] debugfs: 'hsr0' already exists in 'hsr'
[  108.492415][ T6785] Cannot create hsr debugfs directory
[  108.499731][ T6813] loop1: detected capacity change from 0 to 32768
[  108.509479][ T6813] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.391 (6813)
[  108.536921][ T6813] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.541126][ T6813] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  108.545689][ T6813] BTRFS info (device loop1): disk space caching is enabled
[  108.548670][ T6813] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  108.627804][ T6813] BTRFS info (device loop1): rebuilding free space tree
[  108.652131][ T6813] BTRFS info (device loop1): disabling free space tree
[  108.656890][ T6813] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  108.662004][ T6813] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  108.856017][ T5950] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.857501][ T6785] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.870730][ T6785] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.890460][ T6785] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.947823][ T6785] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  109.315916][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.375833][ T6785] 8021q: adding VLAN 0 to HW filter on device team0
[  109.388175][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.391178][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.416760][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.419263][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.602975][ T5235] Bluetooth: hci3: command tx timeout
[  109.773465][ T5981] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  109.933030][ T5981] usb 2-1: Using ep0 maxpacket: 16
[  109.948230][ T5981] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  109.958485][ T5981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.967360][ T5981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.984265][ T5981] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  109.992091][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.000944][ T5981] usb 2-1: Product: syz
[  110.004750][ T5981] usb 2-1: Manufacturer: syz
[  110.008588][ T5981] usb 2-1: SerialNumber: syz
[  110.160120][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.271038][ T6785] veth0_vlan: entered promiscuous mode
[  110.289086][ T6785] veth1_vlan: entered promiscuous mode
[  110.377150][ T6785] veth0_macvtap: entered promiscuous mode
[  110.388620][ T6785] veth1_macvtap: entered promiscuous mode
[  110.418920][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.435063][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.443727][ T5981] usb 2-1: 0:2 : does not exist
[  110.456708][ T5980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.460645][ T5980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.469479][ T5980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.479924][ T5980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.719836][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.725364][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.759951][ T6301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.762336][ T6301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.826653][   T33] audit: type=1326 audit(1755335600.409:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c1b8ebe9 code=0x7ffc0000
[  110.836170][   T33] audit: type=1326 audit(1755335600.409:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c1b8ebe9 code=0x7ffc0000
[  110.855626][   T33] audit: type=1326 audit(1755335600.409:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.379" exe="/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fd0c1b8ebe9 code=0x7ffc0000
[  110.872465][   T33] audit: type=1326 audit(1755335600.409:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c1b8ebe9 code=0x7ffc0000
[  110.881113][ T5981] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  110.882601][   T33] audit: type=1326 audit(1755335600.409:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c1b8ebe9 code=0x7ffc0000
[  110.905582][ T5981] usb 2-1: USB disconnect, device number 7
[  110.925119][ T6716] udevd[6716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.286195][   T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1)
[  111.436254][ T6866] loop1: detected capacity change from 0 to 512
[  111.452319][ T6866] EXT4-fs warning (device loop1): ext4_multi_mount_protect:329: MMP interval 2680 higher than expected, please wait.
[  111.452319][ T6866] 
[  111.462199][ T6866] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount
[  111.462199][ T6866] 
[  111.501495][ T6868] netlink: 'syz.2.403': attribute type 2 has an invalid length.
[  111.621339][ T6876] loop1: detected capacity change from 0 to 512
[  111.658278][ T6876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.665270][ T6876] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  111.680818][   T33] audit: type=1800 audit(1755335601.259:20): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.407" name="file2" dev="loop1" ino=16 res=0 errno=0
[  111.683201][ T5235] Bluetooth: hci3: command tx timeout
[  111.691688][ T6881] syz.2.408 uses obsolete (PF_INET,SOCK_PACKET)
[  111.726070][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.018770][ T6895] loop2: detected capacity change from 0 to 1024
[  112.072209][ T6895] hfsplus: bad catalog entry type
[  112.199732][   T36] hfsplus: b-tree write err: -5, ino 4
[  112.311633][ T6906] loop2: detected capacity change from 0 to 16
[  112.427476][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'.
[  112.431355][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.503902][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.611453][ T6912] loop2: detected capacity change from 0 to 128
[  112.684930][ T6912] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.699216][ T6912] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.731662][ T5953] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.899840][ T6920] tmpfs: Bad value for 'mpol'
[  112.988697][ T6925] loop3: detected capacity change from 0 to 1024
[  113.048172][ T6925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.085620][   T33] audit: type=1326 audit(1755335602.669:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298718ebe9 code=0x7ffc0000
[  113.103450][   T33] audit: type=1326 audit(1755335602.679:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298718ebe9 code=0x7ffc0000
[  113.136851][   T33] audit: type=1326 audit(1755335602.679:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298718ebe9 code=0x7ffc0000
[  113.157315][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.172072][   T33] audit: type=1326 audit(1755335602.679:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298718ebe9 code=0x7ffc0000
[  113.268360][ T6940] loop1: detected capacity change from 0 to 1024
[  113.339627][ T3651] hfsplus: b-tree write err: -5, ino 4
[  113.434194][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.438'.
[  113.798042][ T6959] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.802664][ T6959] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  114.177428][ T5235] Bluetooth: hci3: command tx timeout
[  114.335958][ T6959] syz.1.437 (6959) used greatest stack depth: 19864 bytes left
[  114.681711][ T6975] loop3: detected capacity change from 0 to 1024
[  114.715147][   T40] hfsplus: b-tree write err: -5, ino 4
[  114.803778][ T6980] loop3: detected capacity change from 0 to 2048
[  114.819979][ T6980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.243763][ T5235] Bluetooth: hci3: command tx timeout
[  116.758292][ T7002] loop2: detected capacity change from 0 to 4096
[  116.883171][  T791] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  117.366493][  T791] usb 4-1: config 0 has an invalid interface number: 104 but max is 0
[  117.369184][  T791] usb 4-1: config 0 has no interface number 0
[  117.371260][  T791] usb 4-1: config 0 interface 104 has no altsetting 0
[  117.376044][  T791] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  117.379213][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.382161][  T791] usb 4-1: Product: syz
[  117.384056][  T791] usb 4-1: Manufacturer: syz
[  117.385995][  T791] usb 4-1: SerialNumber: syz
[  117.389514][  T791] usb 4-1: config 0 descriptor??
[  117.397121][  T791] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  117.638575][  T791] gspca_vc032x: reg_r err -71
[  117.640640][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.642943][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.648124][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.650537][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.659596][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.661730][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.665852][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.667941][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.670427][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.672541][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.674676][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.676779][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.678855][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.681030][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.683155][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.685291][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.687356][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.689349][  T791] gspca_vc032x: I2c Bus Busy Wait 00
[  117.691384][  T791] gspca_vc032x: Unknown sensor...
[  117.693475][  T791] vc032x 4-1:0.104: probe with driver vc032x failed with error -22
[  117.702630][  T791] usb 4-1: USB disconnect, device number 2
[  117.724691][ T7006] capability: warning: `syz.2.460' uses 32-bit capabilities (legacy support in use)
[  117.762410][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'.
[  119.697840][ T7040] loop3: detected capacity change from 0 to 16
[  119.702362][ T7040] erofs (device loop3): invalid sb_extslots 4208 (more than a fs block)
[  120.131928][ T7042] Bluetooth: hci0: invalid length 2, exp 1 for type 31
[  120.188480][ T7045] netlink: 'syz.3.475': attribute type 4 has an invalid length.
[  121.627325][ T7074] loop3: detected capacity change from 0 to 8
[  121.655693][ T7074] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  122.129892][ T7053] syz.2.479 (7053): drop_caches: 2
[  122.426269][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.495'.
[  122.682361][ T7105] netlink: 'syz.3.503': attribute type 1 has an invalid length.
[  123.143095][ T7116] o2cb: This node has not been configured.
[  123.146447][ T7116] o2cb: Cluster check failed. Fix errors before retrying.
[  123.149362][ T7116] (syz.3.505,7116,0):user_dlm_register:674 ERROR: status = -22
[  123.152392][ T7116] (syz.3.505,7116,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  123.248217][ T7118] program syz.1.506 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  123.461584][ T7127] loop1: detected capacity change from 0 to 128
[  123.469168][ T7127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  123.475160][ T7127] System zones: 1-3, 19-19, 35-36
[  123.479373][ T7127] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  123.485363][ T7127] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  123.527605][ T5950] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.728548][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  123.728563][   T33] audit: type=1326 audit(1755335613.309:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.1.514" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c3b38ebe9 code=0x0
[  124.117031][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'.
[  124.250999][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'.
[  124.297064][ T7164] loop3: detected capacity change from 0 to 2048
[  124.300393][ T7164] ext4: Bad value for 'init_itable'
[  124.725145][ T7176] netlink: 44 bytes leftover after parsing attributes in process `syz.2.528'.
[  124.728828][ T7176] netlink: 'syz.2.528': attribute type 6 has an invalid length.
[  124.732015][ T7176] netlink: 'syz.2.528': attribute type 5 has an invalid length.
[  124.752972][ T7176] netlink: 'syz.2.528': attribute type 4 has an invalid length.
[  125.223595][ T7188] loop3: detected capacity change from 0 to 32768
[  125.237256][ T7188] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.534 (7188)
[  125.255601][ T7188] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  125.259597][ T7188] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  125.265852][ T7188] BTRFS info (device loop3): using free-space-tree
[  125.344886][ T6019] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  125.361341][   T33] audit: type=1800 audit(1755335614.939:27): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.534" name="file1" dev="loop3" ino=260 res=0 errno=0
[  125.411094][ T7220] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  125.433573][ T6785] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  125.514671][ T6019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.521958][ T7222] fuse: root generation should be zero
[  125.526662][ T6019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.540200][ T6019] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.562898][ T6019] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  125.566463][ T6019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.609081][ T6019] usb 3-1: config 0 descriptor??
[  125.805405][ T7231] netlink: 140 bytes leftover after parsing attributes in process `syz.1.547'.
[  125.902517][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'.
[  126.025005][ T6019] hid-udraw 0003:20D6:CB17.0005: unbalanced collection at end of report description
[  126.029264][ T6019] hid-udraw 0003:20D6:CB17.0005: parse failed
[  126.031796][ T6019] hid-udraw 0003:20D6:CB17.0005: probe with driver hid-udraw failed with error -22
[  126.228965][ T6019] usb 3-1: USB disconnect, device number 8
[  126.306005][ T7254] loop3: detected capacity change from 0 to 1024
[  126.336312][ T7254] hfsplus: xattr search failed
[  126.357210][ T1095] hfsplus: b-tree write err: -5, ino 3
[  126.571136][ T7264] loop3: detected capacity change from 0 to 128
[  126.585205][ T7264] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  126.854275][ T7274] loop2: detected capacity change from 0 to 1024
[  126.881937][ T7274] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  126.890639][ T7274] EXT4-fs (loop2): group descriptors corrupted!
[  127.024996][ T7284] loop3: detected capacity change from 0 to 512
[  127.030063][ T7284] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  127.036683][ T7284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  127.036839][ T7285] loop2: detected capacity change from 0 to 64
[  127.041293][ T7284] EXT4-fs (loop3): orphan cleanup on readonly fs
[  127.045067][ T7284] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.573: bad orphan inode 267
[  127.049391][ T7284] EXT4-fs (loop3): Remounting filesystem read-only
[  127.067498][ T7284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  127.087743][ T7284] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.573: dx entry: limit 0 != root limit 125
[  127.104085][ T7284] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.573: Corrupt directory, running e2fsck is recommended
[  127.129824][ T7287] syz.2.572: attempt to access beyond end of device
[  127.129824][ T7287] loop2: rw=0, sector=1310720, nr_sectors = 2 limit=64
[  127.164969][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  127.208783][ T7289] loop3: detected capacity change from 0 to 128
[  127.278871][ T7291] loop2: detected capacity change from 0 to 8
[  127.355553][ T6016] hid-generic 0005:16C0:05DF.0006: item fetching failed at offset 0/1
[  127.361594][ T6016] hid-generic 0005:16C0:05DF.0006: probe with driver hid-generic failed with error -22
[  127.416503][ T7296] loop2: detected capacity change from 0 to 256
[  127.690323][ T7312] loop3: detected capacity change from 0 to 1764
[  127.995333][ T7316] loop2: detected capacity change from 0 to 32768
[  127.998645][ T7316] btrfs: Deprecated parameter 'usebackuproot'
[  128.001063][ T7316] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  128.015041][ T7316] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.586 (7316)
[  128.026365][ T7316] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.029912][ T7316] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  128.032469][ T7316] BTRFS info (device loop2): using free-space-tree
[  128.371888][ T7316] BTRFS info (device loop2): rebuilding free space tree
[  128.444877][   T33] audit: type=1800 audit(1755335618.019:28): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.586" name="file1" dev="loop2" ino=260 res=0 errno=0
[  128.757831][ T5953] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.940130][ T6019] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  128.980750][ T7314] syz.1.583 (7314): drop_caches: 2
[  129.092943][ T6019] usb 4-1: Using ep0 maxpacket: 16
[  129.125441][ T6019] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  129.129905][ T6019] usb 4-1: config 0 has no interface number 0
[  129.132264][ T6019] usb 4-1: config 0 interface 51 has no altsetting 0
[  129.151007][ T6019] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5
[  129.160668][ T6019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.165881][ T6019] usb 4-1: Product: syz
[  129.167732][ T6019] usb 4-1: Manufacturer: syz
[  129.169909][ T6019] usb 4-1: SerialNumber: syz
[  129.179304][ T6019] usb 4-1: config 0 descriptor??
[  129.192290][ T6019] usb 4-1: bad CDC descriptors
[  129.217781][ T7348] loop2: detected capacity change from 0 to 256
[  129.220856][ T7348] exfat: Deprecated parameter 'namecase'
[  129.223906][ T7348] exfat: Deprecated parameter 'utf8'
[  129.232711][ T7348] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  129.417325][  T791] usb 4-1: USB disconnect, device number 3
[  130.029908][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  130.772223][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.610'.
[  130.787248][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'.
[  130.912171][ T7394] loop2: detected capacity change from 0 to 65
[  130.920792][ T7394] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  131.077044][ T7403] netlink: 'syz.2.617': attribute type 12 has an invalid length.
[  131.080223][ T7403] netlink: 'syz.2.617': attribute type 29 has an invalid length.
[  131.086080][ T7403] netlink: 148 bytes leftover after parsing attributes in process `syz.2.617'.
[  131.089533][ T7403] netlink: 'syz.2.617': attribute type 1 has an invalid length.
[  131.277109][ T7414] loop1: detected capacity change from 0 to 512
[  131.282287][ T7414] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  131.296149][ T7414] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  131.299054][ T7417] loop3: detected capacity change from 0 to 1024
[  131.304954][ T7414] EXT4-fs (loop1): 1 truncate cleaned up
[  131.308856][ T7414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.350059][ T7417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.365321][ T7417] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.376175][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.444547][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.470944][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'.
[  131.483188][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'.
[  132.677009][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.679167][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.009160][ T7441] loop3: detected capacity change from 0 to 32768
[  133.022585][ T7441] XFS (loop3): sunit and swidth must be specified together
[  133.111125][ T7458] loop3: detected capacity change from 0 to 512
[  133.130712][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.168148][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.173597][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.640'.
[  133.440272][ T7472] loop2: detected capacity change from 0 to 1024
[  133.801962][   T53] hfsplus: b-tree write err: -5, ino 4
[  133.901831][ T7477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.647'.
[  134.845791][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'.
[  134.901316][ T7496] loop2: detected capacity change from 0 to 128
[  134.909507][ T7496] hpfs: Bad value for 'uid'
[  134.920789][ T7496] hpfs: Bad value for 'uid'
[  135.040662][ T7500] loop2: detected capacity change from 0 to 512
[  135.076649][ T7500] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.656: Invalid inode bitmap blk 4 in block_group 0
[  135.089197][ T7500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.108757][   T33] audit: type=1326 audit(1755335624.689:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.2.656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298718ebe9 code=0x7ffc0000
[  135.119488][   T33] audit: type=1326 audit(1755335624.699:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.2.656" exe="/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f298718ebe9 code=0x7ffc0000
[  135.269904][ T7507] loop3: detected capacity change from 0 to 4096
[  135.285796][ T7507] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  135.297728][ T7507] ntfs3(loop3): It is recommened to use chkdsk.
[  136.189908][ T7518] loop3: detected capacity change from 0 to 16
[  136.201152][ T7518] erofs (device loop3): mounted with root inode @ nid 36.
[  136.324268][ T7523] loop3: detected capacity change from 0 to 64
[  137.295079][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  137.455799][   T10] usb 2-1: Using ep0 maxpacket: 8
[  137.462204][   T10] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[  137.467614][   T10] usb 2-1: config 0 has an invalid interface number: 150 but max is 64
[  137.482488][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.486828][   T10] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 65
[  137.490482][   T10] usb 2-1: config 0 has no interface number 0
[  137.499930][   T10] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.505264][   T10] usb 2-1: config 0 interface 150 has no altsetting 0
[  137.507992][   T10] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  137.511605][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.520551][   T10] usb 2-1: config 0 descriptor??
[  137.762611][   T10] usb 2-1: USB disconnect, device number 8
[  137.926509][ T7537] loop3: detected capacity change from 0 to 40427
[  137.956273][ T7537] F2FS-fs (loop3): invalid crc value
[  138.028931][ T7537] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.038987][ T7537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  138.051044][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.301490][ T7543] loop2: detected capacity change from 0 to 40427
[  138.325230][ T7543] F2FS-fs (loop2): invalid crc value
[  138.457210][ T7543] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  138.468177][ T7543] F2FS-fs (loop2): Start checkpoint disabled!
[  138.499725][ T7543] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  138.551537][ T6301] kworker/u10:4: attempt to access beyond end of device
[  138.551537][ T6301] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  138.569254][ T7551] loop1: detected capacity change from 0 to 2048
[  138.574711][ T6301] CPU: 1 UID: 0 PID: 6301 Comm: kworker/u10:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  138.574734][ T6301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.574743][ T6301] Workqueue: writeback wb_workfn (flush-7:2)
[  138.574770][ T6301] Call Trace:
[  138.574791][ T6301]  <TASK>
[  138.574811][ T6301]  dump_stack_lvl+0x189/0x250
[  138.574835][ T6301]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.574857][ T6301]  ? __pfx_queue_work_on+0x10/0x10
[  138.574899][ T6301]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  138.574918][ T6301]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.574944][ T6301]  f2fs_handle_critical_error+0x37c/0x540
[  138.574970][ T6301]  f2fs_write_end_io+0x886/0xb60
[  138.574997][ T6301]  __submit_merged_bio+0x27a/0x6a0
[  138.575021][ T6301]  __submit_merged_write_cond+0x255/0x530
[  138.575045][ T6301]  f2fs_write_data_pages+0x261d/0x3000
[  138.575089][ T6301]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  138.575120][ T6301]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  138.575162][ T6301]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  138.575190][ T6301]  ? trace_f2fs_writepages+0x7f/0x200
[  138.575209][ T6301]  ? f2fs_write_node_pages+0x478/0x6e0
[  138.575231][ T6301]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  138.575260][ T6301]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  138.575281][ T6301]  do_writepages+0x32e/0x550
[  138.575305][ T6301]  ? reacquire_held_locks+0x127/0x1d0
[  138.575318][ T6301]  ? writeback_sb_inodes+0x384/0x1010
[  138.575342][ T6301]  __writeback_single_inode+0x145/0xff0
[  138.575360][ T6301]  ? do_raw_spin_unlock+0x4d/0x240
[  138.575380][ T6301]  writeback_sb_inodes+0x6c7/0x1010
[  138.575418][ T6301]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  138.575466][ T6301]  ? rcu_is_watching+0x15/0xb0
[  138.575490][ T6301]  wb_writeback+0x43b/0xaf0
[  138.575513][ T6301]  ? queue_io+0x3c1/0x590
[  138.575532][ T6301]  ? __pfx_wb_writeback+0x10/0x10
[  138.575555][ T6301]  ? _raw_spin_unlock_irq+0x23/0x50
[  138.575574][ T6301]  wb_workfn+0x409/0xef0
[  138.575599][ T6301]  ? __pfx_wb_workfn+0x10/0x10
[  138.575619][ T6301]  ? __lock_acquire+0xab9/0xd20
[  138.575647][ T6301]  ? process_scheduled_works+0x9ef/0x17b0
[  138.575665][ T6301]  ? _raw_spin_unlock_irq+0x23/0x50
[  138.575680][ T6301]  ? process_scheduled_works+0x9ef/0x17b0
[  138.575692][ T6301]  ? process_scheduled_works+0x9ef/0x17b0
[  138.575707][ T6301]  process_scheduled_works+0xae1/0x17b0
[  138.575743][ T6301]  ? __pfx_process_scheduled_works+0x10/0x10
[  138.575772][ T6301]  worker_thread+0x8a0/0xda0
[  138.575808][ T6301]  kthread+0x711/0x8a0
[  138.575828][ T6301]  ? __pfx_worker_thread+0x10/0x10
[  138.575841][ T6301]  ? __pfx_kthread+0x10/0x10
[  138.575864][ T6301]  ? _raw_spin_unlock_irq+0x23/0x50
[  138.575901][ T6301]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.575919][ T6301]  ? __pfx_kthread+0x10/0x10
[  138.575936][ T6301]  ret_from_fork+0x3fc/0x770
[  138.575953][ T6301]  ? __pfx_ret_from_fork+0x10/0x10
[  138.575972][ T6301]  ? __switch_to_asm+0x39/0x70
[  138.575990][ T6301]  ? __switch_to_asm+0x33/0x70
[  138.576005][ T6301]  ? __pfx_kthread+0x10/0x10
[  138.576022][ T6301]  ret_from_fork_asm+0x1a/0x30
[  138.576052][ T6301]  </TASK>
[  138.576058][ T6301] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  138.609062][ T7551] EXT4-fs: Ignoring removed bh option
[  138.749034][ T7551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.814190][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.928220][ T7555] loop1: detected capacity change from 0 to 1024
[  138.931642][ T7555] EXT4-fs: Ignoring removed orlov option
[  138.955823][ T7555] EXT4-fs (loop1): Test dummy encryption mode enabled
[  138.961607][ T7549] loop3: detected capacity change from 0 to 32768
[  138.968699][ T7555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.986288][ T7558] loop2: detected capacity change from 0 to 1024
[  138.998475][ T7549] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.056027][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.084662][ T7549] XFS (loop3): Ending clean mount
[  139.158061][ T7549] XFS (loop3): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x28 
[  139.162536][ T7549] XFS (loop3): Unmount and run xfs_repair
[  139.172141][ T7549] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  139.189323][ T7549] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  139.198772][ T7549] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  139.201622][ T7549] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  139.228064][ T7549] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  139.237734][ T7549] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  139.240572][ T7549] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  139.253536][ T7549] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  139.261072][ T7549] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  139.268871][ T7549] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x28 len 8 error 74
[  139.300238][ T7549] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  139.312004][ T7549] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  139.645050][ T6785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.034432][ T7591] loop2: detected capacity change from 0 to 4096
[  140.078743][ T7591] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  140.129644][ T7591] ntfs3(loop2): Failed to load $Extend (-22).
[  140.132484][ T7591] ntfs3(loop2): Failed to initialize $Extend.
[  140.270352][ T7597] loop1: detected capacity change from 0 to 512
[  140.349271][ T7597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.357260][ T7597] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.404799][ T7604] loop3: detected capacity change from 0 to 512
[  140.409195][ T7604] EXT4-fs (loop3): Test dummy encryption mode enabled
[  140.411687][ T7604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  140.448473][ T7604] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.693: corrupted xattr entries
[  140.459178][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'.
[  140.464906][ T7604] EXT4-fs (loop3): 1 orphan inode deleted
[  140.467669][ T7604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.479579][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.631951][ T7604] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  140.641629][   T33] audit: type=1800 audit(1755335630.219:31): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="file2" dev="loop3" ino=15 res=0 errno=0
[  140.704960][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.811065][ T7626] loop2: detected capacity change from 0 to 1024
[  140.888682][ T6301] hfsplus: b-tree write err: -5, ino 4
[  141.050312][ T7633] overlayfs: failed to resolve './file1': -2
[  141.108560][ T7633] loop3: detected capacity change from 0 to 512
[  141.119441][ T7633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  141.122682][ T7633] System zones: 1-12
[  141.125194][ T7633] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.703: corrupted in-inode xattr: e_value size too large
[  141.130919][ T7633] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.703: couldn't read orphan inode 15 (err -117)
[  141.137722][ T7633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.218275][ T7633] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.703: corrupted in-inode xattr: e_value size too large
[  141.620572][ T7637] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.703: corrupted in-inode xattr: e_value size too large
[  141.796608][ T7623] loop1: detected capacity change from 0 to 40427
[  141.809427][ T7623] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  141.814487][ T7623] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  141.981582][ T7643] loop2: detected capacity change from 0 to 512
[  142.008173][ T7623] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  142.037634][ T7623] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  142.040093][ T7623] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  142.040471][ T7643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.052314][ T7643] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.124820][ T7643] EXT4-fs error (device loop2): ext4_empty_dir:3081: inode #12: comm syz.2.704: invalid size
[  142.146971][ T7643] EXT4-fs (loop2): Remounting filesystem read-only
[  142.201287][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.214099][ T1095] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  142.217493][ T1095] Quota error (device loop2): write_blk: dquota write failed
[  142.220698][ T1095] Quota error (device loop2): free_dqentry: Can't write quota data block 5
[  142.844347][ T7653] loop1: detected capacity change from 0 to 256
[  142.866531][ T7653] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  142.884201][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.333121][ T5981] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  143.563604][ T5981] usb 3-1: Using ep0 maxpacket: 8
[  143.566944][ T7670] loop1: detected capacity change from 0 to 2048
[  143.647508][ T7670] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  143.658142][ T7670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.663191][ T5981] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  143.668758][ T5981] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  143.671893][ T5981] usb 3-1: Product: syz
[  143.675167][ T5981] usb 3-1: Manufacturer: syz
[  143.677178][ T5981] usb 3-1: SerialNumber: syz
[  143.685387][ T5981] usb 3-1: config 0 descriptor??
[  143.697391][ T5981] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  144.034378][ T7681] loop1: detected capacity change from 0 to 128
[  144.062577][ T7681] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[  144.075773][ T7681] FAT-fs (loop1): Filesystem has been set read-only
[  144.327845][ T5981] gspca_zc3xx: reg_w_i err -71
[  144.329880][ T5981] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  144.343783][ T5981] usb 3-1: USB disconnect, device number 9
[  144.423127][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  144.548414][ T7691] loop1: detected capacity change from 0 to 32768
[  144.565975][ T7691] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.725 (7691)
[  144.573954][   T10] usb 4-1: Using ep0 maxpacket: 16
[  144.580931][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.589258][   T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  144.594784][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  144.601623][ T7691] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.608326][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.611888][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  144.615379][ T7691] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  144.618783][ T7691] BTRFS info (device loop1): using free-space-tree
[  144.623169][   T10] usb 4-1: SerialNumber: syz
[  144.700785][ T7691] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  144.753535][ T5950] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.875543][   T10] usb 4-1: USB disconnect, device number 4
[  144.982118][ T7711] loop1: detected capacity change from 0 to 4096
[  144.991637][ T7711] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  145.014277][ T7711] ntfs3(loop1): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver).
[  145.014277][ T7711] Volume contains 64 bits run: vcn 0, lcn ffffe00000009000, len 13.
[  145.014277][ T7711] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case
[  145.033192][ T7711] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  145.046415][ T7711] ntfs3(loop1): Failed to load $Secure (-95).
[  145.054961][ T7711] ntfs3(loop1): Failed to initialize $Secure (-95).
[  145.247756][ T7713] loop2: detected capacity change from 0 to 32768
[  145.256086][ T7713] bcachefs: bch2_fs_parse_param() Error parsing option background_compression: option_value
[  145.382933][ T5981] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  145.544341][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.549173][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.552308][ T5981] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[  145.556650][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.561487][ T5981] usb 2-1: config 0 descriptor??
[  145.653819][ T7731] loop3: detected capacity change from 0 to 4096
[  145.659544][ T7731] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  145.763660][ T6016] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  145.949027][ T6016] usb 3-1: config 0 has an invalid interface number: 212 but max is 0
[  145.958320][ T6016] usb 3-1: config 0 has no interface number 0
[  145.960823][ T6016] usb 3-1: config 0 interface 212 has no altsetting 0
[  145.961124][ T7739] loop3: detected capacity change from 0 to 16
[  145.969176][ T7739] erofs (device loop3): mounted with root inode @ nid 36.
[  145.973610][ T6016] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  145.985229][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.992714][ T6016] usb 3-1: Product: syz
[  145.999765][ T6016] usb 3-1: Manufacturer: syz
[  146.001545][ T6016] usb 3-1: SerialNumber: syz
[  146.011691][ T5981] hid-led 0003:1D34:0004.0007: item fetching failed at offset 0/5
[  146.017338][ T6016] usb 3-1: config 0 descriptor??
[  146.024145][ T6016] ftdi_sio 3-1:0.212: FTDI USB Serial Device converter detected
[  146.028537][ T6016] usb 3-1: Detected FT4232HP
[  146.034302][ T5981] hid-led 0003:1D34:0004.0007: probe with driver hid-led failed with error -22
[  146.094670][ T7741] netlink: 'syz.3.741': attribute type 4 has an invalid length.
[  146.202454][ T6019] usb 2-1: USB disconnect, device number 9
[  146.281308][ T6016] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  146.285612][ T6016] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  146.479071][ T6016] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  146.488580][ T6016] usb 3-1: USB disconnect, device number 10
[  146.497146][ T6016] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  146.501576][ T6016] ftdi_sio 3-1:0.212: device disconnected
[  147.071727][ T7753] loop2: detected capacity change from 0 to 2048
[  147.129748][ T7753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.162675][ T7753] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  147.250563][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.369251][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'.
[  147.380860][ T7762] smc: net device bond0 applied user defined pnetid SYZ
[  148.096414][ T7777] random: crng reseeded on system resumption
[  148.163155][ T7779] netlink: 208 bytes leftover after parsing attributes in process `syz.3.755'.
[  148.233881][ T7781] geneve2: entered promiscuous mode
[  148.237276][ T7781] geneve2: entered allmulticast mode
[  148.245248][ T5980] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  148.248801][ T5980] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  148.252267][ T5980] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  148.273019][ T6019] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  148.280872][ T5980] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  148.436513][ T6019] usb 3-1: unable to get BOS descriptor or descriptor too short
[  148.446108][ T6019] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.450035][ T6019] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  148.462946][ T6019] usb 3-1: config 1 interface 1 has no altsetting 0
[  148.474663][ T6019] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.478177][ T6019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.481347][ T6019] usb 3-1: Product: syz
[  148.495037][ T6019] usb 3-1: Manufacturer: syz
[  148.496961][ T6019] usb 3-1: SerialNumber: syz
[  148.728796][ T6019] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  148.739732][ T6019] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  148.753010][ T6019] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  148.781462][ T6019] usb 3-1: USB disconnect, device number 11
[  148.843127][ T6716] udevd[6716]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.948212][ T7791] loop3: detected capacity change from 0 to 32768
[  148.956308][ T7791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.761 (7791)
[  148.965558][ T7791] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.968990][ T7791] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm
[  148.984041][ T7791] BTRFS info (device loop3 state S): using free-space-tree
[  149.019725][   T53] BTRFS warning (device loop3 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  149.035775][ T1095] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  149.055320][ T1095] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  149.074088][ T7791] BTRFS error (device loop3 state S): failed to load root free space
[  149.121832][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'.
[  149.141253][ T1095] BTRFS warning (device loop3 state S): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored
[  149.191562][ T6785] BTRFS info (device loop3 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.360571][ T7816] netlink: 'syz.1.767': attribute type 1 has an invalid length.
[  149.424298][ T7817] loop2: detected capacity change from 0 to 2048
[  149.447361][ T7817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.711851][ T7833] netlink: 112 bytes leftover after parsing attributes in process `syz.1.774'.
[  149.865007][ T6016] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  149.919444][ T7843] loop1: detected capacity change from 0 to 2048
[  149.943503][ T7843] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 98: 0x1f != 0x1e
[  149.951425][ T7843] UDF-fs: warning (device loop1): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  149.958093][ T7843] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[  150.023140][ T6016] usb 3-1: Using ep0 maxpacket: 16
[  150.027143][ T6016] usb 3-1: config 252 has an invalid interface number: 15 but max is 0
[  150.030845][ T6016] usb 3-1: config 252 has no interface number 0
[  150.042352][ T6016] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  150.049747][ T6016] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  150.053935][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.057169][ T6016] usb 3-1: Product: syz
[  150.058778][ T6016] usb 3-1: Manufacturer: syz
[  150.060475][ T6016] usb 3-1: SerialNumber: syz
[  150.094896][   T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  150.098297][ T6016] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  150.246470][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  150.255500][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.259539][   T10] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  150.264601][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.285305][   T10] usb 4-1: config 0 descriptor??
[  150.312383][   T12] usb 3-1: Failed to submit usb control message: -71
[  150.319824][   T12] usb 3-1: unable to send the bmi data to the device: -71
[  150.322651][   T12] usb 3-1: unable to get target info from device
[  150.324319][ T6019] usb 3-1: USB disconnect, device number 12
[  150.333737][   T12] usb 3-1: could not get target info (-71)
[  150.336435][   T12] usb 3-1: could not probe fw (-71)
[  150.499342][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  150.503144][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  150.514330][   T10] usb 4-1: USB disconnect, device number 5
[  151.562946][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  151.728808][   T24] usb 3-1: Using ep0 maxpacket: 16
[  151.737089][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.741109][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  151.779068][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  151.782557][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.790597][   T24] usb 3-1: Product: syz
[  151.792324][   T24] usb 3-1: Manufacturer: syz
[  151.794753][   T24] usb 3-1: SerialNumber: syz
[  152.020804][   T24] usb 3-1: 0:2 : does not exist
[  152.030111][   T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  152.076631][   T24] usb 3-1: USB disconnect, device number 13
[  152.147019][ T6716] udevd[6716]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.706183][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  153.924945][   T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  153.928082][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.937294][   T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  153.940990][   T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  153.946582][   T24] usb 4-1: Manufacturer: syz
[  153.951153][   T24] usb 4-1: config 0 descriptor??
[  154.053118][   T24] rc_core: IR keymap rc-hauppauge not found
[  154.055476][   T24] Registered IR keymap rc-empty
[  154.062426][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  154.068877][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6
[  154.218992][ T7965] loop1: detected capacity change from 0 to 32768
[  154.234792][ T7965] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.831 (7965)
[  154.253384][  T791] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  154.261097][ T7965] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  154.270758][ T7965] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  154.274894][ T7965] BTRFS info (device loop1): using free-space-tree
[  154.413474][  T791] usb 3-1: Using ep0 maxpacket: 32
[  154.424608][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.428868][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.432692][  T791] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  154.444557][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.453945][  T791] usb 3-1: config 0 descriptor??
[  154.477485][  T791] hub 3-1:0.0: USB hub found
[  154.523294][ T5950] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  154.595059][   T24] usb 4-1: USB disconnect, device number 6
[  154.681494][  T791] hub 3-1:0.0: 1 port detected
[  155.108520][  T791] usb 3-1: USB disconnect, device number 14
[  155.183853][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  155.342926][   T24] usb 2-1: Using ep0 maxpacket: 32
[  155.346784][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.350862][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.355981][   T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  155.359408][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.365974][   T24] usb 2-1: config 0 descriptor??
[  155.783901][   T24] ft260 0003:0403:6030.0008: unknown main item tag 0x7
[  155.942400][ T8003] loop2: detected capacity change from 0 to 4096
[  155.946139][ T8003] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  155.976988][ T8003] ntfs3(loop2): ino=1a, mi_enum_attr
[  155.977192][   T24] ft260 0003:0403:6030.0008: chip code: 6424 8183
[  155.981542][ T8003] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  155.985065][ T8003] ntfs3(loop2): ino=1a, mi_enum_attr
[  155.990174][ T8003] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  156.181189][   T24] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  156.382269][   T24] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup
[  156.386460][   T24] ft260 0003:0403:6030.0008: i2c bus error: 0x22
[  156.533013][  T791] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  156.587550][   T24] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71
[  156.611066][   T24] usb 2-1: USB disconnect, device number 10
[  156.686028][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.689459][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.694641][  T791] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  156.699740][  T791] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  156.708315][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.716595][  T791] usb 3-1: config 0 descriptor??
[  157.180230][  T791] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  157.638737][  T791] usb 3-1: USB disconnect, device number 15
[  158.021300][ T8030] loop3: detected capacity change from 0 to 2048
[  158.073674][ T8030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.351914][ T8033] pimreg3: entered allmulticast mode
[  158.568153][ T8037] wg1: entered promiscuous mode
[  158.577306][ T8037] wg1: entered allmulticast mode
[  158.739903][ T8042] loop3: detected capacity change from 0 to 512
[  158.745711][ T8042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  158.806469][ T8042] EXT4-fs (loop3): 1 truncate cleaned up
[  158.810053][ T8042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.826022][ T8042] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.855: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  158.834428][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  158.866667][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.997652][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.001768][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  159.009005][   T24] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  159.017666][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  159.020864][   T24] usb 3-1: SerialNumber: syz
[  159.259894][   T24] gspca_main: spca501-2.14.0 probing 0000:0000
[  159.269204][   T24] gspca_spca501: reg write: error -71
[  159.271465][   T24] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  159.277003][   T24] spca501 3-1:1.0: probe with driver spca501 failed with error -22
[  159.281364][   T24] usb 3-1: 0:2 : does not exist
[  159.288613][   T24] usb 3-1: unit 9 not found!
[  159.309868][   T24] usb 3-1: USB disconnect, device number 16
[  159.364705][ T6716] udevd[6716]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  159.843968][ T8066] syz.1.864 (8066): /proc/8065/oom_adj is deprecated, please use /proc/8065/oom_score_adj instead.
[  159.906335][ T8068] loop1: detected capacity change from 0 to 164
[  159.922019][ T8068] rock: directory entry would overflow storage
[  159.928345][ T8068] rock: sig=0x66, size=4, remaining=3
[  159.935673][ T8068] rock: directory entry would overflow storage
[  159.939867][ T8068] rock: sig=0x66, size=4, remaining=3
[  160.087306][ T8080] loop1: detected capacity change from 0 to 1024
[  160.089966][ T8080] hfsplus: Unknown parameter ''
[  160.228159][ T8083] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  160.462876][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  160.615351][   T10] usb 4-1: Using ep0 maxpacket: 8
[  160.632505][   T10] usb 4-1: config 251 has an invalid interface number: 243 but max is 0
[  160.637571][   T10] usb 4-1: config 251 has no interface number 0
[  160.645313][   T10] usb 4-1: config 251 interface 243 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[  160.651336][   T10] usb 4-1: config 251 interface 243 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  160.660333][   T10] usb 4-1: config 251 interface 243 has no altsetting 0
[  160.670481][   T10] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a
[  160.675101][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.678607][   T10] usb 4-1: Product: syz
[  160.680069][   T10] usb 4-1: Manufacturer: syz
[  160.681643][   T10] usb 4-1: SerialNumber: syz
[  160.695259][ T8085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  160.927681][   T10] esd_usb 4-1:251.243: sending version message failed
[  160.929945][   T10] esd_usb 4-1:251.243: probe with driver esd_usb failed with error -8
[  160.946054][   T10] usb 4-1: USB disconnect, device number 7
[  161.432740][ T8093] 9pnet: p9_errstr2errno: server reported unknown error 184467
[  161.435338][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  161.540406][   T33] audit: type=1326 audit(1755335651.119:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.880" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3b38ebe9 code=0x7ffc0000
[  161.551055][   T33] audit: type=1326 audit(1755335651.119:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.880" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7c3b38ebe9 code=0x7ffc0000
[  161.562893][   T33] audit: type=1326 audit(1755335651.119:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.880" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3b38ebe9 code=0x7ffc0000
[  161.570926][   T33] audit: type=1326 audit(1755335651.119:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.880" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c3b38ebe9 code=0x7ffc0000
[  161.578520][   T33] audit: type=1326 audit(1755335651.119:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.880" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3b38ebe9 code=0x7ffc0000
[  161.586640][   T33] audit: type=1326 audit(1755335651.119:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.880" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f7c3b38ebe9 code=0x7ffc0000
[  161.595104][   T33] audit: type=1326 audit(1755335651.119:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.880" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3b38ebe9 code=0x7ffc0000
[  161.624049][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.627636][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.630546][   T10] usb 3-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df
[  161.654777][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.668291][   T10] usb 3-1: config 0 descriptor??
[  161.677437][   T10] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected.
[  161.815824][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'.
[  161.888742][   T10] pwc: send_video_command error -71
[  161.890880][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  161.897831][   T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  161.904678][   T10] usb 3-1: USB disconnect, device number 17
[  162.075604][ T8121] tipc: Started in network mode
[  162.077844][ T8121] tipc: Node identity fafbeeae2535, cluster identity 4711
[  162.080947][ T8121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.087005][ T8121] syzkaller0: entered promiscuous mode
[  162.088935][ T8121] syzkaller0: entered allmulticast mode
[  162.115529][ T8121] tipc: Resetting bearer <eth:syzkaller0>
[  162.124632][ T8120] tipc: Resetting bearer <eth:syzkaller0>
[  162.139100][ T8120] tipc: Disabling bearer <eth:syzkaller0>
[  162.561150][ T8132] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  163.273031][ T5981] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  163.443029][ T5981] usb 2-1: Using ep0 maxpacket: 16
[  163.443326][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  163.450166][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.454980][ T5981] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  163.459719][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.466838][ T5981] usb 2-1: config 0 descriptor??
[  163.592880][   T10] usb 4-1: Using ep0 maxpacket: 32
[  163.596193][   T10] usb 4-1: config 5 has an invalid interface number: 190 but max is 2
[  163.598797][   T10] usb 4-1: config 5 has an invalid interface number: 49 but max is 2
[  163.601350][   T10] usb 4-1: config 5 has no interface number 0
[  163.604040][   T10] usb 4-1: config 5 has no interface number 2
[  163.606410][   T10] usb 4-1: config 5 interface 190 has no altsetting 0
[  163.609151][   T10] usb 4-1: config 5 interface 1 has no altsetting 0
[  163.611683][   T10] usb 4-1: config 5 interface 49 has no altsetting 0
[  163.618730][   T10] usb 4-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=f2.82
[  163.621667][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.624836][   T10] usb 4-1: Product: syz
[  163.626514][   T10] usb 4-1: Manufacturer: syz
[  163.628148][   T10] usb 4-1: SerialNumber: syz
[  163.913968][   T10] usb 4-1: USB disconnect, device number 8
[  163.919037][ T5981] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  164.307792][   T10] usb 2-1: USB disconnect, device number 11
[  164.946283][ T8166] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  164.980209][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  165.247451][ T8172] loop1: detected capacity change from 0 to 512
[  165.263492][ T8172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  165.294210][ T8172] EXT4-fs (loop1): 1 truncate cleaned up
[  165.301577][ T8172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.324203][ T8178] loop2: detected capacity change from 0 to 8
[  165.377207][ T8178] SQUASHFS error: xz decompression failed, data probably corrupt
[  165.383136][ T8178] SQUASHFS error: Failed to read block 0x108: -5
[  165.385611][ T8178] SQUASHFS error: Unable to read metadata cache entry [106]
[  165.400369][ T8178] SQUASHFS error: Unable to read inode 0x11f
[  165.416844][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.162274][ T8190] gre1: entered promiscuous mode
[  166.204124][ T8180] loop3: detected capacity change from 0 to 32768
[  166.473003][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  166.638375][ T8206] loop3: detected capacity change from 0 to 2048
[  166.643443][   T10] usb 3-1: Using ep0 maxpacket: 32
[  166.646666][ T8206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.660457][   T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  166.665300][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.674271][   T10] usb 3-1: config 0 descriptor??
[  166.687661][   T10] as10x_usb: device has been detected
[  166.691386][   T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  166.713327][   T10] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  166.741829][   T10] as10x_usb: error during firmware upload part1
[  166.745242][   T10] Registered device nBox DVB-T Dongle
[  166.852968][ T5852] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  166.893096][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  166.937565][   T10] usb 3-1: USB disconnect, device number 18
[  166.954735][   T10] Unregistered device nBox DVB-T Dongle
[  166.956342][   T10] as10x_usb: device has been disconnected
[  167.013148][ T5852] usb 2-1: Using ep0 maxpacket: 32
[  167.017648][ T5852] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  167.020788][ T5852] usb 2-1: config 0 has no interface number 0
[  167.026018][ T5852] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  167.029550][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.032633][ T5852] usb 2-1: Product: syz
[  167.034768][ T5852] usb 2-1: Manufacturer: syz
[  167.036623][ T5852] usb 2-1: SerialNumber: syz
[  167.041117][ T5852] usb 2-1: config 0 descriptor??
[  167.049342][ T5852] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  167.052929][   T24] usb 4-1: Using ep0 maxpacket: 16
[  167.054550][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.059206][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.062179][   T24] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  167.066094][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.071225][   T24] usb 4-1: config 0 descriptor??
[  167.608617][ T5852] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  167.621745][ T5852] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  167.690126][   T24] usb 4-1: string descriptor 0 read error: -71
[  167.703426][ T6016] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  167.720453][   T24] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  167.723972][   T24] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -32
[  167.733316][   T24] usb 4-1: USB disconnect, device number 9
[  167.810218][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  167.810856][ T5981] usb 2-1: USB disconnect, device number 12
[  167.827536][ T5981] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  167.836286][ T5981] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  167.841265][ T5981] quatech2 2-1:0.51: device disconnected
[  167.856182][ T6016] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  167.860477][ T6016] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  167.867392][ T6016] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  167.874705][ T6016] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.878674][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.881826][ T6016] usb 3-1: Product: syz
[  167.884796][ T6016] usb 3-1: Manufacturer: syz
[  167.886720][ T6016] usb 3-1: SerialNumber: syz
[  168.280522][ T8211] loop3: detected capacity change from 0 to 256
[  168.299000][ T6016] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  168.751684][ T8232] loop1: detected capacity change from 0 to 512
[  168.760926][ T8232] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.940: Invalid inode bitmap blk 4 in block_group 0
[  168.778618][ T8232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.798467][ T8232] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  168.835413][ T5950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.098976][ T6016] usb 3-1: 2:1: cannot get freq at ep 0x82
[  169.107348][ T8235] loop1: detected capacity change from 0 to 32768
[  169.181610][ T6016] usb 3-1: USB disconnect, device number 19
[  169.240926][ T6726] udevd[6726]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.486196][ T8243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.945'.
[  169.741322][   T33] audit: type=1804 audit(1755335659.319:39): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.949" name="/newroot/311/bus/file0" dev="overlay" ino=1633 res=1 errno=0
[  169.901656][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'.
[  169.921876][ T8270] IPVS: sync thread started: state = MASTER, mcast_ifn = ipvlan1, syncid = 4, id = 0
[  170.041936][ T8277] netlink: 60 bytes leftover after parsing attributes in process `syz.3.961'.
[  170.048267][ T8276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.961'.
[  170.123927][  T791] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  170.132560][ T8279] loop3: detected capacity change from 0 to 4096
[  170.148991][ T8274] loop2: detected capacity change from 0 to 32768
[  170.169322][ T8279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.179982][ T8274] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.219982][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.265758][ T8274] XFS (loop2): Ending clean mount
[  170.296118][ T8274] XFS (loop2): Quotacheck needed: Please wait.
[  170.302894][  T791] usb 2-1: Using ep0 maxpacket: 32
[  170.309703][  T791] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[  170.319607][  T791] usb 2-1: config 0 has no interface number 0
[  170.326264][  T791] usb 2-1: config 0 interface 3 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  170.330348][  T791] usb 2-1: config 0 interface 3 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85
[  170.363800][  T791] usb 2-1: config 0 interface 3 altsetting 7 has a duplicate endpoint with address 0x85, skipping
[  170.369535][  T791] usb 2-1: config 0 interface 3 has no altsetting 0
[  170.377502][  T791] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1101, bcdDevice=c4.5c
[  170.378193][ T8274] XFS (loop2): Quotacheck: Done.
[  170.381144][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.389585][  T791] usb 2-1: Product: syz
[  170.390971][  T791] usb 2-1: Manufacturer: syz
[  170.394207][  T791] usb 2-1: SerialNumber: syz
[  170.401461][  T791] usb 2-1: config 0 descriptor??
[  170.455114][ T5953] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.640169][   T24] usb 2-1: USB disconnect, device number 13
[  170.676143][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'.
[  170.693430][ T8299] chnl_net:caif_netlink_parms(): no params data found
[  171.428966][ T8333] 9pnet: Could not find request transport: f
[  171.452608][ T8336] loop3: detected capacity change from 0 to 256
[  171.625927][   T33] audit: type=1804 audit(1755335661.209:40): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.986" name="/newroot/239/file0" dev="tmpfs" ino=1268 res=1 errno=0
[  171.637996][ T8326] loop1: detected capacity change from 0 to 32768
[  171.672865][ T8326] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type clock overruns end of section
[  171.672865][ T8326] clean (size 2912):
[  171.672865][ T8326] flags:          0
[  171.672865][ T8326] journal_seq:    10
[  171.672865][ T8326] dev_usage: 
[  171.672865][ T8326] usage: type=key_version v=0
[  171.672865][ T8326] (unknown jset_entry_type 255)
[  171.672865][ T8326] usage: type=reserved v=0
[  171.672865][ T8326] usage: type=reserved v=0
[  171.672865][ T8326] usage: type=reserved v=0
[  171.672865][ T8326] data_usage: btree: 1/1 [0]=2816
[  171.672865][ T8326] data_usage: journal: 1/1 [0]=0
[  171.672865][ T8326] data_usage: user: 1/1 [0]=16
[  171.672865][ T8326] dev_usage: dev=0  
[  171.672865][ T8326]   free: buckets=83 sectors=0 fragmented=0
[  171.672865][ T8326]   sb: buckets=25 sectors=6152 fragmented=248
[  171.672865][ T8326]   journal: buckets=8 sectors=2048 fragmented=0
[  171.672865][ T8326]   btree: buckets=11 sectors=2816 fragmented=0
[  171.672865][ T8326]   user: buckets=1 sectors=16 fragmented=240
[  171.672865][ T8326]   cached: buckets=0 sectors=0 fragmented=0
[  171.672865][ T8326]   parity: buckets=0 sectors=0 fragmented=0
[  171.672865][ T8326]   stripe: buckets=0 sectors=0 fragmented=0
[  171.672865][ T8326]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  171.672865][ T8326]   need_discard: buckets=0 sectors=0 fragmented=0
[  171.672865][ T8326] 
Connection to localhost closed by remote host.
[  171.783093][ T8326] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  172.033016][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  172.402332][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.539671][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.596339][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.679169][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.805177][   T12] bridge_slave_1: left allmulticast mode
[  172.807196][   T12] bridge_slave_1: left promiscuous mode
[  172.810430][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.820686][   T12] bridge_slave_0: left allmulticast mode
[  172.822488][   T12] bridge_slave_0: left promiscuous mode
[  172.826679][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.221096][   T12] bond0 (unregistering): (slave 5@): Releasing backup interface
[  173.226978][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.231777][   T12] bond0 (unregistering): Released all slaves
[  173.337368][   T12] IPVS: stopping master sync thread 8270 ...
[  173.581216][   T12] hsr_slave_0: left promiscuous mode
[  173.584294][   T12] hsr_slave_1: left promiscuous mode
[  173.587120][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.590087][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.595721][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.598725][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.623802][   T12] veth1_macvtap: left promiscuous mode
[  173.626431][   T12] veth0_macvtap: left promiscuous mode
[  173.629792][   T12] veth1_vlan: left promiscuous mode
[  173.632090][   T12] veth0_vlan: left promiscuous mode
[  174.108769][   T12] team0 (unregistering): Port device team_slave_1 removed
[  174.151676][   T12] team0 (unregistering): Port device team_slave_0 removed
[  174.958958][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.047193][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.134861][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.200820][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.351988][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.357708][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  175.439219][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.444000][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  175.500897][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.504786][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  175.549208][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.552393][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  175.659672][   T12] bridge_slave_1: left allmulticast mode
[  175.661857][   T12] bridge_slave_1: left promiscuous mode
[  175.673803][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.681955][   T12] bridge_slave_0: left allmulticast mode
[  175.693241][   T12] bridge_slave_0: left promiscuous mode
[  175.695970][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.712540][   T12] bridge_slave_1: left allmulticast mode
[  175.715156][   T12] bridge_slave_1: left promiscuous mode
[  175.717578][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.725679][   T12] bridge_slave_0: left allmulticast mode
[  175.728020][   T12] bridge_slave_0: left promiscuous mode
[  175.730391][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.293901][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.300542][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.305753][   T12] bond0 (unregistering): Released all slaves
[  176.697281][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.701316][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.705317][   T12] bond0 (unregistering): Released all slaves
[  176.775835][   T12] tipc: Left network mode
[  177.273398][   T12] hsr_slave_0: left promiscuous mode
[  177.276790][   T12] hsr_slave_1: left promiscuous mode
[  177.279656][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.282590][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.291237][   T12] hsr_slave_0: left promiscuous mode
[  177.296092][   T12] hsr_slave_1: left promiscuous mode
[  177.298616][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.301477][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.307905][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.310687][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.343688][   T12] veth1_macvtap: left promiscuous mode
[  177.345526][   T12] veth0_macvtap: left promiscuous mode
[  177.347336][   T12] veth1_vlan: left promiscuous mode
[  177.349057][   T12] veth0_vlan: left promiscuous mode
[  177.354068][   T12] veth1_macvtap: left promiscuous mode
[  177.356163][   T12] veth0_macvtap: left promiscuous mode
[  177.358358][   T12] veth1_vlan: left promiscuous mode
[  177.360462][   T12] veth0_vlan: left promiscuous mode
[  177.879415][   T12] team0 (unregistering): Port device team_slave_1 removed
[  177.920335][   T12] team0 (unregistering): Port device team_slave_0 removed
[  178.333023][   T12] pimreg3 (unregistering): left allmulticast mode
[  178.736006][   T12] team0 (unregistering): Port device team_slave_1 removed
[  178.776680][   T12] team0 (unregistering): Port device team_slave_0 removed
[  179.630213][   T12] ------------[ cut here ]------------
[  179.631985][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  179.635272][   T12] Modules linked in:
[  179.636662][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  179.641824][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.645797][   T12] Workqueue: netns cleanup_net
[  179.647684][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  179.650044][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 58 30 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 f1 e1 f7 e8 f1 c6 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 c6 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  179.657924][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  179.660703][   T12] RAX: ffffffff8a21e49f RBX: ffff888111268000 RCX: ffff88801c2ed640
[  179.663756][   T12] RDX: 0000000000000000 RSI: ffffffff8dba6067 RDI: ffff88801c2ed640
[  179.666225][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  179.668836][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630aa0
[  179.671788][   T12] R13: 1ffff9200001ef40 R14: ffff888111269480 R15: dffffc0000000000
[  179.674634][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  179.677960][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.680377][   T12] CR2: 0000559b8d0cf950 CR3: 000000001fa90000 CR4: 00000000000006f0
[  179.683862][   T12] Call Trace:
[  179.685214][   T12]  <TASK>
[  179.686362][   T12]  xfrm_net_exit+0x2d/0x70
[  179.688118][   T12]  ops_undo_list+0x49a/0x990
[  179.689705][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  179.691224][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  179.693212][   T12]  cleanup_net+0x4c5/0x800
[  179.694966][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  179.696852][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.698920][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  179.700931][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  179.703122][   T12]  process_scheduled_works+0xae1/0x17b0
[  179.705359][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.707714][   T12]  worker_thread+0x8a0/0xda0
[  179.709525][   T12]  kthread+0x711/0x8a0
[  179.711124][   T12]  ? __pfx_worker_thread+0x10/0x10
[  179.713556][   T12]  ? __pfx_kthread+0x10/0x10
[  179.715368][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.717448][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.719407][   T12]  ? __pfx_kthread+0x10/0x10
[  179.721244][   T12]  ret_from_fork+0x3fc/0x770
[  179.723444][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  179.725593][   T12]  ? __switch_to_asm+0x39/0x70
[  179.727441][   T12]  ? __switch_to_asm+0x33/0x70
[  179.729118][   T12]  ? __pfx_kthread+0x10/0x10
[  179.730852][   T12]  ret_from_fork_asm+0x1a/0x30
[  179.732553][   T12]  </TASK>
[  179.733894][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  179.736396][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  179.740534][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.744083][   T12] Workqueue: netns cleanup_net
[  179.745785][   T12] Call Trace:
[  179.747092][   T12]  <TASK>
[  179.748309][   T12]  dump_stack_lvl+0x99/0x250
[  179.749931][   T12]  ? __asan_memcpy+0x40/0x70
[  179.751536][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.753633][   T12]  ? __pfx__printk+0x10/0x10
[  179.755216][   T12]  vpanic+0x281/0x750
[  179.756544][   T12]  ? __pfx__printk+0x10/0x10
[  179.757862][   T12]  ? __pfx_vpanic+0x10/0x10
[  179.759310][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  179.761397][   T12]  panic+0xb9/0xc0
[  179.762617][   T12]  ? __pfx_panic+0x10/0x10
[  179.764004][   T12]  __warn+0x31b/0x4b0
[  179.765402][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  179.767275][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  179.769214][   T12]  report_bug+0x2be/0x4f0
[  179.770735][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  179.772514][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  179.774493][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  179.776510][   T12]  handle_bug+0x84/0x160
[  179.778216][   T12]  exc_invalid_op+0x1a/0x50
[  179.779881][   T12]  asm_exc_invalid_op+0x1a/0x20
[  179.781826][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  179.783859][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 58 30 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 f1 e1 f7 e8 f1 c6 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 c6 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  179.791432][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  179.793394][   T12] RAX: ffffffff8a21e49f RBX: ffff888111268000 RCX: ffff88801c2ed640
[  179.796577][   T12] RDX: 0000000000000000 RSI: ffffffff8dba6067 RDI: ffff88801c2ed640
[  179.799735][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  179.802897][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630aa0
[  179.805873][   T12] R13: 1ffff9200001ef40 R14: ffff888111269480 R15: dffffc0000000000
[  179.808850][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  179.810707][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  179.812576][   T12]  xfrm_net_exit+0x2d/0x70
[  179.813977][   T12]  ops_undo_list+0x49a/0x990
[  179.815577][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  179.817032][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  179.818698][   T12]  cleanup_net+0x4c5/0x800
[  179.820318][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  179.822269][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.824040][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  179.825983][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  179.827853][   T12]  process_scheduled_works+0xae1/0x17b0
[  179.829694][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.831484][   T12]  worker_thread+0x8a0/0xda0
[  179.833072][   T12]  kthread+0x711/0x8a0
[  179.834454][   T12]  ? __pfx_worker_thread+0x10/0x10
[  179.836014][   T12]  ? __pfx_kthread+0x10/0x10
[  179.837595][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.839463][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.841036][   T12]  ? __pfx_kthread+0x10/0x10
[  179.842516][   T12]  ret_from_fork+0x3fc/0x770
[  179.844402][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  179.846356][   T12]  ? __switch_to_asm+0x39/0x70
[  179.848246][   T12]  ? __switch_to_asm+0x33/0x70
[  179.849971][   T12]  ? __pfx_kthread+0x10/0x10
[  179.851859][   T12]  ret_from_fork_asm+0x1a/0x30
[  179.853412][   T12]  </TASK>
[  179.855350][   T12] Kernel Offset: disabled
[  179.857092][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:14:29  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff84fcffea RBX=ffff888027221088 RCX=ffff8881079f1cc0 RDX=0000000000000000
RSI=0000000000000010 RDI=ffff888027221088 RBP=ffffc9000666fbf0 RSP=ffffc9000666f9c8
R8 =ffff8881079f1cc0 R9 =0000000000000002 R10=0000000000000003 R11=0000000000000000
R12=0000000000000020 R13=0000000000000010 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81bfabed RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd6004b4380 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd60060c93a CR3=000000002814e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff00000000 0000000000000000 XMM01=01010100ffffffff ffffffffffffffff
XMM02=6c5f5f0045544156 4952505f4342494c XMM03=0000000000000000 000000000042494c
XMM04=6362696c5f5f0045 5441564952505f43 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff888106880237 R9 =1ffff11020d10046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9930 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559b8d0cf950 CR3=000000001fa90000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000242 0000000000003731
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=0000000000000251 0000000000003731
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
