last executing test programs:

5m48.108766044s ago: executing program 32 (id=33):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '\x00\x00\x00 \x00'}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x44}}, 0x40000)

5m39.560774694s ago: executing program 33 (id=63):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0xfffffffb)
listen(r0, 0x0)
listen(r0, 0x8)

4m11.55004578s ago: executing program 34 (id=596):
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0)

4m2.845882703s ago: executing program 35 (id=646):
pipe2(&(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'})

3m22.899499328s ago: executing program 4 (id=887):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

3m22.693579315s ago: executing program 7 (id=890):
r0 = timerfd_create(0x8, 0x80000)
timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd})
timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0)

3m22.614614411s ago: executing program 4 (id=891):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r1, 0x1bc}, 0x8)

3m22.399988199s ago: executing program 4 (id=893):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32)

3m22.310671016s ago: executing program 7 (id=894):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f000000b7c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000280)="f5b4e638be964b4b8996e5675e64f4490d1fa62a70d3", 0x16}], 0x1}}], 0x1, 0x10)

3m22.179383467s ago: executing program 7 (id=896):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x4000, 0x0, @mcast1}}}, 0x90)

3m22.01067431s ago: executing program 7 (id=898):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m21.798093977s ago: executing program 7 (id=901):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='erofs_lookup\x00', r0}, 0x18)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000000)={[{@dax_never}, {@noacl}, {@noacl}, {}, {@nouser_xattr}]}, 0x1, 0x177, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)

3m20.978582103s ago: executing program 7 (id=905):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[], 0x64}}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1)

3m20.611490843s ago: executing program 36 (id=905):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[], 0x64}}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$eJzs3b9uUmEUAPBDS/ljHLqZmJhc46BToz5BjamJkcSkhkG3JnYqEyzA0j6Gr+B7+QCmE4v5DF5uQUoRiRe0/n5LTznfufc73HBh4ZAi9+Xep2g0KrFzGIcxqsR+7EThIgCA22SUUnxNud+vrpaxJQCgZCu8/3/b8JYAgJK9e//hzYtW6+g4yxoRlxf9dr+d/83zr163jp5mP+xPqy77/fbuVf5ZNv/ZYZzfizuT/PO8PrtK1yKiXYsnj/L8OPfybSv7ub4eH0vuHQAAAAAAAAAAAAAAAAAAAAAAtuVBZIWF830ODubzzUk+/29mPtDc/J5q3C/GA0/HA6XzTTQFAAAAAAAAAAAAAAAAAAAA/5jeYHh20umcdqdBPSJmH6kuWHNzUJkceKXF2w92Yr3y5qTNNU5amTxF5TbYXHxxVwmi+rdcnXWD7E8dsF5c5uupZlSWlKc0Dha/CoqxGDeW1yJi+cYeH6/b1yil1Pn8sNsbRFq6eHqPqG/sbgQAAAAAAAAAAAAAAAAAAP+3mW99X9PY3caOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDzeoNh8Sv/w7OTTue02xusHJxHxN345eLiXHvR2F6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GrfAwAA//8nTRyq")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1)

3m20.004819672s ago: executing program 4 (id=912):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m19.41283835s ago: executing program 4 (id=917):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m19.104774775s ago: executing program 6 (id=918):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0xa00}, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

3m18.947450887s ago: executing program 6 (id=919):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

3m18.702691647s ago: executing program 4 (id=920):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000701004000"])

3m18.679725719s ago: executing program 6 (id=921):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

3m18.342691226s ago: executing program 37 (id=920):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000701004000"])

3m17.572165988s ago: executing program 6 (id=927):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m16.764965003s ago: executing program 6 (id=930):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10)
write$binfmt_script(r0, &(0x7f0000000100), 0x48)

3m14.57555338s ago: executing program 6 (id=948):
r0 = socket$inet6(0xa, 0x3, 0xff)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000004", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200}}}}}}, 0x0)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000540)="f60c079d4e2fe690a4a68a128ac12d36e21010f05e283f7e46b0cb23f0acc95f227d6a16470a53e5", 0x28}], 0x1)

3m14.315962171s ago: executing program 38 (id=948):
r0 = socket$inet6(0xa, 0x3, 0xff)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000004", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200}}}}}}, 0x0)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000540)="f60c079d4e2fe690a4a68a128ac12d36e21010f05e283f7e46b0cb23f0acc95f227d6a16470a53e5", 0x28}], 0x1)

2m12.859587713s ago: executing program 2 (id=1453):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a808020"], 0x44}}, 0x0)

2m12.561572117s ago: executing program 2 (id=1457):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)

2m12.28182619s ago: executing program 2 (id=1460):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x482, 0x0, 0x593d}]})

2m11.769036631s ago: executing program 2 (id=1465):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @empty}})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}})

2m11.506078672s ago: executing program 2 (id=1467):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

2m11.214975716s ago: executing program 2 (id=1470):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xf, @empty, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)

1m58.901211s ago: executing program 8 (id=1565):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC], 0xd)

1m58.613879643s ago: executing program 8 (id=1568):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r1, 0x2d322000)

1m58.389208271s ago: executing program 8 (id=1570):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES16, @ANYRESDEC], 0x1, 0x2a2, &(0x7f0000001140)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)=ANY=[], 0x20}}, 0xeb64d656241b6f26)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

1m58.087002456s ago: executing program 8 (id=1572):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@resgid}, {@auto_da_alloc}, {@jqfmt_vfsv0}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x47b, &(0x7f0000001280)="$eJzs28tvG8UfAPDv2nH6bvLrrzz6AAwFEfFImrRAD1xAIPWChASHcgxpWpWmDWqCRKuKBoTKEfUvAI5I/AWc4IKAE4grSFyQEFKFeqFwQIvW3m3dxDZ2Etcp/nwkNzO7s5357uzYszt2AAOrmv2TRGyPiB+HI0bq2VsLVOt/rl+7OPPntYszSaTpK78ntXJ/XLs4UxQtjtuWZ8ZKEaX3k9jXpN6F8xdOT8/NzZ7L8xOLZ96cWDh/4clTZ6ZPzp6cPTt15MjhQ5PPPD311LrEuSNr69535vfvOfralZdmjl15/ZvPsu3b8/2NcdSNrrnOalRvPZcNHon4JU3TNdexUexoSCdDfWwIXSlHRNZdlWz8x0iU42bnjcSL7/W1cUBPpWmablqxtVwkllLgPyyJfrcA6I/igz67/y1et3H60XdXn6vfAGVxX89f9T1DUcrLVJbd366nav732NJfH0XT5xBNbOlRYwCAgfBFNv95otn8rxR3N5TbGfW1odGI+F9E7IqI/0fE7oi4K6JW9p6IuLfL+qvL8ivnP9/3dLaTzf+ezde2bp3/FbO/GC3nuR21+CvJiVNzswfzczIWlU1ZfrJNHV++8MOHrfZV87lf8crqL+aCeTt+G1r2gO749OL0WmJudPXdiL1DzeJPbqwEJBGxJyL2ruL/z87Zqcc+3d9q/7/H38Y6rDOln0Q8Wu//pVgWfyFpvz45sTnmZg9OFFfFSt9+d/nlVvU3i39zp/Gvg6z/tza9/m/EP5o0rtcudF/H5Z8+aHlPs9rrfzh5tZYezre9Pb24eG4yYjhZWrl96uaxRb4on8U/dqD5+N8V8ffH+XH7IiK7iO+LiPsj4oF8fffBiHgoIg60if/r5x9+Y/Xx91YW//Gu+r/7RPn0V5+3qr+z/j9cS43lWzp5/+u0gWs5dwAAAHCnKNW+A5+Uxm+kS6Xx8fp3+HfH1tLc/MLi4yfm3zp7vP5d+dGolIonXSMNz0Mn82fDRX5qWf5Q7blxmqbpllp+fGZ+rldr6kBntrUY/5lfy/1uHdBzXa2jtfpFG3BH8ntNGFzGPwyuTsd/pcftAG4/n/8wuJqN/0sR1/vQFOA28/kPg8v4h8Fl/MPgMv5hIK3ld/3tEruOrvrwdE21b84DW+XhP7cvs3PdT9RsuVdd0ONElJruqkTEBmlhm0RpYzSjntgUEZ0WvrTaC7vrRJ/fmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANbJPwEAAP//tPLlnA==")
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

1m57.343969656s ago: executing program 8 (id=1574):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000)

1m56.462789587s ago: executing program 8 (id=1581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

1m56.075986858s ago: executing program 39 (id=1581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

1m55.990040625s ago: executing program 40 (id=1470):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xf, @empty, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)

4.990851007s ago: executing program 1 (id=2597):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@auto_da_alloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000001080)='./file1\x00', &(0x7f0000001100), &(0x7f00000010c0)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000000010002000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="0400000000000000100005000000000020"], 0x4c, 0x2)
chmod(&(0x7f00000000c0)='./file1\x00', 0x4)

4.011006006s ago: executing program 1 (id=2600):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)

4.010867616s ago: executing program 0 (id=2610):
unshare(0x24060400)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

3.852168149s ago: executing program 0 (id=2603):
r0 = epoll_create(0x1)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x40000011})
epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x400)

3.820818041s ago: executing program 1 (id=2605):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @empty}], 0x10)
sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000940), &(0x7f0000000040)=0x8)

3.742830368s ago: executing program 0 (id=2606):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)

2.799150444s ago: executing program 1 (id=2619):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

2.717193031s ago: executing program 0 (id=2608):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r0, &(0x7f0000000640)=@name={0x1e, 0x2, 0xf1639f5432e063d9, {{0x42, 0x2}, 0x2}}, 0x10)

2.303284304s ago: executing program 0 (id=2611):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)

2.302386014s ago: executing program 5 (id=2612):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.22496539s ago: executing program 5 (id=2614):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000300)="062586c0d44dc999855a9d3cefd7768dfec2125480724340518100"/43, 0x2b}, {&(0x7f0000001340)="f7bfadd032", 0x16}], 0x2)

2.094624461s ago: executing program 9 (id=2617):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

2.083245062s ago: executing program 5 (id=2618):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15)

2.003092948s ago: executing program 9 (id=2620):
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x6, 0x24, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffbfff, 0xfff, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})
read(r0, &(0x7f0000000280)=""/73, 0x49)

1.977161771s ago: executing program 5 (id=2621):
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffd24, 0x6, 0x0, {0x5, 0x0, 0x1, 0x0, ')'}}, 0x2a)
r0 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0)

1.907178116s ago: executing program 5 (id=2622):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

1.902616736s ago: executing program 9 (id=2623):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001580)={0x0, 0x7c66}, 0x8)

1.85464871s ago: executing program 1 (id=2624):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x40, 0x1, 0x49, "ec73b61eb7c287d07d62c67c953a59c5ba40cc3d6751434f63ecf8a3868af8315094080c14cdcf8dd77dd189b4af3893ecf5676127e5a810ef4a2eb2acd906669304bb9f63b4081791"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.718172221s ago: executing program 9 (id=2625):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b7dfc41a15654ade3ea08543464493a2a3a8131179a899b"}]]}, 0x54}}, 0x0)

1.718053421s ago: executing program 3 (id=2626):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

1.640980898s ago: executing program 9 (id=2627):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
write$cgroup_devices(r1, 0x0, 0x9)

1.640315817s ago: executing program 3 (id=2637):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1, 0x88a, 0x0, {0x77359400}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0xfe, 0x1, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0)

637.281289ms ago: executing program 9 (id=2628):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4800, &(0x7f0000000080)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)='./file1\x00')
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef)

637.063369ms ago: executing program 3 (id=2629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r1, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)

519.783638ms ago: executing program 3 (id=2630):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x4e22, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in=@local, 0x8000, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

385.792999ms ago: executing program 3 (id=2631):
r0 = semget$private(0x0, 0x4000000009, 0x42a)
semop(r0, &(0x7f00000002c0)=[{0x0, 0x9b6a}], 0x1)
semop(r0, &(0x7f0000000200), 0x53)
semctl$IPC_RMID(r0, 0x0, 0x0)

325.252064ms ago: executing program 0 (id=2632):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})

162.947767ms ago: executing program 3 (id=2633):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

52.710986ms ago: executing program 5 (id=2634):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

0s ago: executing program 1 (id=2635):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)

kernel console output (not intermixed with test programs):

p=collect_data cause=failed(directio) comm="syz.1.1699" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  333.595662][ T4271] Bluetooth: hci3: command 0x0406 tx timeout
[  333.601970][ T4265] Bluetooth: hci0: command 0x0406 tx timeout
[  333.666504][ T4265] Bluetooth: hci2: command 0x0406 tx timeout
[  333.672668][ T4265] Bluetooth: hci4: command 0x0406 tx timeout
[  333.706731][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  333.733159][ T7992] (syz-executor,7992,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  333.785570][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  333.803112][ T7992] ocfs2: Unmounting device (7,1) on (node local)
[  333.811797][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  333.870873][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  333.907218][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  333.936732][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.943884][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.999950][ T9884] device sit1 entered promiscuous mode
[  334.132015][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  334.152426][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  334.188955][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  334.212052][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  334.251971][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  334.278242][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  334.302721][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.309942][ T6767] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.369727][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  334.412418][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.421136][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  334.437627][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  334.462870][ T9593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  334.501883][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  334.538464][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  334.557176][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  334.584866][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  334.598294][ T9897] loop1: detected capacity change from 0 to 128
[  334.627792][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1717'.
[  334.644928][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  334.659482][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  334.705385][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  334.761046][ T9595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  334.803245][ T9595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  334.831301][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  334.862619][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.928126][ T9901] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0)
[  335.567426][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  335.574966][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  335.634359][ T9593] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.702200][ T9921] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  335.712931][ T9921] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  335.939459][ T9894] loop3: detected capacity change from 0 to 40427
[  335.956914][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.994764][ T9894] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  336.011766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  336.020651][ T9894] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  336.050918][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  336.058930][ T9894] F2FS-fs (loop3): invalid crc value
[  336.113589][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  336.125478][ T9894] F2FS-fs (loop3): Found nat_bits in checkpoint
[  336.160166][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  336.278948][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  336.318184][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  336.338731][ T9894] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  336.363530][ T9894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  336.392462][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  336.417625][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  336.467556][ T9595] device veth0_vlan entered promiscuous mode
[  336.508861][   T26] audit: type=1800 audit(1754623734.141:35): pid=9894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1715" name="file1" dev="loop3" ino=10 res=0 errno=0
[  336.509548][ T9595] device veth1_vlan entered promiscuous mode
[  336.682213][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  336.699005][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  336.733426][ T9595] device veth0_macvtap entered promiscuous mode
[  336.816942][ T9595] device veth1_macvtap entered promiscuous mode
[  336.870989][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.901936][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.922554][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.936732][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.948732][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.959755][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.975764][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.994287][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  337.007027][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  337.035892][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  337.057823][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  337.083984][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.107796][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.129852][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.159893][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.194744][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.212120][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.224072][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.247105][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  337.260624][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  337.283505][ T9595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.293428][ T9595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.304372][ T9595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.313483][ T9595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.325111][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  337.334743][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  337.399268][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  337.410866][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  337.466446][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  337.489755][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  337.524876][ T9593] device veth0_vlan entered promiscuous mode
[  337.614951][ T9593] device veth1_vlan entered promiscuous mode
[  337.625536][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.651692][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.723869][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  337.735796][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  337.766366][ T5187] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  337.767067][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  337.790309][ T9593] device veth0_macvtap entered promiscuous mode
[  337.803896][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.815656][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  337.835071][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  337.844205][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.863547][ T9593] device veth1_macvtap entered promiscuous mode
[  337.883079][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  337.895827][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  337.915095][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  337.945940][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.967411][ T5187] usb 10-1: Using ep0 maxpacket: 8
[  337.974858][ T5187] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  337.994883][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.005366][ T5187] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  338.019053][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.030014][ T5187] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  338.033555][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.050439][ T5187] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.060583][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.075440][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.085537][ T5187] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  338.085578][ T5187] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.115482][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.133964][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.175314][ T9593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.193939][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  338.214283][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  338.247437][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.278380][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.303116][ T5187] usb 10-1: GET_CAPABILITIES returned 0
[  338.314361][ T5187] usbtmc 10-1:16.0: can't read capabilities
[  338.324315][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.341303][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.352527][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.368852][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.390876][ T9593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.406108][ T9593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.427537][ T9593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.442704][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  338.487118][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.511656][ T9593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.529974][ T5187] usb 10-1: USB disconnect, device number 10
[  338.548688][ T9593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.573785][ T9593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.588887][ T9593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.754815][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.781427][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.825252][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  338.826419][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.841891][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.865061][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  338.876189][ T5351] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  338.948998][ T4265] Bluetooth: hci4: command 0x0405 tx timeout
[  339.066253][ T5351] usb 1-1: Using ep0 maxpacket: 8
[  339.074250][ T5351] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.106744][ T5351] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  339.134471][ T5351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  339.162815][ T5351] usb 1-1: SerialNumber: syz
[  339.183183][ T5351] usb 1-1: config 0 descriptor??
[  339.211368][ T5351] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  339.243928][ T5351] usb 1-1: Failed to create links for entity 255
[  339.268565][ T5351] usb 1-1: Failed to register entities (-22).
[  339.428625][ T5351] usb 1-1: USB disconnect, device number 8
[  339.873593][ T9992] loop3: detected capacity change from 0 to 32768
[  339.979332][ T9992] XFS (loop3): Mounting V5 Filesystem
[  340.081595][ T9992] XFS (loop3): Ending clean mount
[  340.091693][ T9992] XFS (loop3): Quotacheck needed: Please wait.
[  340.175457][ T9992] XFS (loop3): Quotacheck: Done.
[  340.296327][ T5187] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  340.345636][ T4268] XFS (loop3): Unmounting Filesystem
[  340.398927][T10024] loop1: detected capacity change from 0 to 1024
[  340.456906][T10024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  340.536703][ T5187] usb 1-1: Using ep0 maxpacket: 8
[  340.553400][ T5187] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  340.586221][ T5187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.674408][ T5187] pvrusb2: Hardware description: Terratec Grabster AV400
[  340.702746][ T5187] pvrusb2: **********
[  340.717345][ T5187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  340.774408][ T5187] pvrusb2: Important functionality might not be entirely working.
[  340.804748][ T5187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  340.841138][ T5187] pvrusb2: **********
[  340.867573][ T2309] pvrusb2: Invalid write control endpoint
[  341.090829][T10014] pvrusb2: Killing an I2C read to 1 that has wlen too large (desired=62 limit=60)
[  341.144389][ T5187] usb 1-1: USB disconnect, device number 9
[  341.173015][ T2309] pvrusb2: Invalid write control endpoint
[  341.182275][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  341.226370][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  341.253561][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  341.273313][ T2309] pvrusb2: Device being rendered inoperable
[  341.291345][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'.
[  341.310236][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  341.331232][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  341.351260][ T2309] pvrusb2: Attached sub-driver cx25840
[  341.396754][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  341.436746][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  341.496123][ T5184] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  341.686283][ T5184] usb 10-1: Using ep0 maxpacket: 32
[  341.696914][ T5184] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  341.705054][ T5184] usb 10-1: config 0 has no interface number 0
[  341.758251][ T5184] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  341.796151][ T5184] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.836878][ T5184] usb 10-1: Product: syz
[  341.841201][ T5184] usb 10-1: Manufacturer: syz
[  341.845927][ T5184] usb 10-1: SerialNumber: syz
[  341.875469][ T5184] usb 10-1: config 0 descriptor??
[  341.911884][ T5184] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  341.931496][ T5184] usb 10-1: selecting invalid altsetting 1
[  341.944811][ T5184] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  341.993841][ T5184] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  342.032810][ T5184] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  342.060353][ T5184] usb 10-1: media controller created
[  342.135324][ T5184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  342.246604][T10074] netlink: 'syz.1.1785': attribute type 5 has an invalid length.
[  342.436858][T10080] support for cryptoloop has been removed.  Use dm-crypt instead.
[  342.955259][T10090] xt_CT: No such helper "snmp"
[  343.236335][ T4318] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  343.266420][T10043] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  343.297811][ T5184] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  343.305714][ T5184] zl10353_read_register: readreg error (reg=127, ret==-32)
[  343.319115][ T5184] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  343.362916][T10108] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1799'.
[  343.386423][ T5184] usb 10-1: USB disconnect, device number 11
[  343.430877][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.472125][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.512475][ T4318] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  343.542190][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.572382][ T4318] usb 2-1: config 0 descriptor??
[  344.000491][ T4318] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  344.010422][T10124] tipc: Started in network mode
[  344.015719][T10124] tipc: Node identity , cluster identity 4711
[  344.034677][ T4318] hid-thrustmaster 0003:044F:B65D.0015: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  344.056107][T10124] tipc: Failed to set node id, please configure manually
[  344.063417][ T4318] hid-thrustmaster 0003:044F:B65D.0015: Wrong number of endpoints?
[  344.068444][T10126] input: syz0 as /devices/virtual/input/input23
[  344.076106][ T5277] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  344.085324][T10124] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  344.288317][ T5277] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  344.300013][ T5277] usb 1-1: config 0 has no interface number 0
[  344.326751][    C1] hid-thrustmaster 0003:044F:B65D.0015: URB to get model id failed with error -71
[  344.350380][ T4318] usb 2-1: USB disconnect, device number 8
[  344.358644][ T5277] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  344.383712][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.406463][ T5277] usb 1-1: Product: syz
[  344.422396][ T5277] usb 1-1: Manufacturer: syz
[  344.432582][ T5277] usb 1-1: SerialNumber: syz
[  344.440746][T10130] fido_id[10130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  344.456696][ T5277] usb 1-1: config 0 descriptor??
[  344.917130][T10132] mmap: syz.3.1809 (10132) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  345.282312][ T5277] usb 1-1: Firmware version (0.0) predates our first public release.
[  345.301280][ T5277] usb 1-1: Please update to version 0.2 or newer
[  345.323454][T10148] loop3: detected capacity change from 0 to 128
[  345.327467][T10147] loop5: detected capacity change from 0 to 256
[  345.454653][ T5277] usb 1-1: USB disconnect, device number 10
[  345.666084][T10157] loop1: detected capacity change from 0 to 2048
[  345.724254][T10157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  345.788785][T10165] loop3: detected capacity change from 0 to 1024
[  345.877396][ T7007] hfsplus: b-tree write err: -5, ino 4
[  345.999286][ T7992] EXT4-fs (loop1): unmounting filesystem.
[  346.273066][T10175] loop1: detected capacity change from 0 to 256
[  346.346398][T10175] FAT-fs (loop1): Directory bread(block 64) failed
[  346.389584][T10175] FAT-fs (loop1): Directory bread(block 65) failed
[  346.417780][T10175] FAT-fs (loop1): Directory bread(block 66) failed
[  346.461489][T10175] FAT-fs (loop1): Directory bread(block 67) failed
[  346.495374][T10175] FAT-fs (loop1): Directory bread(block 68) failed
[  346.513091][T10175] FAT-fs (loop1): Directory bread(block 69) failed
[  346.563992][T10175] FAT-fs (loop1): Directory bread(block 70) failed
[  346.590201][T10175] FAT-fs (loop1): Directory bread(block 71) failed
[  346.633411][T10175] FAT-fs (loop1): Directory bread(block 72) failed
[  346.672664][T10175] FAT-fs (loop1): Directory bread(block 73) failed
[  347.169048][T10203] misc userio: Begin command sent, but we're already running
[  347.233194][T10205] loop0: detected capacity change from 0 to 512
[  347.274108][T10205] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  347.332544][T10205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  347.379605][T10205] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1841: corrupted in-inode xattr
[  347.431780][T10205] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1841: couldn't read orphan inode 15 (err -117)
[  347.498678][T10205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  347.690077][T10201] loop1: detected capacity change from 0 to 32768
[  348.008828][ T9595] EXT4-fs (loop0): unmounting filesystem.
[  348.423319][T10228] loop1: detected capacity change from 0 to 128
[  348.903622][T10232] loop0: detected capacity change from 0 to 4096
[  349.440430][T10250] loop1: detected capacity change from 0 to 128
[  349.483146][T10225] loop3: detected capacity change from 0 to 32768
[  349.623227][T10250] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  349.642089][T10250] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  349.756631][T10250] EXT4-fs (loop1): shut down requested (2)
[  350.030129][ T7992] EXT4-fs (loop1): unmounting filesystem.
[  350.721249][T10273] loop1: detected capacity change from 0 to 1024
[  350.952796][   T56] hfsplus: b-tree write err: -5, ino 4
[  351.027143][ T4318] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  351.076908][T10281] futex_wake_op: syz.1.1875 tries to shift op by 32; fix this program
[  351.106378][ T5351] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  351.220336][ T4318] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  351.243410][ T4318] usb 4-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  351.253517][ T4318] usb 4-1: Product: syz
[  351.273760][ T4318] usb 4-1: Manufacturer: syz
[  351.286189][ T4318] usb 4-1: SerialNumber: syz
[  351.297204][ T4318] usb 4-1: config 0 descriptor??
[  351.307971][ T5351] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.337116][ T5351] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  351.376115][ T5351] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  351.385967][ T5351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.437151][ T5351] usb 10-1: config 0 descriptor??
[  351.449030][ T5351] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  351.709623][ T5351] usb 10-1: USB disconnect, device number 12
[  351.865062][T10295] netlink: 'syz.1.1881': attribute type 2 has an invalid length.
[  351.919320][ T4318] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  351.939701][ T4318] asix: probe of 4-1:0.0 failed with error -71
[  351.970232][ T4318] usb 4-1: USB disconnect, device number 22
[  352.058345][T10287] loop5: detected capacity change from 0 to 32768
[  352.180777][T10287] XFS (loop5): Mounting V5 Filesystem
[  352.233516][ T9595] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  352.260283][ T9595] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  352.310181][T10287] XFS (loop5): Ending clean mount
[  352.440308][T10309] netlink: 'syz.9.1885': attribute type 1 has an invalid length.
[  352.526091][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1885'.
[  352.587808][ T9593] XFS (loop5): Unmounting Filesystem
[  353.857797][T10362] tipc: Started in network mode
[  353.862884][T10362] tipc: Node identity ff, cluster identity 4711
[  353.869375][T10362] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  353.973934][T10364] wireguard: wg1: Could not create IPv4 socket
[  354.737677][T10385] loop1: detected capacity change from 0 to 4096
[  354.882449][ T7992] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  354.891140][ T7992] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  354.952236][   T26] audit: type=1326 audit(1754623752.581:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.1.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa965b8ebe9 code=0x7ffc0000
[  354.995359][   T26] audit: type=1326 audit(1754623752.581:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.1.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa965b8ebe9 code=0x7ffc0000
[  355.036612][ T4271] Bluetooth: hci3: command 0x0406 tx timeout
[  355.063063][   T26] audit: type=1326 audit(1754623752.581:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.1.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa965b8ebe9 code=0x7ffc0000
[  355.086931][   T26] audit: type=1326 audit(1754623752.581:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.1.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa965b8ebe9 code=0x7ffc0000
[  355.115647][   T26] audit: type=1326 audit(1754623752.581:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.1.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa965b8ebe9 code=0x7ffc0000
[  355.603049][   T26] audit: type=1326 audit(1754623753.231:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.3.1929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e1b78ebe9 code=0x0
[  355.817538][ T5184] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  355.827582][ T4265] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  356.016253][ T5184] usb 2-1: Using ep0 maxpacket: 32
[  356.025588][ T5184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.037546][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1933'.
[  356.067098][ T5184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.077037][ T5184] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  356.093399][ T5184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.118063][ T5184] usb 2-1: config 0 descriptor??
[  356.154519][ T5184] hub 2-1:0.0: USB hub found
[  356.351744][ T5184] hub 2-1:0.0: 9 ports detected
[  356.358083][ T5184] hub 2-1:0.0: insufficient power available to use all downstream ports
[  356.559259][ T5184] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  356.622408][ T5184] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  356.660074][ T5184] usbhid 2-1:0.0: can't add hid device: -71
[  356.679194][ T5184] usbhid: probe of 2-1:0.0 failed with error -71
[  356.717194][ T4640] udevd[4640]: failed to send result of seq 19778 to main daemon: Connection refused
[  356.742213][ T5184] usb 2-1: USB disconnect, device number 9
[  356.996108][ T6766] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  357.076138][ T4318] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  357.086122][ T6861] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  357.126200][ T5187] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  357.186347][ T6766] usb 10-1: Using ep0 maxpacket: 16
[  357.193835][ T6766] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  357.202677][ T6766] usb 10-1: config 0 has no interface number 0
[  357.212280][ T6766] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  357.222461][ T6766] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.231020][ T6766] usb 10-1: Product: syz
[  357.235547][ T6766] usb 10-1: Manufacturer: syz
[  357.240637][ T6766] usb 10-1: SerialNumber: syz
[  357.252868][ T6766] usb 10-1: config 0 descriptor??
[  357.256194][ T4318] usb 6-1: Using ep0 maxpacket: 16
[  357.262127][ T6766] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  357.266461][ T6861] usb 1-1: Using ep0 maxpacket: 8
[  357.277871][ T4318] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.296669][ T6861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  357.316082][ T4318] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.316204][ T5187] usb 4-1: Using ep0 maxpacket: 32
[  357.326642][ T6861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  357.342644][ T5187] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.346171][ T4318] usb 6-1: config 0 interface 0 has no altsetting 0
[  357.366066][ T6861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  357.368901][ T5187] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.375733][ T6861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  357.375762][ T6861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  357.375802][ T6861] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  357.375826][ T6861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.386110][ T4318] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  357.414108][ T5187] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  357.443809][ T6861] usb 1-1: config 0 descriptor??
[  357.443977][ T5187] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  357.456326][ T4318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.466112][T10446] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  357.480335][ T5187] usb 4-1: Product: syz
[  357.485515][ T5187] usb 4-1: Manufacturer: syz
[  357.500558][ T5187] hub 4-1:4.0: USB hub found
[  357.508282][ T4318] usb 6-1: config 0 descriptor??
[  357.723651][ T5187] hub 4-1:4.0: config failed, hub has too many ports! (err -19)
[  357.732516][ T4271] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  357.739895][ T4271] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  357.747777][ T4271] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  357.770346][T10452] loop1: detected capacity change from 0 to 32768
[  357.794206][   T26] audit: type=1800 audit(1754623755.421:42): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1948" name="file1" dev="loop1" ino=7 res=0 errno=0
[  357.814671][    C0] vkms_vblank_simulate: vblank timer overrun
[  357.941666][ T4265] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  357.968269][ T4318] usb 1-1: USB disconnect, device number 11
[  358.087579][ T6766] gspca_spca1528: reg_w err -71
[  358.096510][ T5184] usb 4-1: USB disconnect, device number 23
[  358.121122][ T6766] spca1528: probe of 10-1:0.1 failed with error -71
[  358.142068][ T6766] usb 10-1: USB disconnect, device number 13
[  358.161929][ T5351] usb 6-1: USB disconnect, device number 5
[  358.808289][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.943100][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.086963][ T4318] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  359.101907][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.249621][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.277866][ T4318] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.293913][ T4318] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.304172][ T4318] usb 10-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  359.313624][ T4318] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.331380][ T4318] usb 10-1: config 0 descriptor??
[  359.338107][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  359.352665][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  359.361081][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  359.369811][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  359.378018][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  359.388909][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  359.462382][T10490] dummy0 speed is unknown, defaulting to 1000
[  359.536270][ T5351] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  359.572386][ T4318] usbhid 10-1:0.0: can't add hid device: -71
[  359.590191][ T4318] usbhid: probe of 10-1:0.0 failed with error -71
[  359.628041][ T4318] usb 10-1: USB disconnect, device number 14
[  359.757186][T10490] chnl_net:caif_netlink_parms(): no params data found
[  359.785615][ T5351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  359.805972][ T5351] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  359.823954][ T5351] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  359.834450][ T5351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  359.855465][ T5351] usb 1-1: SerialNumber: syz
[  360.114011][ T5351] usb 1-1: 0:2 : does not exist
[  360.138702][ T5351] usb 1-1: USB disconnect, device number 12
[  360.173569][T10490] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.181006][T10490] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.190687][T10490] device bridge_slave_0 entered promiscuous mode
[  360.200488][T10490] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.207836][T10490] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.218081][T10490] device bridge_slave_1 entered promiscuous mode
[  360.312068][T10490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.384446][T10490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.523036][T10490] team0: Port device team_slave_0 added
[  360.543072][T10490] team0: Port device team_slave_1 added
[  360.780061][T10490] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.788775][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.851430][T10490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.889863][T10525] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  360.898741][T10525] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  360.907856][T10525] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.916706][T10525] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.030331][T10490] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.045172][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.106646][T10490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.393893][T10490] device hsr_slave_0 entered promiscuous mode
[  361.413294][T10490] device hsr_slave_1 entered promiscuous mode
[  361.427397][ T4271] Bluetooth: hci0: command 0x0409 tx timeout
[  361.453757][T10490] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.479316][T10490] Cannot create hsr debugfs directory
[  361.626354][ T4318] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  361.740373][T10533] loop0: detected capacity change from 0 to 40427
[  361.759582][T10532] loop3: detected capacity change from 0 to 32768
[  361.764293][T10533] F2FS-fs (loop0): invalid crc value
[  361.795692][T10533] F2FS-fs (loop0): Found nat_bits in checkpoint
[  361.831507][    T9] device hsr_slave_0 left promiscuous mode
[  361.833121][ T4318] usb 6-1: unable to get BOS descriptor or descriptor too short
[  361.846876][    T9] device hsr_slave_1 left promiscuous mode
[  361.873341][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.874982][ T4318] usb 6-1: no configurations
[  361.885841][ T4318] usb 6-1: can't read configurations, error -22
[  361.886091][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.903690][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.923897][T10533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  361.933062][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.940715][ T4319] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  361.953711][    T9] device bridge_slave_1 left promiscuous mode
[  361.980497][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.996735][    T9] device bridge_slave_0 left promiscuous mode
[  362.005393][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.010080][ T9595] syz-executor: attempt to access beyond end of device
[  362.010080][ T9595] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  362.086578][    T9] device veth1_macvtap left promiscuous mode
[  362.102890][    T9] device veth0_macvtap left promiscuous mode
[  362.112553][    T9] device veth1_vlan left promiscuous mode
[  362.126316][    T9] device veth0_vlan left promiscuous mode
[  362.128737][ T4319] usb 10-1: Using ep0 maxpacket: 8
[  362.153627][ T4319] usb 10-1: unable to get BOS descriptor or descriptor too short
[  362.170324][ T4319] usb 10-1: config 4 interface 0 has no altsetting 0
[  362.222894][ T4319] usb 10-1: string descriptor 0 read error: -22
[  362.234200][ T4319] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  362.253611][ T4319] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  362.284739][ T4319] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  362.311765][ T4319] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  362.322792][ T4319] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  362.330324][ T4319] usb 10-1: media controller created
[  362.366740][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  363.402492][    T9] team0 (unregistering): Port device team_slave_1 removed
[  363.472430][    T9] team0 (unregistering): Port device team_slave_0 removed
[  363.508159][ T4271] Bluetooth: hci0: command 0x041b tx timeout
[  363.545336][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.600466][ T4319] usb 10-1: USB disconnect, device number 15
[  363.616244][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.276564][    T9] bond0 (unregistering): Released all slaves
[  364.806234][ T6766] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  364.998294][ T6766] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  365.021517][ T6766] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  365.050696][ T6766] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  365.081581][ T6766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.104045][ T6766] usb 1-1: Product: syz
[  365.114811][ T6766] usb 1-1: Manufacturer: syz
[  365.134929][ T6766] usb 1-1: SerialNumber: syz
[  365.157651][T10580] comedi comedi0: Minor 14 could not be opened
[  365.259686][T10490] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  365.287805][T10490] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  365.306361][T10490] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  365.331673][T10490] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  365.363460][ T6766] usb 1-1: 0:2 : does not exist
[  365.423509][ T6766] usb 1-1: USB disconnect, device number 13
[  365.482842][T10490] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.514424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  365.523225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  365.544629][T10490] 8021q: adding VLAN 0 to HW filter on device team0
[  365.567077][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  365.577755][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  365.586102][ T4271] Bluetooth: hci0: command 0x040f tx timeout
[  365.588038][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.599311][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.652933][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  365.672336][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  365.693014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  365.718866][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.726107][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.766437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  365.799920][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  365.817676][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  365.841162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  365.856917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  365.890509][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  365.941284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  365.959469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  365.980121][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  365.998508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  366.017764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  366.041372][T10490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  366.053302][T10602] loop0: detected capacity change from 0 to 128
[  366.213377][T10602] syz.0.2006 (10602) used greatest stack depth: 20032 bytes left
[  366.526204][ T6861] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  366.664406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  366.681393][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  366.714420][T10490] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.719705][ T6861] usb 6-1: Using ep0 maxpacket: 8
[  366.759854][ T6861] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  366.766146][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  366.776154][T10623] capability: warning: `syz.0.2012' uses 32-bit capabilities (legacy support in use)
[  366.796144][ T6861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.799592][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  366.812349][ T6861] usb 6-1: Product: syz
[  366.812369][ T6861] usb 6-1: Manufacturer: syz
[  366.812385][ T6861] usb 6-1: SerialNumber: syz
[  366.834238][ T6861] usb 6-1: config 0 descriptor??
[  366.845635][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  366.857345][ T6861] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  366.860990][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  366.875897][ T6861] usb 6-1: setting power ON
[  366.883986][T10490] device veth0_vlan entered promiscuous mode
[  366.890285][ T6861] dvb-usb: bulk message failed: -22 (2/0)
[  366.907794][ T6861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  366.930803][ T6861] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  366.942597][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  366.954580][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  366.974895][ T6861] usb 6-1: media controller created
[  366.981202][T10490] device veth1_vlan entered promiscuous mode
[  367.020550][ T6861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  367.034498][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  367.049275][T10605] dvb-usb: bulk message failed: -22 (3/0)
[  367.062500][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  367.069865][T10605] dvb-usb: bulk message failed: -22 (4/0)
[  367.089650][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  367.090528][T10605] dvb-usb: bulk message failed: -22 (4/0)
[  367.112599][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  367.137752][T10490] device veth0_macvtap entered promiscuous mode
[  367.159640][T10490] device veth1_macvtap entered promiscuous mode
[  367.162492][T10605] cxusb: i2c read failed
[  367.176899][ T6861] usb 6-1: selecting invalid altsetting 6
[  367.186452][T10628] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  367.201968][ T6861] usb 6-1: digital interface selection failed (-22)
[  367.205126][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.218967][ T6861] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  367.227632][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.227654][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.253872][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.274099][ T6861] usb 6-1: setting power OFF
[  367.287081][ T6861] dvb-usb: bulk message failed: -22 (2/0)
[  367.290596][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.303902][ T6861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  367.303919][ T6861] (NULL device *): no alternate interface
[  367.350069][ T6861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  367.379408][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.385751][ T6861] usb 6-1: USB disconnect, device number 8
[  367.398884][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.426334][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.447847][T10490] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.471457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  367.496746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  367.511868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  367.524390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  367.549573][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.570956][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.591255][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.612163][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.639270][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.660273][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.669063][ T5277] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  367.671385][ T4265] Bluetooth: hci0: command 0x0419 tx timeout
[  367.706291][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.741116][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.774240][T10490] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.803761][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  367.821303][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  367.833952][T10490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.849855][T10490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.861635][T10490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.881410][T10490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.909239][ T5277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.942378][ T5277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  368.017750][ T5277] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  368.035362][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.045277][ T5277] usb 4-1: Product: syz
[  368.054662][ T5277] usb 4-1: Manufacturer: syz
[  368.059757][ T5277] usb 4-1: SerialNumber: syz
[  368.117879][ T7007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.142864][ T7007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.157920][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.183094][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.192090][T10634] loop0: detected capacity change from 0 to 32768
[  368.213408][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  368.234540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  368.298611][ T5277] usb 4-1: 0:2 : does not exist
[  368.350420][ T5277] usb 4-1: USB disconnect, device number 24
[  368.561479][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2023'.
[  370.086308][ T6766] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  370.265127][T10699] loop0: detected capacity change from 0 to 2048
[  370.278097][ T6766] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  370.296101][ T6766] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  370.318382][ T6766] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  370.331179][T10699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  370.346029][ T6766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.354273][ T6766] usb 6-1: Product: syz
[  370.371295][ T6766] usb 6-1: Manufacturer: syz
[  370.379788][ T6766] usb 6-1: SerialNumber: syz
[  370.599771][ T6766] usb 6-1: 0:2 : does not exist
[  370.624338][ T6766] usb 6-1: USB disconnect, device number 9
[  370.801370][ T4319] hid-generic 0005:0004:A9D3.0017: unknown main item tag 0x0
[  370.826188][ T4319] hid-generic 0005:0004:A9D3.0017: unknown main item tag 0x0
[  370.850314][ T4319] hid-generic 0005:0004:A9D3.0017: unknown main item tag 0x0
[  370.880437][ T4319] hid-generic 0005:0004:A9D3.0017: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  371.319179][T10719] nbd0: detected capacity change from 0 to 549764202496
[  371.370030][ T4265] block nbd0: Receive control failed (result -32)
[  371.516173][ T4319] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  371.716165][ T4319] usb 1-1: Using ep0 maxpacket: 8
[  371.723257][ T4319] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  371.743587][ T4319] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  371.781316][ T4319] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  371.806172][ T4319] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.829675][ T4319] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  371.849915][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.852419][ T6766] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  372.071609][ T6766] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  372.086789][ T4319] usb 1-1: GET_CAPABILITIES returned 0
[  372.092335][ T4319] usbtmc 1-1:16.0: can't read capabilities
[  372.098549][ T6766] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  372.138720][ T6766] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  372.168497][ T6766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  372.196094][ T6766] usb 4-1: SerialNumber: syz
[  372.252110][T10733] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  372.303345][ T6861] usb 1-1: USB disconnect, device number 14
[  372.417690][ T6766] usb 4-1: 0:2 : does not exist
[  372.453564][ T6766] usb 4-1: USB disconnect, device number 25
[  372.575573][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2068'.
[  372.663054][T10739] loop5: detected capacity change from 0 to 8192
[  372.701678][T10739] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  372.715575][T10739] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  372.727193][T10739] REISERFS (device loop5): using ordered data mode
[  372.733833][T10739] reiserfs: using flush barriers
[  372.746221][T10739] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  372.768499][T10739] REISERFS (device loop5): checking transaction log (loop5)
[  372.788436][T10739] REISERFS (device loop5): Using r5 hash to sort names
[  373.006177][ T6766] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  373.196071][ T6766] usb 2-1: Using ep0 maxpacket: 8
[  373.203063][ T6766] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  373.226150][ T6766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.231415][T10762] loop5: detected capacity change from 0 to 8192
[  373.244783][T10762] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  373.258434][T10762] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  373.270021][ T6766] pvrusb2: Hardware description: Terratec Grabster AV400
[  373.270520][T10762] REISERFS (device loop5): using ordered data mode
[  373.290231][T10762] reiserfs: using flush barriers
[  373.297297][ T6766] pvrusb2: **********
[  373.302870][T10762] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  373.306475][ T6766] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  373.320001][T10762] REISERFS (device loop5): checking transaction log (loop5)
[  373.348876][T10762] REISERFS (device loop5): Using r5 hash to sort names
[  373.358539][T10762] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  373.389214][ T6766] pvrusb2: Important functionality might not be entirely working.
[  373.405934][T10762] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  373.420953][ T5184] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  373.455724][ T6766] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  373.483862][ T6766] pvrusb2: **********
[  373.497698][ T2309] pvrusb2: Invalid write control endpoint
[  373.644416][ T2309] pvrusb2: Invalid write control endpoint
[  373.650756][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  373.656271][ T5184] usb 4-1: Using ep0 maxpacket: 16
[  373.677956][ T5184] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  373.689226][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  373.698379][T10757] loop0: detected capacity change from 0 to 32768
[  373.706985][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  373.710753][ T5184] usb 4-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config
[  373.725700][ T2309] pvrusb2: Device being rendered inoperable
[  373.744824][ T5277] usb 2-1: USB disconnect, device number 10
[  373.744967][T10757] find_entry called with index >= next_index
[  373.751598][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  373.765940][ T5184] usb 4-1: config 226 has 0 interfaces, different from the descriptor's value: 2
[  373.769659][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  373.788187][ T5184] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  373.806960][ T5184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.807222][ T2309] pvrusb2: Attached sub-driver cx25840
[  373.828606][ T5184] usb 4-1: Product: syz
[  373.836400][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  373.843080][ T5184] usb 4-1: Manufacturer: syz
[  373.858341][ T5184] usb 4-1: SerialNumber: syz
[  373.862592][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  374.314469][ T4319] usb 4-1: USB disconnect, device number 26
[  374.631832][T10804] loop0: detected capacity change from 0 to 128
[  374.804611][T10814] loop0: detected capacity change from 0 to 512
[  374.843053][T10814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  374.856195][T10814] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  374.896076][ T5184] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  374.937534][T10824] loop5: detected capacity change from 0 to 128
[  374.944041][T10814] EXT4-fs (loop0): shut down requested (1)
[  374.970293][T10824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  374.995799][T10824] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  375.012343][ T9595] EXT4-fs (loop0): unmounting filesystem.
[  375.067768][T10824] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop5' because it doesn't have stable inode numbers
[  375.086172][ T5184] usb 10-1: Using ep0 maxpacket: 16
[  375.093312][ T5184] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.120888][ T5184] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.153961][ T5184] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  375.190987][ T5184] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.213767][ T9593] EXT4-fs (loop5): unmounting filesystem.
[  375.221808][ T5184] usb 10-1: config 0 descriptor??
[  375.304145][T10834] tap0: tun_chr_ioctl cmd 1074025677
[  375.309932][T10834] tap0: linktype set to 769
[  375.419157][ T4319] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  375.608868][ T4319] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  375.631335][ T4319] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  375.664508][ T4319] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  375.675383][ T5184] hid-picolcd 0003:04D8:F002.0018: item fetching failed at offset 10/11
[  375.693541][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.702259][ T5184] hid-picolcd 0003:04D8:F002.0018: device report parse failed
[  375.710746][ T4319] usb 2-1: Product: syz
[  375.726194][ T5184] hid-picolcd: probe of 0003:04D8:F002.0018 failed with error -22
[  375.727351][ T4319] usb 2-1: Manufacturer: syz
[  375.757173][ T4319] usb 2-1: SerialNumber: syz
[  375.876919][ T5184] usb 10-1: USB disconnect, device number 16
[  375.970382][ T4319] cdc_ncm 2-1:1.0: bind() failure
[  375.987502][ T4319] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  376.006823][ T4319] cdc_ncm 2-1:1.1: bind() failure
[  376.027511][ T4319] usb 2-1: USB disconnect, device number 11
[  376.065407][T10857] bridge: RTM_NEWNEIGH with invalid ether address
[  377.023051][T10880] loop0: detected capacity change from 0 to 4096
[  377.044671][T10880] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  377.108447][   T26] audit: type=1800 audit(2000000004.500:43): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2129" name="file1" dev="loop0" ino=30 res=0 errno=0
[  377.220359][ T6861] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  377.255440][T10892] loop3: detected capacity change from 0 to 2048
[  377.319346][ T4319] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  377.329671][T10895] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  377.374094][   T26] audit: type=1800 audit(2000000004.760:44): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2133" name="file2" dev="loop3" ino=16 res=0 errno=0
[  377.394677][    C1] vkms_vblank_simulate: vblank timer overrun
[  377.403768][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2135'.
[  377.436323][ T6861] usb 10-1: Using ep0 maxpacket: 8
[  377.448030][ T6861] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  377.468368][ T6861] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.487535][ T6861] pvrusb2: Hardware description: Terratec Grabster AV400
[  377.501276][T10892] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  377.516122][ T4319] usb 2-1: Using ep0 maxpacket: 8
[  377.521709][ T6861] pvrusb2: **********
[  377.528441][ T6861] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  377.539334][ T6861] pvrusb2: Important functionality might not be entirely working.
[  377.548458][ T6861] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  377.561101][T10892] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16)
[  377.573812][ T4319] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  377.575556][T10903] loop0: detected capacity change from 0 to 256
[  377.587628][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.604429][ T6861] pvrusb2: **********
[  377.607685][T10903] exfat: Deprecated parameter 'namecase'
[  377.609202][ T4319] usb 2-1: Product: syz
[  377.630675][ T4319] usb 2-1: Manufacturer: syz
[  377.635653][ T4319] usb 2-1: SerialNumber: syz
[  377.648947][T10903] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  377.649727][ T4319] usb 2-1: config 0 descriptor??
[  377.666304][T10892] Remounting filesystem read-only
[  377.681922][ T4319] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  377.697289][ T4319] usb 2-1: setting power ON
[  377.702915][T10904] loop5: detected capacity change from 0 to 4096
[  377.703083][ T2309] pvrusb2: Invalid write control endpoint
[  377.715323][ T4319] dvb-usb: bulk message failed: -22 (2/0)
[  377.737769][ T4319] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  377.756255][ T4319] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  377.764857][ T4319] usb 2-1: media controller created
[  377.821205][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  377.842009][ T2309] pvrusb2: Invalid write control endpoint
[  377.850252][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  377.872134][ T4319] usb 2-1: selecting invalid altsetting 6
[  377.883269][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  377.894806][ T4319] usb 2-1: digital interface selection failed (-22)
[  377.899615][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  377.912101][ T2309] pvrusb2: Device being rendered inoperable
[  377.920011][T10888] pvrusb2: Attempted to execute control transfer when device not ok
[  377.930781][ T4319] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  377.939610][T10882] pvrusb2: Killing an I2C read to 1 that has wlen too large (desired=62 limit=60)
[  377.952254][ T4268] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  377.963820][T10888] pvrusb2: Attempted to execute control transfer when device not ok
[  377.972724][ T4319] usb 2-1: setting power OFF
[  377.976394][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  377.979366][ T4319] dvb-usb: bulk message failed: -22 (2/0)
[  377.984405][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  378.031116][ T4319] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  378.041284][ T2309] pvrusb2: Attached sub-driver cx25840
[  378.043608][ T4319] (NULL device *): no alternate interface
[  378.082347][ T4319] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  378.083622][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  378.092399][ T4319] usb 2-1: USB disconnect, device number 12
[  378.101775][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  378.132351][ T5277] usb 10-1: USB disconnect, device number 17
[  378.138677][T10909] support for cryptoloop has been removed.  Use dm-crypt instead.
[  378.549653][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.621234][T10911] loop5: detected capacity change from 0 to 32768
[  378.698018][T10911] XFS (loop5): Mounting V5 Filesystem
[  378.877590][T10911] XFS (loop5): Ending clean mount
[  378.917363][T10911] XFS (loop5): Quotacheck needed: Please wait.
[  378.995418][T10911] XFS (loop5): Quotacheck: Done.
[  379.121564][ T9593] XFS (loop5): Unmounting Filesystem
[  379.317127][T10957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  379.337787][T10957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  379.352016][T10957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  379.419231][T10953] loop3: detected capacity change from 0 to 8192
[  379.447253][T10953] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  379.463264][T10953] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  379.486504][T10953] REISERFS (device loop3): using ordered data mode
[  379.493098][T10953] reiserfs: using flush barriers
[  379.546244][T10953] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  379.563241][T10953] REISERFS (device loop3): checking transaction log (loop3)
[  379.572137][T10953] REISERFS (device loop3): Using r5 hash to sort names
[  379.579655][T10953] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  379.594190][T10953] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  379.637327][T10953] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  379.669951][T10953] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  379.705157][T10953] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  380.286189][ T5184] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  380.511345][ T5277] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  380.516082][ T5184] usb 2-1: Using ep0 maxpacket: 32
[  380.536414][ T5184] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  380.549656][T10970] loop3: detected capacity change from 0 to 40427
[  380.566221][ T5184] usb 2-1: config 0 has no interface number 0
[  380.580118][ T5184] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  380.598593][ T5184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.617317][ T5184] usb 2-1: Product: syz
[  380.621544][ T5184] usb 2-1: Manufacturer: syz
[  380.637220][ T5184] usb 2-1: SerialNumber: syz
[  380.644121][T10970] F2FS-fs (loop3): Found nat_bits in checkpoint
[  380.673431][ T5184] usb 2-1: config 0 descriptor??
[  380.681689][ T5184] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  380.728702][ T5277] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  380.728714][T10970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  380.751245][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.773949][ T5277] usb 1-1: config 0 descriptor??
[  380.889692][ T5184] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  380.912221][ T5184] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  380.923432][T10988] input: syz0 as /devices/virtual/input/input25
[  380.995062][ T5277] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  381.016074][ T5277] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  381.037001][ T4268] syz-executor: attempt to access beyond end of device
[  381.037001][ T4268] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  381.136417][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 255
[  381.229302][T10996] loop5: detected capacity change from 0 to 256
[  381.241448][ T5277] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  381.249269][ T5277] [drm] Initialized udl on minor 2
[  381.288870][T10996] FAT-fs (loop5): Directory bread(block 64) failed
[  381.295616][T10996] FAT-fs (loop5): Directory bread(block 65) failed
[  381.308526][T10996] FAT-fs (loop5): Directory bread(block 66) failed
[  381.315875][T10996] FAT-fs (loop5): Directory bread(block 67) failed
[  381.332314][T10996] FAT-fs (loop5): Directory bread(block 68) failed
[  381.341176][T10996] FAT-fs (loop5): Directory bread(block 69) failed
[  381.347522][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  381.356720][ T5184] usb 2-1: USB disconnect, device number 13
[  381.361972][T10996] FAT-fs (loop5): Directory bread(block 70) failed
[  381.379332][T10996] FAT-fs (loop5): Directory bread(block 71) failed
[  381.379424][ T5184] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  381.406447][T10996] FAT-fs (loop5): Directory bread(block 72) failed
[  381.418915][T10996] FAT-fs (loop5): Directory bread(block 73) failed
[  381.429127][ T5184] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  381.454347][ T5184] quatech2 2-1:0.51: device disconnected
[  381.616715][ T5277] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  381.635080][ T5277] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  381.645123][ T5277] usb 1-1: USB disconnect, device number 15
[  381.666149][ T5351] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  381.680314][ T5351] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  381.690012][ T5351] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  382.292013][T11018] xt_bpf: check failed: parse error
[  382.420631][T11022] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2189'.
[  382.509412][T11026] device bridge0 entered promiscuous mode
[  382.515505][T11026] device macvlan2 entered promiscuous mode
[  382.699083][ T7007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.861189][ T7007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.054048][ T7007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.219235][ T7007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.700921][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.724774][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.742343][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.754077][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.762073][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  383.769674][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.770349][T11045] loop5: detected capacity change from 0 to 512
[  383.819313][T11045] EXT4-fs: Ignoring removed oldalloc option
[  383.836162][T11045] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  383.953392][T11044] dummy0 speed is unknown, defaulting to 1000
[  383.976473][T11045] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.2200: Parent and EA inode have the same ino 15
[  384.053033][T11045] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.2200: Parent and EA inode have the same ino 15
[  384.130760][T11045] EXT4-fs (loop5): 1 orphan inode deleted
[  384.144625][T11045] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  384.301904][ T9593] EXT4-fs (loop5): unmounting filesystem.
[  384.324494][T11044] chnl_net:caif_netlink_parms(): no params data found
[  384.582536][T11048] loop3: detected capacity change from 0 to 32768
[  384.655081][T11058] loop5: detected capacity change from 0 to 4096
[  384.764346][T11044] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.786424][T11044] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.805276][T11044] device bridge_slave_0 entered promiscuous mode
[  384.897049][T11065] ntfs3: loop5: ino=21, "file1" attr_set_size
[  384.927258][T11044] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.934712][T11044] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.968272][T11044] device bridge_slave_1 entered promiscuous mode
[  385.014419][ T9593] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  385.047103][ T9593] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  385.061261][T11044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.205830][T11044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.313047][T11044] team0: Port device team_slave_0 added
[  385.338871][ T4336] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  385.454111][T11044] team0: Port device team_slave_1 added
[  385.460668][ T5187] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  385.538087][ T7007] device hsr_slave_0 left promiscuous mode
[  385.538107][ T4336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.555526][ T7007] device hsr_slave_1 left promiscuous mode
[  385.562716][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.584437][ T4336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.589908][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.595093][ T4336] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  385.616884][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.617638][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.624330][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.647134][ T4336] usb 4-1: config 0 descriptor??
[  385.668787][ T5187] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  385.678733][ T7007] device bridge_slave_1 left promiscuous mode
[  385.683901][ T5187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.685396][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.708632][ T5187] usb 6-1: config 0 descriptor??
[  385.724162][ T5187] cp210x 6-1:0.0: cp210x converter detected
[  385.739826][ T7007] device bridge_slave_0 left promiscuous mode
[  385.746351][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.826280][ T4271] Bluetooth: hci0: command 0x0409 tx timeout
[  385.835977][ T7007] device veth1_macvtap left promiscuous mode
[  385.842258][ T7007] device veth0_macvtap left promiscuous mode
[  385.868089][ T7007] device veth1_vlan left promiscuous mode
[  385.873951][ T7007] device veth0_vlan left promiscuous mode
[  386.064800][ T4336] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0
[  386.085028][ T4336] hid-thrustmaster 0003:044F:B65D.0019: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  386.118230][ T4336] hid-thrustmaster 0003:044F:B65D.0019: Wrong number of endpoints?
[  386.130410][ T5187] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  386.149818][ T5187] usb 6-1: cp210x converter now attached to ttyUSB0
[  386.354330][ T4319] usb 6-1: USB disconnect, device number 10
[  386.377648][    C0] hid-thrustmaster 0003:044F:B65D.0019: URB to get model id failed with error -71
[  386.378534][ T4319] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  386.389164][ T5187] usb 4-1: USB disconnect, device number 27
[  386.403291][ T4319] cp210x 6-1:0.0: device disconnected
[  387.599093][T11091] loop0: detected capacity change from 0 to 32768
[  387.674864][T11091] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  387.804858][T11093] loop3: detected capacity change from 0 to 32768
[  387.843976][ T9595] ocfs2: Unmounting device (7,0) on (node local)
[  387.906073][ T4265] Bluetooth: hci0: command 0x041b tx timeout
[  387.910446][ T7007] team0 (unregistering): Port device team_slave_1 removed
[  388.032421][ T7007] team0 (unregistering): Port device team_slave_0 removed
[  388.103719][T11097] loop0: detected capacity change from 0 to 2048
[  388.130019][T11097] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  388.170873][ T7007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.182843][T11097] NILFS (loop0): mounting unchecked fs
[  388.237589][T11097] NILFS (loop0): recovery complete
[  388.256914][T11098] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  388.330084][ T7007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.179094][ T7007] bond0 (unregistering): Released all slaves
[  389.330038][T11044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.337129][T11044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.363697][T11044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.384957][T11044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.406206][T11044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.444828][T11044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.578146][T11044] device hsr_slave_0 entered promiscuous mode
[  389.585292][T11044] device hsr_slave_1 entered promiscuous mode
[  389.592476][T11044] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  389.601088][T11044] Cannot create hsr debugfs directory
[  389.777822][T11115] loop3: detected capacity change from 0 to 1024
[  389.795818][T11115] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  389.814958][T11115] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  389.823469][T11115] System zones: 0-1, 3-36
[  389.829804][T11115] EXT4-fs (loop3): orphan cleanup on readonly fs
[  389.873283][T11115] EXT4-fs (loop3): 1 orphan inode deleted
[  389.897438][T11115] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  389.953464][T11115] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  389.986236][ T4271] Bluetooth: hci0: command 0x040f tx timeout
[  389.992368][ T5187] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  390.006142][T11115] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  390.034749][T11115] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.2227: Block bitmap for bg 0 marked uninitialized
[  390.156648][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  390.209185][ T5187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.238950][ T5187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.273022][ T5187] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  390.302707][ T5187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.343401][ T5187] usb 1-1: config 0 descriptor??
[  390.500905][T11044] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  390.525898][T11044] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  390.553812][T11044] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  390.582295][T11044] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  390.772015][ T5187] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0
[  390.793600][ T5187] hid-thrustmaster 0003:044F:B65D.001A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[  390.812522][ T5187] hid-thrustmaster 0003:044F:B65D.001A: Wrong number of endpoints?
[  390.836462][T11044] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.878333][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  390.898628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  390.919411][T11044] 8021q: adding VLAN 0 to HW filter on device team0
[  390.952207][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  390.963448][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  390.978863][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.986092][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.037710][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  391.058056][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  391.069229][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  391.069916][    C0] hid-thrustmaster 0003:044F:B65D.001A: URB to get model id failed with error -71
[  391.080454][T11123] loop3: detected capacity change from 0 to 32768
[  391.093628][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.097717][ T4336] usb 1-1: USB disconnect, device number 16
[  391.100781][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.134919][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  391.163149][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  391.188703][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  391.203546][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  391.228878][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  391.246488][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  391.255347][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  391.281542][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  391.315798][T11044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  391.342164][T11044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  391.368295][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  391.377807][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  391.393897][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  392.007300][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  392.025367][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  392.065169][T11044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.066196][ T4271] Bluetooth: hci0: command 0x0419 tx timeout
[  392.130678][T11146] loop5: detected capacity change from 0 to 32768
[  392.153291][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  392.172104][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  392.213287][T11146] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  392.231434][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  392.259953][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  392.287450][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  392.306938][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  392.340646][T11044] device veth0_vlan entered promiscuous mode
[  392.353376][ T9593] ocfs2: Unmounting device (7,5) on (node local)
[  392.378736][T11044] device veth1_vlan entered promiscuous mode
[  392.429117][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  392.449450][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  392.501149][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  392.529932][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  392.567460][T11044] device veth0_macvtap entered promiscuous mode
[  392.582013][T11044] device veth1_macvtap entered promiscuous mode
[  392.654833][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.696224][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.726028][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.756358][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.786390][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.808469][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.829619][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.849496][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.896776][T11044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.915064][T11161] loop3: detected capacity change from 0 to 32768
[  392.923299][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  392.942056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  392.998881][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  393.012359][T11161] XFS (loop3): Mounting V5 Filesystem
[  393.033654][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  393.057470][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.068747][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.084024][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.095729][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.106066][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.116928][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.126888][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.137356][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.148660][T11044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.170641][T11044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.186044][T11044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.204005][T11044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.205821][T11161] XFS (loop3): Ending clean mount
[  393.222254][T11044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.266656][T11161] XFS (loop3): Quotacheck needed: Please wait.
[  393.281261][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  393.298606][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  393.376675][T11161] XFS (loop3): Quotacheck: Done.
[  393.479348][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.526688][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.573429][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  393.605907][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.629995][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.665225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  393.781720][ T4268] XFS (loop3): Unmounting Filesystem
[  393.877298][T11202] loop5: detected capacity change from 0 to 2048
[  393.986507][T11203] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  394.096070][ T6862] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  394.119315][T11203] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  394.138498][T11203] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  394.173819][T11203] Remounting filesystem read-only
[  394.186111][ T9593] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  394.324911][ T6862] usb 2-1: Using ep0 maxpacket: 16
[  394.343324][ T6862] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  394.361972][ T6862] usb 2-1: config 0 has no interface number 0
[  394.383152][ T6862] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  394.400178][ T6862] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 2
[  394.448009][ T6862] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  394.467217][ T6862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.475290][ T6862] usb 2-1: Product: syz
[  394.491939][ T6862] usb 2-1: Manufacturer: syz
[  394.502350][ T6862] usb 2-1: SerialNumber: syz
[  394.533218][ T6862] usb 2-1: config 0 descriptor??
[  394.556920][T11201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  394.565081][T11201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  394.805614][T11201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  394.836148][T11201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  395.043943][T11208] loop5: detected capacity change from 0 to 40427
[  395.100378][T11208] F2FS-fs (loop5): Found nat_bits in checkpoint
[  395.187390][T11208] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  395.259586][ T6862] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  395.286152][ T6862] asix: probe of 2-1:0.251 failed with error -524
[  395.463339][ T5277] usb 2-1: USB disconnect, device number 14
[  395.831138][T11229] loop3: detected capacity change from 0 to 40427
[  395.844399][T11229] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[  395.856714][T11229] F2FS-fs (loop3): invalid crc value
[  395.882880][T11229] F2FS-fs (loop3): Found nat_bits in checkpoint
[  395.997349][T11229] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  396.168212][T11249] f2fs_ckpt-7:3: attempt to access beyond end of device
[  396.168212][T11249] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  396.539620][T11243] loop5: detected capacity change from 0 to 32768
[  396.957645][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'.
[  397.041962][T11266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2283'.
[  397.135986][    C1] sched: RT throttling activated
[  397.173773][T11255] loop1: detected capacity change from 0 to 131072
[  397.184317][T11255] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  397.192761][T11255] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  397.211715][T11255] F2FS-fs (loop1): invalid crc value
[  397.270881][T11255] F2FS-fs (loop1): Found nat_bits in checkpoint
[  397.327973][T11255] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  397.335071][T11255] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  398.460059][T11305] loop5: detected capacity change from 0 to 4096
[  398.636133][T11311] syz.1.2288 (11311) used greatest stack depth: 19392 bytes left
[  398.789859][T11301] loop0: detected capacity change from 0 to 32768
[  399.062663][T11324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2308'.
[  399.208758][T11328] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2310'.
[  400.619866][T11349] loop0: detected capacity change from 0 to 32768
[  400.920367][T11363] dummy0 speed is unknown, defaulting to 1000
[  401.082136][ T9593] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  401.094953][ T9593] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  401.742665][T11385] loop0: detected capacity change from 0 to 512
[  401.767730][T11385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  401.837702][T11385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  401.847223][T11385] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.941268][T11393] loop3: detected capacity change from 0 to 128
[  401.948549][T11393] EXT4-fs: Ignoring removed nobh option
[  401.967340][T11393] EXT4-fs (loop3): Test dummy encryption mode enabled
[  402.014649][T11393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  402.027483][T11393] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  402.059310][ T9595] EXT4-fs (loop0): unmounting filesystem.
[  402.410585][T11379] loop5: detected capacity change from 0 to 32768
[  402.437502][T11379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2327 (11379)
[  402.486190][T11379] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  402.495063][T11399] loop1: detected capacity change from 0 to 8192
[  402.514098][T11379] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  402.536428][T11379] BTRFS info (device loop5): using free space tree
[  402.541485][T11399] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  402.576178][T11399] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  402.596435][T11399] REISERFS (device loop1): using ordered data mode
[  402.602997][T11399] reiserfs: using flush barriers
[  402.626156][T11399] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  402.643359][T11399] REISERFS (device loop1): checking transaction log (loop1)
[  402.819306][T11379] BTRFS info (device loop5): enabling ssd optimizations
[  402.887490][T11397] loop0: detected capacity change from 0 to 32768
[  402.901937][T11399] REISERFS (device loop1): Using tea hash to sort names
[  402.925685][T11393] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  402.925945][T11399] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  402.952172][T11399] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  403.072784][   T46] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  403.130968][ T9593] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  403.153862][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  403.993929][T11448] loop1: detected capacity change from 0 to 512
[  404.014012][T11448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  404.059952][T11448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  404.082355][T11448] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.239681][T11044] EXT4-fs (loop1): unmounting filesystem.
[  404.371781][T11454] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  404.384050][T11456] loop1: detected capacity change from 0 to 256
[  404.408976][T11456] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  405.047597][T11483] loop0: detected capacity change from 0 to 512
[  405.067094][T11483] EXT4-fs: Ignoring removed oldalloc option
[  405.096185][T11483] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  405.370622][T11483] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2364: Parent and EA inode have the same ino 15
[  405.434481][T11483] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2364: Parent and EA inode have the same ino 15
[  405.523964][T11483] EXT4-fs (loop0): 1 orphan inode deleted
[  405.555311][T11483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  405.732794][ T9595] EXT4-fs (loop0): unmounting filesystem.
[  406.441875][T11512] loop5: detected capacity change from 0 to 256
[  406.495915][T11512] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  406.801252][T11522] comedi comedi0: Minor 14 could not be opened
[  406.949684][T11526] loop5: detected capacity change from 0 to 4096
[  407.062821][T11526] ntfs: volume version 3.1.
[  407.525008][T11552] loop5: detected capacity change from 0 to 128
[  407.543059][T11552] EXT4-fs: Ignoring removed nobh option
[  407.576173][T11552] EXT4-fs (loop5): Test dummy encryption mode enabled
[  407.598076][T11552] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  407.624462][T11555] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  407.625259][T11552] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  407.741224][ T9593] EXT4-fs (loop5): unmounting filesystem.
[  407.821029][T11561] comedi comedi0: Minor 14 could not be opened
[  408.945709][T11591] loop1: detected capacity change from 0 to 512
[  408.994232][T11591] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  409.064099][T11591] EXT4-fs (loop1): invalid journal inode
[  409.105812][T11591] EXT4-fs (loop1): can't get journal size
[  409.162888][T11591] EXT4-fs (loop1): 1 truncate cleaned up
[  409.179243][T11591] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  409.488911][T11044] EXT4-fs (loop1): unmounting filesystem.
[  409.627169][T11597] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2413'.
[  409.795699][T11588] loop3: detected capacity change from 0 to 40427
[  409.822925][T11588] F2FS-fs (loop3): invalid crc value
[  409.844984][T11588] F2FS-fs (loop3): Found nat_bits in checkpoint
[  409.969353][T11588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  410.142366][ T4268] syz-executor: attempt to access beyond end of device
[  410.142366][ T4268] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  410.177221][T11595] loop5: detected capacity change from 0 to 32768
[  410.207763][T11605] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  410.951085][T11603] loop1: detected capacity change from 0 to 32768
[  410.980405][T11603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2415 (11603)
[  411.019918][T11603] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  411.046735][T11603] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  411.081402][T11603] BTRFS info (device loop1): using free space tree
[  411.205243][T11603] BTRFS info (device loop1): enabling ssd optimizations
[  411.639569][    T9] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  411.640430][T11044] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  412.143797][T11642] loop3: detected capacity change from 0 to 512
[  412.191126][T11642] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  412.223120][T11642] EXT4-fs (loop3): invalid journal inode
[  412.243369][T11642] EXT4-fs (loop3): can't get journal size
[  412.267376][ T4352] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  412.290186][T11642] EXT4-fs (loop3): 1 truncate cleaned up
[  412.304633][T11642] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  412.469250][ T4352] usb 6-1: Using ep0 maxpacket: 16
[  412.480782][ T4352] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  412.514193][ T4352] usb 6-1: config 0 has no interface number 0
[  412.530062][ T4352] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  412.543897][ T4352] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 2
[  412.571487][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  412.605164][ T4352] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  412.615363][ T4352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.623995][ T4352] usb 6-1: Product: syz
[  412.628702][ T4352] usb 6-1: Manufacturer: syz
[  412.633332][ T4352] usb 6-1: SerialNumber: syz
[  412.641305][ T4352] usb 6-1: config 0 descriptor??
[  412.670359][T11638] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  412.688073][T11638] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  412.925812][T11638] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  412.944402][T11638] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  413.363828][ T4352] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  413.380168][ T4352] asix: probe of 6-1:0.251 failed with error -524
[  413.512890][T11584] Set syz1 is full, maxelem 65536 reached
[  413.584428][ T4352] usb 6-1: USB disconnect, device number 11
[  413.906656][ T4327] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  414.107950][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.139611][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.166153][ T4327] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  414.186641][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.216837][ T4327] usb 4-1: config 0 descriptor??
[  414.456355][ T4327] usbhid 4-1:0.0: can't add hid device: -71
[  414.467009][ T4327] usbhid: probe of 4-1:0.0 failed with error -71
[  414.483159][ T4327] usb 4-1: USB disconnect, device number 28
[  414.712375][T11698] loop1: detected capacity change from 0 to 4096
[  414.766242][ T4336] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  414.808100][T11700] loop5: detected capacity change from 0 to 2048
[  414.844732][T11700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  414.933082][T11702] nbd1: detected capacity change from 0 to 549764202496
[  414.941724][ T4271] block nbd1: Receive control failed (result -32)
[  414.958039][ T4336] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  414.976056][ T4336] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  415.028944][ T4336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  415.039563][ T4336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.048754][ T4336] usb 1-1: Product: syz
[  415.053403][ T4336] usb 1-1: Manufacturer: syz
[  415.058490][ T4336] usb 1-1: SerialNumber: syz
[  415.187858][T11710] loop5: detected capacity change from 0 to 64
[  415.212187][   T26] audit: type=1800 audit(2000000042.600:45): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2453" name="file1" dev="loop5" ino=18 res=0 errno=0
[  415.272566][ T4336] cdc_ncm 1-1:1.0: bind() failure
[  415.283426][ T4336] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  415.311164][ T4336] cdc_ncm 1-1:1.1: bind() failure
[  415.336870][ T4336] usb 1-1: USB disconnect, device number 17
[  415.780143][T11719] loop3: detected capacity change from 0 to 32768
[  415.822676][T11719] XFS (loop3): Mounting V5 Filesystem
[  415.940904][T11719] XFS (loop3): Ending clean mount
[  415.962179][T11719] XFS (loop3): Quotacheck needed: Please wait.
[  416.029544][T11719] XFS (loop3): Quotacheck: Done.
[  416.100173][ T4268] XFS (loop3): Unmounting Filesystem
[  416.126106][ T4352] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  416.306223][ T4352] usb 6-1: Using ep0 maxpacket: 8
[  416.313460][ T4352] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  416.322703][ T4352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.332443][ T4352] usb 6-1: config 0 descriptor??
[  416.744674][ T4352] uclogic 0003:145F:0212.001B: interface is invalid, ignoring
[  416.945239][ T4327] usb 6-1: USB disconnect, device number 12
[  417.922476][T11761] loop3: detected capacity change from 0 to 2048
[  417.944439][T11761] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  417.950394][ T4318] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  417.979724][T11761] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  417.996250][T11761] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  418.013041][T11761] UDF-fs: Scanning with blocksize 512 failed
[  418.038215][T11761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.166273][ T4318] usb 10-1: Using ep0 maxpacket: 16
[  418.173725][ T4318] usb 10-1: config index 0 descriptor too short (expected 16456, got 72)
[  418.195464][ T4318] usb 10-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config
[  418.226419][T11755] loop0: detected capacity change from 0 to 32768
[  418.233012][ T4318] usb 10-1: config 226 has 0 interfaces, different from the descriptor's value: 2
[  418.254320][ T4318] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  418.283925][ T4318] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.314286][ T4318] usb 10-1: Product: syz
[  418.327902][ T4318] usb 10-1: Manufacturer: syz
[  418.332634][ T4318] usb 10-1: SerialNumber: syz
[  418.594930][T11774] loop3: detected capacity change from 0 to 1024
[  418.625342][T11774] EXT4-fs: Ignoring removed oldalloc option
[  418.715165][T11774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  418.775499][ T4327] usb 10-1: USB disconnect, device number 18
[  419.022196][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  419.060300][T11781] loop5: detected capacity change from 0 to 4096
[  419.087296][T11781] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  419.195415][   T26] audit: type=1800 audit(2000000046.580:46): pid=11781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2482" name="file1" dev="loop5" ino=30 res=0 errno=0
[  419.476346][T11797] syzkaller0: tun_chr_ioctl cmd 1074812117
[  419.665679][T11808] use of bytesused == 0 is deprecated and will be removed in the future,
[  419.685525][T11808] use the actual size instead.
[  419.769752][T11815] loop5: detected capacity change from 0 to 512
[  419.823177][T11815] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  419.840514][T11815] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.880824][T11815] EXT4-fs (loop5): shut down requested (1)
[  419.924606][ T9593] EXT4-fs (loop5): unmounting filesystem.
[  420.311245][ T5277] kernel write not supported for file /snd/pcmC0D0p (pid: 5277 comm: kworker/1:12)
[  420.571134][ T5277] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  420.797879][ T5277] usb 1-1: config 0 has no interfaces?
[  420.812551][ T5277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  420.840331][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.856068][ T5277] usb 1-1: Product: syz
[  420.861202][ T5277] usb 1-1: Manufacturer: syz
[  420.881290][ T5277] usb 1-1: SerialNumber: syz
[  420.897017][ T5277] usb 1-1: config 0 descriptor??
[  421.138530][T11838] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2505'.
[  421.169809][T11867] bridge: RTM_NEWNEIGH with invalid ether address
[  421.181921][ T4352] usb 1-1: USB disconnect, device number 18
[  421.261725][ T4336] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  421.450841][T11884] sctp: [Deprecated]: syz.3.2526 (pid 11884) Use of int in maxseg socket option.
[  421.450841][T11884] Use struct sctp_assoc_value instead
[  421.476233][ T4336] usb 10-1: Using ep0 maxpacket: 16
[  421.484059][ T4336] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.515671][ T4336] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.546077][ T4336] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  421.572034][ T4336] usb 10-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  421.586548][ T4336] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.604221][ T4336] usb 10-1: config 0 descriptor??
[  421.820463][T11896] loop0: detected capacity change from 0 to 128
[  421.825754][T11861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.862061][T11861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.097241][ T4336] hid-multitouch 0003:045E:9994.001C: unknown main item tag 0x2
[  422.105101][ T4336] hid-multitouch 0003:045E:9994.001C: unknown main item tag 0x0
[  422.112176][T11906] loop3: detected capacity change from 0 to 2048
[  422.141762][ T4336] hid-multitouch 0003:045E:9994.001C: unknown main item tag 0x0
[  422.163040][ T4336] hid-multitouch 0003:045E:9994.001C: unknown main item tag 0x0
[  422.179176][T11906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  422.184920][ T4336] hid-multitouch 0003:045E:9994.001C: unknown main item tag 0x0
[  422.206873][ T4336] hid-multitouch 0003:045E:9994.001C: unknown main item tag 0x0
[  422.214593][ T4336] hid-multitouch 0003:045E:9994.001C: unbalanced collection at end of report description
[  422.255843][ T4336] hid-multitouch: probe of 0003:045E:9994.001C failed with error -22
[  422.320455][ T5277] usb 10-1: USB disconnect, device number 19
[  422.324555][T11912] sctp: [Deprecated]: syz.0.2539 (pid 11912) Use of int in maxseg socket option.
[  422.324555][T11912] Use struct sctp_assoc_value instead
[  422.466919][T11914] loop0: detected capacity change from 0 to 2048
[  422.520583][T11917] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  422.532587][   T26] audit: type=1800 audit(2000000049.920:47): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2541" name="file2" dev="loop0" ino=16 res=0 errno=0
[  422.577570][T11914] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  422.595037][T11914] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16)
[  422.615716][T11914] Remounting filesystem read-only
[  422.691426][ T9595] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  422.716504][T11900] loop1: detected capacity change from 0 to 32768
[  422.730257][T11924] loop5: detected capacity change from 0 to 256
[  422.749094][T11924] exfat: Deprecated parameter 'namecase'
[  422.817959][T11924] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  423.490867][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  423.528756][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  423.566879][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  423.820992][T11961] loop0: detected capacity change from 0 to 2048
[  423.873304][T11961] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  423.911280][T11961] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  423.938580][T11961] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  423.986398][T11961] UDF-fs: Scanning with blocksize 512 failed
[  424.028656][T11961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  424.163040][T11975] xt_bpf: check failed: parse error
[  424.322328][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2570'.
[  424.784733][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  424.834239][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  424.853859][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  425.342400][T12014] syzkaller0: tun_chr_ioctl cmd 1074812117
[  425.348670][ T4336] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  425.576216][ T4336] usb 4-1: Using ep0 maxpacket: 8
[  425.584838][ T4336] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  425.598977][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.611382][ T4336] usb 4-1: config 0 descriptor??
[  425.676162][ T6862] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  425.746354][ T5277] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  425.812154][T12027] loop5: detected capacity change from 0 to 32768
[  425.866138][ T6862] usb 1-1: Using ep0 maxpacket: 32
[  425.877683][ T6862] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  425.885833][ T6862] usb 1-1: config 0 has no interface number 0
[  425.908318][ T6862] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  425.926283][ T6862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.934394][ T6862] usb 1-1: Product: syz
[  425.938842][ T6862] usb 1-1: Manufacturer: syz
[  425.943770][ T6862] usb 1-1: SerialNumber: syz
[  425.948770][ T5277] usb 10-1: Using ep0 maxpacket: 8
[  425.956152][ T5277] usb 10-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  425.968181][ T5277] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  425.978293][ T6862] usb 1-1: config 0 descriptor??
[  425.983413][ T5277] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.998091][ T6862] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  426.017329][ T5277] hub 10-1:32.0: bad descriptor, ignoring hub
[  426.023499][ T5277] hub: probe of 10-1:32.0 failed with error -5
[  426.035063][ T4336] uclogic 0003:145F:0212.001D: interface is invalid, ignoring
[  426.204486][ T6862] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  426.231088][ T6862] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  426.237316][ T4336] usb 4-1: USB disconnect, device number 29
[  426.421808][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 255
[  426.449853][T12039] Bluetooth: MGMT ver 1.22
[  426.558613][ T6862] usb 10-1: reset high-speed USB device number 20 using dummy_hcd
[  426.606940][T12045] loop1: detected capacity change from 0 to 512
[  426.614165][T12045] EXT4-fs: Ignoring removed bh option
[  426.627711][T12045] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  426.637488][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  426.646432][ T4500] usb 1-1: USB disconnect, device number 19
[  426.657076][ T4500] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  426.673073][T12045] EXT4-fs (loop1): 1 truncate cleaned up
[  426.684865][T12045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  426.694542][ T4500] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  426.726615][ T4500] quatech2 1-1:0.51: device disconnected
[  426.754186][T11044] EXT4-fs (loop1): unmounting filesystem.
[  427.571388][T12051] loop3: detected capacity change from 0 to 128
[  427.636345][ T4336] usb 10-1: USB disconnect, device number 20
[  428.037424][ T4336] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  428.070881][ T4352] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  428.237899][ T4336] usb 6-1: config 0 has no interfaces?
[  428.251351][ T4336] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  428.266153][ T4352] usb 4-1: Using ep0 maxpacket: 16
[  428.273357][ T4352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.295075][ T4336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.306258][ T4352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.326093][ T4336] usb 6-1: Product: syz
[  428.336116][ T4336] usb 6-1: Manufacturer: syz
[  428.340910][ T4352] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  428.353933][ T4336] usb 6-1: SerialNumber: syz
[  428.369674][ T4336] usb 6-1: config 0 descriptor??
[  428.374822][ T4352] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  428.387967][T12068] loop0: detected capacity change from 0 to 40427
[  428.396352][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.417531][T12068] F2FS-fs (loop0): Found nat_bits in checkpoint
[  428.425898][ T4352] usb 4-1: config 0 descriptor??
[  428.466205][T12068] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  428.637490][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.655743][T12063] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2601'.
[  428.673423][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.694860][ T4336] usb 6-1: USB disconnect, device number 13
[  428.820850][ T9595] syz-executor: attempt to access beyond end of device
[  428.820850][ T9595] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  428.861746][T12079] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  428.872828][T12079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  428.880598][T12079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  428.907377][ T4352] hid-multitouch 0003:045E:9994.001E: unknown main item tag 0x2
[  428.923410][ T4352] hid-multitouch 0003:045E:9994.001E: unknown main item tag 0x0
[  428.942288][ T4352] hid-multitouch 0003:045E:9994.001E: unknown main item tag 0x0
[  428.961786][ T4352] hid-multitouch 0003:045E:9994.001E: unknown main item tag 0x0
[  428.976059][ T4352] hid-multitouch 0003:045E:9994.001E: unknown main item tag 0x0
[  428.994015][ T4352] hid-multitouch 0003:045E:9994.001E: unknown main item tag 0x0
[  429.013647][ T4352] hid-multitouch 0003:045E:9994.001E: unbalanced collection at end of report description
[  429.031422][ T4352] hid-multitouch: probe of 0003:045E:9994.001E failed with error -22
[  429.123207][ T4500] usb 4-1: USB disconnect, device number 30
[  429.496362][ T4352] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  429.676079][ T4352] usb 1-1: Using ep0 maxpacket: 8
[  429.683498][ T4352] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  429.712588][ T4352] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  429.723106][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.743982][ T4352] hub 1-1:32.0: bad descriptor, ignoring hub
[  429.756197][ T4352] hub: probe of 1-1:32.0 failed with error -5
[  429.976367][ T4500] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  430.026115][ T4318] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  430.166075][ T4500] usb 6-1: Using ep0 maxpacket: 32
[  430.174930][ T4500] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  430.189935][ T4500] usb 6-1: config 0 has no interface number 0
[  430.199939][ T4500] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  430.209510][ T4500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.217924][ T4500] usb 6-1: Product: syz
[  430.222436][ T4500] usb 6-1: Manufacturer: syz
[  430.228743][ T4500] usb 6-1: SerialNumber: syz
[  430.234151][ T4318] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  430.245343][ T4500] usb 6-1: config 0 descriptor??
[  430.252554][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.266348][ T5184] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[  430.269220][ T4500] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  430.289681][ T4318] usb 2-1: config 0 descriptor??
[  430.297359][ T4318] cp210x 2-1:0.0: cp210x converter detected
[  430.473657][ T4500] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  430.484596][ T4500] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  430.703127][ T4318] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  430.713448][ T4318] usb 2-1: cp210x converter now attached to ttyUSB2
[  430.884438][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  430.893235][ T4500] usb 6-1: USB disconnect, device number 14
[  430.909332][ T4500] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  430.926990][ T5184] usb 2-1: USB disconnect, device number 15
[  430.927982][ T4500] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  430.945262][ T5184] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2
[  430.951789][ T4500] quatech2 6-1:0.51: device disconnected
[  430.964436][ T5184] cp210x 2-1:0.0: device disconnected
[  431.330611][ T5184] usb 1-1: USB disconnect, device number 20
[  431.517454][T12135] sp0: Synchronizing with TNC
[  431.548858][ T7007] 
[  431.551221][ T7007] =====================================================
[  431.558169][ T7007] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  431.565643][ T7007] 6.1.147-syzkaller #0 Not tainted
[  431.570758][ T7007] -----------------------------------------------------
[  431.577679][ T7007] kworker/u4:9/7007 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  431.585486][ T7007] ffffffff8d590f58 (disc_data_lock#3){.+.+}-{2:2}, at: sixpack_write_wakeup+0x2c/0x460
[  431.595149][ T7007] 
[  431.595149][ T7007] and this task is already holding:
[  431.602524][ T7007] ffffffff96f6bf68 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x113/0x910
[  431.611228][ T7007] which would create a new lock dependency:
[  431.617112][ T7007]  (&port_lock_key){-.-.}-{2:2} -> (disc_data_lock#3){.+.+}-{2:2}
[  431.624962][ T7007] 
[  431.624962][ T7007] but this new dependency connects a HARDIRQ-irq-safe lock:
[  431.634399][ T7007]  (&port_lock_key){-.-.}-{2:2}
[  431.634417][ T7007] 
[  431.634417][ T7007] ... which became HARDIRQ-irq-safe at:
[  431.646956][ T7007]   lock_acquire+0x1b4/0x490
[  431.651551][ T7007]   _raw_spin_lock_irqsave+0xa4/0xf0
[  431.656839][ T7007]   serial8250_handle_irq+0x7a/0x6d0
[  431.662134][ T7007]   serial8250_default_handle_irq+0xb4/0x1a0
[  431.668130][ T7007]   serial8250_interrupt+0x9b/0x1c0
[  431.673330][ T7007]   __handle_irq_event_percpu+0x298/0xa30
[  431.679046][ T7007]   handle_irq_event+0x87/0x1e0
[  431.683901][ T7007]   handle_edge_irq+0x243/0xb20
[  431.688761][ T7007]   __common_interrupt+0xd7/0x1e0
[  431.693803][ T7007]   common_interrupt+0xb0/0xd0
[  431.698585][ T7007]   asm_common_interrupt+0x22/0x40
[  431.703717][ T7007]   _raw_spin_unlock_irqrestore+0xa5/0x100
[  431.709536][ T7007]   uart_write+0x68a/0x910
[  431.713970][ T7007]   n_tty_write+0xd1a/0x11c0
[  431.718557][ T7007]   file_tty_write+0x4dd/0x860
[  431.723330][ T7007]   vfs_write+0x44c/0x960
[  431.727658][ T7007]   ksys_write+0x143/0x240
[  431.732072][ T7007]   do_syscall_64+0x4c/0xa0
[  431.736578][ T7007]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  431.742560][ T7007] 
[  431.742560][ T7007] to a HARDIRQ-irq-unsafe lock:
[  431.749564][ T7007]  (disc_data_lock#3){.+.+}-{2:2}
[  431.749589][ T7007] 
[  431.749589][ T7007] ... which became HARDIRQ-irq-unsafe at:
[  431.762473][ T7007] ...
[  431.762479][ T7007]   lock_acquire+0x1b4/0x490
[  431.769642][ T7007]   _raw_read_lock+0x32/0x40
[  431.774244][ T7007]   sixpack_receive_buf+0x50/0x1430
[  431.779431][ T7007]   tty_ldisc_receive_buf+0x113/0x150
[  431.784802][ T7007]   tty_port_default_receive_buf+0x69/0x90
[  431.790604][ T7007]   flush_to_ldisc+0x2f7/0x860
[  431.795365][ T7007]   process_one_work+0x898/0x1160
[  431.800393][ T7007]   worker_thread+0xaa2/0x1250
[  431.805153][ T7007]   kthread+0x29d/0x330
[  431.809306][ T7007]   ret_from_fork+0x1f/0x30
[  431.813806][ T7007] 
[  431.813806][ T7007] other info that might help us debug this:
[  431.813806][ T7007] 
[  431.824027][ T7007]  Possible interrupt unsafe locking scenario:
[  431.824027][ T7007] 
[  431.832336][ T7007]        CPU0                    CPU1
[  431.837693][ T7007]        ----                    ----
[  431.843049][ T7007]   lock(disc_data_lock#3);
[  431.847551][ T7007]                                local_irq_disable();
[  431.854295][ T7007]                                lock(&port_lock_key);
[  431.861148][ T7007]                                lock(disc_data_lock#3);
[  431.868165][ T7007]   <Interrupt>
[  431.871613][ T7007]     lock(&port_lock_key);
[  431.876125][ T7007] 
[  431.876125][ T7007]  *** DEADLOCK ***
[  431.876125][ T7007] 
[  431.884261][ T7007] 6 locks held by kworker/u4:9/7007:
[  431.889537][ T7007]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  431.900581][ T7007]  #1: ffffc90003967d00 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  431.911622][ T7007]  #2: ffff888024350ce8 (&buf->lock){+.+.}-{3:3}, at: flush_to_ldisc+0x34/0x860
[  431.920671][ T7007]  #3: ffff88807cd2d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x18/0x80
[  431.929986][ T7007]  #4: ffffffff96f6bf68 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x113/0x910
[  431.939123][ T7007]  #5: ffff88807cd2d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x18/0x80
[  431.948438][ T7007] 
[  431.948438][ T7007] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  431.958944][ T7007] -> (&port_lock_key){-.-.}-{2:2} {
[  431.964161][ T7007]    IN-HARDIRQ-W at:
[  431.968132][ T7007]                     lock_acquire+0x1b4/0x490
[  431.974285][ T7007]                     _raw_spin_lock_irqsave+0xa4/0xf0
[  431.981136][ T7007]                     serial8250_handle_irq+0x7a/0x6d0
[  431.987980][ T7007]                     serial8250_default_handle_irq+0xb4/0x1a0
[  431.995521][ T7007]                     serial8250_interrupt+0x9b/0x1c0
[  432.002290][ T7007]                     __handle_irq_event_percpu+0x298/0xa30
[  432.009583][ T7007]                     handle_irq_event+0x87/0x1e0
[  432.016005][ T7007]                     handle_edge_irq+0x243/0xb20
[  432.022434][ T7007]                     __common_interrupt+0xd7/0x1e0
[  432.029027][ T7007]                     common_interrupt+0xb0/0xd0
[  432.035347][ T7007]                     asm_common_interrupt+0x22/0x40
[  432.042022][ T7007]                     _raw_spin_unlock_irqrestore+0xa5/0x100
[  432.049398][ T7007]                     uart_write+0x68a/0x910
[  432.055376][ T7007]                     n_tty_write+0xd1a/0x11c0
[  432.061525][ T7007]                     file_tty_write+0x4dd/0x860
[  432.067843][ T7007]                     vfs_write+0x44c/0x960
[  432.073752][ T7007]                     ksys_write+0x143/0x240
[  432.079733][ T7007]                     do_syscall_64+0x4c/0xa0
[  432.085793][ T7007]                     entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  432.093337][ T7007]    IN-SOFTIRQ-W at:
[  432.097313][ T7007]                     lock_acquire+0x1b4/0x490
[  432.103467][ T7007]                     _raw_spin_lock_irqsave+0xa4/0xf0
[  432.110316][ T7007]                     serial8250_console_write+0x169/0x17a0
[  432.117591][ T7007]                     console_emit_next_record+0x947/0xc90
[  432.124787][ T7007]                     console_unlock+0x223/0x630
[  432.131132][ T7007]                     vprintk_emit+0x489/0x680
[  432.137284][ T7007]                     dev_vprintk_emit+0x32d/0x3d3
[  432.143792][ T7007]                     dev_printk_emit+0xdd/0x11d
[  432.150111][ T7007]                     _dev_warn+0x107/0x14e
[  432.156018][ T7007]                     __usb_hcd_giveback_urb+0x35f/0x520
[  432.163059][ T7007]                     dummy_timer+0x888/0x31b0
[  432.169207][ T7007]                     __hrtimer_run_queues+0x554/0xd60
[  432.176066][ T7007]                     hrtimer_run_softirq+0x183/0x2a0
[  432.182820][ T7007]                     handle_softirqs+0x2a1/0x920
[  432.189243][ T7007]                     __irq_exit_rcu+0x12f/0x220
[  432.195574][ T7007]                     irq_exit_rcu+0x5/0x20
[  432.201496][ T7007]                     sysvec_apic_timer_interrupt+0xa0/0xc0
[  432.208806][ T7007]                     asm_sysvec_apic_timer_interrupt+0x16/0x20
[  432.216454][ T7007]                     lock_acquire+0x20f/0x490
[  432.222631][ T7007]                     pfn_valid+0xe9/0x420
[  432.228441][ T7007]                     page_table_check_set+0x25/0x6d0
[  432.235300][ T7007]                     copy_page_range+0x26b3/0x39e0
[  432.241899][ T7007]                     copy_mm+0xde1/0x15c0
[  432.247704][ T7007]                     copy_process+0x1953/0x4020
[  432.254033][ T7007]                     kernel_clone+0x225/0x8b0
[  432.260201][ T7007]                     __x64_sys_clone+0x17c/0x1d0
[  432.266613][ T7007]                     do_syscall_64+0x4c/0xa0
[  432.272686][ T7007]                     entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  432.280361][ T7007]    INITIAL USE at:
[  432.284257][ T7007]                    lock_acquire+0x1b4/0x490
[  432.290356][ T7007]                    _raw_spin_lock_irqsave+0xa4/0xf0
[  432.297171][ T7007]                    serial8250_do_set_termios+0x544/0x17d0
[  432.304481][ T7007]                    uart_set_options+0x3c2/0x5d0
[  432.310912][ T7007]                    serial8250_console_setup+0x2ce/0x3a0
[  432.318028][ T7007]                    univ8250_console_setup+0xe9/0x180
[  432.324889][ T7007]                    try_enable_preferred_console+0x48a/0x600
[  432.332364][ T7007]                    register_console+0x1b0/0x9c0
[  432.338790][ T7007]                    univ8250_console_init+0x41/0x43
[  432.345472][ T7007]                    console_init+0x1bc/0x78e
[  432.351547][ T7007]                    start_kernel+0x303/0x539
[  432.357622][ T7007]                    secondary_startup_64_no_verify+0xcf/0xdb
[  432.365143][ T7007]  }
[  432.367642][ T7007]  ... key      at: [<ffffffff96f6b400>] port_lock_key+0x0/0x20
[  432.375283][ T7007] 
[  432.375283][ T7007] the dependencies between the lock to be acquired
[  432.375290][ T7007]  and HARDIRQ-irq-unsafe lock:
[  432.388803][ T7007] -> (disc_data_lock#3){.+.+}-{2:2} {
[  432.394204][ T7007]    HARDIRQ-ON-R at:
[  432.398185][ T7007]                     lock_acquire+0x1b4/0x490
[  432.404350][ T7007]                     _raw_read_lock+0x32/0x40
[  432.410518][ T7007]                     sixpack_receive_buf+0x50/0x1430
[  432.417303][ T7007]                     tty_ldisc_receive_buf+0x113/0x150
[  432.424267][ T7007]                     tty_port_default_receive_buf+0x69/0x90
[  432.431665][ T7007]                     flush_to_ldisc+0x2f7/0x860
[  432.438221][ T7007]                     process_one_work+0x898/0x1160
[  432.444822][ T7007]                     worker_thread+0xaa2/0x1250
[  432.451155][ T7007]                     kthread+0x29d/0x330
[  432.456883][ T7007]                     ret_from_fork+0x1f/0x30
[  432.462957][ T7007]    SOFTIRQ-ON-R at:
[  432.466935][ T7007]                     lock_acquire+0x1b4/0x490
[  432.473104][ T7007]                     _raw_read_lock+0x32/0x40
[  432.479290][ T7007]                     sixpack_receive_buf+0x50/0x1430
[  432.486052][ T7007]                     tty_ldisc_receive_buf+0x113/0x150
[  432.493000][ T7007]                     tty_port_default_receive_buf+0x69/0x90
[  432.500412][ T7007]                     flush_to_ldisc+0x2f7/0x860
[  432.506863][ T7007]                     process_one_work+0x898/0x1160
[  432.513450][ T7007]                     worker_thread+0xaa2/0x1250
[  432.519776][ T7007]                     kthread+0x29d/0x330
[  432.525506][ T7007]                     ret_from_fork+0x1f/0x30
[  432.531577][ T7007]    INITIAL READ USE at:
[  432.535903][ T7007]                         lock_acquire+0x1b4/0x490
[  432.542443][ T7007]                         _raw_read_lock+0x32/0x40
[  432.548967][ T7007]                         sixpack_receive_buf+0x50/0x1430
[  432.556081][ T7007]                         tty_ldisc_receive_buf+0x113/0x150
[  432.563402][ T7007]                         tty_port_default_receive_buf+0x69/0x90
[  432.571128][ T7007]                         flush_to_ldisc+0x2f7/0x860
[  432.577804][ T7007]                         process_one_work+0x898/0x1160
[  432.584741][ T7007]                         worker_thread+0xaa2/0x1250
[  432.591413][ T7007]                         kthread+0x29d/0x330
[  432.597498][ T7007]                         ret_from_fork+0x1f/0x30
[  432.603914][ T7007]  }
[  432.606404][ T7007]  ... key      at: [<ffffffff8d590f58>] disc_data_lock+0x18/0x100
[  432.614299][ T7007]  ... acquired at:
[  432.618097][ T7007]    _raw_read_lock+0x32/0x40
[  432.622781][ T7007]    sixpack_write_wakeup+0x2c/0x460
[  432.628059][ T7007]    tty_wakeup+0xb4/0xf0
[  432.632382][ T7007]    tty_port_default_wakeup+0x9e/0xf0
[  432.637842][ T7007]    serial8250_tx_chars+0x629/0x830
[  432.643151][ T7007]    serial8250_start_tx+0x6a9/0x8a0
[  432.648454][ T7007]    uart_write+0x67d/0x910
[  432.652962][ T7007]    sixpack_receive_buf+0x438/0x1430
[  432.658329][ T7007]    tty_ldisc_receive_buf+0x113/0x150
[  432.663790][ T7007]    tty_port_default_receive_buf+0x69/0x90
[  432.669686][ T7007]    flush_to_ldisc+0x2f7/0x860
[  432.674556][ T7007]    process_one_work+0x898/0x1160
[  432.679664][ T7007]    worker_thread+0xaa2/0x1250
[  432.684522][ T7007]    kthread+0x29d/0x330
[  432.688802][ T7007]    ret_from_fork+0x1f/0x30
[  432.693394][ T7007] 
[  432.695718][ T7007] 
[  432.695718][ T7007] stack backtrace:
[  432.701642][ T7007] CPU: 0 PID: 7007 Comm: kworker/u4:9 Not tainted 6.1.147-syzkaller #0
[  432.709882][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  432.719950][ T7007] Workqueue: events_unbound flush_to_ldisc
[  432.725776][ T7007] Call Trace:
[  432.729057][ T7007]  <TASK>
[  432.732000][ T7007]  dump_stack_lvl+0x168/0x22e
[  432.736699][ T7007]  ? load_image+0x3b0/0x3b0
[  432.741223][ T7007]  ? show_regs_print_info+0x12/0x12
[  432.746428][ T7007]  ? load_image+0x3b0/0x3b0
[  432.750945][ T7007]  ? print_shortest_lock_dependencies+0xf0/0x160
[  432.757285][ T7007]  __lock_acquire+0x660b/0x7c50
[  432.762154][ T7007]  ? verify_lock_unused+0x140/0x140
[  432.767377][ T7007]  lock_acquire+0x1b4/0x490
[  432.771888][ T7007]  ? sixpack_write_wakeup+0x2c/0x460
[  432.777183][ T7007]  ? read_lock_is_recursive+0x10/0x10
[  432.782647][ T7007]  ? ldsem_down_read_trylock+0x134/0x190
[  432.788297][ T7007]  ? tty_ldisc_ref+0x18/0x80
[  432.792911][ T7007]  ? __ldsem_down_read_nested+0x7d0/0x7d0
[  432.798662][ T7007]  ? sixpack_receive_buf+0x1430/0x1430
[  432.804133][ T7007]  _raw_read_lock+0x32/0x40
[  432.808653][ T7007]  ? sixpack_write_wakeup+0x2c/0x460
[  432.813946][ T7007]  sixpack_write_wakeup+0x2c/0x460
[  432.819071][ T7007]  ? sixpack_receive_buf+0x1430/0x1430
[  432.824544][ T7007]  tty_wakeup+0xb4/0xf0
[  432.828711][ T7007]  tty_port_default_wakeup+0x9e/0xf0
[  432.834029][ T7007]  serial8250_tx_chars+0x629/0x830
[  432.839151][ T7007]  serial8250_start_tx+0x6a9/0x8a0
[  432.844308][ T7007]  uart_write+0x67d/0x910
[  432.848702][ T7007]  sixpack_receive_buf+0x438/0x1430
[  432.853935][ T7007]  ? ldsem_down_read_trylock+0x134/0x190
[  432.859599][ T7007]  ? sixpack_ioctl+0x540/0x540
[  432.864369][ T7007]  tty_ldisc_receive_buf+0x113/0x150
[  432.869660][ T7007]  tty_port_default_receive_buf+0x69/0x90
[  432.875416][ T7007]  flush_to_ldisc+0x2f7/0x860
[  432.880105][ T7007]  ? process_one_work+0x7a1/0x1160
[  432.885221][ T7007]  process_one_work+0x898/0x1160
[  432.890173][ T7007]  ? worker_detach_from_pool+0x240/0x240
[  432.895825][ T7007]  ? _raw_spin_lock_irq+0xab/0xe0
[  432.900860][ T7007]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  432.906233][ T7007]  ? kthread_data+0x4b/0xc0
[  432.910746][ T7007]  worker_thread+0xaa2/0x1250
[  432.915429][ T7007]  ? __kthread_parkme+0x162/0x1c0
[  432.920457][ T7007]  kthread+0x29d/0x330
[  432.924531][ T7007]  ? worker_clr_flags+0x1a0/0x1a0
[  432.929660][ T7007]  ? kthread_blkcg+0xd0/0xd0
[  432.934260][ T7007]  ret_from_fork+0x1f/0x30
[  432.938688][ T7007]  </TASK>
[  439.987708][ T1277] ieee802154 phy1 wpan1: encryption failed: -22