last executing test programs:

1m55.838984936s ago: executing program 3 (id=980):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="b9e00600000f32c401b9769a48000000b9490900000f32b9800000c00f3235004000000f30260f790048b800000000010000000f23c80f21f835040030000f23f80f20a00f79a0fbffffffb9800000c00f3235000400000f30400fd9f0", 0x5d}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m55.228503086s ago: executing program 3 (id=982):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000000)=0x5)

1m54.434406669s ago: executing program 3 (id=990):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m53.77158564s ago: executing program 3 (id=996):
unshare(0x28000600)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x800, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

1m53.502900814s ago: executing program 3 (id=999):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
close(r0)

1m52.955487863s ago: executing program 3 (id=1006):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)

1m52.660916918s ago: executing program 32 (id=1006):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)

27.843206215s ago: executing program 1 (id=1569):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000140)="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"/297, 0x3accf8d5)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000)
close(r1)

27.53724863s ago: executing program 1 (id=1570):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x24}}, 0xcc800)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0xb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_RESVSP(r0, 0x80106f05, &(0x7f00000000c0)={0x0, 0x4, 0x32, 0x100000000})

26.374591999s ago: executing program 1 (id=1575):
r0 = syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x4000000, &(0x7f0000000300)={[{@pquota}, {@discard}, {@nolargeio}, {@grpid}, {@bsdgroups}, {@bsdgroups}, {@inode64}, {@dax}]}, 0x1, 0x97ee, &(0x7f0000009640)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20)

24.50571008s ago: executing program 1 (id=1581):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f00000006c0)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000380)='./file0/../file0\x00')
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')

22.735464228s ago: executing program 1 (id=1594):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x8, 0x89, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90)

22.383561744s ago: executing program 1 (id=1601):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(r3, 0x0)
sendmmsg$unix(r1, &(0x7f0000007300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40}}], 0x1, 0x0)

22.02514338s ago: executing program 33 (id=1601):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(r3, 0x0)
sendmmsg$unix(r1, &(0x7f0000007300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40}}], 0x1, 0x0)

5.089120587s ago: executing program 2 (id=1696):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r1 = syz_open_pts(r0, 0x101302)
r2 = dup3(r1, r0, 0x0)
write$binfmt_script(r2, 0x0, 0x0)

4.191493342s ago: executing program 2 (id=1701):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x10}, {0xfff2, 0xffff}, {0xa, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xd1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

3.229185817s ago: executing program 5 (id=1705):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='7', 0x1}, {&(0x7f00000008c0)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="b9", 0x1}, {&(0x7f0000000340)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000000100)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000200)="87", 0x1}, {&(0x7f0000000440)='p', 0x1}, {&(0x7f0000000780)="a47e482cc8c83e01d63e76945a90216055be26a7abab44e8fe183c3315444f20e5a99a09dd98452f610482c5dbad20ecd171a60c0b464c332e4a0b0429c4918c57f041c2526be7a9586d2b68ec688fdb3e1fca503798ddfb0c48f9a640d8d5b72fcfe339400dbf42beb6799469e6a82b47ebddf6324de25ca2b67d252802", 0x1}, {&(0x7f0000000300)="04", 0xffffff35}], 0x9}}], 0x3, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x103, 0x4)

3.185579968s ago: executing program 2 (id=1706):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r3, 0x10, 0x180}, &(0x7f0000000100)=0xc)

3.08915328s ago: executing program 2 (id=1707):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000180), 0x0, 0xffa2})
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f00000012c0), &(0x7f0000002340)=""/4118, 0x1016})

2.817885894s ago: executing program 2 (id=1711):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x69f, &(0x7f0000001840)="$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")
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
rename(&(0x7f0000001800)='./bus\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.361123972s ago: executing program 2 (id=1717):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1})
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000ac0)=""/4096)

2.276360453s ago: executing program 5 (id=1718):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x40)
pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1)

2.234464814s ago: executing program 6 (id=1719):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

2.223357663s ago: executing program 0 (id=1720):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
listen(r0, 0x3)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62)

2.163217215s ago: executing program 4 (id=1721):
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"})

2.071544496s ago: executing program 5 (id=1722):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
shutdown(r0, 0x1)

2.004315307s ago: executing program 0 (id=1723):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.935138238s ago: executing program 5 (id=1724):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0xeeee8000, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0)

1.85385188s ago: executing program 0 (id=1725):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x5}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x1}}, 0x1000, 0x7ff, 0xffff18b6, 0x4, 0x330, 0x40, 0xdb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0xff}}, 0x1000, 0xfff9}, 0x90)

1.784785931s ago: executing program 4 (id=1726):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8)

1.711686732s ago: executing program 6 (id=1727):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000000c0)=0x7e6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000012c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xe, 0x4, 0x0, 0x35, 0x44, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x23, 0x1f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x9, 0x0}]}]}}, {0x4e23, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40)

1.611579734s ago: executing program 4 (id=1728):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x9362, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9360, 0x0)

1.493843656s ago: executing program 6 (id=1729):
r0 = gettid()
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.424827867s ago: executing program 4 (id=1730):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
r1 = fanotify_init(0x4, 0x1000)
fanotify_mark(r1, 0x141, 0x40001029, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100))

1.415549107s ago: executing program 5 (id=1731):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@flushpolicy={0x94, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb, "", [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3501, 0x2, 0x1, 0x4, 0x6, 0x1ff, 0xff}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0xe823}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef)

1.25328543s ago: executing program 4 (id=1732):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000)
ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x6)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000)

1.25198855s ago: executing program 0 (id=1733):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000)

1.115535332s ago: executing program 6 (id=1734):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000e00)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x25, &(0x7f0000000080)=0x24d, 0x4)

908.480305ms ago: executing program 5 (id=1735):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068)

773.894627ms ago: executing program 6 (id=1736):
writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000300)="0f90", 0x2}], 0x1)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68)

599.394701ms ago: executing program 6 (id=1737):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYBLOB="1244a64fc282a85ee36002ee72f9e3bfaf83f7225643f9015203932030a872b623", @ANYRES64, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbaTFBAhoEgEoSJ1gIWmbmnpihAoYuBPQIpSpwRcCm0GWkWULGwoC0sXBCNCSKCw5X/o3EhdytYhQ5CYGILufJeeY5dEBc6m+f2kd+/z+Xrve+dTlc/vDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2HkrviniJN1Mp5uJqOf77u6uLaX99oE+tbVxby5taVyrOvHx93L5xcnZ0SUCAADA8ZEU9X1E3G9uLqR9fTqr/5vFMWnN/90zvbio5w/W/du7a5P5W3NF/f/rLw9e2B9oOsnGSU+6vNLtnBlMpfEfTXHsPXvoEY3symffvSTZB1J/b/35nWZ2PWtf37nzTisLJ6rIFgB4HKeLPg+Kv4fSvj3KxAA4Nhqlwruo/5Pp0eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIWd9XiqiGsRMdd4GKe2d9eWhvVfbtyb28rbhdu3N8rnTE/RjIjllW7nTIVzGV/F1bz58WK327l2/UbVwcmIGPLWraP98yRP/5HHtCKib8+pF4ec54MjjHXgPANBfntGtddwKp3foQfX+vbUBi7423s9o7gBqgrq+eczLvkMBpOPvo0PCYp7799PrOL/jgAAeOI185ZWovebmwvpvtpMxN73/fX/q6U4+ur+vVu9Pb3XW6X6/8GHF+6WxyrX/+2K5vd/ML965dP56zduvr5yZfFy53LnkzfOtt9sn7t4/vzF+ey7kvnlqPvGBAAAgH+glbdy/V+fGVz/P1GK42/W/8v1/2fftr8oj5Wo/4d6uOg36kwAAACOo9Z+9Nwrf/xeG3JErdWKzxdXV6+1e9v912d720rTfUwTeSvX/8nMqLMCAAAAqrCzXutb/79UiuOI6/9P//DST+VzJhExFXE1Ijqnl652L1U3nbFWxc+bs4Fao54pAAAAozKVt/L6fzN7/r++/8hDPSJeOxXxZ/4b/jhi/Z+8+9WP5bHKz/+fq3SW46c+27seWT8b0ZgddUYAAAA8ySbzlhb7vzU3Fz76+cT7Lc//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//VDwyJg==")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96)
pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

583.316001ms ago: executing program 0 (id=1738):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2503, 0x4)

160.321597ms ago: executing program 4 (id=1739):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x80004, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0xc7, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3fb, 0x5, 0x9dc, 0x0, 0x8080b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4})

0s ago: executing program 0 (id=1740):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x40000)
bind$tipc(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

red disabled state
[  250.084442][ T7535] device bridge_slave_0 entered promiscuous mode
[  250.120891][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.131271][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.149509][ T7535] device bridge_slave_1 entered promiscuous mode
[  250.524114][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.550854][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.632881][ T7606] smc: net device bond0 applied user defined pnetid SYZ0
[  250.657231][ T7606] smc: net device bond0 erased user defined pnetid SYZ0
[  250.830558][ T7535] team0: Port device team_slave_0 added
[  250.861527][ T7535] team0: Port device team_slave_1 added
[  250.956442][ T4363] device hsr_slave_0 left promiscuous mode
[  250.992943][ T4363] device hsr_slave_1 left promiscuous mode
[  251.072405][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.096830][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.120519][ T7598] loop2: detected capacity change from 0 to 40427
[  251.137066][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.175651][ T7598] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  251.180463][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.202793][ T4363] device bridge_slave_1 left promiscuous mode
[  251.215110][ T7598] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  251.256859][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.261785][ T7598] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff
[  251.313249][ T7598] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  251.323805][ T4363] device bridge_slave_0 left promiscuous mode
[  251.357382][ T7598] F2FS-fs (loop2): invalid crc value
[  251.376658][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.402041][ T7598] F2FS-fs (loop2): Found nat_bits in checkpoint
[  251.534742][ T4363] device veth1_macvtap left promiscuous mode
[  251.570049][ T4363] device veth0_macvtap left promiscuous mode
[  251.584690][ T7598] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  251.600747][ T7598] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  251.601863][ T5581] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  251.621990][ T4363] device veth1_vlan left promiscuous mode
[  251.649489][ T4363] device veth0_vlan left promiscuous mode
[  251.705611][ T4274] Bluetooth: hci0: command 0x041b tx timeout
[  251.735228][ T7598] syz.2.1024: attempt to access beyond end of device
[  251.735228][ T7598] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  251.862609][ T5581] usb 5-1: config 0 has no interfaces?
[  251.872944][ T5581] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  251.919152][ T5581] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  251.944442][ T5581] usb 5-1: Product: syz
[  251.975590][ T5581] usb 5-1: Manufacturer: syz
[  251.997973][ T5581] usb 5-1: config 0 descriptor??
[  252.264696][ T4402] usb 5-1: USB disconnect, device number 14
[  252.848095][ T4363] bond1 (unregistering): Released all slaves
[  253.005537][ T6060] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  253.197440][ T6060] usb 5-1: config 0 has no interfaces?
[  253.204758][ T6060] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  253.224694][ T6060] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  253.254866][ T6060] usb 5-1: Product: syz
[  253.265541][ T6060] usb 5-1: Manufacturer: syz
[  253.283324][ T6060] usb 5-1: config 0 descriptor??
[  253.503553][ T7671] loop0: detected capacity change from 0 to 2048
[  253.515908][ T4402] usb 5-1: USB disconnect, device number 15
[  253.590998][ T7671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.785712][ T4274] Bluetooth: hci0: command 0x040f tx timeout
[  254.013852][ T7679] Bluetooth: MGMT ver 1.22
[  254.230594][   T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  254.758630][ T4363] team0 (unregistering): Port device team_slave_1 removed
[  254.867580][ T7698] TCP: TCP_TX_DELAY enabled
[  254.873524][ T4865] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  254.885133][ T4363] team0 (unregistering): Port device team_slave_0 removed
[  254.992065][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.082351][ T4865] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  255.095167][ T4865] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  255.112915][ T4865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  255.123414][ T4865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.142941][ T7693] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  255.256736][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.412804][ T4865] usb 2-1: USB disconnect, device number 11
[  255.537699][    C1] vcan0: j1939_tp_rxtimer: 0xffff888057d78800: rx timeout, send abort
[  255.867952][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.868194][ T4274] Bluetooth: hci0: command 0x0419 tx timeout
[  255.875173][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.045993][    C1] vcan0: j1939_tp_rxtimer: 0xffff888057d78800: abort rx timeout. Force session deactivation
[  256.452344][ T7727] loop2: detected capacity change from 0 to 128
[  257.245583][ T4865] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  257.437496][ T4865] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.450869][ T4865] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.461565][ T4865] usb 3-1: config 0 interface 0 has no altsetting 0
[  257.469443][ T4865] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  257.479048][ T4865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.489826][ T4363] bond0 (unregistering): Released all slaves
[  257.496585][ T4865] usb 3-1: config 0 descriptor??
[  257.720153][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.751722][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.784703][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.851209][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.892560][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.952474][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.124188][ T4865] usb 3-1: string descriptor 0 read error: -22
[  258.151835][ T7535] device hsr_slave_0 entered promiscuous mode
[  258.174867][ T7535] device hsr_slave_1 entered promiscuous mode
[  258.242855][ T7535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.255640][ T7535] Cannot create hsr debugfs directory
[  258.338138][ T4865] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000D/input/input24
[  258.458645][ T4865] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000D/input/input25
[  258.509477][ T4865] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000D/input/input26
[  258.551271][ T4865] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000D/input/input27
[  258.600747][ T4865] uclogic 0003:256C:006D.000D: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  258.706869][ T4865] usb 3-1: USB disconnect, device number 12
[  259.048080][ T7769] fido_id[7769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  259.136660][ T7771] device veth0 entered promiscuous mode
[  259.238521][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'.
[  259.325591][ T4557] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  259.565803][ T4557] usb 1-1: Using ep0 maxpacket: 16
[  259.573573][ T4557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.603192][ T4557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.632726][ T4557] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  259.652119][ T4557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.672873][ T4557] usb 1-1: config 0 descriptor??
[  259.870295][ T7777] loop1: detected capacity change from 0 to 32768
[  259.880305][ T7777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1092 (7777)
[  259.927893][ T7777] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.938629][ T7777] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  259.947930][ T7777] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  259.975100][ T7777] BTRFS info (device loop1): use lzo compression, level 0
[  260.001551][ T7535] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  260.002969][ T7777] BTRFS info (device loop1): using free space tree
[  260.035126][ T7535] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  260.063773][ T7535] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  260.077804][ T4865] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  260.129084][ T7535] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  260.259312][ T7777] BTRFS info (device loop1): enabling ssd optimizations
[  260.290134][ T4865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.335556][ T4865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.345427][ T4865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  260.421382][ T4865] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  260.449356][ T4267] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  260.456515][ T4865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.475127][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.504851][ T4865] usb 3-1: config 0 descriptor??
[  260.596720][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  260.627072][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  260.692017][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[  260.737606][ T4557] letsketch 0003:6161:4D15.000E: Device info: à°�
[  260.815212][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  260.825395][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  260.864793][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.872026][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.911079][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  260.937151][ T4865] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  260.946566][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  260.955181][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.962416][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.992431][ T4557] usb 1-1: Max retries (5) exceeded reading string descriptor 201
[  261.006285][ T4865] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  261.013242][ T4557] letsketch: probe of 0003:6161:4D15.000E failed with error -71
[  261.057398][ T4557] usb 1-1: USB disconnect, device number 15
[  261.079519][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  261.120493][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  261.157606][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  261.208639][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  261.291800][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  261.326853][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  261.358901][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  261.421061][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  261.450940][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  261.454310][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  261.456340][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  261.459602][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  261.467389][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  262.051142][ T7840] loop1: detected capacity change from 0 to 256
[  262.099811][ T7840] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  262.168269][ T7840] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  262.262136][ T7840] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  262.588316][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  262.604349][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  262.748565][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.162727][ T7866] loop2: detected capacity change from 0 to 256
[  263.176007][ T5581] usb 3-1: USB disconnect, device number 13
[  263.257072][ T7866] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  263.308629][ T7873] loop0: detected capacity change from 0 to 8
[  263.431854][ T7866] exFAT-fs (loop2): hint_cluster is invalid (17)
[  265.086117][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  265.117825][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  265.202092][ T7535] device veth0_vlan entered promiscuous mode
[  265.257557][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  265.269219][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  265.308283][ T7535] device veth1_vlan entered promiscuous mode
[  265.320971][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  265.321726][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  265.322389][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  265.404686][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  265.495374][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  265.497316][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  265.501504][ T7535] device veth0_macvtap entered promiscuous mode
[  265.505410][ T7535] device veth1_macvtap entered promiscuous mode
[  265.553736][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.685646][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.685668][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.685686][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.685697][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.685712][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.685724][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.685738][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.709328][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.709578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  265.710345][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  265.710911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  265.711457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  265.726604][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.726628][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.726640][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.726654][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.726665][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.726679][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.726690][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.726703][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.728093][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.728208][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  265.729066][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  265.752696][ T7535] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.752736][ T7535] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.752765][ T7535] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.752794][ T7535] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.247359][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.247447][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.255405][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  266.367017][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.367113][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.399538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  267.315713][ T7918] loop0: detected capacity change from 0 to 32768
[  267.394809][ T7918] XFS (loop0): Mounting V5 Filesystem
[  267.564969][ T7918] XFS (loop0): Ending clean mount
[  267.611265][ T7918] XFS (loop0): Quotacheck needed: Please wait.
[  267.809915][ T7918] XFS (loop0): Quotacheck: Done.
[  268.122651][ T7967] netlink: 'syz.2.1120': attribute type 4 has an invalid length.
[  268.186245][ T4274] Bluetooth: hci4: command 0x0406 tx timeout
[  268.378089][ T7968] netlink: 'syz.2.1120': attribute type 4 has an invalid length.
[  268.443827][ T4266] XFS (loop0): Unmounting Filesystem
[  268.783873][ T3638] udevd[3638]: worker [7253] terminated by signal 33 (Unknown signal 33)
[  268.813659][ T3638] udevd[3638]: worker [7253] failed while handling '/devices/virtual/block/loop4'
[  268.967957][ T7984] loop2: detected capacity change from 0 to 1024
[  268.993751][ T7946] loop1: detected capacity change from 0 to 40427
[  269.023650][ T7985] loop5: detected capacity change from 0 to 1024
[  269.051259][ T7946] F2FS-fs (loop1): invalid crc value
[  269.102647][ T7946] F2FS-fs (loop1): Found nat_bits in checkpoint
[  269.159153][ T7984] hfsplus: request for non-existent node 16777216 in B*Tree
[  269.216821][ T7984] hfsplus: request for non-existent node 16777216 in B*Tree
[  269.275643][ T7984] hfsplus: request for non-existent node 16777216 in B*Tree
[  269.295058][ T7984] hfsplus: request for non-existent node 16777216 in B*Tree
[  269.315919][ T7946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  269.443786][ T7994] loop0: detected capacity change from 0 to 128
[  269.458463][   T41] hfsplus: request for non-existent node 16777216 in B*Tree
[  269.492571][   T41] hfsplus: request for non-existent node 16777216 in B*Tree
[  269.500187][ T7946] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  269.618132][   T27] audit: type=1800 audit(1753780885.419:288): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1123" name="file1" dev="loop0" ino=1048633 res=0 errno=0
[  270.121391][   T27] audit: type=1326 audit(1753780885.919:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.0.1139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f383698e9a9 code=0x0
[  270.515613][ T4956] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  270.593926][ T8019] loop1: detected capacity change from 0 to 8192
[  270.628910][ T8019] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  270.642185][ T8019] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  270.652021][ T8019] REISERFS (device loop1): using ordered data mode
[  270.659217][ T8019] reiserfs: using flush barriers
[  270.668427][ T8019] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  270.686760][ T8019] REISERFS (device loop1): checking transaction log (loop1)
[  270.732931][ T4956] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  270.745932][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.758523][ T4956] usb 3-1: Product: syz
[  270.773227][ T4956] usb 3-1: Manufacturer: syz
[  270.778301][ T4956] usb 3-1: SerialNumber: syz
[  270.794754][ T4956] usb 3-1: config 0 descriptor??
[  270.839882][ T8019] REISERFS (device loop1): Using tea hash to sort names
[  270.857725][ T8019] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  271.102216][   T27] audit: type=1804 audit(1753780886.899:290): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1141" name="/newroot/232/file6/file1" dev="loop1" ino=4 res=1 errno=0
[  271.154242][ T8019] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[  271.186118][ T8019] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[  271.212003][ T4956] usb 3-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (88)
[  271.414157][ T4956] usb 3-1: Read permanent extended address ec:74:80:5a:bc:49:aa:22 from device
[  271.431102][ T4956] usb 3-1: atusb_probe: initialization failed, error = -524
[  271.457734][ T4956] atusb: probe of 3-1:0.0 failed with error -524
[  271.624399][ T4865] usb 3-1: USB disconnect, device number 14
[  272.088596][ T4560] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  272.129067][ T8037] loop0: detected capacity change from 0 to 4096
[  272.315733][ T4560] usb 2-1: Using ep0 maxpacket: 16
[  272.328391][ T4560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.380502][ T4560] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  272.421851][ T4560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.476648][ T4560] usb 2-1: config 0 descriptor??
[  272.903829][ T4560] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  273.032203][ T8041] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1148'.
[  273.095431][ T8039] loop5: detected capacity change from 0 to 131072
[  273.207940][ T8039] F2FS-fs (loop5): Found nat_bits in checkpoint
[  273.263513][ T8039] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  273.364017][ T4560] usb 2-1: USB disconnect, device number 12
[  274.424111][ T8073] xt_hashlimit: size too large, truncated to 1048576
[  275.420821][ T8071] loop2: detected capacity change from 0 to 40427
[  275.463090][ T8071] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  275.481759][ T8071] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  275.525280][ T8071] F2FS-fs (loop2): invalid crc value
[  275.587653][ T8071] F2FS-fs (loop2): Found nat_bits in checkpoint
[  275.760279][ T8071] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  275.779234][ T8071] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  276.802624][ T8105] loop2: detected capacity change from 0 to 1024
[  276.825718][ T8105] EXT4-fs: Ignoring removed nomblk_io_submit option
[  276.928182][ T8105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  277.188013][ T8113] loop5: detected capacity change from 0 to 1024
[  277.259993][   T27] audit: type=1804 audit(1753780893.059:291): pid=8113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1175" name=2F6E6577726F6F742F31382F66696C65302F8F2348A9C7618ADF28D07647F38EFF dev="loop5" ino=26 res=1 errno=0
[  278.579619][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  278.586054][ T4363] hfsplus: b-tree write err: -5, ino 4
[  278.844791][ T8129] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer.
[  279.161043][ T8142] loop1: detected capacity change from 0 to 512
[  279.191256][ T8142] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  279.209054][ T8142] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  279.259143][ T8142] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  279.317522][ T8142] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  279.355599][ T8142] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000]
[  279.363677][ T8142] EXT4-fs (loop1): failed to initialize system zone (-117)
[  279.371278][ T8142] EXT4-fs (loop1): mount failed
[  279.674019][ T8131] loop2: detected capacity change from 0 to 32768
[  279.788484][ T8131] JBD2: Ignoring recovery information on journal
[  279.808968][ T8160] loop1: detected capacity change from 0 to 512
[  279.892839][ T8160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  279.924870][ T8131] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  280.107961][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  280.331788][ T8170] loop1: detected capacity change from 0 to 2048
[  280.349268][ T4271] ocfs2: Unmounting device (7,2) on (node local)
[  280.393239][ T8170] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  280.442793][ T8170] NILFS (loop1): unrecognized mount option "ÿÿ"
[  280.556013][ T7252] udevd[7252]: incorrect nilfs2 checksum on /dev/loop1
[  280.582335][ T8173] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer.
[  280.711202][ T8178] ALSA: seq fatal error: cannot create timer (-16)
[  281.228073][ T8187] loop1: detected capacity change from 0 to 1024
[  281.351783][ T8187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  281.396171][ T8187] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.463349][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  281.482846][ T8198] device bridge1 entered promiscuous mode
[  281.496872][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  281.539664][ T8187] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.1200: lblock 3 mapped to illegal pblock 3 (length 13)
[  281.604858][ T8187] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  281.631501][ T8202] netlink: 'syz.2.1208': attribute type 10 has an invalid length.
[  281.635089][ T8187] EXT4-fs (loop1): This should not happen!! Data will be lost
[  281.635089][ T8187] 
[  281.669054][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.691073][ T8201] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: block 3: comm syz.1.1200: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.715007][ T8202] device bridge_slave_1 left promiscuous mode
[  281.734000][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.760616][ T8206] EXT4-fs error (device loop1): ext4_ext_remove_space:2930: inode #15: comm syz.1.1200: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  281.792482][ T8202] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  281.796518][ T8206] EXT4-fs error (device loop1) in ext4_setattr:5658: Corrupt filesystem
[  281.864340][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  282.107610][ T4560] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  282.190757][ T8223] loop1: detected capacity change from 0 to 128
[  282.238209][   T27] audit: type=1800 audit(1753780898.039:292): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1216" name="file1" dev="loop1" ino=1048635 res=0 errno=0
[  282.315570][ T4560] usb 1-1: Using ep0 maxpacket: 8
[  282.327425][ T4560] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  282.356632][ T4560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.382303][ T4560] usb 1-1: config 0 descriptor??
[  282.425714][ T4952] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  282.445682][ T5581] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  282.594967][ T4560] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  282.617595][ T4952] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  282.632991][ T4952] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  282.635599][ T5581] usb 5-1: Using ep0 maxpacket: 16
[  282.646501][ T4952] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  282.655261][ T5581] usb 5-1: config 0 interface 0 has no altsetting 0
[  282.667303][ T4952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.667893][ T5581] usb 5-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00
[  282.685224][ T5581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.701575][ T5581] usb 5-1: config 0 descriptor??
[  282.765598][ T4402] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  282.900958][ T4952] usb 3-1: GET_CAPABILITIES returned 0
[  282.914719][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.925796][ T4952] usbtmc 3-1:16.0: can't read capabilities
[  282.933509][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.952495][ T4402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.971422][ T4402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.982662][ T4402] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  282.997460][ T4402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.009805][ T4402] usb 2-1: config 0 descriptor??
[  283.151738][ T4952] usb 3-1: USB disconnect, device number 15
[  283.162327][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.176722][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x2
[  283.186166][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.193157][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.200393][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.207409][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.214716][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.226608][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.233834][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.241722][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.248870][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.256010][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.262969][ T5581] apple 0003:05AC:0250.0011: unknown main item tag 0x0
[  283.270135][ T5581] apple 0003:05AC:0250.0011: report_id 570490880 is invalid
[  283.277647][ T5581] apple 0003:05AC:0250.0011: item 0 4 1 8 parsing failed
[  283.285239][ T5581] apple 0003:05AC:0250.0011: parse failed
[  283.291138][ T5581] apple: probe of 0003:05AC:0250.0011 failed with error -22
[  283.391844][ T4956] usb 5-1: USB disconnect, device number 16
[  283.470780][ T8238] loop5: detected capacity change from 0 to 128
[  283.629807][ T4560] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  283.633449][ T8240] loop5: detected capacity change from 0 to 1024
[  283.641069][ T4402] usb 2-1: language id specifier not provided by device, defaulting to English
[  283.658204][ T4560] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  283.669000][ T4560] asix: probe of 1-1:0.0 failed with error -71
[  283.681952][ T4560] usb 1-1: USB disconnect, device number 16
[  283.989786][ T8246] overlayfs: failed to resolve './file0': -2
[  284.065862][ T4402] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0012/input/input28
[  284.108194][ T8248] netlink: 'syz.5.1227': attribute type 10 has an invalid length.
[  284.130827][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.151701][ T8248] device bridge_slave_1 left promiscuous mode
[  284.160852][ T4402] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0012/input/input29
[  284.174277][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.183787][ T4560] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  284.197101][ T4402] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0012/input/input30
[  284.213702][ T4402] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0012/input/input31
[  284.241899][ T4402] uclogic 0003:256C:006D.0012: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  284.273279][ T8248] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  284.341353][ T6060] usb 2-1: USB disconnect, device number 13
[  284.375742][ T4560] usb 3-1: Using ep0 maxpacket: 16
[  284.383026][ T4560] usb 3-1: config 0 has no interfaces?
[  284.395670][ T4956] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  284.429871][ T4560] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  284.444053][ T4560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.455890][ T4560] usb 3-1: config 0 descriptor??
[  284.553375][ T8254] fido_id[8254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  284.585660][ T4958] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  284.627326][ T4956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.647910][ T4956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.658748][ T4956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  284.683463][ T5581] usb 3-1: USB disconnect, device number 16
[  284.684223][ T4956] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  284.699707][ T4956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.723135][ T4956] usb 5-1: config 0 descriptor??
[  284.777636][ T4958] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.788063][ T4958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.802086][ T4958] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  284.811617][ T4958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  284.820761][ T4958] usb 1-1: SerialNumber: syz
[  285.025660][ T4952] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  285.039725][ T4958] usb 1-1: 0:2 : does not exist
[  285.107886][ T4958] usb 1-1: USB disconnect, device number 17
[  285.143055][ T4956] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd
[  285.154449][ T4956] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  285.178777][ T4956] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  285.225672][ T4952] usb 6-1: Using ep0 maxpacket: 32
[  285.253257][ T4952] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  285.282465][ T4952] usb 6-1: config 0 has no interface number 0
[  285.294782][ T8263] loop2: detected capacity change from 0 to 128
[  285.305562][ T4952] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  285.325000][ T4952] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  285.337772][ T4952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.351681][ T8259] udevd[8259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  285.372313][ T4952] usb 6-1: Product: syz
[  285.381544][   T27] audit: type=1800 audit(1753780901.179:293): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1232" name="file1" dev="loop2" ino=1048640 res=0 errno=0
[  285.388772][ T4952] usb 6-1: Manufacturer: syz
[  285.426904][ T4952] usb 6-1: SerialNumber: syz
[  285.454782][ T4952] usb 6-1: config 0 descriptor??
[  285.480970][ T4952] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  285.500267][ T4952] em28xx 6-1:0.132: Video interface 132 found:
[  285.513882][ T4958] usb 5-1: USB disconnect, device number 17
[  285.876537][ T4952] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  285.969577][ T8269] loop0: detected capacity change from 0 to 32768
[  285.986267][ T8269] XFS: attr2 mount option is deprecated.
[  285.995614][ T5581] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  286.023290][ T8269] XFS (loop0): Mounting V5 Filesystem
[  286.087990][ T8269] XFS (loop0): Ending clean mount
[  286.114382][ T8269] XFS (loop0): Quotacheck needed: Please wait.
[  286.177498][ T5581] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  286.204100][ T5581] usb 3-1: config 0 has no interface number 0
[  286.223168][ T5581] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  286.259245][ T5581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.295895][ T5581] usb 3-1: Product: syz
[  286.306382][ T5581] usb 3-1: Manufacturer: syz
[  286.319126][ T5581] usb 3-1: SerialNumber: syz
[  286.334980][ T5581] usb 3-1: config 0 descriptor??
[  286.418642][ T8269] XFS (loop0): Quotacheck: Done.
[  286.687974][ T4266] XFS (loop0): Unmounting Filesystem
[  286.769847][ T5581] usb 3-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3)
[  286.790602][ T8289] loop1: detected capacity change from 0 to 512
[  286.852443][ T8289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  286.862691][ T8289] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.898956][ T8289] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #12: comm syz.1.1241: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  286.972363][ T5581] usb 3-1: Read permanent extended address d0:27:37:e7:2a:25:f2:8c from device
[  287.021871][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  287.073591][ T4952] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  287.091784][ T4952] em28xx 6-1:0.132: board has no eeprom
[  287.187889][ T4952] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  287.197539][ T5581] usb 3-1: USB disconnect, device number 17
[  287.204054][ T4952] em28xx 6-1:0.132: analog set to bulk mode.
[  287.218673][ T4958] em28xx 6-1:0.132: Registering V4L2 extension
[  287.240925][ T4952] usb 6-1: USB disconnect, device number 2
[  287.284895][ T4952] em28xx 6-1:0.132: Disconnecting em28xx
[  287.306395][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  287.325498][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  287.335487][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  287.628988][ T4958] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  287.659594][ T4958] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  287.689632][ T4958] em28xx 6-1:0.132: No AC97 audio processor
[  287.716461][ T4958] usb 6-1: Decoder not found
[  287.721128][ T4958] em28xx 6-1:0.132: failed to create media graph
[  287.735414][ T4958] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  287.766803][ T4958] em28xx 6-1:0.132: Remote control support is not available for this card.
[  287.793854][ T4952] em28xx 6-1:0.132: Closing input extension
[  287.848662][ T4952] em28xx 6-1:0.132: Freeing device
[  287.984770][   T27] audit: type=1804 audit(1753780903.779:294): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1247" name="bus" dev="ramfs" ino=48564 res=1 errno=0
[  288.665661][ T4560] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  288.868262][ T4560] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  288.892177][ T4560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.929820][ T4560] usb 2-1: config 0 descriptor??
[  288.956122][ T4560] cp210x 2-1:0.0: cp210x converter detected
[  289.373551][ T4560] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  289.594243][ T4560] usb 2-1: cp210x converter now attached to ttyUSB0
[  289.760909][ T8344] loop2: detected capacity change from 0 to 4096
[  289.802842][ T4560] usb 2-1: USB disconnect, device number 14
[  289.828844][ T8344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  289.844322][ T4560] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  289.861113][ T4560] cp210x 2-1:0.0: device disconnected
[  289.923894][ T8344] fs-verity: sha256 using implementation "sha256-avx2"
[  290.874216][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  291.963223][ T8387] loop0: detected capacity change from 0 to 1024
[  291.991428][ T8387] EXT4-fs: Ignoring removed oldalloc option
[  292.005882][ T8387] EXT4-fs: Ignoring removed bh option
[  292.034046][ T8387] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  292.205653][ T4952] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  292.263802][ T8387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  292.417480][ T4952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.457340][ T4952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.493108][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  292.494333][ T4952] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  292.508776][ T4952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.534324][ T4952] usb 6-1: config 0 descriptor??
[  292.748896][ T8411] loop1: detected capacity change from 0 to 512
[  292.778468][ T8411] ext4: Unknown parameter 'audit'
[  292.916372][ T4402] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  292.974724][ T4952] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0
[  293.075640][ T4560] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  293.115685][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.127082][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.137077][ T4402] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  293.146868][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.156898][ T4402] usb 1-1: config 0 descriptor??
[  293.176452][ T4952] hid-led: probe of 0003:0FC5:B080.0014 failed with error -71
[  293.196913][ T4952] usb 6-1: USB disconnect, device number 3
[  293.277258][ T4560] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  293.286251][ T4560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.298788][ T4560] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  293.308335][ T4560] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  293.325796][ T4560] usb 2-1: Manufacturer: syz
[  293.333322][ T4560] usb 2-1: config 0 descriptor??
[  293.485701][ T4560] rc_core: IR keymap rc-hauppauge not found
[  293.493036][ T4560] Registered IR keymap rc-empty
[  293.507311][ T4560] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  293.527976][ T4560] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33
[  293.576390][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  293.774965][ T4402] usb 1-1: language id specifier not provided by device, defaulting to English
[  293.831856][ T4560] usb 2-1: USB disconnect, device number 15
[  293.955571][ T4952] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  294.155666][ T4952] usb 3-1: Using ep0 maxpacket: 16
[  294.167262][ T4952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.185561][ T4952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.194725][ T4402] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0015/input/input34
[  294.195329][ T4952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  294.255609][ T4952] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  294.264683][ T4952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.278186][ T4402] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0015/input/input35
[  294.296271][ T4952] usb 3-1: config 0 descriptor??
[  294.311406][ T4402] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0015/input/input36
[  294.345351][ T4402] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0015/input/input37
[  294.378612][ T4402] uclogic 0003:256C:006D.0015: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[  294.418907][ T4402] usb 1-1: USB disconnect, device number 18
[  294.598669][ T8426] fido_id[8426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  294.709405][ T4952] microsoft 0003:045E:07DA.0016: No inputs registered, leaving
[  294.724898][ T4952] microsoft 0003:045E:07DA.0016: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  294.742337][ T4952] microsoft 0003:045E:07DA.0016: no inputs found
[  294.745849][ T6060] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  294.752008][ T4952] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway
[  294.917668][ T4952] usb 3-1: USB disconnect, device number 18
[  294.947600][ T6060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.979717][ T6060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.007386][ T6060] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  295.058854][ T6060] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  295.079171][ T6060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.138837][ T6060] usb 2-1: config 0 descriptor??
[  295.386845][ T4865] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  295.577471][ T4865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.595557][ T4865] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  295.606165][ T4865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.609739][ T6060] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  295.617685][ T4865] usb 6-1: config 0 descriptor??
[  295.641876][ T6060] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  296.043737][ T4865] input: HID 28bd:0933 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.0018/input/input39
[  296.138579][ T4865] uclogic 0003:28BD:0933.0018: input,hidraw1: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0
[  296.356001][ T4958] usb 6-1: USB disconnect, device number 4
[  296.445083][ T8456] fido_id[8456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  296.805610][ T4865] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  297.009773][ T4865] usb 3-1: Using ep0 maxpacket: 8
[  297.018331][ T4865] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  297.028116][ T4865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.037974][ T4865] usb 3-1: Product: syz
[  297.042173][ T4865] usb 3-1: Manufacturer: syz
[  297.047073][ T4865] usb 3-1: SerialNumber: syz
[  297.053302][ T4865] usb 3-1: config 0 descriptor??
[  297.245584][ T4956] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  297.265746][ T4865] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  297.448011][ T4956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.459488][ T4956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.471119][ T4956] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  297.480902][ T4956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.492667][ T4956] usb 6-1: config 0 descriptor??
[  297.786937][ T4952] usb 2-1: USB disconnect, device number 16
[  298.113351][ T4956] usb 6-1: language id specifier not provided by device, defaulting to English
[  298.167808][ T8482] loop0: detected capacity change from 0 to 1024
[  298.249509][ T8482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  298.265727][ T8482] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.285830][ T4865] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  298.309633][ T4865] usb 3-1: USB disconnect, device number 19
[  298.403059][ T8482] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.1311: lblock 3 mapped to illegal pblock 3 (length 13)
[  298.420549][ T8482] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  298.436614][ T8482] EXT4-fs (loop0): This should not happen!! Data will be lost
[  298.436614][ T8482] 
[  298.452874][ T8486] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1311: lblock 3 mapped to illegal pblock 3 (length 1)
[  298.509108][ T8486] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1311: lblock 3 mapped to illegal pblock 3 (length 1)
[  298.525293][ T4956] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0019/input/input40
[  298.579480][ T8482] EXT4-fs error (device loop0): ext4_ext_remove_space:2930: inode #15: comm syz.0.1311: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  298.604259][ T8482] EXT4-fs error (device loop0) in ext4_setattr:5658: Corrupt filesystem
[  298.631416][ T4956] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0019/input/input41
[  298.672849][ T4956] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0019/input/input42
[  298.703502][ T4956] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0019/input/input43
[  298.753039][ T4956] uclogic 0003:256C:006D.0019: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[  298.797689][ T4956] usb 6-1: USB disconnect, device number 5
[  298.851061][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  299.004320][ T8492] device veth0 entered promiscuous mode
[  299.041021][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'.
[  299.153896][ T8490] fido_id[8490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  299.365570][ T5581] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  299.565070][ T5581] usb 1-1: config 0 has no interfaces?
[  299.589853][ T5581] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  299.642556][ T5581] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  299.670042][ T5581] usb 1-1: Product: syz
[  299.674588][ T5581] usb 1-1: Manufacturer: syz
[  299.699513][ T5581] usb 1-1: config 0 descriptor??
[  299.938785][ T6060] usb 1-1: USB disconnect, device number 19
[  300.635553][ T6060] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  300.864081][ T6060] usb 1-1: config 0 has no interfaces?
[  300.876279][ T6060] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  300.945658][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  300.953813][ T6060] usb 1-1: Product: syz
[  300.989311][ T6060] usb 1-1: Manufacturer: syz
[  301.016541][ T6060] usb 1-1: config 0 descriptor??
[  301.229621][ T6060] usb 1-1: USB disconnect, device number 20
[  301.362584][ T8535] device veth0 entered promiscuous mode
[  301.374727][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'.
[  301.875603][ T4956] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  302.068675][ T4956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  302.084472][ T4956] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  302.102956][ T4956] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  302.113256][ T4956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.335587][ T6060] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  302.361300][ T4956] usb 5-1: GET_CAPABILITIES returned 0
[  302.367625][ T4956] usbtmc 5-1:16.0: can't read capabilities
[  302.535728][ T6060] usb 2-1: Using ep0 maxpacket: 16
[  302.546417][ T6060] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  302.566650][ T6060] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  302.581743][ T6060] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  302.607604][ T6060] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  302.623679][ T6060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.633209][ T6060] usb 2-1: Product: syz
[  302.642254][ T5581] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  302.654339][ T4956] usb 5-1: USB disconnect, device number 18
[  302.663987][ T6060] usb 2-1: Manufacturer: syz
[  302.670903][ T6060] usb 2-1: SerialNumber: syz
[  302.782237][ T8557] netlink: 'syz.0.1341': attribute type 22 has an invalid length.
[  302.835707][ T5581] usb 6-1: Using ep0 maxpacket: 32
[  302.848265][ T5581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.867148][ T5581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.878042][ T5581] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  302.904780][ T5581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.945402][ T5581] usb 6-1: config 0 descriptor??
[  302.971057][ T5581] hub 6-1:0.0: USB hub found
[  303.123070][ T6060] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  303.135847][ T6060] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  303.163618][ T5581] hub 6-1:0.0: 1 port detected
[  303.291985][ T6060] usb 2-1: USB disconnect, device number 17
[  303.483078][ T5311] udevd[5311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.710052][ T8561] loop0: detected capacity change from 0 to 8192
[  303.807710][ T8561] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  303.822673][ T5581] hub 6-1:0.0: activate --> -90
[  303.826394][ T8561] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  303.838921][ T8561] REISERFS (device loop0): using ordered data mode
[  303.845896][ T8561] reiserfs: using flush barriers
[  303.857466][ T8561] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  303.877225][ T8561] REISERFS (device loop0): checking transaction log (loop0)
[  304.119815][ T8565] loop1: detected capacity change from 0 to 2048
[  304.181033][ T8565] NILFS (loop1): invalid segment: Inconsistency found
[  304.231259][ T5581] usb 6-1-port1: config error
[  304.240926][ T8565] NILFS (loop1): trying rollback from an earlier position
[  304.252108][ T5581] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[  304.252659][ T8561] REISERFS (device loop0): Using tea hash to sort names
[  304.263460][ T5581] usb 6-1-port1: connect-debounce failed
[  304.298724][ T8565] NILFS (loop1): recovery complete
[  304.308421][ T8561] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  304.318239][ T6060] usb 6-1: USB disconnect, device number 6
[  304.327319][ T8568] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  304.507798][ T8561] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 2) not found (pos 4)
[  304.593911][ T8561] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 3) not found (pos 4)
[  305.835666][ T6060] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  305.955572][ T4865] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  306.007290][ T8606] loop5: detected capacity change from 0 to 8192
[  306.027676][ T6060] usb 2-1: Using ep0 maxpacket: 16
[  306.034164][ T6060] usb 2-1: too many configurations: 123, using maximum allowed: 8
[  306.044414][ T8606] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  306.046807][ T6060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.069826][ T6060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.081381][ T6060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.093249][ T6060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.103720][ T8606] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  306.105238][ T6060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.131448][ T6060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.143025][ T6060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.154847][ T6060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.166405][ T6060] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  306.172570][ T8606] REISERFS (device loop5): using ordered data mode
[  306.175716][ T6060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  306.175743][ T6060] usb 2-1: SerialNumber: syz
[  306.177792][ T6060] usb 2-1: config 0 descriptor??
[  306.185510][ T4865] usb 3-1: Using ep0 maxpacket: 8
[  306.195145][ T6060] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44
[  306.217848][ T4865] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  306.232547][ T8606] reiserfs: using flush barriers
[  306.238856][ T4865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.263618][ T8606] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  306.271272][ T4865] pvrusb2: Hardware description: Terratec Grabster AV400
[  306.314342][ T4865] pvrusb2: **********
[  306.323908][ T4865] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  306.362724][ T8606] REISERFS (device loop5): checking transaction log (loop5)
[  306.363914][ T4865] pvrusb2: Important functionality might not be entirely working.
[  306.409046][ T4865] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  306.417979][ T3623] bcm5974 2-1:0.0: could not read from device
[  306.441040][ T4865] pvrusb2: **********
[  306.465051][ T3623] bcm5974 2-1:0.0: could not read from device
[  306.475722][ T6060] usb 2-1: USB disconnect, device number 18
[  306.488822][ T2310] pvrusb2: Invalid write control endpoint
[  306.674329][ T8606] REISERFS (device loop5): Using tea hash to sort names
[  306.688064][ T8606] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  306.690243][ T8602] pvrusb2: Invalid write control endpoint
[  306.749435][ T4402] usb 3-1: USB disconnect, device number 20
[  306.810881][ T2310] pvrusb2: Invalid write control endpoint
[  306.817724][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  306.828834][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  306.841145][ T8606] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 2) not found (pos 4)
[  306.861500][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  306.872740][ T2310] pvrusb2: Device being rendered inoperable
[  306.882167][ T8606] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 3) not found (pos 4)
[  306.901520][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  306.911582][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  306.937853][ T2310] pvrusb2: Attached sub-driver cx25840
[  306.958328][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  306.973251][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  308.135565][ T6060] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  308.335708][ T6060] usb 2-1: Using ep0 maxpacket: 32
[  308.343371][ T6060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.380848][ T6060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.419650][ T6060] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  308.449001][ T6060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.480644][ T6060] usb 2-1: config 0 descriptor??
[  308.730955][ T8669] IPv4: Oversized IP packet from 172.20.20.24
[  308.740903][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  308.747754][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  308.904127][ T6060] ft260 0003:0403:6030.001A: unbalanced collection at end of report description
[  308.927370][ T6060] ft260 0003:0403:6030.001A: failed to parse HID
[  308.944195][ T6060] ft260: probe of 0003:0403:6030.001A failed with error -22
[  308.985928][   T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  309.139601][ T5581] usb 2-1: USB disconnect, device number 19
[  309.389189][ T8687] loop2: detected capacity change from 0 to 1024
[  309.456028][ T8687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  309.501947][ T8695] loop5: detected capacity change from 0 to 1024
[  309.516612][ T8695] EXT4-fs: Ignoring removed oldalloc option
[  309.558850][ T8695] EXT4-fs: Ignoring removed bh option
[  309.621348][ T8695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  309.687510][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  309.716445][ T8695] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  309.892264][ T7535] EXT4-fs (loop5): unmounting filesystem.
[  310.175557][ T4402] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  310.367368][ T4402] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  310.395114][ T4402] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  310.432232][ T4402] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  310.443952][ T4402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.469951][ T8706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  310.542284][ T8703] loop1: detected capacity change from 0 to 32768
[  310.664531][ T8703] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  310.664531][ T8703] 
[  310.677465][ T8703] xtLookup: xtSearch returned -5
[  310.682585][ T8703] add_index: get/read_metapage failed!
[  310.688802][ T8703] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  310.688802][ T8703] 
[  310.705755][ T8703] xtLookup: xtSearch returned -5
[  310.715286][ T8703] free_index: error reading directory table
[  310.727989][ T4402] usb 3-1: USB disconnect, device number 21
[  310.734170][ T8703] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  310.734170][ T8703] 
[  310.791786][ T8703] xtLookup: xtSearch returned -5
[  310.805805][ T8703] free_index: error reading directory table
[  310.861335][ T8703] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  310.861335][ T8703] 
[  310.900635][ T8703] xtLookup: xtSearch returned -5
[  310.910342][ T8727] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  310.927429][ T8703] free_index: error reading directory table
[  310.933398][ T8703] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  310.933398][ T8703] 
[  310.949430][ T8727] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  310.961623][ T8703] xtLookup: xtSearch returned -5
[  310.965163][ T8725] loop0: detected capacity change from 0 to 4096
[  310.972731][ T8703] free_index: error reading directory table
[  311.007646][ T8703] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  311.007646][ T8703] 
[  311.035956][ T8703] xtLookup: xtSearch returned -5
[  311.043226][ T8703] free_index: error reading directory table
[  311.046827][ T8725] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  312.205650][ T4402] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  312.417456][ T4402] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  312.454848][ T4402] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.483057][ T4402] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  312.502539][ T4402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.521354][ T4402] usb 1-1: Product: syz
[  312.530146][ T4402] usb 1-1: Manufacturer: syz
[  312.540410][ T4402] usb 1-1: SerialNumber: syz
[  312.577758][ T8772] loop5: detected capacity change from 0 to 2048
[  312.661537][ T8772] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  312.767704][ T4402] usb 1-1: 0:2 : does not exist
[  312.807959][ T4402] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  312.840680][ T4402] usb 1-1: USB disconnect, device number 21
[  312.910597][ T8259] udevd[8259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.032733][ T7535] EXT4-fs (loop5): unmounting filesystem.
[  313.502372][ T8830] loop2: detected capacity change from 0 to 512
[  313.585585][ T4402] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  313.693943][ T8830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  313.817429][ T4402] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  313.844356][ T8834] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  313.869984][ T4402] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  313.885709][ T8834] overlayfs: failed to set xattr on upper
[  313.892972][ T8834] overlayfs: ...falling back to index=off,metacopy=off.
[  313.905583][ T4402] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  313.914689][ T4402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.925792][ T8834] overlayfs: ...falling back to xino=off.
[  313.973171][ T8836] device syzkaller1 entered promiscuous mode
[  313.994147][ T8827] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  314.083546][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  314.258925][ T4402] usb 6-1: USB disconnect, device number 7
[  314.315119][ T8840] loop2: detected capacity change from 0 to 256
[  314.336604][ T8840] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  314.394138][ T8840] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  314.449880][ T8840] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  314.777402][ T8831] loop1: detected capacity change from 0 to 40427
[  314.802210][ T8831] F2FS-fs (loop1): invalid crc value
[  314.830358][ T8831] F2FS-fs (loop1): Found nat_bits in checkpoint
[  314.935940][ T8831] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  314.953244][ T8855] use of bytesused == 0 is deprecated and will be removed in the future,
[  314.985610][ T8855] use the actual size instead.
[  315.005728][ T4402] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  315.110434][ T8849] f2fs_ckpt-7:1: attempt to access beyond end of device
[  315.110434][ T8849] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  315.205561][ T4402] usb 5-1: Using ep0 maxpacket: 16
[  315.216876][ T4402] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.260995][ T4402] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.295906][ T4402] usb 5-1: config 0 interface 0 has no altsetting 0
[  315.327816][ T4402] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  315.337601][ T4402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.374207][ T4402] usb 5-1: config 0 descriptor??
[  315.810092][ T4402] apple 0003:05AC:0247.001B: unexpected long global item
[  315.827196][ T4402] apple 0003:05AC:0247.001B: parse failed
[  315.846229][ T4402] apple: probe of 0003:05AC:0247.001B failed with error -22
[  316.041555][ T4402] usb 5-1: USB disconnect, device number 19
[  316.575629][ T6060] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  316.765539][ T6060] usb 1-1: Using ep0 maxpacket: 8
[  316.774905][ T6060] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  316.804703][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.833322][ T6060] usb 1-1: Product: syz
[  316.844413][ T6060] usb 1-1: Manufacturer: syz
[  316.855752][ T6060] usb 1-1: SerialNumber: syz
[  316.868869][ T6060] usb 1-1: config 0 descriptor??
[  317.094404][ T6060] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  317.203602][ T8887] loop1: detected capacity change from 0 to 32768
[  317.213943][ T8898] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  317.266171][ T8898] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  317.308338][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.315096][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.358700][ T8887] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  317.400800][ T8900] loop5: detected capacity change from 0 to 2048
[  317.536042][ T8900]  loop5: p1 < > p3
[  317.553284][ T8900] loop5: p3 size 134217728 extends beyond EOD, truncated
[  317.595409][ T3638]  loop5: p1 < > p3
[  317.607520][ T3638] loop5: p3 size 134217728 extends beyond EOD, truncated
[  317.660803][ T4267] (syz-executor,4267,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76
[  317.713593][ T4267] ocfs2: Unmounting device (7,1) on (node local)
[  318.078440][ T7252] udevd[7252]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  318.092161][ T7249] udevd[7249]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  318.104147][ T6060] gspca_sunplus: reg_w_riv err -71
[  318.113523][ T6060] sunplus: probe of 1-1:0.0 failed with error -71
[  318.152562][ T6060] usb 1-1: USB disconnect, device number 22
[  318.633505][ T8934] loop2: detected capacity change from 0 to 2048
[  318.673673][ T8934] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  318.705379][ T8935] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  318.795703][ T4560] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  318.995579][ T4560] usb 5-1: Using ep0 maxpacket: 16
[  319.002684][ T4560] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.016060][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1466'.
[  319.041636][ T4560] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.050462][ T8939] netem: change failed
[  319.065027][ T4560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.075231][ T4560] usb 5-1: Product: syz
[  319.084924][ T4560] usb 5-1: Manufacturer: syz
[  319.085622][ T4952] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  319.090186][ T4560] usb 5-1: SerialNumber: syz
[  319.302308][ T4952] usb 1-1: Using ep0 maxpacket: 8
[  319.309748][ T4952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  319.331950][ T4952] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  319.342840][ T4952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.382048][ T4952] usb 1-1: config 0 descriptor??
[  319.505543][ T4958] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  319.606467][ T4952] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  319.708069][ T4958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.745609][ T4958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.767015][ T4958] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  319.785661][ T4958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.811466][ T4958] usb 2-1: config 0 descriptor??
[  320.085966][ T5581] usb 1-1: USB disconnect, device number 23
[  320.156598][ T4560] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  320.163124][ T4560] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  320.204120][ T4560] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  320.254222][ T4958] hid-steam 0003:28DE:1142.001C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  320.324679][ T4958] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  320.371960][ T4560] cdc_ncm 5-1:1.0: setting tx_max = 88
[  320.384577][ T4560] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  320.406930][ T4560] usb 5-1: USB disconnect, device number 20
[  320.407265][ T4958] hid-steam 0003:28DE:1142.001C: Steam wireless receiver connected
[  320.413748][ T4560] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  320.849045][ T8981] loop5: detected capacity change from 0 to 4096
[  320.880280][ T8981] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  321.018105][ T4560] usb 2-1: USB disconnect, device number 20
[  321.066969][ T4560] hid-steam 0003:28DE:1142.001C: Steam wireless receiver disconnected
[  321.111548][ T8981] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  321.946397][ T9006] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input45
[  322.124276][ T8995] loop5: detected capacity change from 0 to 32768
[  322.227614][ T8995] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  322.260677][ T8995] XFS (loop5): Mounting V5 Filesystem
[  322.375084][ T9027] loop0: detected capacity change from 0 to 512
[  322.474025][ T9027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  322.488966][ T9027] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.512725][ T8995] XFS (loop5): Ending clean mount
[  322.554813][ T8995] XFS (loop5): Quotacheck needed: Please wait.
[  322.725407][ T8995] XFS (loop5): Quotacheck: Done.
[  322.806893][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  322.904789][ T7535] XFS (loop5): Unmounting Filesystem
[  322.933512][ T9038] loop1: detected capacity change from 0 to 4096
[  323.042740][ T9038] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  323.238262][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  324.581487][ T9056] loop2: detected capacity change from 0 to 131072
[  324.595128][ T9056] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  324.602658][ T9056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  324.612756][ T9056] F2FS-fs (loop2): invalid crc value
[  324.665898][ T9056] F2FS-fs (loop2): Found nat_bits in checkpoint
[  324.730758][ T9056] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  324.738039][ T9056] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  325.447143][ T9070] loop1: detected capacity change from 0 to 40427
[  325.470626][ T9070] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  325.492366][ T9070] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  325.537919][ T9070] F2FS-fs (loop1): invalid crc value
[  325.577653][ T9070] F2FS-fs (loop1): Found nat_bits in checkpoint
[  325.718268][ T9070] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  325.734407][ T9070] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  325.866056][ T4956] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  325.905025][ T4267] syz-executor: attempt to access beyond end of device
[  325.905025][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  326.077793][ T4956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  326.100864][ T4956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64
[  326.123326][ T9101] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  326.141129][ T4956] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  326.198899][ T4956] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  326.255524][ T4956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.508957][ T4956] usb 5-1: usb_control_msg returned -32
[  326.514650][ T4956] usbtmc 5-1:16.0: can't read capabilities
[  326.745704][ T4956] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  326.935730][ T4956] usb 6-1: Using ep0 maxpacket: 16
[  326.943244][ T4956] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  326.982412][ T4956] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.982452][ T4956] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  326.986695][ T4956] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  327.026556][ T4956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.060279][ T4956] usb 6-1: Product: syz
[  327.060301][ T4956] usb 6-1: Manufacturer: syz
[  327.060317][ T4956] usb 6-1: SerialNumber: syz
[  327.479477][ T4956] usb 6-1: 0:2 : does not exist
[  327.928519][ T4952] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  328.115556][ T4952] usb 2-1: Using ep0 maxpacket: 8
[  328.130662][ T4952] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  328.145546][ T4952] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  328.155381][ T4952] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  328.187342][ T4952] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  328.205506][ T4952] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  328.235674][ T4952] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  328.244882][ T4952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.293766][ T4956] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[  328.334612][ T4956] usb 6-1: USB disconnect, device number 8
[  328.415667][ T2166] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  328.480609][ T4952] usb 2-1: usb_control_msg returned -32
[  328.486630][ T4952] usbtmc 2-1:16.0: can't read capabilities
[  328.616604][ T2166] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  328.631869][ T2166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.635079][ T4402] usb 5-1: USB disconnect, device number 21
[  328.681076][ T2166] usb 1-1: config 0 descriptor??
[  328.725012][ T2166] gspca_main: spca508-2.14.0 probing 8086:0110
[  328.820386][ T9156] nbd2: detected capacity change from 0 to 8
[  328.880203][ T9160] block nbd2: shutting down sockets
[  328.898912][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.908430][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  328.929589][   T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.939431][   T93] Buffer I/O error on dev nbd2, logical block 0, async page read
[  328.950773][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.960263][   T52] Buffer I/O error on dev nbd2, logical block 0, async page read
[  328.972791][ T2166] gspca_spca508: reg_read err -32
[  328.980700][   T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.989867][   T93] Buffer I/O error on dev nbd2, logical block 0, async page read
[  328.998485][   T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.999177][ T9162] loop5: detected capacity change from 0 to 512
[  329.007651][   T93] Buffer I/O error on dev nbd2, logical block 0, async page read
[  329.022491][   T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.033763][ T9162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  329.035735][   T93] Buffer I/O error on dev nbd2, logical block 0, async page read
[  329.050497][   T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.059653][   T93] Buffer I/O error on dev nbd2, logical block 0, async page read
[  329.069983][ T2166] gspca_spca508: reg_read err -32
[  329.077103][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.086814][   T52] Buffer I/O error on dev nbd2, logical block 0, async page read
[  329.094838][ T4431] ldm_validate_partition_table(): Disk read failed.
[  329.113755][ T4431] Dev nbd2: unable to read RDB block 0
[  329.145822][ T4431]  nbd2: unable to read partition table
[  329.151755][ T4431] nbd2: partition table beyond EOD, truncated
[  329.171625][ T9162] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  329.185929][ T9162] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.312581][ T9162] EXT4-fs (loop5): shut down requested (0)
[  329.336559][ T2166] gspca_spca508: reg_read err -71
[  329.342628][ T2166] gspca_spca508: reg_read err -71
[  329.354695][ T2166] gspca_spca508: reg write: error -71
[  329.377125][ T2166] spca508: probe of 1-1:0.0 failed with error -71
[  329.403827][ T2166] usb 1-1: USB disconnect, device number 24
[  329.644820][ T7535] EXT4-fs (loop5): unmounting filesystem.
[  329.851703][ T9177] loop5: detected capacity change from 0 to 64
[  330.480419][ T9188] loop2: detected capacity change from 0 to 256
[  330.520338][ T9188] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  330.740977][ T4956] usb 2-1: USB disconnect, device number 21
[  330.878517][    C1] Unknown status report in ack skb
[  331.380627][ T9210] loop5: detected capacity change from 0 to 1024
[  331.414956][ T9210] EXT4-fs: inline encryption not supported
[  331.449147][ T9210] EXT4-fs: Ignoring removed i_version option
[  331.479853][ T9210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  331.486636][ T9214] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1568'.
[  331.653588][ T9210] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  331.860394][ T9210] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.1566: Allocating blocks 497-513 which overlap fs metadata
[  331.913496][ T9210] EXT4-fs (loop5): pa ffff8880747dc8c0: logic 256, phys. 385, len 8
[  331.922959][ T9210] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[  332.252752][ T7535] EXT4-fs (loop5): unmounting filesystem.
[  332.578863][ T9229] input: syz1 as /devices/virtual/input/input46
[  332.845639][ T9225] loop1: detected capacity change from 0 to 32768
[  332.931174][ T9225] JBD2: Ignoring recovery information on journal
[  333.016647][ T9225] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  333.117803][ T4267] ocfs2: Unmounting device (7,1) on (node local)
[  333.350086][ T9227] loop5: detected capacity change from 0 to 32768
[  333.449029][ T9227] XFS (loop5): Mounting V5 Filesystem
[  333.632905][ T9227] XFS (loop5): Ending clean mount
[  333.704754][ T9227] XFS (loop5): Quotacheck needed: Please wait.
[  333.815956][ T9227] XFS (loop5): Quotacheck: Done.
[  333.892111][   T27] audit: type=1800 audit(1753780949.689:295): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1571" name="bus" dev="loop5" ino=9290 res=0 errno=0
[  334.059057][ T7535] XFS (loop5): Unmounting Filesystem
[  334.189187][ T9249] overlayfs: failed to resolve './file0/../file0': -2
[  334.336125][ T9239] loop1: detected capacity change from 0 to 32768
[  334.481490][ T9239] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  334.501627][ T9239] XFS (loop1): Mounting V5 Filesystem
[  334.562452][ T9239] XFS (loop1): Ending clean mount
[  334.570123][ T9239] XFS (loop1): Quotacheck needed: Please wait.
[  334.585112][ T9233] loop0: detected capacity change from 0 to 32768
[  334.668096][ T9239] XFS (loop1): Quotacheck: Done.
[  334.715526][ T4402] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  334.757190][ T9233] XFS (loop0): Mounting V5 Filesystem
[  334.831897][ T9233] XFS (loop0): Ending clean mount
[  334.839055][ T9233] XFS (loop0): Quotacheck needed: Please wait.
[  334.895560][ T4402] usb 3-1: Using ep0 maxpacket: 32
[  334.903034][ T9233] XFS (loop0): Quotacheck: Done.
[  334.907249][ T4402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.985721][ T4267] XFS (loop1): Unmounting Filesystem
[  334.996173][ T4402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.055954][ T4402] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  335.097990][ T4402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.117693][ T4402] usb 3-1: config 0 descriptor??
[  335.151855][ T4402] hub 3-1:0.0: USB hub found
[  335.218890][ T4266] XFS (loop0): Unmounting Filesystem
[  335.356065][ T4402] hub 3-1:0.0: 1 port detected
[  335.982142][ T4560] hub 3-1:0.0: activate --> -90
[  336.079656][ T9294] loop5: detected capacity change from 0 to 4096
[  336.102526][ T9294] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  336.387115][ T4956] usb 3-1: USB disconnect, device number 22
[  336.625580][ T4560] usb 3-1-port1: config error
[  336.840458][ T4402] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  337.047426][ T4402] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.085536][ T4402] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  337.162221][ T8808] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.173686][ T4402] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  337.195511][ T4402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.203577][ T4402] usb 1-1: Product: syz
[  337.219880][ T4402] usb 1-1: Manufacturer: syz
[  337.224648][ T4402] usb 1-1: SerialNumber: syz
[  337.348721][ T8808] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.403438][ T8808] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.415622][ T2166] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  337.479816][ T4402] usb 1-1: 0:2 : does not exist
[  337.506895][ T8808] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.523145][ T4402] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  337.545502][ T4956] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  337.572929][ T4402] usb 1-1: USB disconnect, device number 25
[  337.648409][ T2166] usb 6-1: config 0 has an invalid interface number: 32 but max is 0
[  337.656689][ T2166] usb 6-1: config 0 has no interface number 0
[  337.670669][ T2166] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  337.695520][ T2166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.705397][ T2166] usb 6-1: config 0 descriptor??
[  337.724139][ T2166] cp210x 6-1:0.32: cp210x converter detected
[  337.765881][ T4956] usb 5-1: Using ep0 maxpacket: 16
[  337.773502][ T4956] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  337.811829][ T4956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.827825][ T8259] udevd[8259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  337.845594][ T4956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  337.884503][ T4956] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  337.915853][ T4956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.962183][ T4956] usb 5-1: Product: syz
[  337.968127][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  337.985924][ T4956] usb 5-1: Manufacturer: syz
[  337.990655][ T4956] usb 5-1: SerialNumber: syz
[  337.996224][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.006225][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.014573][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.022898][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  338.030421][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.143003][ T2166] cp210x 6-1:0.32: failed to get vendor val 0x000e size 3: -32
[  338.357462][ T2166] cp210x 6-1:0.32: GPIO initialisation failed: -19
[  338.378157][ T2166] usb 6-1: cp210x converter now attached to ttyUSB0
[  338.483800][ T4956] usb 5-1: 0:2 : does not exist
[  338.570720][ T2166] usb 6-1: USB disconnect, device number 9
[  338.612942][ T9328] loop2: detected capacity change from 0 to 32768
[  338.616917][ T2166] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  338.629078][ T9328] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1606 (9328)
[  338.653696][ T2166] cp210x 6-1:0.32: device disconnected
[  338.699995][ T9328] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  338.727066][ T9328] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  338.745685][ T9328] BTRFS info (device loop2): using free space tree
[  338.967505][ T9326] chnl_net:caif_netlink_parms(): no params data found
[  338.985862][ T9328] BTRFS info (device loop2): enabling ssd optimizations
[  339.122321][ T9333] loop0: detected capacity change from 0 to 40427
[  339.164407][ T9333] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  339.290658][ T9333] F2FS-fs (loop0): invalid crc value
[  339.308563][ T4956] usb 5-1: 1:0: failed to get current value for ch 0 (-22)
[  339.324957][ T4271] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  339.361346][ T9333] F2FS-fs (loop0): Found nat_bits in checkpoint
[  339.430125][ T4956] usb 5-1: USB disconnect, device number 22
[  339.481472][ T9360] loop5: detected capacity change from 0 to 2048
[  339.542926][ T9333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  339.556865][ T9360] EXT4-fs: Ignoring removed mblk_io_submit option
[  339.672309][ T9360] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  339.758277][ T8259] udevd[8259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  340.031621][ T4266] syz-executor: attempt to access beyond end of device
[  340.031621][ T4266] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  340.059325][ T7535] EXT4-fs (loop5): unmounting filesystem.
[  340.065950][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.073261][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.115791][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[  340.150606][ T9326] device bridge_slave_0 entered promiscuous mode
[  340.259299][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.277185][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.297381][ T9326] device bridge_slave_1 entered promiscuous mode
[  340.345758][ T8798] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  340.398037][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.541413][ T9376] loop5: detected capacity change from 0 to 64
[  340.645284][   T27] audit: type=1804 audit(1753780956.439:296): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1615" name="/newroot/103/file0/bus" dev="loop5" ino=21 res=1 errno=0
[  340.699754][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.713581][   T27] audit: type=1800 audit(1753780956.439:297): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1615" name="bus" dev="loop5" ino=21 res=0 errno=0
[  340.943176][ T9378] loop0: detected capacity change from 0 to 4096
[  340.997032][ T9378] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  341.129679][ T9326] team0: Port device team_slave_0 added
[  341.158202][ T9326] team0: Port device team_slave_1 added
[  341.265619][ T4560] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  341.350162][ T8808] device hsr_slave_0 left promiscuous mode
[  341.405611][ T8808] device hsr_slave_1 left promiscuous mode
[  341.465570][ T4560] usb 5-1: Using ep0 maxpacket: 32
[  341.468390][ T8808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.473087][ T4560] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  341.495753][ T8808] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.509031][ T8808] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.527297][ T8808] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.529833][ T4560] usb 5-1: config 0 has no interface number 0
[  341.543372][ T8808] device bridge_slave_1 left promiscuous mode
[  341.560238][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.564301][ T4560] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  341.580876][ T8808] device bridge_slave_0 left promiscuous mode
[  341.591277][ T4560] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  341.600866][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.609196][ T4560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.621783][ T4560] usb 5-1: Product: syz
[  341.632658][ T4560] usb 5-1: Manufacturer: syz
[  341.640536][ T4560] usb 5-1: SerialNumber: syz
[  341.670220][ T4560] usb 5-1: config 0 descriptor??
[  341.689103][ T4560] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  341.700627][ T8808] device veth1_macvtap left promiscuous mode
[  341.703558][ T4560] em28xx 5-1:0.132: Video interface 132 found:
[  341.715255][ T8808] device veth0_macvtap left promiscuous mode
[  341.735606][ T8808] device veth1_vlan left promiscuous mode
[  341.741500][ T8808] device veth0_vlan left promiscuous mode
[  342.097016][ T4560] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  342.112947][ T9386] loop5: detected capacity change from 0 to 40427
[  342.139283][ T9386] F2FS-fs (loop5): invalid crc value
[  342.185538][ T4272] Bluetooth: hci3: command 0x041b tx timeout
[  342.194840][ T9386] F2FS-fs (loop5): Found nat_bits in checkpoint
[  342.416567][ T9386] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  342.635894][ T6060] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  342.644436][ T7535] syz-executor: attempt to access beyond end of device
[  342.644436][ T7535] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  342.711374][ T4560] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  342.730622][ T4560] em28xx 5-1:0.132: failed to read eeprom (err=-5)
[  342.761425][ T4560] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  342.845541][ T4560] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  342.853456][ T4560] em28xx 5-1:0.132: analog set to bulk mode.
[  342.868601][ T6060] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  342.894562][ T6060] usb 1-1: config 0 has no interface number 0
[  342.901362][ T4557] em28xx 5-1:0.132: Registering V4L2 extension
[  342.924550][ T4560] usb 5-1: USB disconnect, device number 23
[  342.941592][ T6060] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  342.960153][ T4560] em28xx 5-1:0.132: Disconnecting em28xx
[  342.966386][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.974501][ T6060] usb 1-1: Product: syz
[  342.983365][ T6060] usb 1-1: Manufacturer: syz
[  342.990628][ T6060] usb 1-1: SerialNumber: syz
[  342.999856][  T130] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  343.019485][ T6060] usb 1-1: config 0 descriptor??
[  343.217768][  T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.245502][  T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.255342][  T130] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  343.295524][  T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.320261][  T130] usb 3-1: config 0 descriptor??
[  343.470293][ T6060] usb 1-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3)
[  343.534799][ T4557] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  343.542726][ T4557] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  343.551795][ T4557] em28xx 5-1:0.132: No AC97 audio processor
[  343.586764][ T4557] usb 5-1: Decoder not found
[  343.591468][ T4557] em28xx 5-1:0.132: failed to create media graph
[  343.598929][ T4557] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  343.609937][ T4557] em28xx 5-1:0.132: Remote control support is not available for this card.
[  343.651250][ T4560] em28xx 5-1:0.132: Closing input extension
[  343.672360][ T6060] usb 1-1: no permanent extended address found, random address set
[  343.692249][ T4560] em28xx 5-1:0.132: Freeing device
[  343.748319][  T130] hid-steam 0003:28DE:1142.001E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  343.765536][  T130] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  343.845513][  T130] hid-steam 0003:28DE:1142.001E: Steam wireless receiver connected
[  344.073604][ T8808] team0 (unregistering): Port device team_slave_1 removed
[  344.177553][ T8808] team0 (unregistering): Port device team_slave_0 removed
[  344.265570][ T4272] Bluetooth: hci3: command 0x040f tx timeout
[  344.289467][ T8808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.383985][ T8808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.560427][ T4560] usb 3-1: USB disconnect, device number 23
[  344.608180][ T4560] hid-steam 0003:28DE:1142.001E: Steam wireless receiver disconnected
[  345.273508][ T9435] loop0: detected capacity change from 0 to 4096
[  345.348499][ T9435] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix.
[  345.350611][ T9435] EXT4-fs (loop0): mount failed
[  346.038735][ T8808] bond0 (unregistering): Released all slaves
[  346.062285][ T9446] loop2: detected capacity change from 0 to 32768
[  346.114957][ T9446] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  346.199369][   T27] audit: type=1800 audit(1753780961.999:298): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1639" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  346.244724][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.253441][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.279624][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.297278][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.304262][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.355837][ T4272] Bluetooth: hci3: command 0x0419 tx timeout
[  346.391146][ T4271] ocfs2: Unmounting device (7,2) on (node local)
[  346.401986][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.463678][ T9425] tipc: Started in network mode
[  346.475007][ T9425] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  346.502654][ T6060] usb 1-1: USB disconnect, device number 26
[  346.517868][ T9425] tipc: Enabled bearer <udp:syz0>, priority 10
[  346.524465][ T9447] device batadv_slave_1 entered promiscuous mode
[  346.538330][ T9447] device batadv_slave_1 left promiscuous mode
[  346.731424][ T9326] device hsr_slave_0 entered promiscuous mode
[  346.866113][ T9326] device hsr_slave_1 entered promiscuous mode
[  346.901151][ T9326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.947439][ T9326] Cannot create hsr debugfs directory
[  347.635838][ T4557] tipc: Node number set to 4269801491
[  347.692815][ T9326] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  347.713554][ T9326] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  347.735050][ T9326] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  347.744028][   T27] audit: type=1326 audit(1753780963.549:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  347.781993][ T9326] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  347.816067][   T27] audit: type=1326 audit(1753780963.549:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  347.895599][   T27] audit: type=1326 audit(1753780963.549:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  347.949968][ T9458] loop0: detected capacity change from 0 to 40427
[  347.981751][   T27] audit: type=1326 audit(1753780963.549:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  347.981790][ T9458] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(0) root(83886083)
[  348.012742][   T27] audit: type=1326 audit(1753780963.549:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  348.075950][   T27] audit: type=1326 audit(1753780963.549:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  348.115073][ T9458] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  348.155195][ T9458] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  348.174310][   T27] audit: type=1326 audit(1753780963.549:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  348.211475][ T9458] F2FS-fs (loop0): invalid crc value
[  348.232307][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.240361][   T27] audit: type=1326 audit(1753780963.549:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  348.271456][ T9458] F2FS-fs (loop0): Found nat_bits in checkpoint
[  348.303616][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  348.320891][   T27] audit: type=1326 audit(1753780963.559:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.5.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2378e9a9 code=0x7ffc0000
[  348.354887][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  348.379272][ T9326] 8021q: adding VLAN 0 to HW filter on device team0
[  348.401727][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  348.406386][ T9458] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  348.418116][ T9458] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  348.435140][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  348.473132][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.480370][ T8798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.510398][ T9458] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x12a/0x910
[  348.538376][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  348.564944][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  348.580912][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  348.621895][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.629132][ T8798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.716030][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  348.736793][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  348.750365][ T4266] syz-executor: attempt to access beyond end of device
[  348.750365][ T4266] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  348.767266][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  348.831941][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  348.866503][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  348.917962][ T9326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  348.933806][ T9326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  348.948730][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  348.974176][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  349.009441][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  349.038327][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  349.057595][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  349.076638][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  349.121336][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  349.770315][ T9512] loop0: detected capacity change from 0 to 4096
[  349.812599][ T9512] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  349.892149][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  349.905162][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  349.938646][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.730967][ T9531] device batadv_slave_1 entered promiscuous mode
[  350.771946][ T9530] device batadv_slave_1 left promiscuous mode
[  351.094141][ T9544] loop2: detected capacity change from 0 to 512
[  351.129143][ T9544] FAT-fs (loop2): Unrecognized mount option "–þNÌ" or missing value
[  351.246212][ T9544] loop2: detected capacity change from 0 to 2048
[  351.278308][ T9544] FAT-fs (loop2): bogus sectors per cluster 3
[  351.307205][ T9544] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  351.344547][ T9544] FAT-fs (loop2): Can't find a valid FAT filesystem
[  351.504135][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  351.544609][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  351.623347][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  351.647283][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  351.661590][ T9326] device veth0_vlan entered promiscuous mode
[  351.668930][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  351.683854][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  351.704959][ T9326] device veth1_vlan entered promiscuous mode
[  351.774354][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  351.804893][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  351.844874][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  351.854602][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  351.873185][ T9326] device veth0_macvtap entered promiscuous mode
[  351.885992][ T9326] device veth1_macvtap entered promiscuous mode
[  351.907585][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  351.916882][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  351.929903][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.940876][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.952184][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.964547][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.975062][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.987309][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.998291][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.009339][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.023876][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.041632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  352.060767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  352.135807][   T22] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  352.146295][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.157391][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.169033][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.184308][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.200813][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.221486][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.245477][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.264612][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.287068][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  352.311562][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  352.325689][   T22] usb 1-1: Using ep0 maxpacket: 16
[  352.335897][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.347286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  352.365695][   T22] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  352.379069][ T9326] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.398239][ T9326] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.408360][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.432509][ T9326] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.444727][   T22] usb 1-1: config 0 descriptor??
[  352.461952][ T9326] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.484145][ T9554] loop2: detected capacity change from 0 to 32768
[  352.613335][ T9569] netlink: 'syz.5.1685': attribute type 18 has an invalid length.
[  352.714036][ T9554] XFS (loop2): Mounting V5 Filesystem
[  352.838657][ T9554] XFS (loop2): Ending clean mount
[  352.879249][   T22] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  352.884314][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.887161][   T22] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  352.902521][   T22] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  352.910813][   T22] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  352.918116][   T22] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  352.926653][   T22] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  352.928475][ T9554] XFS (loop2): Quotacheck needed: Please wait.
[  352.964203][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.032220][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  353.177204][ T8789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.204775][ T8789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.205991][ T9554] XFS (loop2): Quotacheck: Done.
[  353.238004][ T9581] loop5: detected capacity change from 0 to 1024
[  353.314970][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  353.337744][ T9581] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  353.368763][ T4557] usb 1-1: USB disconnect, device number 27
[  353.466875][ T4271] XFS (loop2): Unmounting Filesystem
[  353.643832][ T7535] EXT4-fs (loop5): unmounting filesystem.
[  354.053382][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  354.053399][   T27] audit: type=1326 audit(1753780969.849:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383698e9a9 code=0x7ffc0000
[  354.079726][ T4557] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  354.082016][    C1] vkms_vblank_simulate: vblank timer overrun
[  354.144317][   T27] audit: type=1326 audit(1753780969.849:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383698e9a9 code=0x7ffc0000
[  354.166610][    C1] vkms_vblank_simulate: vblank timer overrun
[  354.241177][   T27] audit: type=1326 audit(1753780969.849:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f383698e9a9 code=0x7ffc0000
[  354.263511][    C1] vkms_vblank_simulate: vblank timer overrun
[  354.331054][   T27] audit: type=1326 audit(1753780969.849:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383698e9a9 code=0x7ffc0000
[  354.332169][ T4557] usb 7-1: Using ep0 maxpacket: 16
[  354.384716][   T27] audit: type=1326 audit(1753780969.849:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383698e9a9 code=0x7ffc0000
[  354.446307][ T4557] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  354.465998][ T4557] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.474059][ T4557] usb 7-1: Product: syz
[  354.511871][ T4557] usb 7-1: Manufacturer: syz
[  354.526663][ T4557] usb 7-1: SerialNumber: syz
[  354.551501][ T4557] usb 7-1: config 0 descriptor??
[  354.559749][ T4557] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  354.861670][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1699'.
[  355.155635][   T22] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  355.319409][ T9613] loop0: detected capacity change from 0 to 1024
[  355.422946][ T9613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  355.438699][ T9613] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.453973][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'.
[  355.466517][ T9621] netlink: 'syz.2.1701': attribute type 6 has an invalid length.
[  355.502615][ T9613] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 13)
[  355.513673][ T9620] loop5: detected capacity change from 0 to 2048
[  355.528626][ T9613] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  355.541491][ T9613] EXT4-fs (loop0): This should not happen!! Data will be lost
[  355.541491][ T9613] 
[  355.557308][ T9622] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  355.576494][ T9622] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  355.592383][ T9622] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  355.634291][ T9620] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  355.652799][ T9612] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  355.677761][ T9621] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.687263][ T9621] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.695603][ T9621] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.703884][ T9621] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.720674][ T9622] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  355.742910][ T9623] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  355.773550][ T9612] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  355.779968][ T9621] device vxlan0 entered promiscuous mode
[  355.804310][ T4557] ssu100: probe of 7-1:0.0 failed with error -71
[  355.856054][ T4557] usb 7-1: USB disconnect, device number 2
[  355.878432][ T9622] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  355.910074][   T22] usb 5-1: unable to get BOS descriptor or descriptor too short
[  355.936123][   T22] usb 5-1: unable to read config index 0 descriptor/start: -71
[  355.953433][ T9612] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  355.973389][   T22] usb 5-1: can't read configurations, error -71
[  355.993072][ T9612] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.1700: lblock 3 mapped to illegal pblock 3 (length 1)
[  356.370776][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  356.482240][ T9634] loop6: detected capacity change from 0 to 128
[  356.534989][ T9634] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  356.581980][ T9634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.757796][ T9644] loop2: detected capacity change from 0 to 1024
[  357.469562][ T9667] binder: 9665:9667 ioctl 40046205 0 returned -22
[  357.505565][ T6061] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  357.701278][ T6061] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  357.751503][ T6061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.764875][ T6061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.789021][ T6061] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  357.823635][ T6061] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  357.837234][ T6061] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  357.845655][ T6061] usb 3-1: Manufacturer: syz
[  357.863434][ T6061] usb 3-1: config 0 descriptor??
[  358.298399][ T6061] appleir 0003:05AC:8243.0021: unknown main item tag 0x0
[  358.318271][ T6061] appleir 0003:05AC:8243.0021: No inputs registered, leaving
[  358.353425][ T6061] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  358.647718][ T9702] device pim6reg1 entered promiscuous mode
[  358.925662][ T4956] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  359.117748][ T4956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.155611][ T4956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  359.209538][ T4956] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  359.238737][ T4956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.273407][ T4956] usb 6-1: config 0 descriptor??
[  359.490211][ T9710] 
[  359.492613][ T9710] =====================================================
[  359.499572][ T9710] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  359.507073][ T9710] 6.1.147-syzkaller #0 Not tainted
[  359.512215][ T9710] -----------------------------------------------------
[  359.519178][ T9710] syz.5.1735/9710 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  359.526843][ T9710] ffff88801cb12018 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x18e/0x4b0
[  359.535609][ T9710] 
[  359.535609][ T9710] and this task is already holding:
[  359.543010][ T9710] ffff8880581c3028 (&client->buffer_lock){..-.}-{2:2}, at: evdev_pass_values+0xcb/0xab0
[  359.552832][ T9710] which would create a new lock dependency:
[  359.558752][ T9710]  (&client->buffer_lock){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2}
[  359.566916][ T9710] 
[  359.566916][ T9710] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  359.571935][ T9715] loop6: detected capacity change from 0 to 40427
[  359.576386][ T9710]  (&client->buffer_lock){..-.}-{2:2}
[  359.576412][ T9710] 
[  359.576412][ T9710] ... which became SOFTIRQ-irq-safe at:
[  359.576419][ T9710]   lock_acquire+0x1b4/0x490
[  359.576451][ T9710]   _raw_spin_lock+0x2a/0x40
[  359.605255][ T9710]   evdev_pass_values+0xcb/0xab0
[  359.610252][ T9710]   evdev_events+0x1d4/0x320
[  359.614878][ T9710]   input_pass_values+0x907/0x1300
[  359.620031][ T9710]   input_event_dispose+0x3e8/0x6c0
[  359.625260][ T9710]   input_event+0x88/0xb0
[  359.629610][ T9710]   hidinput_hid_event+0x12f5/0x1c80
[  359.634938][ T9710]   hid_process_event+0x4b7/0x620
[  359.639998][ T9710]   hid_report_raw_event+0xf66/0x1760
[  359.645407][ T9710]   hid_input_report+0x420/0x4e0
[  359.650390][ T9710]   hid_irq_in+0x435/0x690
[  359.654850][ T9710]   __usb_hcd_giveback_urb+0x35f/0x520
[  359.657250][ T9715] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  359.660340][ T9710]   dummy_timer+0x888/0x31b0
[  359.660365][ T9710]   __hrtimer_run_queues+0x554/0xd60
[  359.660387][ T9710]   hrtimer_run_softirq+0x183/0x2a0
[  359.683229][ T9710]   handle_softirqs+0x2a1/0x920
[  359.688132][ T9710]   __irq_exit_rcu+0x12f/0x220
[  359.692951][ T9710]   irq_exit_rcu+0x5/0x20
[  359.696625][ T9715] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  359.697308][ T9710]   sysvec_apic_timer_interrupt+0xa0/0xc0
[  359.711240][ T9710]   asm_sysvec_apic_timer_interrupt+0x16/0x20
[  359.717354][ T9710]   _raw_spin_unlock_irqrestore+0xa5/0x100
[  359.723216][ T9710]   debug_check_no_obj_freed+0x515/0x530
[  359.728902][ T9710]   slab_free_freelist_hook+0xd2/0x1a0
[  359.734405][ T9710]   kmem_cache_free+0xf7/0x290
[  359.739214][ T9710]   mas_destroy+0x24ac/0x2c60
[  359.743947][ T9710]   mas_store_prealloc+0x31a/0x400
[  359.749128][ T9710]   __vma_adjust+0xffb/0x1c50
[  359.751312][ T9715] F2FS-fs (loop6): invalid crc value
[  359.753825][ T9710]   vma_merge+0x8fe/0x9c0
[  359.753853][ T9710]   mprotect_fixup+0x418/0x7f0
[  359.768287][ T9710]   do_mprotect_pkey+0x754/0xa40
[  359.773271][ T9710]   __x64_sys_mprotect+0x7c/0x90
[  359.778264][ T9710]   do_syscall_64+0x4c/0xa0
[  359.782809][ T9710]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.788842][ T9710] 
[  359.788842][ T9710] to a SOFTIRQ-irq-unsafe lock:
[  359.795896][ T9710]  (tasklist_lock){.+.+}-{2:2}
[  359.795930][ T9710] 
[  359.795930][ T9710] ... which became SOFTIRQ-irq-unsafe at:
[  359.808621][ T9710] ...
[  359.808632][ T9710]   lock_acquire+0x1b4/0x490
[  359.815862][ T9710]   _raw_read_lock+0x32/0x40
[  359.820505][ T9710]   do_wait+0x2b6/0xb60
[  359.824707][ T9710]   kernel_wait+0xa8/0x160
[  359.829171][ T9710]   call_usermodehelper_exec_work+0xb5/0x220
[  359.835212][ T9710]   process_one_work+0x898/0x1160
[  359.840283][ T9710]   worker_thread+0xaa2/0x1250
[  359.845080][ T9710]   kthread+0x29d/0x330
[  359.849277][ T9710]   ret_from_fork+0x1f/0x30
[  359.853823][ T9710] 
[  359.853823][ T9710] other info that might help us debug this:
[  359.853823][ T9710] 
[  359.864084][ T9710] Chain exists of:
[  359.864084][ T9710]   &client->buffer_lock --> &new->fa_lock --> tasklist_lock
[  359.864084][ T9710] 
[  359.877260][ T9710]  Possible interrupt unsafe locking scenario:
[  359.877260][ T9710] 
[  359.885606][ T9710]        CPU0                    CPU1
[  359.891003][ T9710]        ----                    ----
[  359.896390][ T9710]   lock(tasklist_lock);
[  359.900693][ T9710]                                local_irq_disable();
[  359.907467][ T9710]                                lock(&client->buffer_lock);
[  359.914873][ T9710]                                lock(&new->fa_lock);
[  359.921681][ T9710]   <Interrupt>
[  359.925161][ T9710]     lock(&client->buffer_lock);
[  359.930214][ T9710] 
[  359.930214][ T9710]  *** DEADLOCK ***
[  359.930214][ T9710] 
[  359.938377][ T9710] 7 locks held by syz.5.1735/9710:
[  359.943507][ T9710]  #0: ffff888146bf4110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x177/0x470
[  359.952711][ T9710]  #1: ffff88801cb20230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0xa7/0x310
[  359.962867][ T9710]  #2: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xb8/0x310
[  359.972588][ T9710]  #3: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x1300
[  359.982305][ T9710]  #4: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x75/0x320
[  359.991503][ T9710]  #5: ffff8880581c3028 (&client->buffer_lock){..-.}-{2:2}, at: evdev_pass_values+0xcb/0xab0
[  360.001742][ T9710]  #6: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x4f/0x4b0
[  360.007183][ T9715] F2FS-fs (loop6): Found nat_bits in checkpoint
[  360.010835][ T9710] 
[  360.010835][ T9710] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  360.010860][ T9710] -> (&client->buffer_lock){..-.}-{2:2} {
[  360.010900][ T9710]    IN-SOFTIRQ-W at:
[  360.010910][ T9710]                     lock_acquire+0x1b4/0x490
[  360.010940][ T9710]                     _raw_spin_lock+0x2a/0x40
[  360.010966][ T9710]                     evdev_pass_values+0xcb/0xab0
[  360.010996][ T9710]                     evdev_events+0x1d4/0x320
[  360.011024][ T9710]                     input_pass_values+0x907/0x1300
[  360.011045][ T9710]                     input_event_dispose+0x3e8/0x6c0
[  360.011065][ T9710]                     input_event+0x88/0xb0
[  360.011083][ T9710]                     hidinput_hid_event+0x12f5/0x1c80
[  360.011109][ T9710]                     hid_process_event+0x4b7/0x620
[  360.011133][ T9710]                     hid_report_raw_event+0xf66/0x1760
[  360.011155][ T9710]                     hid_input_report+0x420/0x4e0
[  360.011177][ T9710]                     hid_irq_in+0x435/0x690
[  360.011202][ T9710]                     __usb_hcd_giveback_urb+0x35f/0x520
[  360.011233][ T9710]                     dummy_timer+0x888/0x31b0
[  360.011252][ T9710]                     __hrtimer_run_queues+0x554/0xd60
[  360.011272][ T9710]                     hrtimer_run_softirq+0x183/0x2a0
[  360.011292][ T9710]                     handle_softirqs+0x2a1/0x920
[  360.011321][ T9710]                     __irq_exit_rcu+0x12f/0x220
[  360.126256][ T9715] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  360.128238][ T9710]                     irq_exit_rcu+0x5/0x20
[  360.128278][ T9710]                     sysvec_apic_timer_interrupt+0xa0/0xc0
[  360.142973][ T9715] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  360.148371][ T9710]                     asm_sysvec_apic_timer_interrupt+0x16/0x20
[  360.148399][ T9710]                     _raw_spin_unlock_irqrestore+0xa5/0x100
[  360.148426][ T9710]                     debug_check_no_obj_freed+0x515/0x530
[  360.148447][ T9710]                     slab_free_freelist_hook+0xd2/0x1a0
[  360.148468][ T9710]                     kmem_cache_free+0xf7/0x290
[  360.148485][ T9710]                     mas_destroy+0x24ac/0x2c60
[  360.148512][ T9710]                     mas_store_prealloc+0x31a/0x400
[  360.148539][ T9710]                     __vma_adjust+0xffb/0x1c50
[  360.148560][ T9710]                     vma_merge+0x8fe/0x9c0
[  360.148580][ T9710]                     mprotect_fixup+0x418/0x7f0
[  360.148606][ T9710]                     do_mprotect_pkey+0x754/0xa40
[  360.256327][ T9710]                     __x64_sys_mprotect+0x7c/0x90
[  360.262972][ T9710]                     do_syscall_64+0x4c/0xa0
[  360.265581][   T27] audit: type=1326 audit(1753780976.049:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.4.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44cd8e9a9 code=0x7fc00000
[  360.269061][ T9710]                     entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.269102][ T9710]    INITIAL USE at:
[  360.302810][ T9710]                    lock_acquire+0x1b4/0x490
[  360.308932][ T9710]                    _raw_spin_lock+0x2a/0x40
[  360.315052][ T9710]                    evdev_pass_values+0xcb/0xab0
[  360.321522][ T9710]                    evdev_events+0x1d4/0x320
[  360.327641][ T9710]                    input_pass_values+0x907/0x1300
[  360.334274][ T9710]                    input_event_dispose+0x346/0x6c0
[  360.341005][ T9710]                    input_inject_event+0x1f5/0x310
[  360.347639][ T9710]                    evdev_write+0x326/0x470
[  360.353663][ T9710]                    vfs_write+0x2c4/0x960
[  360.359518][ T9710]                    ksys_write+0x143/0x240
[  360.365456][ T9710]                    do_syscall_64+0x4c/0xa0
[  360.371486][ T9710]                    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.378993][ T9710]  }
[  360.381510][ T9710]  ... key      at: [<ffffffff96fa6860>] evdev_open.__key.29+0x0/0x20
[  360.389702][ T9710] 
[  360.389702][ T9710] the dependencies between the lock to be acquired
[  360.389714][ T9710]  and SOFTIRQ-irq-unsafe lock:
[  360.403284][ T9710]   -> (tasklist_lock){.+.+}-{2:2} {
[  360.408634][ T9710]      HARDIRQ-ON-R at:
[  360.412841][ T9710]                         lock_acquire+0x1b4/0x490
[  360.414229][ T9715] syz.6.1737: attempt to access beyond end of device
[  360.414229][ T9715] loop6: rw=2049, sector=77824, nr_sectors = 184 limit=40427
[  360.419377][ T9710]                         _raw_read_lock+0x32/0x40
[  360.419411][ T9710]                         do_wait+0x2b6/0xb60
[  360.419438][ T9710]                         kernel_wait+0xa8/0x160
[  360.419462][ T9710]                         call_usermodehelper_exec_work+0xb5/0x220
[  360.419491][ T9710]                         process_one_work+0x898/0x1160
[  360.419510][ T9710]                         worker_thread+0xaa2/0x1250
[  360.419530][ T9710]                         kthread+0x29d/0x330
[  360.419557][ T9710]                         ret_from_fork+0x1f/0x30
[  360.419584][ T9710]      SOFTIRQ-ON-R at:
[  360.419598][ T9710]                         lock_acquire+0x1b4/0x490
[  360.419623][ T9710]                         _raw_read_lock+0x32/0x40
[  360.419649][ T9710]                         do_wait+0x2b6/0xb60
[  360.419675][ T9710]                         kernel_wait+0xa8/0x160
[  360.419699][ T9710]                         call_usermodehelper_exec_work+0xb5/0x220
[  360.419728][ T9710]                         process_one_work+0x898/0x1160
[  360.419748][ T9710]                         worker_thread+0xaa2/0x1250
[  360.419767][ T9710]                         kthread+0x29d/0x330
[  360.517321][ T9715] syz.6.1737: attempt to access beyond end of device
[  360.517321][ T9715] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  360.524083][ T9710]                         ret_from_fork+0x1f/0x30
[  360.524120][ T9710]      INITIAL USE at:
[  360.524133][ T9710]                        lock_acquire+0x1b4/0x490
[  360.524158][ T9710]                        _raw_write_lock_irq+0x9f/0xe0
[  360.524186][ T9710]                        copy_process+0x2531/0x4020
[  360.524205][ T9710]                        kernel_clone+0x225/0x8b0
[  360.524222][ T9710]                        user_mode_thread+0xda/0x130
[  360.524240][ T9710]                        rest_init+0x23/0x300
[  360.524265][ T9710]                        start_kernel+0x0/0x539
[  360.524295][ T9710]                        start_kernel+0x490/0x539
[  360.524324][ T9710]                        secondary_startup_64_no_verify+0xcf/0xdb
[  360.524350][ T9710]      INITIAL READ USE at:
[  360.524363][ T9710]                             lock_acquire+0x1b4/0x490
[  360.524387][ T9710]                             _raw_read_lock+0x32/0x40
[  360.524413][ T9710]                             do_wait+0x2b6/0xb60
[  360.524439][ T9710]                             kernel_wait+0xa8/0x160
[  360.524466][ T9710]                             call_usermodehelper_exec_work+0xb5/0x220
[  360.524495][ T9710]                             process_one_work+0x898/0x1160
[  360.524516][ T9710]                             worker_thread+0xaa2/0x1250
[  360.524536][ T9710]                             kthread+0x29d/0x330
[  360.524563][ T9710]                             ret_from_fork+0x1f/0x30
[  360.524586][ T9710]    }
[  360.524591][ T9710]    ... key      at: [<ffffffff8c80a058>] tasklist_lock+0x18/0x40
[  360.524618][ T9710]    ... acquired at:
[  360.524624][ T9710]    _raw_read_lock+0x32/0x40
[  360.524648][ T9710]    send_sigio+0xf5/0x360
[  360.524670][ T9710]    dnotify_handle_event+0x14f/0x420
[  360.536320][ T9727] loop0: detected capacity change from 0 to 40427
[  360.538276][ T9710]    fsnotify+0x18ea/0x1cc0
[  360.571094][ T9727] F2FS-fs (loop0): invalid crc value
[  360.574996][ T9710]    fsnotify_move+0x122/0x4e0
[  360.575027][ T9710]    vfs_rename+0xd36/0x10d0
[  360.618593][ T9727] F2FS-fs (loop0): Found nat_bits in checkpoint
[  360.620342][ T9710]    do_renameat2+0x89d/0xc70
[  360.620372][ T9710]    __x64_sys_renameat2+0xce/0xe0
[  360.766346][ T9710]    do_syscall_64+0x4c/0xa0
[  360.769258][ T9727] F2FS-fs (loop0): Start checkpoint disabled!
[  360.770967][ T9710]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.783186][ T9710] 
[  360.785544][ T9710]  -> (&f->f_owner.lock){...-}-{2:2} {
[  360.791067][ T9710]     IN-SOFTIRQ-R at:
[  360.795176][ T9710]                       lock_acquire+0x1b4/0x490
[  360.796411][ T9727] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  360.801533][ T9710]                       _raw_read_lock_irqsave+0xac/0xf0
[  360.801573][ T9710]                       send_sigurg+0x25/0x3c0
[  360.822260][ T9710]                       sk_send_sigurg+0x6b/0xc0
[  360.828640][ T9710]                       tcp_check_urg+0x200/0x750
[  360.835112][ T9710]                       tcp_urg+0x15d/0x3e0
[  360.841056][ T9710]                       tcp_rcv_established+0xde4/0x1d30
[  360.848130][ T9710]                       tcp_v4_do_rcv+0x48d/0xb00
[  360.854606][ T9710]                       tcp_v4_rcv+0x2789/0x2e30
[  360.861022][ T9710]                       ip_protocol_deliver_rcu+0x3ad/0x780
[  360.868377][ T9710]                       ip_local_deliver_finish+0x2c7/0x510
[  360.875727][ T9710]                       NF_HOOK+0x2ff/0x390
[  360.881747][ T9710]                       NF_HOOK+0x2ff/0x390
[  360.887684][ T9710]                       __netif_receive_skb+0xcc/0x290
[  360.894563][ T9710]                       process_backlog+0x37c/0x6e0
[  360.901179][ T9710]                       __napi_poll+0xc0/0x460
[  360.907370][ T9710]                       net_rx_action+0x5b1/0xad0
[  360.913825][ T9710]                       handle_softirqs+0x2a1/0x920
[  360.920454][ T9710]                       __irq_exit_rcu+0x12f/0x220
[  360.926988][ T9710]                       irq_exit_rcu+0x5/0x20
[  360.933095][ T9710]                       sysvec_apic_timer_interrupt+0xa0/0xc0
[  360.940585][ T9710]                       asm_sysvec_apic_timer_interrupt+0x16/0x20
[  360.948412][ T9710]                       _raw_spin_unlock_irqrestore+0xa5/0x100
[  360.955988][ T9710]                       sync_rcu_exp_done_unlocked+0xdb/0x140
[  360.963467][ T9710]                       rcu_exp_sel_wait_wake+0x69f/0x1db0
[  360.970681][ T9710]                       process_one_work+0x898/0x1160
[  360.977452][ T9710]                       worker_thread+0xaa2/0x1250
[  360.983961][ T9710]                       kthread+0x29d/0x330
[  360.989873][ T9710]                       ret_from_fork+0x1f/0x30
[  360.996144][ T9710]     INITIAL USE at:
[  361.000147][ T9710]                      lock_acquire+0x1b4/0x490
[  361.006405][ T9710]                      _raw_write_lock_irq+0x9f/0xe0
[  361.013099][ T9710]                      __f_setown+0x37/0x330
[  361.019121][ T9710]                      do_fcntl+0xf29/0x11c0
[  361.025117][ T9710]                      __se_sys_fcntl+0xc9/0x190
[  361.031477][ T9710]                      do_syscall_64+0x4c/0xa0
[  361.037662][ T9710]                      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.045326][ T9710]     INITIAL READ USE at:
[  361.049750][ T9710]                           lock_acquire+0x1b4/0x490
[  361.056438][ T9710]                           _raw_read_lock_irqsave+0xac/0xf0
[  361.063847][ T9710]                           send_sigio+0x2f/0x360
[  361.070324][ T9710]                           kill_fasync+0x224/0x4b0
[  361.076952][ T9710]                           do_splice+0x11fe/0x1630
[  361.083567][ T9710]                           __se_sys_splice+0x327/0x410
[  361.090537][ T9710]                           do_syscall_64+0x4c/0xa0
[  361.097136][ T9710]                           entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.105220][ T9710]   }
[  361.107810][ T9710]   ... key      at: [<ffffffff96cad8e0>] __alloc_file.__key+0x0/0x10
[  361.115994][ T9710]   ... acquired at:
[  361.119892][ T9710]    _raw_read_lock_irqsave+0xac/0xf0
[  361.125279][ T9710]    send_sigio+0x2f/0x360
[  361.129708][ T9710]    kill_fasync+0x224/0x4b0
[  361.134311][ T9710]    do_splice+0x11fe/0x1630
[  361.138921][ T9710]    __se_sys_splice+0x327/0x410
[  361.143880][ T9710]    do_syscall_64+0x4c/0xa0
[  361.148479][ T9710]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.154564][ T9710] 
[  361.156890][ T9710] -> (&new->fa_lock){....}-{2:2} {
[  361.162024][ T9710]    INITIAL USE at:
[  361.165924][ T9710]                    lock_acquire+0x1b4/0x490
[  361.172006][ T9710]                    _raw_write_lock_irq+0x9f/0xe0
[  361.178524][ T9710]                    fasync_remove_entry+0xf0/0x1c0
[  361.185132][ T9710]                    pipe_fasync+0xae/0x1e0
[  361.191043][ T9710]                    __fput+0x7a7/0x920
[  361.196607][ T9710]                    task_work_run+0x1ca/0x250
[  361.202772][ T9710]                    exit_to_user_mode_loop+0xe6/0x110
[  361.209656][ T9710]                    exit_to_user_mode_prepare+0xb1/0x140
[  361.216825][ T9710]                    syscall_exit_to_user_mode+0x16/0x40
[  361.223886][ T9710]                    do_syscall_64+0x58/0xa0
[  361.229978][ T9710]                    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.237559][ T9710]    INITIAL READ USE at:
[  361.241900][ T9710]                         lock_acquire+0x1b4/0x490
[  361.248422][ T9710]                         _raw_read_lock_irqsave+0xac/0xf0
[  361.255653][ T9710]                         kill_fasync+0x18e/0x4b0
[  361.262100][ T9710]                         do_splice+0x11fe/0x1630
[  361.268550][ T9710]                         __se_sys_splice+0x327/0x410
[  361.275336][ T9710]                         do_syscall_64+0x4c/0xa0
[  361.281763][ T9710]                         entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.289678][ T9710]  }
[  361.292189][ T9710]  ... key      at: [<ffffffff96cae560>] fasync_insert_entry.__key+0x0/0x20
[  361.300901][ T9710]  ... acquired at:
[  361.304718][ T9710]    _raw_read_lock_irqsave+0xac/0xf0
[  361.310123][ T9710]    kill_fasync+0x18e/0x4b0
[  361.314735][ T9710]    evdev_pass_values+0x54b/0xab0
[  361.319888][ T9710]    evdev_events+0x1d4/0x320
[  361.324586][ T9710]    input_pass_values+0x907/0x1300
[  361.329882][ T9710]    input_event_dispose+0x346/0x6c0
[  361.335180][ T9710]    input_inject_event+0x1f5/0x310
[  361.340416][ T9710]    evdev_write+0x326/0x470
[  361.345043][ T9710]    vfs_write+0x2c4/0x960
[  361.349520][ T9710]    ksys_write+0x143/0x240
[  361.354085][ T9710]    do_syscall_64+0x4c/0xa0
[  361.358703][ T9710]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.364804][ T9710] 
[  361.367134][ T9710] 
[  361.367134][ T9710] stack backtrace:
[  361.373042][ T9710] CPU: 0 PID: 9710 Comm: syz.5.1735 Not tainted 6.1.147-syzkaller #0
[  361.381115][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  361.391192][ T9710] Call Trace:
[  361.394481][ T9710]  <TASK>
[  361.397445][ T9710]  dump_stack_lvl+0x168/0x22e
[  361.402136][ T9710]  ? load_image+0x3b0/0x3b0
[  361.406659][ T9710]  ? show_regs_print_info+0x12/0x12
[  361.411865][ T9710]  ? load_image+0x3b0/0x3b0
[  361.416390][ T9710]  ? print_shortest_lock_dependencies+0xf0/0x160
[  361.422736][ T9710]  __lock_acquire+0x660b/0x7c50
[  361.427641][ T9710]  ? verify_lock_unused+0x140/0x140
[  361.432879][ T9710]  ? verify_lock_unused+0x140/0x140
[  361.438094][ T9710]  ? do_raw_spin_unlock+0x11d/0x230
[  361.443314][ T9710]  lock_acquire+0x1b4/0x490
[  361.447833][ T9710]  ? kill_fasync+0x18e/0x4b0
[  361.452444][ T9710]  ? read_lock_is_recursive+0x10/0x10
[  361.457839][ T9710]  _raw_read_lock_irqsave+0xac/0xf0
[  361.463060][ T9710]  ? kill_fasync+0x18e/0x4b0
[  361.467667][ T9710]  ? _raw_read_lock+0x40/0x40
[  361.472362][ T9710]  kill_fasync+0x18e/0x4b0
[  361.476847][ T9710]  ? kill_fasync+0x4f/0x4b0
[  361.481364][ T9710]  evdev_pass_values+0x54b/0xab0
[  361.486324][ T9710]  ? evdev_pass_values+0x521/0xab0
[  361.491453][ T9710]  evdev_events+0x1d4/0x320
[  361.495973][ T9710]  ? evdev_events+0x75/0x320
[  361.500578][ T9710]  ? evdev_event+0xd0/0xd0
[  361.505009][ T9710]  input_pass_values+0x907/0x1300
[  361.510049][ T9710]  ? input_pass_values+0xa3/0x1300
[  361.515204][ T9710]  input_event_dispose+0x346/0x6c0
[  361.520334][ T9710]  input_inject_event+0x1f5/0x310
[  361.525370][ T9710]  ? input_inject_event+0xb8/0x310
[  361.530499][ T9710]  evdev_write+0x326/0x470
[  361.534940][ T9710]  ? evdev_read+0xb40/0xb40
[  361.539458][ T9710]  ? end_current_label_crit_section+0x14b/0x170
[  361.545728][ T9710]  ? common_file_perm+0x171/0x1c0
[  361.550785][ T9710]  ? fsnotify_perm+0x5a/0x550
[  361.555477][ T9710]  ? security_file_permission+0x75/0xa0
[  361.561034][ T9710]  ? evdev_read+0xb40/0xb40
[  361.565558][ T9710]  vfs_write+0x2c4/0x960
[  361.569843][ T9710]  ? file_end_write+0x250/0x250
[  361.574711][ T9710]  ? __fget_files+0x28/0x4d0
[  361.579314][ T9710]  ? __fget_files+0x44a/0x4d0
[  361.584010][ T9710]  ? __fdget_pos+0x1d4/0x360
[  361.588615][ T9710]  ? ksys_write+0x71/0x240
[  361.593047][ T9710]  ksys_write+0x143/0x240
[  361.597396][ T9710]  ? __ia32_sys_read+0x80/0x80
[  361.602173][ T9710]  ? lockdep_hardirqs_on+0x94/0x140
[  361.607383][ T9710]  do_syscall_64+0x4c/0xa0
[  361.611813][ T9710]  ? clear_bhb_loop+0x60/0xb0
[  361.616498][ T9710]  ? clear_bhb_loop+0x60/0xb0
[  361.621181][ T9710]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.627092][ T9710] RIP: 0033:0x7f3a2378e9a9
[  361.631521][ T9710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.651144][ T9710] RSP: 002b:00007f3a2464d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  361.659571][ T9710] RAX: ffffffffffffffda RBX: 00007f3a239b5fa0 RCX: 00007f3a2378e9a9
[  361.667554][ T9710] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000005
[  361.675535][ T9710] RBP: 00007f3a23810d69 R08: 0000000000000000 R09: 0000000000000000
[  361.683525][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.691507][ T9710] R13: 0000000000000000 R14: 00007f3a239b5fa0 R15: 00007ffff0bdb788
[  361.699495][ T9710]  </TASK>
[  361.709448][ T8808] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  361.731146][ T4956] usbhid 6-1:0.0: can't add hid device: -71
[  361.741914][ T4956] usbhid: probe of 6-1:0.0 failed with error -71
[  361.759597][ T8808] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  361.775036][ T4956] usb 6-1: USB disconnect, device number 10
[  361.866215][ T8789] kworker/u4:9: attempt to access beyond end of device
[  361.866215][ T8789] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  363.556730][ T4956] usb 3-1: USB disconnect, device number 24